ff63d38c6235b21403cadc92d910cc49_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ff63d38c6235b21403cadc92d910cc49_JaffaCakes118
Size

94KB
MD5

ff63d38c6235b21403cadc92d910cc49
SHA1

2de905a37d802f7f6011ea8736b921c71466e9c9
SHA256

139cf67dfc85bcb8a5e49a5278998fd11f58fbb8086738dcfb6edb5f54f08ba4
SHA512

693a0ac184de34c582cd9881c09b91da6d02491344c73762c23c2afea11e725fb297eeb18dd9b22a502d728d585eaa5fb6b92af700832c3b51b6e0bf0c4ea5d7
SSDEEP

1536:Jd5nlj4ij53HDc1+0zQdzSq3uzNBR7+LD0P7QZ:JhMa53HDcTzvcGNBS0+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff63d38c6235b21403cadc92d910cc49_JaffaCakes118

Files

ff63d38c6235b21403cadc92d910cc49_JaffaCakes118
.exe windows:1 windows x86 arch:x86

b4c6eb9e8b11ece4e14966f7b994f888

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetProfileIntA
GetLastError
LoadLibraryA
FreeLibrary
lstrcmpA
GlobalSize
GetVersion
GlobalAlloc
GlobalFree
GlobalFlags
GlobalLock
GlobalUnlock
lstrcatA
ReadFile
DeleteFileA
MultiByteToWideChar
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree
GetCPInfo
GetOEMCP
GetACP
GetModuleFileNameA
UnhandledExceptionFilter
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
SetEndOfFile
SetStdHandle
GetStdHandle
ExitProcess
LeaveCriticalSection
EnterCriticalSection
GetWindowsDirectoryA
GetCommandLineA
CloseHandle
Sleep
LockFile
UnlockFile
GetFileType
CreateFileA
GetEnvironmentStrings
InitializeCriticalSection
SetFilePointer
WriteFile
RtlUnwind
GetModuleHandleA
GetStartupInfoA

user32

PeekMessageA
DdeQueryConvInfo
DdeConnect
DdeClientTransaction
DdeUninitialize
DdeInitializeA
DdeGetLastError
DdeFreeStringHandle
DdeCreateStringHandleA
wsprintfA
DdeCreateDataHandle
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
GetSystemMenu
ChangeMenuA
ShowWindow
PostQuitMessage
DefWindowProcA
RegisterWindowMessageA
GetMessageA
TranslateMessage
DispatchMessageA
PostMessageA
DdeNameService
DdeDisconnect
DdeGetData
DdePostAdvise
DdeCmpStringHandles
MessageBoxA

gdi32

GetStockObject

Exports

Exports

C_DdeCliCallBack
C_DdeSerCallBack
TwunkWndProc

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 1022B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cmryvxq
Size: 4096.0MB - Virtual size: 84KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b4c6eb9e8b11ece4e14966f7b994f888

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 41KB - Virtual size: 40KB

.bss Size: - Virtual size: 1KB

.rdata Size: 1024B - Virtual size: 1022B

.data Size: 17KB - Virtual size: 16KB

.idata Size: 2KB - Virtual size: 2KB

.edata Size: 512B - Virtual size: 130B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 30KB - Virtual size: 31KB

cmryvxq Size: 4096.0MB - Virtual size: 84KB

.text
Size: 41KB - Virtual size: 40KB

.bss
Size: - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 1022B

.data
Size: 17KB - Virtual size: 16KB

.idata
Size: 2KB - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 130B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 30KB - Virtual size: 31KB

cmryvxq
Size: 4096.0MB - Virtual size: 84KB