0b8d8aa6f84b6ba00843b0575f6a9391_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0b8d8aa6f84b6ba00843b0575f6a9391_JaffaCakes118
Size

140KB
MD5

0b8d8aa6f84b6ba00843b0575f6a9391
SHA1

fe285245e632b59aa14841cd729d911bd21bcd82
SHA256

095c5c6c05bd71eac4d9c565e453b63aa3d834a53e2354a862faa19c12a71d97
SHA512

505ddbe764c6b2c6715675c6ffdb95a0005f39955f7c7e8b344336f45055aa516d35b5ddb6fd1ccac6a127347d88b1b6d46ff19373945104d0bb39709b9d34f2
SSDEEP

1536:3unM+k2/6iFaMN5fUMhpbTf6ULSvGnqovXzCzhlSsR3Qr/zMA:3oH/6iIWdv6U+34GzhlSsBKMA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b8d8aa6f84b6ba00843b0575f6a9391_JaffaCakes118

Files

0b8d8aa6f84b6ba00843b0575f6a9391_JaffaCakes118
.exe windows:4 windows x86 arch:x86

539ba5adfaf99b1a7150db2be772adea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord3181
ord2781
ord2818
ord922
ord6199
ord535
ord1200
ord2770
ord941
ord924
ord356
ord6877
ord926
ord3177
ord858
ord3499
ord2515
ord355
ord537
ord4710
ord348
ord663
ord1105
ord5710
ord5572
ord4224
ord3874
ord3092
ord4129
ord6930
ord6928
ord940
ord5651
ord3616
ord3663
ord1979
ord5442
ord3318
ord665
ord3127
ord5186
ord4204
ord350
ord354
ord3811
ord5683
ord5773
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord4424
ord3738
ord801
ord815
ord541
ord561
ord4220
ord2584
ord3654
ord2438
ord808
ord795
ord686
ord797
ord2621
ord1134
ord2764
ord1997
ord5465
ord3790
ord4277
ord2614
ord3178
ord5194
ord533
ord6883
ord6143
ord3396
ord3731
ord3721
ord2586
ord6055
ord1776
ord4405
ord5290
ord3402
ord3723
ord1146
ord1168
ord384
ord567
ord2302
ord3619
ord3626
ord2414
ord1641
ord2118
ord2919
ord2862
ord2121
ord2623
ord2096
ord1644
ord4160
ord2863
ord2379
ord6153
ord755
ord470
ord3089
ord4476
ord2642
ord2822
ord4123
ord3698
ord765
ord4275
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord6021
ord5873
ord5794
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord3706
ord3571
ord640
ord5785
ord6172
ord5781
ord5875
ord2754
ord3797
ord5789
ord2860
ord2864
ord6194
ord1640
ord323
ord2575
ord3573
ord3693
ord4396
ord3574
ord609
ord4284
ord5787
ord5788
ord2859
ord4133
ord4297
ord5981
ord1980
ord668
ord6334
ord4234
ord2301
ord2370
ord825
ord324
ord540
ord860
ord641
ord800
ord3597
ord4425
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5280
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord2514
ord4998
ord4853
ord4376
ord798
ord5265
ord1576

msvcrt

__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_setmbcp
__CxxFrameHandler
_mbscmp
sprintf
atoi
sscanf
rand
srand
time
_ftol
_mbsnbcpy
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
_controlfp

kernel32

GetLastError
GetCommState
SetCommState
GetCurrentDirectoryA
GetModuleFileNameA
SetCurrentDirectoryA
ReleaseMutex
GetTickCount
CreateMutexA
CreateFileA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
ResumeThread
SetFilePointer
lstrlenA
GetModuleHandleA
GetStartupInfoA
SetCommTimeouts
GetCommTimeouts
SetupComm
CloseHandle
Sleep
SetCommMask
GetOverlappedResult
WaitForSingleObject
WriteFile
CreateEventA
ReadFile
ClearCommError
PurgeComm
WaitCommEvent
DeleteFileA
SetEvent

user32

DrawStateA
InflateRect
GetWindowTextA
CopyRect
FillRect
SetRect
DrawFocusRect
GetSysColor
GetParent
InvalidateRect
SetWindowRgn
SetTimer
PostMessageA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
LoadMenuA
SetMenu
EnableMenuItem
KillTimer
GrayStringA
IsWindow
TabbedTextOutA
wsprintfA
RedrawWindow
LoadIconA
SetWindowTextA
SendMessageA
EnableWindow
DrawTextA

gdi32

GetTextExtentPoint32A
CreateRoundRectRgn
CreatePen
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateCompatibleBitmap
CreateCompatibleDC
CreateRectRgn
BitBlt
CreateSolidBrush
CreateFontA
RoundRect

comctl32

ImageList_ReplaceIcon
_TrackMouseEvent

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 32.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

539ba5adfaf99b1a7150db2be772adea

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

gdi32

comctl32

Sections

.text Size: 68KB - Virtual size: 68KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 8KB - Virtual size: 32.0MB

.rsrc Size: 40KB - Virtual size: 40KB

.text
Size: 68KB - Virtual size: 68KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 8KB - Virtual size: 32.0MB

.rsrc
Size: 40KB - Virtual size: 40KB