2bfb632d0e416018c5d3893380132964_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2bfb632d0e416018c5d3893380132964_JaffaCakes118
Size

146KB
MD5

2bfb632d0e416018c5d3893380132964
SHA1

341754f5e9b61339acb03cd1eb5a4f3644dbc3fb
SHA256

bda15c73c5dfecdae1b3bf5f433b93abd395b33149c335b7150b8862f22849d9
SHA512

23652f97eb3ec5dcfbd76042f1813bece781ea87f7cef3629c3925f6b077cab63bbbca673e83c30b406cac87672b4060684d14561a5cd0d0bf41b38bdea948b3
SSDEEP

3072:G2y6Q+JyhVIBZPYhdqg+PV//qbeT43joyV905:hBQLjIBxYbqH9aH3hV9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bfb632d0e416018c5d3893380132964_JaffaCakes118

Files

2bfb632d0e416018c5d3893380132964_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d2d3ca61fee27b719240884d863c9e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

wcsncmp
_vsnwprintf

shlwapi

StrCpyW
PathStripToRootW
PathCanonicalizeA
StrFormatByteSizeW
StrFormatKBSizeW

shell32

ord750

kernel32

TlsGetValue
SetCommBreak
SetFileTime
SetHandleCount
SetupComm
BindIoCompletionCallback
DeleteTimerQueue
CreateEventW
GetProfileStringA
CancelIo
RequestDeviceWakeup
OpenEventW
SetVolumeLabelA
FileTimeToDosDateTime
SetProcessWorkingSetSize
CreateDirectoryA
LoadLibraryW
SleepEx
CreateMutexA
lstrcmpiW
GetLogicalDriveStringsA
DisconnectNamedPipe
FatalAppExitW

user32

RealGetWindowClassW
DestroyAcceleratorTable
InvertRect
EnumPropsW
LookupIconIdFromDirectory
GetDlgItemTextA
DlgDirListW
GetMenuInfo
SetMenu
GetLastInputInfo
GetCursorPos
ScrollWindow
GetDCEx
TileWindows
IntersectRect
GetDC
EnumWindows
LoadBitmapA
CopyImage
DialogBoxIndirectParamW
KillTimer
IsCharUpperA
LoadMenuIndirectA
GetRawInputData
GetClientRect
ExitWindowsEx
TranslateMessage
EnumPropsA
PeekMessageW
GetListBoxInfo
GetTabbedTextExtentA
GetMenuContextHelpId
ShowScrollBar
PostThreadMessageW
MessageBoxW
MapWindowPoints
ExcludeUpdateRgn
DispatchMessageW
GetClassNameW
CreateAcceleratorTableW
DrawTextExW

gdi32

ExtTextOutA
RealizePalette
AbortPath
EnumEnhMetaFile
SetLayout
CreateBitmapIndirect
GetTextExtentPointI
GetTextExtentPointW
GetMetaRgn
GetOutlineTextMetricsA
SetMetaFileBitsEx
AnimatePalette
GetBitmapBits
GetBrushOrgEx
ScaleWindowExtEx

advapi32

AddAce
CopySid
IsValidAcl
IsTextUnicode
AddAuditAccessAceEx

Exports

Exports

__EnableScrollBar@12

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.extext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bmem
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedat
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

09d2d3ca61fee27b719240884d863c9e

Headers

File Characteristics

Imports

ntdll

shlwapi

shell32

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.extext Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 364B

.bmem Size: 4KB - Virtual size: 3KB

.sedat Size: 512B - Virtual size: 504B

.rsrc Size: 124KB - Virtual size: 123KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 11KB - Virtual size: 11KB

.extext
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 364B

.bmem
Size: 4KB - Virtual size: 3KB

.sedat
Size: 512B - Virtual size: 504B

.rsrc
Size: 124KB - Virtual size: 123KB

.reloc
Size: 1KB - Virtual size: 1KB