2eecc30173c5dcbf8f168f559deff879_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2eecc30173c5dcbf8f168f559deff879_JaffaCakes118
Size

259KB
MD5

2eecc30173c5dcbf8f168f559deff879
SHA1

b3f6447d8f2425ea29de80b144517b9e2007250c
SHA256

1ed7d45a4e48ee95e29e0423aa7fc4285479f37d045cafb878e98347c4187817
SHA512

3da349d089cf9f33c01ed51fc838dc6373db334ccd366079447af34cc61139e1617affb6df836271ab541dd1b918a64d8c51cd82b029beb6ea34b6c375bb758b
SSDEEP

3072:vcSgD97Mx3p3zcLdKXkEyydeRBE1Os3ovB3N0LFqEbvD92CJVmUq4tWPBHXGaR3X:Fgpg3pDTUji2AovB3NOb79drUdLLG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eecc30173c5dcbf8f168f559deff879_JaffaCakes118

Files

2eecc30173c5dcbf8f168f559deff879_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6767cdcb012dc7ea83fba03018dc7585

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CreateFileW
GetModuleHandleW
WriteFile
ReadProcessMemory
OpenProcess
GetCommandLineW
GetModuleFileNameW
GetCurrentProcessId
CreateMutexW
OpenMutexW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
ExitProcess
QueryPerformanceCounter
ExitProcess
GetStartupInfoA
GetVersionExA
GetVersionExW
InitializeCriticalSection
DeleteCriticalSection
GetUserDefaultLangID
lstrlenW
ReadFile
CloseHandle
GetFileSize

comctl32

InitCommonControlsEx

user32

GetWindowRect
SendDlgItemMessageW
MoveWindow
PostQuitMessage
GetClientRect
DestroyWindow
ShowWindow
CreateDialogParamW
DefWindowProcW
MessageBoxW
DestroyMenu
ScreenToClient
PostMessageW
LoadStringW
TrackPopupMenuEx
CheckMenuItem
GetSubMenu
LoadMenuW
SetWindowPos
LoadImageW
LoadCursorW
RegisterClassW
CreateWindowExW
UpdateWindow
FindWindowW
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
IsIconic
BeginPaint
DrawIconEx
SystemParametersInfoW
EnumWindowStationsW
DrawTextW
EndPaint
EnableWindow
SetForegroundWindow
SendMessageW
GetDlgItem

msvcr71

swprintf
__security_error_handler
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
_onexit
__dllonexit
memset
strncmp
strncpy
strstr
swscanf
wcsrchr
__CxxFrameHandler
??2@YAPAXI@Z
wcscmp
??_V@YAXPAX@Z
??_U@YAPAXI@Z
wcscat
free
??3@YAXPAX@Z
wcslen
wcscpy
_except_handler3
_controlfp

comdlg32

GetSaveFileNameW
GetOpenFileNameW

Sections

.code
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6767cdcb012dc7ea83fba03018dc7585

Headers

File Characteristics

Imports

kernel32

comctl32

user32

msvcr71

comdlg32

Sections

.code Size: 129KB - Virtual size: 128KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 121KB - Virtual size: 120KB

.rsrc Size: 5KB - Virtual size: 118KB

.code
Size: 129KB - Virtual size: 128KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 121KB - Virtual size: 120KB

.rsrc
Size: 5KB - Virtual size: 118KB