008b3ee2f0235dd1c9a6f6c2240a6a8a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

008b3ee2f0235dd1c9a6f6c2240a6a8a_JaffaCakes118
Size

332KB
MD5

008b3ee2f0235dd1c9a6f6c2240a6a8a
SHA1

6a542e76d283e0cd85a4ebd23fb99b12d5b1e1c5
SHA256

ce889b259c10a37381a1d5c2e77c70f72962635561edc768188f1828e2934383
SHA512

cc1f416c746800499a7916f0a930101cb609ae189995d8dd048233fdc52a7dea5bb4c01ec2e6af69458c3e28db91ed0ded6a32fe17878aa6aefc52e053cfc6c5
SSDEEP

6144:i8CebIFU5V3sZkLzZQSFE3hzhVnBeebLtS2EUP7:i8CeNVnLzK+aVBbLHEU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
008b3ee2f0235dd1c9a6f6c2240a6a8a_JaffaCakes118

Files

008b3ee2f0235dd1c9a6f6c2240a6a8a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5cc4b8eb021c64cd8e9df0b11963e9e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetAltTabInfo
RegisterClassA
CallNextHookEx
ScreenToClient
HideCaret
DestroyWindow
MessageBoxA
CharUpperBuffA
TrackPopupMenuEx
SetProcessDefaultLayout
GetWindowLongA
DefWindowProcW
SetCursorPos
ClipCursor
ShowWindow
CreateIcon
GetCursorInfo
AppendMenuW
MessageBoxIndirectA
GetUpdateRect
DestroyMenu
VkKeyScanExA
GetClassInfoA
GetWindowDC
RegisterClassExA
CreateMDIWindowA
GetWindowContextHelpId
CreateWindowExW
BringWindowToTop
InsertMenuW
GetKeyboardState
DdeAbandonTransaction
GetShellWindow

gdi32

SelectObject
GetClipRgn
CreateDCA
EndPage
WidenPath
ScaleViewportExtEx
CancelDC
DeleteDC
GetDeviceCaps
GetMetaFileW
DeleteObject
SetStretchBltMode
PlgBlt
PtVisible
GetObjectW

comctl32

ImageList_GetDragImage
ImageList_ReplaceIcon
InitCommonControlsEx
CreateToolbarEx

comdlg32

PrintDlgW
LoadAlterBitmap

kernel32

GlobalUnlock
OutputDebugStringW
CompareStringW
WriteProfileSectionA
GetStartupInfoA
CompareStringA
EnterCriticalSection
ConnectNamedPipe
GetLastError
GetLogicalDriveStringsW
WideCharToMultiByte
lstrcmpi
CreateEventW
SetStdHandle
GetNamedPipeInfo
EnumResourceLanguagesW
GetCommandLineA
CreateMutexA
LocalHandle
VirtualQuery
GetProfileStringW
GetACP
GetCurrentProcess
GetCommandLineW
MoveFileW
InterlockedDecrement
WriteProfileSectionW
TlsFree
HeapValidate
SetComputerNameW
GetThreadPriority
MultiByteToWideChar
GetProcAddress
FreeEnvironmentStringsA
GetCompressedFileSizeA
FindNextFileW
VirtualAlloc
LCMapStringW
UnhandledExceptionFilter
LockFileEx
GetDateFormatW
InitializeCriticalSection
GetExitCodeProcess
SetEnvironmentVariableW
InterlockedExchange
GetCurrentProcessId
SetHandleCount
GetLocalTime
GetSystemTime
OpenMutexA
UnmapViewOfFile
HeapReAlloc
GetEnvironmentStringsW
SetLastError
ReadConsoleOutputCharacterA
GetModuleFileNameA
GetStringTypeW
CreateProcessA
RtlUnwind
IsBadWritePtr
SetFilePointer
SleepEx
TlsSetValue
WriteFile
GetModuleHandleA
EnumDateFormatsExA
TlsAlloc
EnumSystemCodePagesW
DeleteCriticalSection
GetFileType
GetDiskFreeSpaceW
FillConsoleOutputCharacterW
MoveFileExA
GetTickCount
FindFirstFileA
LocalFree
VirtualFree
InitializeCriticalSectionAndSpinCount
GetStringTypeA
HeapAlloc
GetCurrentThread
LoadLibraryA
GetPrivateProfileIntW
OpenMutexW
TlsGetValue
GetCurrentThreadId
OpenSemaphoreA
SetLocaleInfoA
GetSystemTimeAsFileTime
GetVersion
LocalFileTimeToFileTime
lstrcmpiW
ReadFile
FillConsoleOutputAttribute
GetEnvironmentStrings
OpenEventW
SetFileAttributesW
CreateToolhelp32Snapshot
FreeEnvironmentStringsW
GlobalUnfix
HeapDestroy
EnumSystemLocalesA
QueryPerformanceCounter
GetSystemDefaultLCID
CloseHandle
GetSystemTimeAdjustment
RemoveDirectoryW
LeaveCriticalSection
GetCPInfo
ExitProcess
FreeLibraryAndExitThread
EnumCalendarInfoExA
InterlockedIncrement
SetEnvironmentVariableA
GetProfileIntW
ConvertDefaultLocale
GetOEMCP
LocalLock
HeapCreate
EnumTimeFormatsW
GetDateFormatA
GlobalGetAtomNameW
TerminateProcess
WritePrivateProfileStructW
LocalShrink
FlushFileBuffers
GetStdHandle
lstrcatA
LCMapStringA
HeapFree
GetTimeZoneInformation
UnlockFileEx

Sections

.text
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5cc4b8eb021c64cd8e9df0b11963e9e8

Headers

File Characteristics

Imports

user32

gdi32

comctl32

comdlg32

kernel32

Sections

.text Size: 148KB - Virtual size: 144KB

.rdata Size: 68KB - Virtual size: 66KB

.data Size: 92KB - Virtual size: 104KB

.rsrc Size: 20KB - Virtual size: 18KB

.text
Size: 148KB - Virtual size: 144KB

.rdata
Size: 68KB - Virtual size: 66KB

.data
Size: 92KB - Virtual size: 104KB

.rsrc
Size: 20KB - Virtual size: 18KB