2cb7b18530bc7dd3ae9db91f065f817f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2cb7b18530bc7dd3ae9db91f065f817f_JaffaCakes118
Size

1.6MB
MD5

2cb7b18530bc7dd3ae9db91f065f817f
SHA1

e25a6646a6b11e666964f552fc01b84f6b51be01
SHA256

cb7fc6c29c3b16dde212f8ca6bde1c3fd1d9d44083fa7db293e4562774374246
SHA512

69df02a9db4119067ef283270e1d6abbaddc65643f4431a996e82a2b3abd5a633c712e930b6f5d89d0680d7d22978698c6cd08941ae048f4c490b9c8ad076686
SSDEEP

49152:HOJFS0ux2jIO6EFrAm3Jbql6X3nVGgcEaNovdtGy:ubS0kOjRFrJ3QsX3nVCgtGy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cb7b18530bc7dd3ae9db91f065f817f_JaffaCakes118

Files

2cb7b18530bc7dd3ae9db91f065f817f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7a360f08814d9267b2033390edc45050

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
lstrlenA
lstrcpynW
FlushInstructionCache
GetCurrentProcess
LockResource
LoadResource
FindResourceW
MultiByteToWideChar
SizeofResource
LoadLibraryExW
GetModuleFileNameW
GetCommandLineW
OpenMutexW
CloseHandle
VirtualAlloc
VirtualFree
LCMapStringW
GetVersionExW
GetStringTypeW
GetStringTypeA
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
ExitProcess
Sleep
HeapReAlloc
FreeLibrary
LoadLibraryW
LCMapStringA
lstrcmpiW
GetProcAddress
InterlockedDecrement
RaiseException
InterlockedIncrement
GetLastError
lstrlenW
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSection
HeapCreate
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
WriteFile
GetStdHandle

user32

DefWindowProcW
CharNextW
DestroyWindow
TranslateAcceleratorW
GetWindowRect
InvalidateRect
SendMessageW
CreateWindowExW
PeekMessageW
PtInRect
IsWindow
MessageBeep
TrackPopupMenuEx
SetWindowPos
CallWindowProcW
LoadStringA
PostQuitMessage
SetFocus
LoadStringW
SetMenuDefaultItem
SetMenuItemInfoW
ShowWindow
MapWindowPoints
GetClientRect
PostMessageW
SetWindowLongW
MonitorFromPoint
GetMonitorInfoW
GetMenuItemInfoW
RemoveMenu
GetMenuItemCount
AppendMenuW
DestroyMenu
CreatePopupMenu
GetWindowLongW
UnregisterClassA

gdi32

GetObjectW
GetStockObject

advapi32

RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegDeleteKeyW

ole32

CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitialize
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

VarUI4FromStr

comctl32

ImageList_LoadImageW
InitCommonControlsEx

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 342KB - Virtual size: 341KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7a360f08814d9267b2033390edc45050

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

comctl32

Sections

.text Size: 72KB - Virtual size: 72KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 342KB - Virtual size: 341KB

.text
Size: 72KB - Virtual size: 72KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 342KB - Virtual size: 341KB