0e13b4e56628178cd28d5a65df35c89d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0e13b4e56628178cd28d5a65df35c89d_JaffaCakes118
Size

2.7MB
MD5

0e13b4e56628178cd28d5a65df35c89d
SHA1

6d50a28ed14b3264da053bbb8ed997f62666fcab
SHA256

f6c873ca5db8930b3949d0202d155675a129544fe4f361f2351d51edcd49c7f8
SHA512

1bc802a400708106af1f3a78e9a0f851ce705351f1557f2b59403b805fc246c499adcf6d4f39e1f268fcbad28fb6dd192f17e8319740350ee21ebcfee8e2d23c
SSDEEP

49152:EMudDBP2G9bMjt6vKmTwnuPLJaFfN6/ExXeM6yg5GCxXeM6yYC5GJFy+WqZFk:yNBPlExXeM9g5GCxXeMzYC5GJFVm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e13b4e56628178cd28d5a65df35c89d_JaffaCakes118

Files

0e13b4e56628178cd28d5a65df35c89d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

73cdf315b94f55a4a7b9da5f846f1ce6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegSetValueExA

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateRectRgn
CreateSolidBrush
FillRgn
GetPixel
SelectObject

kernel32

CloseHandle
CopyFileA
CreateDirectoryA
CreateProcessA
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetCommandLineA
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte

msvcrt

_close
_fdopen
_fstat
_itoa
_lseek
_read
_strdup
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_beginthread
_cexit
_errno
_filbuf
_flsbuf
_iob
_onexit
_open
_setmode
_strnicmp
_vscprintf
_vsnprintf
abort
atexit
atoi
calloc
exit
fclose
fflush
fgets
fopen
fputc
fputs
fread
free
fseek
ftell
fwrite
getenv
getwc
isspace
iswctype
localeconv
malloc
memchr
memcmp
memmove
putwc
realloc
remove
rename
rewind
setlocale
setvbuf
signal
sprintf
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strerror
strftime
strncmp
strstr
strtod
strxfrm
towlower
towupper
ungetc
ungetwc
vfprintf
vprintf
vsprintf
wcscoll
wcsftime
wcslen
wcsxfrm

msimg32

AlphaBlend

shell32

SHGetFolderPathA
ShellExecuteA
Shell_NotifyIconA

user32

AppendMenuA
CloseClipboard
CreatePopupMenu
CreateWindowExA
DefWindowProcA
DialogBoxParamA
DispatchMessageA
EmptyClipboard
EndDialog
FindWindowA
GetCursorPos
GetDC
GetDlgItemTextA
GetMessageA
GetSystemMetrics
GetWindowRect
IsWindowVisible
LoadCursorA
LoadIconA
MessageBoxA
MoveWindow
OpenClipboard
PostMessageA
PostQuitMessage
RegisterClassExA
RegisterHotKey
RegisterWindowMessageA
SetClipboardData
SetForegroundWindow
ShowCursor
ShowWindow
TrackPopupMenu
TranslateMessage
UpdateWindow

wsock32

WSAStartup
bind
closesocket
connect
gethostbyname
htons
inet_addr
inet_ntoa
recv
send
shutdown
socket

Sections

.text
Size: 551KB - Virtual size: 550KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/14
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/61
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/73
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/87
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/99
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/112
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/123
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/134
Size: 868KB - Virtual size: 867KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/149
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73cdf315b94f55a4a7b9da5f846f1ce6

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

msvcrt

msimg32

shell32

user32

wsock32

Sections

.text Size: 551KB - Virtual size: 550KB

.data Size: 25KB - Virtual size: 24KB

.rdata Size: 35KB - Virtual size: 34KB

/4 Size: 155KB - Virtual size: 155KB

.bss Size: - Virtual size: 4KB

.idata Size: 5KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 5KB - Virtual size: 5KB

/14 Size: 3KB - Virtual size: 2KB

/29 Size: 2KB - Virtual size: 2KB

/45 Size: 3KB - Virtual size: 3KB

/61 Size: 191KB - Virtual size: 190KB

/73 Size: 17KB - Virtual size: 16KB

/87 Size: 41KB - Virtual size: 41KB

/99 Size: 6KB - Virtual size: 5KB

/112 Size: 4KB - Virtual size: 4KB

/123 Size: 84KB - Virtual size: 83KB

/134 Size: 868KB - Virtual size: 867KB

/149 Size: 3KB - Virtual size: 3KB

.text
Size: 551KB - Virtual size: 550KB

.data
Size: 25KB - Virtual size: 24KB

.rdata
Size: 35KB - Virtual size: 34KB

/4
Size: 155KB - Virtual size: 155KB

.bss
Size: - Virtual size: 4KB

.idata
Size: 5KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 5KB - Virtual size: 5KB

/14
Size: 3KB - Virtual size: 2KB

/29
Size: 2KB - Virtual size: 2KB

/45
Size: 3KB - Virtual size: 3KB

/61
Size: 191KB - Virtual size: 190KB

/73
Size: 17KB - Virtual size: 16KB

/87
Size: 41KB - Virtual size: 41KB

/99
Size: 6KB - Virtual size: 5KB

/112
Size: 4KB - Virtual size: 4KB

/123
Size: 84KB - Virtual size: 83KB

/134
Size: 868KB - Virtual size: 867KB

/149
Size: 3KB - Virtual size: 3KB