3f0b0b3292b66d0451104d61a0a91bc9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3f0b0b3292b66d0451104d61a0a91bc9_JaffaCakes118
Size

126KB
MD5

3f0b0b3292b66d0451104d61a0a91bc9
SHA1

f07bd67ae0411d1d4e349d89cc7ddf0db97c8489
SHA256

d8be21ada7d1e6aefa2adcdedc4daeffd9cbc7087a11fec0713363ae9064ed6f
SHA512

e3842151c62307d09def4af57c382cb2411bf1ba7c442a79deb4958678bf1a40dbb1583746282a53b4d59ddcb08966494fa6873e55687ca95c37d88823098d47
SSDEEP

3072:Oo3ZfVbzvDuAO4fFRYcuG4KhjjX2rxaOpGNgo12pLTK:Oo3ZNbfuAO6FKbvKtjXUQ/W/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f0b0b3292b66d0451104d61a0a91bc9_JaffaCakes118

Files

3f0b0b3292b66d0451104d61a0a91bc9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aeeefbbc4129025afccaedfb0bd419be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
GetTickCount
GetStartupInfoA
GetModuleHandleA
CreateThread
Sleep

user32

SetWindowPos
MessageBoxA
MsgWaitForMultipleObjects
PostQuitMessage
DestroyWindow
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
SetWindowPlacement
RegisterClassExA
LoadIconA
LoadCursorA
CreateWindowExA

ole32

CoInitialize

gdi32

GetStockObject

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

msvcrt

malloc
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
_EH_prolog
strcpy
memcpy
strlen
??2@YAPAXI@Z
getenv
sprintf
_stricmp
memset
memmove
strcmp
__CxxFrameHandler

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aeeefbbc4129025afccaedfb0bd419be

Headers

File Characteristics

Imports

kernel32

user32

ole32

gdi32

msvcp60

msvcrt

Sections

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 103KB - Virtual size: 103KB

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 103KB - Virtual size: 103KB