02f6796e6e3b65b527fe7cdff085fe4f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

02f6796e6e3b65b527fe7cdff085fe4f_JaffaCakes118
Size

188KB
MD5

02f6796e6e3b65b527fe7cdff085fe4f
SHA1

b978fbb77b0a316b0889ca593fb72d15e34a22fd
SHA256

4e37208237c0812d97ed182ae028e4f3c38287b5f8bf793ad4c6bfc43c85f26c
SHA512

226ba8c361a6a0d23d3524c04a2da080c5ce6defcaac318775537b56bf790a22fb59bfe2c89bcb720e6b4190e10352ad350fc4002504ae2c29201eac1f9f2531
SSDEEP

3072:Ke5dzd/vpbmPab+zqIawFPWa328hfTyyAu:hd/INz6wJVtVyw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02f6796e6e3b65b527fe7cdff085fe4f_JaffaCakes118

Files

02f6796e6e3b65b527fe7cdff085fe4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

282dccf338e8610b8a9e31d0eb77091b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

x:\werdon.pdb

Imports

kernel32

GetCurrentProcess
HeapDestroy
SizeofResource
LoadResource
FindResourceA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
GetModuleFileNameA
GetModuleHandleA
lstrcpyA
lstrcatA
SetUnhandledExceptionFilter
lstrlenA
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
LockResource
_lopen
_lread
_lclose
WriteFile
FindResourceW
OutputDebugStringA
GetLocaleInfoW
GetFullPathNameA
IsValidLanguageGroup
CreateFileW
GetCurrentThreadId
WideCharToMultiByte
LocalReAlloc
LocalFree
lstrcmpiA
LeaveCriticalSection
EnterCriticalSection
GetLastError
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
CreateEventA
CreateThread
ResumeThread
GetSystemDefaultLCID
WaitForSingleObject
CloseHandle
SetEvent
GetTickCount
GetProcAddress
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
LocalAlloc
LoadLibraryA
GetSystemDirectoryA
FreeLibrary
DisableThreadLibraryCalls
GetVersionExA
lstrlenW
MultiByteToWideChar
UnhandledExceptionFilter
Sleep

user32

wsprintfA
ReleaseDC
GetDC
GetWindowRect
CharNextA
LoadImageA
LoadStringA

gdi32

SetBkColor
DeleteDC
GetDeviceCaps
CreateICA
GetPaletteEntries
CreateHalftonePalette
GetSystemPaletteEntries
DeleteObject
SetBkMode
SelectObject
CreateCompatibleDC
GetObjectA
CreatePen
CreateHatchBrush
CreateSolidBrush
CreateBrushIndirect
Polyline
Rectangle
RoundRect
Ellipse
ExtTextOutW
SetTextAlign
GetTextAlign
SetTextColor
StretchBlt

advapi32

RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA

ole32

CoCreateGuid
OleInitialize
CoGetInterfaceAndReleaseStream
OleUninitialize
CoTaskMemFree
StringFromCLSID
CoCreateInstance

msvcrt

_wcsicmp
wcscpy
wcslen
free
malloc

msacm32

acmStreamOpen
acmStreamSize
acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader
acmStreamClose

Sections

.text
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

282dccf338e8610b8a9e31d0eb77091b

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

ole32

msvcrt

msacm32

Sections

.text Size: 120KB - Virtual size: 118KB

.data Size: 4KB - Virtual size: 1.2MB

.idata Size: 8KB - Virtual size: 4KB

fdata Size: 8KB - Virtual size: 4KB

.rsrc Size: 40KB - Virtual size: 36KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 120KB - Virtual size: 118KB

.data
Size: 4KB - Virtual size: 1.2MB

.idata
Size: 8KB - Virtual size: 4KB

fdata
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 40KB - Virtual size: 36KB

.reloc
Size: 4KB - Virtual size: 1KB