02f2a5fffd7d8e33b741bb6968b2a580_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

02f2a5fffd7d8e33b741bb6968b2a580_JaffaCakes118
Size

384KB
MD5

02f2a5fffd7d8e33b741bb6968b2a580
SHA1

c50b044021a181323aed7e78e72429f065f511e7
SHA256

2a46ee44167397dc8aa2f7d81514502bf4e213ccba558eec63c5991cbb6b25ff
SHA512

d5bdadd7d784dae41f0bf4255d2f09c6aa51d0b4dbe7186d9e134c49338ed0323a9be3aa1bf6b5a25681140929db097c941d651cf8ab45d47e3cd3dd20a5b3fa
SSDEEP

6144:aTL7kUyYDfFNKb8nGVreqtxXkk3ARK2gSwfbfZTdf:a4Uz7FNPk5uRKnfbfZTd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02f2a5fffd7d8e33b741bb6968b2a580_JaffaCakes118

Files

02f2a5fffd7d8e33b741bb6968b2a580_JaffaCakes118
.exe windows:5 windows x86 arch:x86

952c50d4ccf6a210bb26813aac82140c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultUILanguage
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
LocalAlloc
LocalFree
LocalLock
LocalReAlloc
LocalSize
LocalUnlock
MapViewOfFile
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
GetUserDefaultLCID
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
WideCharToMultiByte
WriteFile
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
GetTimeFormatW
GetTickCount
GetSystemTimeAsFileTime
GetStartupInfoA
GetLocaleInfoW
GetLocalTime
GetLastError
GetFileInformationByHandle
GetFileAttributesW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCommandLineW
GetACP
FormatMessageW
FoldStringW
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
CreateFileMappingW
CompareStringW
ReadFile
CloseHandle
GetModuleHandleA
GetProcAddress
SetEndOfFile

user32

GetMenu
GetMenuState
GetMessageW
GetParent
GetSubMenu
GetSystemMenu
GetSystemMetrics
GetWindowLongW
GetWindowPlacement
GetWindowTextW
InvalidateRect
IsClipboardFormatAvailable
IsDialogMessageW
IsIconic
LoadAcceleratorsW
LoadCursorW
LoadImageW
LoadStringW
MessageBeep
MessageBoxW
MoveWindow
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
RegisterClassExW
RegisterWindowMessageW
ReleaseDC
ScreenToClient
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCursor
SetDlgItemTextW
SetFocus
SetScrollPos
SetWinEventHook
SetWindowLongW
SetWindowPlacement
SetWindowTextW
ShowWindow
TranslateAcceleratorW
TranslateMessage
UnhookWinEvent
UpdateWindow
WinHelpW
wsprintfW
GetKeyboardLayout
GetForegroundWindow
GetFocus
GetDlgItemTextW
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
EndDialog
EnableWindow
EnableMenuItem
DrawTextExW
DispatchMessageW
DialogBoxParamW
DestroyWindow
DefWindowProcW
CreateWindowExW
CreateDialogParamW
CloseClipboard
ChildWindowFromPoint
CheckMenuItem
CharUpperW
CharNextW
CharLowerW
LoadIconW
LoadIconA
GetDlgItem

gdi32

AbortDoc
CreateDCW
CreateFontIndirectW
DeleteDC
DeleteObject
EndDoc
EndPage
EnumFontsW
GetDeviceCaps
GetObjectW
GetTextExtentPoint32W
CreateDCA
GetTextMetricsW
LPtoDP
SelectObject
SetAbortProc
SetBkMode
SetMapMode
SetViewportExtEx
SetWindowExtEx
StartDocW
StartPage
TextOutW
GetTextFaceW
GetStockObject

advapi32

RegOpenKeyExA

msvcrt

__getmainargs
_acmdln
_cexit
_exit
_initterm
exit
memcpy

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dataR2
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

952c50d4ccf6a210bb26813aac82140c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

Sections

.text Size: 7KB - Virtual size: 7KB

.text2 Size: 2KB - Virtual size: 1KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 1KB

.dataR2 Size: 363KB - Virtual size: 363KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 7KB - Virtual size: 7KB

.text2
Size: 2KB - Virtual size: 1KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 1KB

.dataR2
Size: 363KB - Virtual size: 363KB

.rsrc
Size: 4KB - Virtual size: 3KB