2b696609c716941dba599de21c3fde4a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2b696609c716941dba599de21c3fde4a_JaffaCakes118
Size

347KB
MD5

2b696609c716941dba599de21c3fde4a
SHA1

84c19df6cb3a7f28f0f4ae9f57a71a6ce3fea568
SHA256

e6e0eca781ef84a6246e52356cd575c740409cce3b124dc6d309764cea4c1df6
SHA512

d0d899810ed4aff38024382f5a1a9ace8f90f7afa8592300dd5c8339f68028bcbfba001fa8844b734eebfe2e7a6fffe5cf09bc9e3586341244e28b22394fb8b6
SSDEEP

6144:5mLxEB8wTA9G79zLH9K4xJxe4PLe/i6eqpqvt/adKlbxMjWky:5wx1wc9d4xVPLZHuQC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b696609c716941dba599de21c3fde4a_JaffaCakes118

Files

2b696609c716941dba599de21c3fde4a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d192cb86831436a022ef5f4d6eb1f97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
DeleteDC
CreateCompatibleDC
SelectObject
CreateSolidBrush
SetBkMode
BitBlt
CreateCompatibleBitmap

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyA
RegCloseKey

kernel32

VirtualAlloc
lstrlenA
GetCommandLineA
ResetEvent
GetOEMCP
Sleep
VirtualFree
HeapCreate
IsValidCodePage
GetEnvironmentStrings
FindResourceA
GetVersion
GetModuleHandleW
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
HeapSize
WideCharToMultiByte
LockResource
GetCurrentProcessId
SizeofResource
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GetConsoleCP
GlobalFree
UnmapViewOfFile
LCMapStringW
GetLastError
LeaveCriticalSection
HeapAlloc
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
GlobalLock
DuplicateHandle
FindNextFileA
CompareStringA
FindFirstFileA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
GetEnvironmentVariableA
GetWindowsDirectoryA
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
GetVersionExW
lstrcmpiA
SetHandleCount
HeapFree
WriteConsoleW
InterlockedIncrement
GetCurrentThreadId
SetEndOfFile
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
GetVersionExA
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
InterlockedDecrement
GetSystemTime
SetLastError
FormatMessageA
TlsGetValue
FindClose
LoadResource
InitializeCriticalSection
GetExitCodeProcess
FormatMessageW
LocalFree
FreeLibrary
SetFileAttributesA
GetStringTypeW
GetSystemTimeAsFileTime
GetTimeZoneInformation
WriteFile
InterlockedExchange
GetStringTypeA
GetCPInfo
GetTempPathA
SetStdHandle
GetLocaleInfoW
FreeEnvironmentStringsW
LoadLibraryExW
CreateFileA
GetLocaleInfoA
GetConsoleMode
EnterCriticalSection
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindFirstFileW
WaitForSingleObject
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
RtlUnwind
FatalAppExitA
HeapReAlloc
IsBadWritePtr
SetConsoleCtrlHandler
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID

user32

SetCursor
CallWindowProcA
GetClientRect
wsprintfA
InvalidateRect
SystemParametersInfoA
GetSysColor
MessageBoxA
EndDialog
SetForegroundWindow
SendMessageA
TrackPopupMenu
LoadIconA
LoadCursorA
ScreenToClient
GetDlgItem
PtInRect
GetSubMenu
CheckMenuItem
SetWindowLongA
GetWindowRect
GetSystemMetrics
DefWindowProcA
BeginPaint
GetMessageA
IsIconic
ClientToScreen
SetFocus
DispatchMessageA
FillRect
CreateWindowExA
GetWindowLongA
RegisterClassA
EnableMenuItem
IsWindowEnabled
TranslateMessage
PeekMessageA
EnableWindow
ShowWindow
GetParent
DestroyWindow
GetKeyState
GetDC
SetWindowPos
PostQuitMessage

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d192cb86831436a022ef5f4d6eb1f97

Headers

File Characteristics

Imports

gdi32

advapi32

kernel32

user32

Sections

.text Size: 78KB - Virtual size: 78KB

.data Size: 266KB - Virtual size: 266KB

.rsrc Size: 1024B - Virtual size: 736B

.text
Size: 78KB - Virtual size: 78KB

.data
Size: 266KB - Virtual size: 266KB

.rsrc
Size: 1024B - Virtual size: 736B