fe08f7e5e2ad6ab6c68f6813525bafa4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fe08f7e5e2ad6ab6c68f6813525bafa4_JaffaCakes118
Size

70KB
MD5

fe08f7e5e2ad6ab6c68f6813525bafa4
SHA1

2c153f92dd18c1ee8508c85d6537669139e2dcf2
SHA256

c800664d116e5ba194e5496637010aa5121d8bff0fe12123eca9e23e4125a65f
SHA512

86dc1c67640c66e811c451392c90322601f9bd30222c7467f0cb4ee32f570c4aafab43c40bdf71eee9107d9a38d829044b6053e2247073dde1df30f7bea72cb4
SSDEEP

1536:pv6dT7u1hi1tPyBclM9wHodufJy0OWdOVnBB8OWuXJu6ZWqGq:pv6EqEulMCIdufJyhVnBB8uZwq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe08f7e5e2ad6ab6c68f6813525bafa4_JaffaCakes118

Files

fe08f7e5e2ad6ab6c68f6813525bafa4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8e286e191446ec9e5147b353728bcecf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

secur32

GetUserNameExW

msvcrt

memset
_initterm
_amsg_exit
iswdigit
_exit
?terminate@@YAXXZ
log
_controlfp
__p__fmode
__setusermatherr
_wcmdln
_wtoi64
_initterm
_cexit
__wgetmainargs
memcpy
exit
__set_app_type
__p__commode
_XcptFilter

ole32

CoGetClassObject
OleLockRunning
OleUninitialize
CoInitializeEx
StringFromCLSID
CLSIDFromString
StringFromGUID2
CoSetProxyBlanket
CreateStreamOnHGlobal
CoCreateInstance
OleInitialize
CoInitializeSecurity
CoAllowSetForegroundWindow
CLSIDFromProgID
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

shell32

ShellExecuteW
Shell_NotifyIconW
SHGetFolderPathW
CommandLineToArgvW
FindExecutableW
SHAppBarMessage
ShellExecuteExW

ddraw

DirectDrawCreate
DirectDrawCreateEx

crypt32

CryptUnprotectData
CryptProtectData

gdi32

DeleteObject
GetStockObject
CreateSolidBrush
SelectObject
CreateCompatibleDC
BitBlt
GetDeviceCaps
CreateCompatibleBitmap
DeleteDC
GetObjectW

kernel32

InterlockedDecrement
CreateEventW
SetUnhandledExceptionFilter
HeapSetInformation
DeleteCriticalSection
TerminateProcess
HeapAlloc
LeaveCriticalSection
InitializeCriticalSection
FlushInstructionCache
ReleaseMutex
WaitForMultipleObjects
GetSystemTimeAsFileTime
CreateFileW
MulDiv
FindResourceExW
VirtualAlloc
GlobalAlloc
GlobalUnlock
GetComputerNameW
lstrcmpW
GetCurrentThreadId
HeapFree
FormatMessageW
LoadLibraryW
HeapSize
GetLastError
VirtualLock
InterlockedExchange
GlobalFree
VirtualUnlock
lstrlenW
SetEvent
InterlockedCompareExchange
RaiseException
GetThreadLocale
OpenProcess
UnhandledExceptionFilter
LoadLibraryExW
HeapDestroy
Sleep
ProcessIdToSessionId
GetACP
LockResource
LoadResource
CreateThread
lstrlenA
GetLocaleInfoW
GetModuleHandleA
LCMapStringW
SetLastError
LocalAlloc
GetProcessId
CreateMutexW
GetLocaleInfoA
IsDebuggerPresent
GlobalHandle
GetTickCount
WaitForSingleObject
GetTempPathW
MultiByteToWideChar
EnterCriticalSection
GetSystemInfo
GetSystemDirectoryW
LocalFree
GetModuleFileNameW
VirtualFree
CloseHandle
LoadLibraryA
InterlockedIncrement
GlobalLock
WideCharToMultiByte
FindResourceW
QueryPerformanceCounter
GetVersionExW
IsProcessorFeaturePresent
ResetEvent
FreeLibrary
HeapReAlloc
GetStartupInfoW
GetCurrentProcess
GetVersionExA
GetProcAddress
SizeofResource
GetModuleHandleW

gdiplus

GdipCloneImage
GdipAlloc
GdiplusStartup
GdipCreateBitmapFromFile
GdipDisposeImage
GdiplusShutdown
GdipFree
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromFileICM

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e286e191446ec9e5147b353728bcecf

Headers

File Characteristics

Imports

secur32

msvcrt

ole32

version

shell32

ddraw

crypt32

gdi32

kernel32

gdiplus

Sections

.text Size: 39KB - Virtual size: 38KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 23KB - Virtual size: 23KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 39KB - Virtual size: 38KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 23KB - Virtual size: 23KB

.rsrc
Size: 2KB - Virtual size: 2KB