0e8eddd28ae6cc95ad0bd0d1a7020eef_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0e8eddd28ae6cc95ad0bd0d1a7020eef_JaffaCakes118
Size

450KB
MD5

0e8eddd28ae6cc95ad0bd0d1a7020eef
SHA1

6d22d7aff6a8715ee676ac30e4196945cc6fcde8
SHA256

e8e48a3cefbab2e8a66051cf57e62ee0d55a67cc0d427fe0fa8c8f49d22d9129
SHA512

2e075bb44b5d343180df3da0f89dbe4625c4d2773eb8e17822930d74126108c3eddf6848df77ab1403ad3962c9ab8b47069f987e60fd746a8abd9d322ff24478
SSDEEP

12288:xHxTtOrG0Z2hjAUkTjU/ohNJZrg3RqPLh6Xda9Pd6Xuv+izH/:BIG0U7kTjaohNb3PLcX8PcXuv1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e8eddd28ae6cc95ad0bd0d1a7020eef_JaffaCakes118

Files

0e8eddd28ae6cc95ad0bd0d1a7020eef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a65b37137174457a9980d40ba4ac3223

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDIBits
PlayEnhMetaFile
CreatePolygonRgn
EndPage
GetBitmapBits
Arc
GetTextExtentPoint32W
GetWinMetaFileBits
GetKerningPairsA
CreateFontA
SetRectRgn
Polyline
AddFontResourceA
gdiPlaySpoolStream
GetAspectRatioFilterEx
CopyMetaFileW
FrameRgn
GetMapMode
GetArcDirection
SetAbortProc
GetTextAlign
SetWindowOrgEx
RectVisible
SetMiterLimit
SetColorAdjustment

user32

CreateDialogIndirectParamA
UpdateWindow
EndDeferWindowPos
PtInRect
CreateCaret
DrawMenuBar
EnumWindowStationsA
CheckMenuItem
WINNLSGetEnableStatus
GetClipboardSequenceNumber
DefMDIChildProcA
EnumPropsExA

shell32

CommandLineToArgvW

wininet

InternetConnectW
GopherFindFirstFileA

kernel32

GetSystemTimeAsFileTime
SetLastError
HeapDestroy
CompareStringA
LCMapStringA
lstrcpynA
GlobalCompact
TlsFree
HeapCreate
EnumDateFormatsA
GetCommandLineW
GetEnvironmentStringsW
VirtualFree
RtlUnwind
EnterCriticalSection
VirtualAlloc
IsValidLocale
TlsSetValue
GetLastError
FreeEnvironmentStringsW
GetStringTypeW
GetCurrentProcess
SetHandleCount
InitializeCriticalSection
TlsGetValue
IsBadWritePtr
GetStartupInfoW
LCMapStringW
IsValidCodePage
GetModuleFileNameA
GetLocaleInfoA
GetLocaleInfoW
FreeLibraryAndExitThread
GetCurrentThread
FindNextFileW
HeapAlloc
TlsAlloc
InterlockedExchange
HeapFree
GetModuleHandleA
UnhandledExceptionFilter
GetOEMCP
WideCharToMultiByte
WriteConsoleInputW
GetSystemDefaultLangID
SetLocalTime
GetACP
MultiByteToWideChar
GetDateFormatA
GetCPInfo
QueryPerformanceCounter
GetTimeZoneInformation
GetTickCount
GetStringTypeA
VirtualQuery
GetSystemInfo
HeapReAlloc
LeaveCriticalSection
ExitProcess
HeapSize
GetCurrentThreadId
GetTimeFormatA
ReadConsoleOutputCharacterA
GetFileType
GetStdHandle
LoadLibraryA
GetModuleFileNameW
WriteFile
EnumSystemLocalesA
TerminateProcess
FreeEnvironmentStringsA
GetVersionExA
GetUserDefaultLCID
GetProcAddress
CopyFileA
GetEnvironmentStrings
GetStartupInfoA
DeleteCriticalSection
GetCurrentProcessId
SetEnvironmentVariableA
VirtualProtect
CompareStringW
GetCommandLineA

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 321KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a65b37137174457a9980d40ba4ac3223

Headers

File Characteristics

Imports

gdi32

user32

shell32

wininet

kernel32

Sections

.text Size: 115KB - Virtual size: 114KB

.rdata Size: 8KB - Virtual size: 26KB

.data Size: 321KB - Virtual size: 320KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 115KB - Virtual size: 114KB

.rdata
Size: 8KB - Virtual size: 26KB

.data
Size: 321KB - Virtual size: 320KB

.rsrc
Size: 5KB - Virtual size: 5KB