0bfcc16bed1e22a439b0ce869108e7f8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0bfcc16bed1e22a439b0ce869108e7f8_JaffaCakes118
Size

30KB
MD5

0bfcc16bed1e22a439b0ce869108e7f8
SHA1

7c1871d3b17d64ab6096c5684414202dbc319d46
SHA256

bf7e7a14152c2fc40fbf915863305fe5ee6c15972c26a0fdfce5b2a4cd26d159
SHA512

533a0f00d93cd084c89e57f733f4623a660b260e8fc39d562ee7af67513734f5f66637498783e79cd1d8fce26c1d8dfbe007062008b452dc02bf86d447f54264
SSDEEP

768:daxbp5O7U2syTPXHGOpblwgV/OJh5VQ/4:daxncnsGfRpBw2/OJh5z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bfcc16bed1e22a439b0ce869108e7f8_JaffaCakes118

Files

0bfcc16bed1e22a439b0ce869108e7f8_JaffaCakes118
.exe windows:1 windows x86 arch:x86

61820e8dc6a40ea78593180dfce7ece5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_vscprintf
_acmdln
_chmod
_mbcjmstojis
memcpy
_wtof
_adj_fpatan
_mbsncpy
_ismbbkpunct
_expand
_resetstkoflw
_wsystem
_wspawnv
isalpha
_wtmpnam
log10
__setusermatherr
_stat64
clock
_strset
getchar
printf
perror
_snwscanf
_safe_fdiv
_wstat
_wspawnvp
setlocale
memset
puts
_wsopen
_aligned_offset_malloc
_locking
_except_handler3
_ismbbkalnum
__p__fmode
fprintf
_controlfp
freopen
_ismbclegal
_aligned_offset_realloc
_adjust_fdiv
_cexit
_initterm
fscanf
_ismbstrail
_fcvt
_snscanf
fwscanf
ungetc
getwchar
_ftol
_beep
_exit
_getdcwd
wcstol
_execlp
_wopen
_lrotl
__set_app_type
fputwc
_mbsnbcpy
_spawnle
__getmainargs
fgets
_strtoui64
_cwprintf
_XcptFilter
_chkesp
exit
_ismbblead
_execvpe
_futime
_wremove
system
__p__commode
_isatty
_strlwr
_sys_errlist
_mbsupr

user32

IsWindowVisible
IsDlgButtonChecked
ClientToScreen
GetWindowLongA
EnableMenuItem
ExitWindowsEx
ShowWindowAsync
SetWindowPos
GetPropA
CreateWindowExA
GetSubMenu
DrawTextA
LoadAcceleratorsA
GetUserObjectSecurity
TranslateAcceleratorA
GetCapture
GetClassNameA
CheckRadioButton
IsZoomed
LoadMenuA
FillRect
MsgWaitForMultipleObjects
IntersectRect
TrackPopupMenuEx
ScrollWindowEx
GetWindowTextA
ReleaseDC
MoveWindow
GetDC
CheckMenuItem
RegisterClassExA
GetKeyState
ChildWindowFromPoint
RegisterWindowMessageA
LoadCursorA
RemoveMenu
EnumChildWindows
TrackPopupMenu
GetSysColor
CreateMenu
OffsetRect
GetCursorPos
ScreenToClient
ShowWindow
LoadIconA
GetParent
SetPropA
ReleaseCapture
GetMessageA
ModifyMenuA
DialogBoxParamA
SetWindowLongA
GetWindowRect

kernel32

GetStartupInfoA
GlobalMemoryStatus
lstrlenA
IsBadReadPtr
GetTickCount
DuplicateHandle
GetFileTime
GetCPInfo
GlobalAddAtomA
CreateEventA
IsValidCodePage
VirtualAlloc
SetThreadAffinityMask
GetModuleHandleA
TlsSetValue
MulDiv
GetACP
SetPriorityClass
GetSystemTimeAsFileTime
GetProcessWorkingSetSize
lstrcmpiA
SetProcessWorkingSetSize
GetComputerNameW
HeapReAlloc
CreateThread
SetErrorMode
GetSystemDirectoryA
RtlUnwind
IsBadStringPtrA
ExitProcess
lstrcatA
HeapFree
CreateFileMappingA
GetFileType
GetStringTypeA
LoadLibraryW
WaitForSingleObject
GetTimeFormatA
GetVersionExA
CloseHandle
GetStdHandle
TlsAlloc
GetCurrentProcessId

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 175B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61820e8dc6a40ea78593180dfce7ece5

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 175B

.rsrc Size: 512B - Virtual size: 4B

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 175B

.rsrc
Size: 512B - Virtual size: 4B