1606c6f7b290d96d704bab55c7e2f0a6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1606c6f7b290d96d704bab55c7e2f0a6_JaffaCakes118
Size

664KB
MD5

1606c6f7b290d96d704bab55c7e2f0a6
SHA1

9367e0834d1743b7e41a46e567d74fca41065209
SHA256

b11cef8c9c2664dd1df69a67a5aef9cceed1af07155a2420571d6b61ebdda097
SHA512

48da73a81a93a45de606e1354f25294805b1e63136136cbe90ad39593ff4b0e19e9fb3c98262d2af801d64077246c599c7893d58d729c0d25569ccba5fc996da
SSDEEP

12288:otD/Y3GdUPz8ziLTfiivZBr+TGJTYuWNpCwfvA8COukfM5t:YD/SGcz8gfiivZBr+TGJTYXpCmvA8C2I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1606c6f7b290d96d704bab55c7e2f0a6_JaffaCakes118

Files

1606c6f7b290d96d704bab55c7e2f0a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

66a95fddd84fada3fb786a70597eb636

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
srand
rand
_purecall
_beginthreadex
_iob
fprintf
fopen
fputs
fclose
sprintf
printf
calloc
atoi
realloc
strncat
exit
wcscpy
strncpy
strrchr
strstr
_except_handler3
free
strcpy
malloc
memcmp
strcmp
strcat
memmove
strlen
_ftol
??2@YAPAXI@Z
??3@YAXPAX@Z
memcpy
__CxxFrameHandler
_mkdir
_strnicmp
_strnset
strncmp
sscanf
vsprintf
strchr
memset

kernel32

GetProcessHeap
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
GetModuleHandleA
GetTickCount
GlobalMemoryStatus
GetCurrentProcess
GetPriorityClass
GetCurrentThread
GetThreadPriority
SetPriorityClass
SetThreadPriority
QueryPerformanceFrequency
QueryPerformanceCounter
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetLastError
MultiByteToWideChar
LocalFree
FindClose
GetDriveTypeA
CreateProcessA
lstrlenA
lstrcpyA
DeleteFileA
GetVersionExA
lstrcmpA
LoadLibraryA
GetProcAddress

user32

GetAsyncKeyState
GetKeyState
LoadCursorA
DestroyCursor
keybd_event
SetCapture
WindowFromPoint
SetCursorPos
OpenClipboard
GetClipboardData
GetSystemMetrics
SetRect
GetDC
GetDesktopWindow
ReleaseDC
GetWindowThreadProcessId
IsWindowVisible
PostMessageA
IsWindow
CreateWindowExA
GetClientRect
wsprintfA
GetDlgItemTextA
SetDlgItemTextA
GetDlgItem
SendMessageA
EndDialog
CreateDialogParamA
ShowWindow
SetWindowPos
GetMessageA
DispatchMessageA
TranslateMessage
GetWindowTextA

msvcp60

?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

Sections

.text
Size: 528KB - Virtual size: 527KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 509KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

66a95fddd84fada3fb786a70597eb636

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

msvcp60

Sections

.text Size: 528KB - Virtual size: 527KB

.rodata Size: 12KB - Virtual size: 10KB

.rdata Size: 40KB - Virtual size: 38KB

.data Size: 48KB - Virtual size: 509KB

.rsrc Size: 32KB - Virtual size: 28KB

.text
Size: 528KB - Virtual size: 527KB

.rodata
Size: 12KB - Virtual size: 10KB

.rdata
Size: 40KB - Virtual size: 38KB

.data
Size: 48KB - Virtual size: 509KB

.rsrc
Size: 32KB - Virtual size: 28KB