2960fd2dc3bc83ee86d401a2f16392a8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2960fd2dc3bc83ee86d401a2f16392a8_JaffaCakes118
Size

552KB
MD5

2960fd2dc3bc83ee86d401a2f16392a8
SHA1

cf77290380ec772a858ec6405d30cd69afd80684
SHA256

02ec36b5f8b978d446ec6e0b1359a5c8a847e9c0c6b104d1e7ed994903780cdc
SHA512

6e89179e9edf4bd0dfde520a96fe3123e946970ebe00e7e6f9a467c2c4569e68b2c79644b16366be1cd25a43ee2c588d712de4adce75ca1a46f3e78eebb4e7d9
SSDEEP

12288:N7sGb6x84zHWIqnzfcXhrspKRBq/2R1+BSeKKCD4g8NCY:tsGemSnOEFRBk2iBy2gk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2960fd2dc3bc83ee86d401a2f16392a8_JaffaCakes118

Files

2960fd2dc3bc83ee86d401a2f16392a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a6c21d6c06bbcbefaa39a17cda8428f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetBkColor
DeleteObject
GetDeviceCaps
DeleteDC
CreateCompatibleDC
SetTextColor
SelectObject
BitBlt
SetBkMode

user32

ClientToScreen
MsgWaitForMultipleObjects
DestroyWindow
GetMessageA
GetParent
UpdateWindow
ShowWindow
EnableWindow
TranslateMessage
GetWindow
LoadStringA
EnableMenuItem
RegisterClassA
GetWindowLongA
SetTimer
FillRect
DispatchMessageA
EndPaint
SetFocus
PeekMessageA
BeginPaint
IsWindow
DefWindowProcA
GetSystemMetrics
GetWindowRect
IsIconic
SetCapture
ReleaseCapture
SetWindowLongA
MoveWindow
SetWindowTextA
CheckMenuItem
wsprintfA
CreateWindowExA
GetDlgItem
ScreenToClient
LoadCursorA
LoadIconA
TrackPopupMenu
GetDesktopWindow
GetFocus
SetDlgItemTextA
MessageBoxA
DialogBoxParamA
GetSysColor
PostMessageA
GetKeyState
SystemParametersInfoA
IsWindowVisible
DrawTextA
GetSubMenu
InvalidateRect
SendMessageA
CallWindowProcA
SetCursor
SetWindowPos
LoadBitmapA
PostQuitMessage
SetForegroundWindow
GetClientRect
ReleaseDC
GetCursorPos
EndDialog
GetDC
KillTimer

version

VerQueryValueA
GetFileVersionInfoA

oleaut32

SysFreeString
SysAllocStringLen
SysStringLen
SysAllocString

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize

kernel32

GetStdHandle
GetConsoleOutputCP
ReleaseMutex
GetFileAttributesA
WaitForSingleObject
FindFirstFileW
HeapDestroy
GetFileAttributesW
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetCurrentDirectoryA
GetConsoleMode
GetLocaleInfoA
LocalAlloc
ExpandEnvironmentStringsA
SetErrorMode
FreeEnvironmentStringsW
GetTempPathA
GetCPInfo
lstrcmpiA
GetStringTypeA
InterlockedExchange
GetSystemTimeAsFileTime
GetExitCodeProcess
HeapReAlloc
GetStringTypeW
GetFullPathNameA
FreeLibrary
LocalFree
FormatMessageW
InitializeCriticalSection
LoadResource
FindClose
TlsGetValue
FormatMessageA
OutputDebugStringA
GetCurrentThread
SetLastError
GetEnvironmentVariableA
lstrlenW
GetModuleFileNameW
VirtualProtect
IsDebuggerPresent
ExitProcess
FlushFileBuffers
GetModuleFileNameA
lstrcmpiW
LoadLibraryExA
GetPrivateProfileStringA
UnhandledExceptionFilter
InterlockedDecrement
MultiByteToWideChar
GetLocalTime
GetModuleHandleA
CreateThread
SetFileAttributesA
SetUnhandledExceptionFilter
MulDiv
GetSystemDirectoryA
SetEnvironmentVariableA
TerminateProcess
WriteConsoleA
VirtualQuery
CreateEventW
SetEndOfFile
GetCurrentThreadId
LeaveCriticalSection
LoadLibraryExW
GetOEMCP
VirtualAlloc
FindResourceA
WriteConsoleW
Sleep
VirtualFree
WriteFile
HeapCreate
IsValidCodePage
CreateProcessA
SizeofResource
GetVersion
GetModuleHandleW
GlobalLock
GetACP
lstrcpynA
CloseHandle
FindFirstFileA
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
GetCommandLineA
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetCurrentProcessId
WritePrivateProfileStringA
GetEnvironmentStrings
FileTimeToLocalFileTime
CreateProcessW
RemoveDirectoryA
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
SetStdHandle
GetLastError
InterlockedIncrement
HeapAlloc
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
WaitForMultipleObjects
DuplicateHandle
FindNextFileA
CreateFileMappingA
ResetEvent
CompareStringA
lstrcpyA
FindNextFileW
lstrcmpA
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileW
DeleteFileA
CreateDirectoryA
LCMapStringW
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
IsBadWritePtr
GetTickCount
QueryPerformanceCounter
SetEvent
GetVersionExW
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree

advapi32

RegSetValueExA
RegDeleteValueA
RegQueryValueExA
RegCreateKeyExW
RegOpenKeyExA
RegCloseKey
RegSetValueExW

msvcrt

_strcmpi
_controlfp
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_except_handler3
__set_app_type
_acmdln
exit
_XcptFilter
_exit
_cexit
__p__fmode

Sections

.text
Size: 336KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a6c21d6c06bbcbefaa39a17cda8428f9

Headers

File Characteristics

Imports

gdi32

user32

version

oleaut32

ole32

kernel32

advapi32

msvcrt

Sections

.text Size: 336KB - Virtual size: 334KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 124KB - Virtual size: 120KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 336KB - Virtual size: 334KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 124KB - Virtual size: 120KB

.rsrc
Size: 4KB - Virtual size: 1KB