2d8ccfa083da919645b1d1fdebf98f5c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2d8ccfa083da919645b1d1fdebf98f5c_JaffaCakes118
Size

180KB
MD5

2d8ccfa083da919645b1d1fdebf98f5c
SHA1

8343ecf685d36daeb0c73aae1ba251a08c821065
SHA256

9b8640b737a2060d3dd759051ead5b0e2ff02ea1ebb6e6c038c396cfb5b559b7
SHA512

5d5a3bb25e597b41655d21fda51dc24e6ffcd792a6da696b28638fb7115c8e4f6de9524bd8ccdc96ff4d71c5564625b3dc73984d724099a4f8e6b618a35d8564
SSDEEP

3072:qBNCdGTHrmQZVxLFSl5/cw72Li2vuI8aavKHsDbhxEgR+p5zrSH//3KILH:qBN4GTHrnFFSl9cwaieLjsDbhx/kmH3n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d8ccfa083da919645b1d1fdebf98f5c_JaffaCakes118

Files

2d8ccfa083da919645b1d1fdebf98f5c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0f1af1de84600cbe1069b8429f5aa45d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

closesocket
ntohs

kernel32

ReadConsoleA
WriteConsoleA
FreeConsole
WriteProcessMemory
lstrlenW
GetModuleFileNameW
ReadProcessMemory
GetCommandLineA
GetLastError
CreateMutexA
GetModuleFileNameA
LoadLibraryA
GetCurrentProcess
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
GetModuleHandleA
lstrcmpiA
Sleep
lstrcatA
lstrcpyA
GetProcAddress
LCMapStringW
ExitProcess
lstrlenA
TlsGetValue
SetEnvironmentVariableA
CompareStringW
GetSystemTimeAsFileTime
GetStartupInfoA
HeapFree
HeapAlloc
RaiseException
GetModuleHandleW
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WideCharToMultiByte
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
VirtualAlloc
HeapReAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CompareStringA
MultiByteToWideChar

user32

MessageBoxW
DialogBoxParamA
CreateWindowExA
SetTimer
CreateMenu
GetSysColor
GetParent
GetSubMenu
UpdateWindow
MessageBoxA

gdi32

CreateDCA
DeleteDC
DeleteObject
BitBlt
GetFontData
PolyTextOutA
CreateCompatibleDC
StretchBlt

comdlg32

GetSaveFileNameA
ChooseFontA

shell32

Shell_NotifyIconA

ole32

CoInitialize

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0f1af1de84600cbe1069b8429f5aa45d

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

comdlg32

shell32

ole32

Sections

.text Size: 99KB - Virtual size: 99KB

.rdata Size: 37KB - Virtual size: 36KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 229KB - Virtual size: 230KB

.text
Size: 99KB - Virtual size: 99KB

.rdata
Size: 37KB - Virtual size: 36KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 229KB - Virtual size: 230KB