2eabe4008a1d66a453499a5be5c2a4fd_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2eabe4008a1d66a453499a5be5c2a4fd_JaffaCakes118
Size

92KB
MD5

2eabe4008a1d66a453499a5be5c2a4fd
SHA1

28d03e3d4faa279ae2fe54ba5bc1f5f91b29b2e2
SHA256

ee0ff287e8d79cb09f09ac85ca2cfad3391760ab4b6818cb7ab9333cbbcad298
SHA512

09222f69fa2492f802b23e9ab4447eea1628eeaa22aa74e71648a0163db3c8a8a52880e4c6442c0822f84408c3173c7b6bccd160cb3438cb6b1e0103bff7442c
SSDEEP

1536:GpsAufRUWswJkJt49otM8ODQ+rI3gCKTT+WHi0P6vKhFodm:PDfRVBJo0kMVXsQC8QKhFo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eabe4008a1d66a453499a5be5c2a4fd_JaffaCakes118

Files

2eabe4008a1d66a453499a5be5c2a4fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1472395f010ea54f99e5dbbea88a30a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GetFileSize
CreateFileA
MultiByteToWideChar
ExpandEnvironmentStringsA
GetSystemDirectoryA
lstrcatA
lstrcpyA
MoveFileA
MoveFileExA
CreateDirectoryA
GetFileAttributesA
WaitForSingleObject
CreateProcessA
GlobalHandle
FreeLibrary
GetProcAddress
LoadLibraryA
Process32Next
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
CloseHandle
GetModuleFileNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetVersionExA
Sleep
GetSystemTime
SystemTimeToFileTime
OutputDebugStringA
SetEndOfFile
GetOEMCP
GetACP
FlushFileBuffers
SetStdHandle
GlobalLock
ReadFile
GlobalUnlock
DeleteFileA
GlobalFree
lstrlenA
FindFirstFileA
FindClose
GetVolumeInformationA
GetWindowsDirectoryA
GetCPInfo
GetStringTypeW
GetStringTypeA
SetFilePointer
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
IsBadWritePtr
RtlUnwind
InterlockedDecrement
InterlockedIncrement
GetLastError
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
WideCharToMultiByte
LCMapStringA
LCMapStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc

user32

DispatchMessageA
CopyRect
GetWindowRect
MessageBoxA
SendMessageA
GetDlgItem
DialogBoxIndirectParamA
GetDesktopWindow
SetWindowPos
EndDialog
SetWindowTextA
PeekMessageA
OffsetRect

advapi32

RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegCreateKeyA

shell32

ShellExecuteA

ole32

CoUninitialize
CoInitialize

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime

wininet

InternetGetConnectedState
HttpAddRequestHeadersA
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpSendRequestA
HttpOpenRequestA
InternetReadFile

netapi32

Netbios

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1472395f010ea54f99e5dbbea88a30a3

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

wininet

netapi32

Sections

.text Size: 60KB - Virtual size: 58KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 20KB - Virtual size: 22KB

.text
Size: 60KB - Virtual size: 58KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 20KB - Virtual size: 22KB