2bce2bd9f4fcaabe2b760246987853be_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2bce2bd9f4fcaabe2b760246987853be_JaffaCakes118
Size

271KB
MD5

2bce2bd9f4fcaabe2b760246987853be
SHA1

4756990609e3236f14a5ec7b192c613ca73d5bb3
SHA256

46f21ece5ca8c9405e2f2fb596875d019053cf1c1f9966fb02b7e8facb1c0e1a
SHA512

1ab11866b338d401a74e6ed527bd494974ecc1e4914600f2a114aa36ab8438283beea339ecd4b9f91cc8b0d683d09a2453acc7905434d51afe3586d423741bf5
SSDEEP

6144:JW+8gcFgrNdnF8i6g1wKZu9e5kJG+CGx6/eJHrFkWxdo4WF6j04g:oFgcAN1uiZ114YkJG90oeJLFBdPWJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bce2bd9f4fcaabe2b760246987853be_JaffaCakes118

Files

2bce2bd9f4fcaabe2b760246987853be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

daebce79819be4dc62f59d41e2ab436c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleMode
GetProcessTimes
LocalFileTimeToFileTime
IsBadStringPtrA
EnumDateFormatsW
PeekConsoleInputW
CreateFileW
ExitThread
GetThreadPriority
PurgeComm
GetNumberFormatW
SwitchToFiber
CreateMutexW
EraseTape
GlobalGetAtomNameW
WriteConsoleOutputW
GetTapeStatus
GetEnvironmentStringsW
GetTempPathW
MultiByteToWideChar
GetACP
EndUpdateResourceA
GetTapeParameters
GetProfileIntA
GetVersion
FileTimeToLocalFileTime
FreeLibraryAndExitThread
SetSystemTime
FindFirstFileExW
AllocConsole
GetDriveTypeW
GetLargestConsoleWindowSize
FindResourceExW
WriteFile
WritePrivateProfileStringW
GetCompressedFileSizeW
ReleaseMutex
GetShortPathNameW
TryEnterCriticalSection
GetBinaryTypeW
GetAtomNameA
FlushConsoleInputBuffer
WriteConsoleOutputCharacterA
GlobalUnlock
FlushFileBuffers
ReadFile
RaiseException
EnumTimeFormatsW
_llseek
GetFileInformationByHandle
VirtualProtect
GetEnvironmentVariableW
SuspendThread
_lclose
SetupComm
PeekNamedPipe
FormatMessageW
Beep
FreeLibrary
VirtualAllocEx
FindFirstFileA
_lread
ExitProcess
GetCommandLineA
lstrlenA
VirtualAlloc
CreateDirectoryW

user32

CascadeWindows
InsertMenuItemW
DrawStateA
DeferWindowPos
InvalidateRgn
SetWindowTextW
TrackPopupMenu
MapVirtualKeyA
TrackPopupMenuEx
EnumClipboardFormats
IsWindowUnicode
GetWindowTextW
SendMessageA
ChildWindowFromPointEx
WinHelpA
MsgWaitForMultipleObjects
SetCursor
IsDialogMessageA
GetPropW
GetWindowDC
IsCharAlphaNumericA
LoadImageA
SendMessageTimeoutA
GetMenuItemRect
SetPropA
DrawMenuBar
GetNextDlgTabItem
SetScrollRange
IsCharLowerA
CreateIcon
SetClassLongW
CharToOemA
GetLastActivePopup
AppendMenuA
GetKeyboardLayoutNameA
EnumDesktopsA
SetPropW
GetUserObjectInformationW
GrayStringW
DrawTextW
MapVirtualKeyExW
CopyAcceleratorTableW
EnumDisplaySettingsW
EndDialog
ShowScrollBar

gdi32

GetWindowOrgEx
EqualRgn
GdiFlush
StartDocA
CreateHatchBrush
GetEnhMetaFileHeader
MaskBlt
PolyBezier

comdlg32

GetFileTitleA
FindTextA

advapi32

RegSetValueW
ChangeServiceConfigW
RegNotifyChangeKeyValue
CryptHashData
CryptSetHashParam
StartServiceCtrlDispatcherW
RegQueryInfoKeyW
GetServiceDisplayNameW
GetSecurityDescriptorSacl
OpenEventLogW
RegCreateKeyW
RegisterEventSourceW
CryptSetKeyParam
RegDeleteKeyA
ImpersonateLoggedOnUser
RegCreateKeyA
CryptVerifySignatureW
RegEnumValueW
ImpersonateSelf
InitializeSid
GetUserNameA
RegOpenKeyExW
RegQueryInfoKeyA
RegLoadKeyW
RegOpenKeyExA
GetAce
ReportEventW
RegSetValueExA
OpenSCManagerW
CryptCreateHash

shell32

SHBrowseForFolderA
SHGetSettings
DragQueryPoint
ShellExecuteA
Shell_NotifyIconA
SHFileOperationW
SHChangeNotify
FindExecutableW

ole32

ReadFmtUserTypeStg
CoUninitialize
OleRegGetUserType
CoFreeAllLibraries
OleRegGetMiscStatus
CoGetTreatAsClass
CoReleaseMarshalData
CoLockObjectExternal
CoDisconnectObject
StgSetTimes

oleaut32

SafeArrayRedim
SafeArrayCreate
LoadTypeLi

shlwapi

UrlCanonicalizeW
PathFileExistsA
StrRetToStrW
StrRStrIW
PathIsFileSpecW
PathIsDirectoryW
PathUnquoteSpacesA
StrStrW
PathQuoteSpacesW
PathRemoveBlanksW
SHRegGetBoolUSValueA
PathRelativePathToW
PathRenameExtensionW
StrCpyNW

msvcrt

wcscmp
_memicmp
localtime
vwprintf
_pipe
_ismbblead
wscanf
_wmakepath
localeconv
_beginthreadex
fopen
__p__environ
_filelength
swprintf
ftell
_tzset
_sopen
_mbsrchr
_getch
_strupr
isleadbyte
abort
_wcsicmp
_mbslwr
exit
strtok
wcstok
_ultow
perror
strstr
_spawnv
_strnicoll
_mbsnbcpy
wcsncat
system
_beginthread
_wtol
wcstombs
iswprint

Sections

.text
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

daebce79819be4dc62f59d41e2ab436c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

msvcrt

Sections

.text Size: 236KB - Virtual size: 235KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 85KB - Virtual size: 84KB

.text
Size: 236KB - Virtual size: 235KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 85KB - Virtual size: 84KB