11bf5ba3ddaf306c6660e7cd9d6ee846_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

11bf5ba3ddaf306c6660e7cd9d6ee846_JaffaCakes118
Size

231KB
MD5

11bf5ba3ddaf306c6660e7cd9d6ee846
SHA1

32467354d7493dd33a235cf0fde784b5dacdee4a
SHA256

c562ea2ac0538e2929363c2f173ade929b9c2de429951725162a973e6966e708
SHA512

3f041a806bcc677c6ceb116cd09c0edff5e596bf9058fde298dbcd0e403beac4c0a41253e6456c4a25fc673af87a8681d229d6080d8e3e1fa261e35b237f4887
SSDEEP

6144:th1WGuG6z4AQ/K79ZQA0HMWXx2cB2zbm88bk0UE:D1WHPQS79qMW0cgmVp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11bf5ba3ddaf306c6660e7cd9d6ee846_JaffaCakes118

Files

11bf5ba3ddaf306c6660e7cd9d6ee846_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef9ca718cfa497960ee8a2b99d6fec01

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
HeapSize
ReadFile
VirtualQuery
InterlockedExchange
RtlUnwind
GetCPInfo
GetOEMCP
IsBadWritePtr
HeapReAlloc
VirtualAlloc
SetStdHandle
HeapAlloc
GetStringTypeW
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
WideCharToMultiByte
FreeEnvironmentStringsW
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
CloseHandle
HeapFree
SetFilePointer
GetLastError
ExitProcess
GetVersionExA
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
LoadLibraryA
VirtualAllocEx
GetDateFormatW
FileTimeToSystemTime
lstrcpynW
SetLastError
GlobalFree
GetDriveTypeA
CreateFileW
GetLocaleInfoA
FlushFileBuffers
GetTickCount
GetVersionExW
GlobalSize
EnumSystemLocalesA
GetSystemInfo
LocalUnlock
GetTimeFormatA
GlobalLock
GetACP
FindNextFileW
GetConsoleCP
WriteFile
CopyFileW
FindClose
GetTimeZoneInformation
Sleep
TerminateProcess
GetCurrentProcess
LoadLibraryW
SetEvent
FreeEnvironmentStringsA
GetEnvironmentStrings
ExpandEnvironmentStringsW
WaitForSingleObject
CreatePipe
GetConsoleOutputCP
GetCurrentProcessId
CreateEventW
lstrcatW
LocalAlloc
GetEnvironmentStringsW
SetEndOfFile
GetProcAddress
OpenEventW
MulDiv
CreateFileA
VirtualProtect

user32

ShowCaret
RemoveMenu
ModifyMenuW
GetFocus
GetClientRect
UpdateWindow
TrackPopupMenu
GetCursorPos
HideCaret
IsChild
DestroyMenu
DispatchMessageW
SendDlgItemMessageW
SetWindowPos
TranslateAcceleratorW
SetDlgItemTextW
PostQuitMessage
SetScrollPos
MapWindowPoints
CreateDialogParamW
GetWindowTextW
LoadImageW
ToAscii
GetWindowPlacement
DeleteMenu
MessageBoxW
GetMenu
RealChildWindowFromPoint
InflateRect
DrawEdge
FillRect
IsDialogMessageW
SetClipboardData
CharUpperW
ReleaseCapture
GetClassNameW
CallWindowProcA
EndDialog
DestroyAcceleratorTable
LoadStringW
CreateDialogIndirectParamW

gdi32

RemoveFontResourceW
SetTextColor
GetROP2
EndDoc
AddFontResourceW
ExtTextOutW
MoveToEx
SetTextAlign
PatBlt
CreateCompatibleDC
GetPixel
SetBkMode
LineTo
GetTextExtentPoint32W
CreateFontW
BitBlt
CreateCompatibleBitmap
CreateSolidBrush
GetObjectW
CreatePatternBrush
EnumFontFamiliesExW
EndPage
GetDeviceCaps
SetBkColor
SetBrushOrgEx
GetStockObject

comdlg32

GetSaveFileNameW
GetOpenFileNameW
PrintDlgW
FindTextW
FindTextA
ChooseFontW
GetFileTitleA
ReplaceTextA
ChooseColorW
GetFileTitleW

advapi32

RegDeleteValueW
RegSetValueExW
RegEnumKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegQueryInfoKeyW
RegCreateKeyExW
RegFlushKey
RegQueryValueExA
RegDeleteKeyA
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExW
RegCreateKeyA
RegCreateKeyW
RegCreateKeyExA
RegOpenKeyExW
RegDeleteValueA
RegCloseKey

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 189KB - Virtual size: 411KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef9ca718cfa497960ee8a2b99d6fec01

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

Sections

.text Size: 29KB - Virtual size: 28KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 189KB - Virtual size: 411KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 29KB - Virtual size: 28KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 189KB - Virtual size: 411KB

.rsrc
Size: 4KB - Virtual size: 4KB