40bedc03c7f07a6f2b0d826d5ea2e534_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

40bedc03c7f07a6f2b0d826d5ea2e534_JaffaCakes118
Size

19KB
MD5

40bedc03c7f07a6f2b0d826d5ea2e534
SHA1

96a63f25422fe178080aced323a865bad897377c
SHA256

05dad97373333317d4d2a513e474081e4726687ea792487816e725a3d5175783
SHA512

8b7d8a28217defb4250890d7d747ad67e3dce6010d5d60381c2fba75cb3eca2d7a5802fe01a976ed8c5ed36d3b65e0f992ea1f668538870b3aa4a9ec48c45202
SSDEEP

192:lJ05bv6wTx5IhIbFIC/HDcA5P0Q0yhshpKXar8ERk7rN5NhnDm3AYaxkgw1LaqKZ:s57tTx5IhIxfcA+Qjsh8KYfr5BDmIqg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40bedc03c7f07a6f2b0d826d5ea2e534_JaffaCakes118

Files

40bedc03c7f07a6f2b0d826d5ea2e534_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fbdfc9d642be385d6decc338fe235aa5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AreFileApisANSI
BuildCommDCBAndTimeoutsW
ClearCommBreak
ClearCommError
CloseHandle
CompareStringA
CompareStringW
ContinueDebugEvent
CreateDirectoryExA
CreateHardLinkA
DeleteAtom
DeleteTimerQueue
DeleteVolumeMountPointW
EnumResourceLanguagesA
EnumSystemCodePagesA
ExitThread
FillConsoleOutputCharacterW
FindFirstFileExW
FindNextVolumeMountPointA
FlushInstructionCache
GetACP
GetAtomNameA
GetBinaryType
GetBinaryTypeA
GetCPInfo
GetCommTimeouts
GetComputerNameW
GetConsoleAliasesW
GetConsoleCP
GetCurrencyFormatW
GetCurrentThread
GetDiskFreeSpaceExW
GetEnvironmentStringsA
GetExitCodeProcess
GetLogicalDriveStringsW
GetModuleFileNameW
GetNamedPipeHandleStateA
GetPrivateProfileIntW
GetProcessShutdownParameters
GetStartupInfoA
GetStdHandle
GetSystemDefaultLCID
GetSystemInfo
GetSystemPowerStatus
GetThreadTimes
GetProcAddress
GetVolumeInformationW
GetVolumePathNameW
GlobalCompact
Heap32Next
HeapCompact
HeapUnlock
IsBadStringPtrW
IsDBCSLeadByteEx
IsSystemResumeAutomatic
LockFileEx
MapUserPhysicalPages
MoveFileW
OpenEventA
ReadConsoleA
ReadConsoleOutputA
ResumeThread
RtlFillMemory
SearchPathA
SetCommMask
SetCommState
SetComputerNameA
SetConsoleCursorInfo
SetConsoleOutputCP
SetDefaultCommConfigW
SetFileTime
SetHandleInformation
SetMailslotInfo
SetProcessPriorityBoost
SetTapePosition
SystemTimeToFileTime
TerminateThread
TlsGetValue
UnlockFileEx
VerLanguageNameA
VirtualAlloc
VirtualFree
VirtualQueryEx
WriteConsoleOutputCharacterW
WriteConsoleOutputW
WritePrivateProfileStructW
WriteProfileStringW
lstrcmpA
lstrcmpiW
lstrcpy
GetTimeFormatW
GetModuleHandleA

msvcrt

memset

user32

IMPGetIMEW
CheckMenuItem
CloseClipboard
CloseWindowStation
CopyAcceleratorTableA
CreateIconFromResourceEx
CreateIconIndirect
CreateMDIWindowW
CreateWindowExA
DdeDisconnect
DdeDisconnectList
DdeQueryStringW
DefMDIChildProcA
DeferWindowPos
DestroyCaret
DestroyMenu
DestroyWindow
DialogBoxParamA
DlgDirListA
DlgDirSelectComboBoxExW
DragDetect
DrawFrame
DrawIcon
DrawIconEx
DrawMenuBar
DrawStateW
EnumDesktopsW
EnumDisplayMonitors
EnumWindowStationsW
EqualRect
ExitWindowsEx
GetCaretPos
GetClassInfoExA
GetClassLongW
GetClientRect
GetClipboardFormatNameA
GetClipboardViewer
GetDesktopWindow
GetKeyboardLayoutNameA
GetLastInputInfo
GetMenuDefaultItem
GetMenuItemInfoA
GetMenuStringW
GetProcessWindowStation
GetShellWindow
GetUserObjectInformationW
GrayStringA
HideCaret
LoadBitmapW
IMPQueryIMEW
IMPSetIMEA
IMPSetIMEW
InSendMessage
IsCharAlphaNumericW
LoadCursorFromFileW
LoadImageA
LoadImageW
LoadMenuIndirectW
LoadMenuW
MapVirtualKeyExW
MessageBoxA
ModifyMenuW
MonitorFromWindow
OffsetRect
OpenClipboard
OpenIcon
PeekMessageA
PostMessageW
RealGetWindowClassW
RegisterClassW
RegisterDeviceNotificationA
ScreenToClient
SendDlgItemMessageA
SendIMEMessageExA
SendMessageW
SetCapture
SetDlgItemTextA
SetForegroundWindow
SetScrollRange
SetThreadDesktop
SetTimer
SetUserObjectInformationA
SetWindowLongA
SetWindowsHookExA
SubtractRect
SystemParametersInfoW
UnhookWindowsHook
UnloadKeyboardLayout
UnpackDDElParam
ValidateRgn
WinHelpA
WinHelpW
wsprintfW

advapi32

RegOpenKeyExW

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fbdfc9d642be385d6decc338fe235aa5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

advapi32

Sections

.text Size: 6KB - Virtual size: 6KB

.text2 Size: 9KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 140B

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 6KB

.text2
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 140B

.rsrc
Size: 2KB - Virtual size: 1KB