3b8bc105a2ee75e8eb5cadfa0921a531_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3b8bc105a2ee75e8eb5cadfa0921a531_JaffaCakes118
Size

320KB
MD5

3b8bc105a2ee75e8eb5cadfa0921a531
SHA1

c1f0c6f4ab940f4bdefe6a9a6b65605963216e3b
SHA256

06b7cbff83fa48e72fdc0e4f6f9a9576269de4beb3245a0549b37598f82e9835
SHA512

1a4ee43a0616f0372d3b1534732ba16aea4db3fab4d53571acdbb3c6ec87c890841f8426bfac12327e1857c1b8d05b26a062deb36cf2ca8e5cc3e9b030ef0270
SSDEEP

6144:2ZyACTnVkQ4Q9/I2j6Peio4oyQqGrbFew1+hrM:TV94QdRj62D4oPLLYh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b8bc105a2ee75e8eb5cadfa0921a531_JaffaCakes118

Files

3b8bc105a2ee75e8eb5cadfa0921a531_JaffaCakes118
.exe windows:2053 windows x86 arch:x86

bc408460d9a44a16b110f79e3b71ebf4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

Sleep
GetLocalTime
VirtualAlloc
GetModuleHandleA
GetProcAddress
ExitProcess
FreeLibrary
InitializeCriticalSection
FreeResource
lstrlenA
SizeofResource
LeaveCriticalSection
LoadLibraryA
TlsGetValue
GetThreadLocale
CompareStringA
FindFirstFileA
GlobalReAlloc
FreeLibrary
lstrcpynA
SetEndOfFile
GetLocaleInfoA
GetProcAddress
WaitForSingleObject
GetModuleHandleA
GetLastError
TlsSetValue
CloseHandle
ExitProcess
GlobalHandle
DeleteCriticalSection
GetStartupInfoA
ResetEvent
GetCPInfo
VirtualQuery
GetStdHandle
GetVersionExA
FindClose
EnterCriticalSection
GetCommandLineA
FormatMessageA
LockResource
SetEvent
VirtualProtect
GetCurrentThreadId
VirtualAlloc
LocalAlloc
WriteFile
GetStdHandle
VirtualFree
LocalAlloc
SetErrorMode
EnumCalendarInfoA
GetModuleHandleA
LeaveCriticalSection
InterlockedExchange
ReadFile
GetACP
GetThreadLocale
MultiByteToWideChar
TlsGetValue

user32

CreateWindowExA
GetWindowRect
EnableScrollBar
SetWindowPos
IsIconic
GetActiveWindow
WinHelpA
MessageBoxA
GetMenu
DefFrameProcA
SetCapture
GetWindowLongA
DrawTextA
SetWindowLongA
IsWindowEnabled
GetClassNameA
CharNextA
PeekMessageA
GetKeyboardState
CreateMenu
ReleaseDC
GetParent
DefWindowProcA
SetCursor
GetWindowTextA
SetWindowsHookExA
ShowWindow
LoadIconA
GetFocus
LoadStringA
PostMessageA
CallWindowProcA
RemovePropA
GetScrollInfo
DestroyCursor
SetForegroundWindow
GetWindowDC
DrawMenuBar
SetPropA
GetWindowThreadProcessId
EnableWindow
ShowCursor
IsRectEmpty
GetCapture
UnregisterClassA
IsZoomed
GetCursorPos
GetKeyState
CharToOemA
GetLastActivePopup
CallNextHookEx
RegisterClassA
GetMenuItemInfoA
CreateIcon
ReleaseCapture
ClientToScreen
ScrollWindow
GetWindow
DefMDIChildProcA
ScreenToClient
GetMenuStringA
CreatePopupMenu
GetMenuState
RemoveMenu
GetIconInfo
OffsetRect
LoadStringA
LoadKeyboardLayoutA
UnhookWindowsHook
IsWindowVisible
GetCursor
TranslateMessage
FrameRect
ShowScrollBar
IsChild
EnumThreadWindows
InflateRect
DrawIconEx
SetFocus
GetTopWindow
GetMenuItemCount
CharNextA
PostQuitMessage
MapWindowPoints
GetDesktopWindow
WaitMessage
LoadCursorA
ShowOwnedPopups
InvalidateRect
EndPaint
SetTimer
DestroyWindow
GetSubMenu
GetKeyboardType
SetWindowPlacement
GetSysColorBrush
DeleteMenu
KillTimer

gdi32

SetROP2
GetWindowOrgEx
DeleteObject
StretchBlt
PatBlt
GetDCOrgEx
CreateBrushIndirect
SelectPalette
GetPixel
CreatePalette
SetPixel
IntersectClipRect
ExcludeClipRect
SetWindowOrgEx
MoveToEx
GetCurrentPositionEx
SaveDC
GetPaletteEntries
CreateDIBitmap
SetBrushOrgEx
GetSystemPaletteEntries
CreatePenIndirect
SetTextColor
LineTo
GetClipBox
CreateBitmap
RestoreDC
GetDeviceCaps
CreateCompatibleDC
SetBkMode
CreateFontIndirectA
GetTextExtentPoint32A
GetBrushOrgEx
BitBlt
RectVisible
CreateCompatibleBitmap
SelectObject
SetBkColor

Sections

usfksd
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

masstf
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ueygst
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sutjst
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

sutjsk
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

eufsir
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

sotsmg
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

wtufsj
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

coddok
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc408460d9a44a16b110f79e3b71ebf4

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

usfksd Size: 45KB - Virtual size: 45KB

masstf Size: 1024B - Virtual size: 1024B

ueygst Size: - Virtual size: 4KB

sutjst Size: 3KB - Virtual size: 3KB

sutjsk Size: - Virtual size: 8B

eufsir Size: 512B - Virtual size: 512B

sotsmg Size: 3KB - Virtual size: 3KB

wtufsj Size: 229KB - Virtual size: 229KB

coddok Size: 4KB - Virtual size: 4KB

.idata Size: 8KB - Virtual size: 8KB

.rsrc Size: 24KB - Virtual size: 28KB

usfksd
Size: 45KB - Virtual size: 45KB

masstf
Size: 1024B - Virtual size: 1024B

ueygst
Size: - Virtual size: 4KB

sutjst
Size: 3KB - Virtual size: 3KB

sutjsk
Size: - Virtual size: 8B

eufsir
Size: 512B - Virtual size: 512B

sotsmg
Size: 3KB - Virtual size: 3KB

wtufsj
Size: 229KB - Virtual size: 229KB

coddok
Size: 4KB - Virtual size: 4KB

.idata
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 24KB - Virtual size: 28KB