2bfe52be87986697c16b27697e5ac0be_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2bfe52be87986697c16b27697e5ac0be_JaffaCakes118
Size

200KB
MD5

2bfe52be87986697c16b27697e5ac0be
SHA1

eee024d1d9f1c78e9d3063fcd26360524c671426
SHA256

f6f9f15e0d977491651704fb975576e2704aec3fe7fca098e4055d60b6379221
SHA512

8ec3c3e10da477440c926f7f7b273b1be6db733c56b19b102dc30d2a66d0269fae05866c3a9cae437ff138d47b312635faf3ad40976c3aadd79f296391bf8c0b
SSDEEP

3072:KR6JVPx++LLL7SufZ/MPEBMoFM0OuYhSr0J5SgT0DbqV:dx+qL7rB/MPGMoFxo5t0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bfe52be87986697c16b27697e5ac0be_JaffaCakes118

Files

2bfe52be87986697c16b27697e5ac0be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c4fee5642487c53b009569f428b431a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawEdge
DrawFrameControl
DispatchMessageW
ClientToScreen
DestroyCursor
CharToOemA
DispatchMessageA
DestroyIcon
DestroyWindow
ChildWindowFromPoint
BeginPaint
CharNextA
CreateIcon
CheckMenuItem
CharLowerA
CharLowerBuffA
CharUpperBuffA
DefFrameProcA
DrawIcon
CharNextW
DestroyMenu
CallWindowProcA
CloseClipboard
CreatePopupMenu
CreateMenu
DefMDIChildProcA
CallNextHookEx
DeleteMenu
DefWindowProcA
AdjustWindowRectEx

comdlg32

GetFileTitleA
GetOpenFileNameA
ChooseColorA
GetSaveFileNameA
FindTextA

msvcrt

abs

comctl32

ImageList_Remove
ImageList_Write
ImageList_DragShowNolock
ImageList_Draw
ImageList_Destroy
ImageList_Read
ImageList_GetBkColor
ImageList_Add

oleaut32

SysAllocStringLen

version

GetFileVersionInfoSizeA
VerInstallFileA

ole32

CreateBindCtx
StgCreateDocfileOnILockBytes

kernel32

CreateEventA
CompareStringA
CreateThread
DeleteCriticalSection
GetDiskFreeSpaceA
GetFileType
lstrlenA
GetFileSize
GlobalAlloc
DeleteFileA
FindClose
GetProcAddress
EnumCalendarInfoA
GetFullPathNameA
GetCurrentThreadId
GetCommandLineA
EnterCriticalSection
GetACP
LoadLibraryA
FindResourceA
GetEnvironmentStrings
CreateFileA
GetCurrentProcessId
FreeResource
GetVersionExA
FindFirstFileA
FormatMessageA
GetModuleHandleA
ExitProcess
VirtualAlloc
GetCPInfo
ExitThread
CloseHandle
GetLastError
GetFileAttributesA
Sleep
LocalAlloc
FreeLibrary
IsBadReadPtr
GetDateFormatA

shell32

Shell_NotifyIconA
SHGetFileInfoA
SHGetDiskFreeSpaceA

gdi32

GetDIBits
GetObjectA
GetPaletteEntries
GetDIBColorTable
SelectObject
GetRgnBox
LineTo
GetPixel
CreatePenIndirect

shlwapi

SHGetValueA
SHDeleteKeyA
SHEnumValueA
PathIsDirectoryA
PathGetCharTypeA
SHSetValueA
PathFileExistsA
SHDeleteValueA

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 942B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc7
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc3
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc9
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc6
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4fee5642487c53b009569f428b431a5

Headers

File Characteristics

Imports

user32

comdlg32

msvcrt

comctl32

oleaut32

version

ole32

kernel32

shell32

gdi32

shlwapi

Sections

.text Size: 68KB - Virtual size: 67KB

.data Size: 1024B - Virtual size: 942B

.rsrc2 Size: 1KB - Virtual size: 1KB

.rsrc7 Size: 1KB - Virtual size: 1KB

.rsrc3 Size: 118KB - Virtual size: 118KB

.rsrc9 Size: 2KB - Virtual size: 1KB

.rsrc6 Size: 5KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 976B

.text
Size: 68KB - Virtual size: 67KB

.data
Size: 1024B - Virtual size: 942B

.rsrc2
Size: 1KB - Virtual size: 1KB

.rsrc7
Size: 1KB - Virtual size: 1KB

.rsrc3
Size: 118KB - Virtual size: 118KB

.rsrc9
Size: 2KB - Virtual size: 1KB

.rsrc6
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 976B