0df2faa80b9508924bf135e7b4101da7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0df2faa80b9508924bf135e7b4101da7_JaffaCakes118
Size

72KB
MD5

0df2faa80b9508924bf135e7b4101da7
SHA1

6f4b19cd2a7aec5d31a1ce0b90ec33e399ea9182
SHA256

6dc99ba772ae4073461a11f3f556b0b99d211bb234daa7604c03746165fb4b58
SHA512

1dbf3b3f11f37c41972070053f88772e48057c91ad151d5925819fc6bdffe154ff4bece582ed94a3ef2db5e9c1e16ee0f4c656a4c82b5fa989bd9a5442c8f3a2
SSDEEP

1536:/otV/YxqXtwiBfQlTH+qa81SruHOXPCcglt3wRaE91NTEdjIbPRzI2i7K:GQcWiBfl814uu6c6tjE91NCIbPeW

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MoleBox 2.xx Unpacker + OEP Finder v1.11/filelen.exe
unpack001/MoleBox 2.xx Unpacker + OEP Finder v1.11/mbunpack.dll

Files

0df2faa80b9508924bf135e7b4101da7_JaffaCakes118
.rar
MoleBox 2.xx Unpacker + OEP Finder v1.11/Molebox 2.x Unpacker OEP Finder Script modified by zhupf.txt
MoleBox 2.xx Unpacker + OEP Finder v1.11/filelen.exe
.exe windows:4 windows x86 arch:x86

6760ba3f89e0b5f5a8b31a0b841ae15d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_controlfp
_errno
_filelengthi64
_fileno
_fmode
_fpreset
_iob
_onexit
_setmode
abort
atexit
calloc
exit
fclose
fflush
fgetpos
fopen
fprintf
free
fsetpos
malloc
memset
realloc
signal
strcat
strcpy
strlen

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MoleBox 2.xx Unpacker + OEP Finder v1.11/mbunpack.dll
.dll windows:4 windows x86 arch:x86

c65c3df5b4cb0496cd200a94e746b0aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

gdi32

BitBlt
ChoosePixelFormat
CreateCompatibleBitmap
CreateCompatibleDC
CreatePalette
DeleteDC
DeleteObject
GetDIBits
GetDeviceCaps
RealizePalette
SelectObject
SelectPalette
SetDIBitsToDevice
SetPaletteEntries
SetPixelFormat
SwapBuffers

kernel32

AddAtomA
AllocConsole
Beep
CloseHandle
CreateConsoleScreenBuffer
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
FillConsoleOutputCharacterW
FindAtomA
FindFirstFileA
FindNextFileA
FreeConsole
FreeLibrary
GetAtomNameA
GetConsoleCP
GetConsoleCursorInfo
GetConsoleMode
GetConsoleScreenBufferInfo
GetConsoleTitleA
GetLargestConsoleWindowSize
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetShortPathNameA
GetStdHandle
GetTickCount
GetVersionExA
GlobalAlloc
GlobalLock
GlobalSize
GlobalUnlock
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LockFile
MultiByteToWideChar
PeekConsoleInputA
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleInputA
ReleaseSemaphore
ResetEvent
ScrollConsoleScreenBufferA
ScrollConsoleScreenBufferW
SetConsoleActiveScreenBuffer
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleTitleA
SetConsoleWindowInfo
SetEvent
SetThreadPriority
Sleep
UnlockFile
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleInputA
WriteConsoleOutputA
WriteConsoleOutputW
WriteFile

msvcrt

_strdup
__dllonexit
__mb_cur_max
_assert
_beginthread
_controlfp
_errno
_execl
_filelengthi64
_get_osfhandle
_iob
_isctype
_pctype
_spawnl
_stricmp
_strnicmp
abort
atoi
calloc
ceil
exit
fclose
fflush
fgetpos
fgets
floor
fopen
fprintf
fread
free
freopen
fsetpos
ftell
fwrite
getenv
localtime
log10
malloc
mbstowcs
memcpy
memmove
memset
modf
pow
realloc
setvbuf
sprintf
strchr
strcpy
strlen
strncat
strncpy
strrchr
strstr
system
time
tolower
toupper
wcslen

shell32

ShellExecuteExA

user32

AdjustWindowRect
BeginPaint
CallWindowProcA
ChangeDisplaySettingsA
ClientToScreen
ClipCursor
CloseClipboard
CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageA
DrawStateA
DrawTextA
EmptyClipboard
EndPaint
EnumChildWindows
EnumDisplaySettingsA
FindWindowA
GetAsyncKeyState
GetCapture
GetClassNameA
GetClientRect
GetClipboardData
GetCursorPos
GetDC
GetForegroundWindow
GetKeyboardState
GetPropA
GetSystemMetrics
GetWindow
GetWindowDC
GetWindowLongA
GetWindowRect
GetWindowTextA
InvalidateRect
KillTimer
LoadCursorA
LoadIconA
MapVirtualKeyA
MapWindowPoints
OpenClipboard
PeekMessageA
PostMessageA
PtInRect
RegisterClassA
ReleaseCapture
ReleaseDC
RemovePropA
SendMessageA
SetCapture
SetClipboardData
SetCursor
SetCursorPos
SetForegroundWindow
SetPropA
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
SystemParametersInfoA
ToAscii
TranslateMessage
UnregisterClassA
VkKeyScanA
WindowFromPoint

winmm

mciSendStringA
mixerClose
mixerGetControlDetailsA
mixerGetLineControlsA
mixerGetLineInfoA
mixerOpen
mixerSetControlDetails

Exports

Exports

MBUNPACK_ALL@0

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 144KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 78B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6760ba3f89e0b5f5a8b31a0b841ae15d

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 128B

.rdata Size: 512B - Virtual size: 208B

.bss Size: - Virtual size: 21KB

.idata Size: 1KB - Virtual size: 1KB

c65c3df5b4cb0496cd200a94e746b0aa

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

msvcrt

shell32

user32

winmm

Exports

Exports

Sections

.text Size: 121KB - Virtual size: 120KB

.data Size: 2KB - Virtual size: 1KB

.rdata Size: 10KB - Virtual size: 9KB

.bss Size: - Virtual size: 144KB

.edata Size: 512B - Virtual size: 78B

.idata Size: 7KB - Virtual size: 6KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 128B

.rdata
Size: 512B - Virtual size: 208B

.bss
Size: - Virtual size: 21KB

.idata
Size: 1KB - Virtual size: 1KB

.text
Size: 121KB - Virtual size: 120KB

.data
Size: 2KB - Virtual size: 1KB

.rdata
Size: 10KB - Virtual size: 9KB

.bss
Size: - Virtual size: 144KB

.edata
Size: 512B - Virtual size: 78B

.idata
Size: 7KB - Virtual size: 6KB

.reloc
Size: 5KB - Virtual size: 5KB