2ca596e5200826f856506b4b59d1a8e0_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2ca596e5200826f856506b4b59d1a8e0_JaffaCakes118
Size

911KB
MD5

2ca596e5200826f856506b4b59d1a8e0
SHA1

7a7dd23e3ba976e91c44c9530b9add022c32f537
SHA256

4fc446725911d3929f6f56aa7d30823a398d9a2e131502a6e75b965451b8c580
SHA512

307a073102554c49896cc2db8e1551b9e24eebb43b3f05ae35ac64f27b2d98d5368a202ffc3f35a142d2579fc77681d0b7e85e767d212d21e17f5e35197dc96a
SSDEEP

6144:HODTTrmSb3uvn3KApc/6BdoHpv2Lu7f+KetAl0m6FwCYFJUyUnaYkW61kqluF59:giSbCKh/4d6l2LuL+vm6FwHl2k9kj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ca596e5200826f856506b4b59d1a8e0_JaffaCakes118

Files

2ca596e5200826f856506b4b59d1a8e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e2e21e8ff426d75eb8c21d1d3d2573d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesW
GetFileSize
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetSystemTime
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTickCount
GetVersionExA
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
GetCurrentThreadId
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadFile
RtlUnwind
SearchPathW
SetEvent
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpiW
lstrlenW
VirtualAllocEx
GetCurrentProcessId
GetCurrentProcess
GetCommandLineW
FreeLibrary
FlushInstructionCache
FindResourceW
EnterCriticalSection
DeleteTimerQueueTimer
DeleteTimerQueueEx
DeleteCriticalSection
CreateTimerQueueTimer
CreateTimerQueue
CreateThread
CreateFileW
CreateEventW
MultiByteToWideChar
CloseHandle

user32

LoadIconW
LoadStringW
PostQuitMessage
PostThreadMessageW
RegisterClassExW
RemoveMenu
SendMessageW
SetForegroundWindow
SetWindowLongW
TrackPopupMenuEx
TranslateMessage
UnregisterClassA
UnregisterClassW
GetSysColor
LoadCursorA
LoadCursorW
GetMenuItemInfoW
GetMenuItemCount
GetCursorPos
GetClassInfoExW
EndMenu
EnableMenuItem
DispatchMessageW
DestroyWindow
DestroyMenu
DefWindowProcW
CreateWindowExW
CreatePopupMenu
CharUpperW
CharNextW
CallWindowProcW
AllowSetForegroundWindow
InsertMenuItemW
GetMessageW
GetWindowLongW

advapi32

GetTraceEnableFlags
GetTraceLoggerHandle
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegisterTraceGuidsW
TraceMessage
UnregisterTraceGuids
RegQueryValueExA
GetTraceEnableLevel

shell32

Shell_NotifyIconW
ShellExecuteW

ole32

StringFromGUID2
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoSuspendClassObjects
CoRevokeClassObject
CoResumeClassObjects
CoRegisterClassObject
CoInitializeEx
CoCreateInstance

msvcrt

_initterm
towlower
toupper
realloc
memset
memmove
memcpy
mbtowc
malloc
isleadbyte
free
ferror
_CxxThrowException
_XcptFilter
__CxxFrameHandler
__badioinfo
__dllonexit
__mb_cur_max
__p__commode
__p__fmode
__pioinfo
__set_app_type
__setusermatherr
__wgetmainargs
_amsg_exit
_cexit
_controlfp
_errno
_exit
_fileno
_iob
_isatty
_itoa
_lock
_lseeki64
_onexit
_purecall
_snprintf
_unlock
_vsnwprintf
_wcmdln
_wcsicmp
_wcslwr
_write
_wtol
calloc
exit

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 886KB - Virtual size: 886KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e2e21e8ff426d75eb8c21d1d3d2573d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

msvcrt

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 886KB - Virtual size: 886KB

.rsrc Size: 9KB - Virtual size: 8KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 886KB - Virtual size: 886KB

.rsrc
Size: 9KB - Virtual size: 8KB