2fe9413739dc92dbdf794917a314dad5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2fe9413739dc92dbdf794917a314dad5_JaffaCakes118
Size

158KB
MD5

2fe9413739dc92dbdf794917a314dad5
SHA1

0ee3db08dc3fcfbacc62fad3d069ac34deac40a0
SHA256

0e4c028674b110b32e50cd1e4e623abd4b04a6cd57770a7b0c2248f89dcba724
SHA512

dd13a8ac2592b0b86d3eaa49660ee3591d7a116c18817a329d26e8faac1c24b25dfe25f653af97be138377757c15136e0d4de306d04dd5adc2abc52ea0be6504
SSDEEP

3072:zj7r5ntE4C5eGZ7x6dU8tsfcXoWtuwUK293y9lRxzK+q:z/rZti5Dz86cuZK293CxzKR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fe9413739dc92dbdf794917a314dad5_JaffaCakes118

Files

2fe9413739dc92dbdf794917a314dad5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0a958f244ae0f13ea5fe2e0884e070d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
VirtualAlloc
GetProcessHeap
GetCommandLineA
GetModuleHandleA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
IsBadWritePtr
HeapReAlloc
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
FatalAppExitA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetLastError
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetCurrentThread
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStringTypeW
TerminateProcess
SetConsoleMode
CreateFileA
WriteFile
CloseHandle
AllocConsole
RtlUnwind
GetModuleFileNameW
GetVersion
ExitProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA

user32

CopyAcceleratorTableW
SetMenuItemInfoA
GetMenuItemInfoA
GetMessageTime
SetScrollInfo
ScrollWindow
GetDlgCtrlID
GetSysColor
DrawTextW
CreateWindowExW
LockWindowUpdate
SendMessageA
SendMessageTimeoutA
SetWindowTextA
EnumWindows
IsDialogMessageW
CallNextHookEx
GetClassNameW
DefWindowProcW
GetAsyncKeyState
GetWindowLongW
GetMessagePos
DefWindowProcA
DispatchMessageA
CreateDialogIndirectParamA
DialogBoxIndirectParamA
ValidateRect
InvalidateRect
BeginPaint
PostMessageW
GetDesktopWindow
GetWindowThreadProcessId
CheckMenuRadioItem
CheckMenuItem
RegisterHotKey
UnregisterHotKey
ExitWindowsEx
RegisterWindowMessageA

advapi32

RegOpenKeyExW
OpenSCManagerW
RegQueryValueExW
OpenServiceA
OpenThreadToken
QueryServiceStatus
RegCloseKey

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xdata
Size: 60KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a958f244ae0f13ea5fe2e0884e070d3

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 96KB - Virtual size: 95KB

.xdata Size: 60KB - Virtual size: 210KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 96KB - Virtual size: 95KB

.xdata
Size: 60KB - Virtual size: 210KB

.rsrc
Size: 1KB - Virtual size: 1KB