54cf322377cf5560ef7bdd10b55c4f13_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

54cf322377cf5560ef7bdd10b55c4f13_JaffaCakes118
Size

289KB
MD5

54cf322377cf5560ef7bdd10b55c4f13
SHA1

6155b6883c7df3bf25f6665702d220369382a5b2
SHA256

ad97b49f07edaa922e03269895efb5820ad48b912295c3678cb1414d3e6c5615
SHA512

ae43ca4db2baf2055945db1c279d8cbbf8f68d8ef35781c82de743f0e75e55d45c85a2ae9f1feb59a7ff7b731a6512cf98a9d86cd1611fd808a0d5819d721707
SSDEEP

6144:/vsCrmzqnthhahasdnYQuIyJKw6Tz8slt7q9cpnc61tMxCsS35:/vHHtYdEMsy5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54cf322377cf5560ef7bdd10b55c4f13_JaffaCakes118

Files

54cf322377cf5560ef7bdd10b55c4f13_JaffaCakes118
.exe windows:1 windows x86 arch:x86

9683bab4bc6f1b4fb4d1417061b384f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

claasc

ASCII

clados

DOS

clanet

NetBase64Decode
NetBase64Encode
NetCloseCallBackWindow
NetDebugTrace
NetErrorStr
NetFreeUniqueEvent
NetGetTimeZone
NetGetUniqueEvent
NetGet_NetCriticalSection
NetOptions
NetPing
NetQuotedPrintableEncode
NetSimpleClose
NetSimpleGetServerConnections
NetSimpleOpen
NetSimpleReceive
NetSimpleSend
NetSimpleSSLGetRemoteCerticate
NetSimpleSSLSwitchToSSL

clarun

Cla$ACCEPTED
Cla$ADDqueue
Cla$ADDqueuekey
Cla$ADDqueueptr
Cla$AssignRefUfo
Cla$BEEP
Cla$BSHIFT
Cla$CLEAR
Cla$CLEARqueue
Cla$clearstr
Cla$CLOCK
Cla$CLOSEwindow
Cla$code
Cla$COMMAND
Cla$comparestr
Cla$CREATE
Cla$DAY
Cla$DecAdd
Cla$DecCompareN
Cla$DecDistinct
Cla$DecDistinctR
Cla$DecDivide
Cla$DecMul
Cla$DecSub
Cla$DecSubR
Cla$DELETEqueue
Cla$DELETEREG
Cla$DESTROY
Cla$DISABLE
Cla$DISPLAY
Cla$DISPOSEqueue
Cla$DISPOSEref
Cla$Dlongpower
Cla$DPopDec
Cla$DPopLong
Cla$DPopReal
Cla$DPopUlong
Cla$DPushConstant
Cla$DPushDec
Cla$DPushLong
Cla$DPushULong
Cla$ENABLE
Cla$EndEventLoop
Cla$EndEventLoops
Cla$ERRORCODE
Cla$EVENT
Cla$FIELD
Cla$FILEDIALOG
Cla$FILEERRORCODE
Cla$FILEERRORMSG
Cla$FileExists
Cla$FILE_ADDf
Cla$FILE_BYTES
Cla$FILE_CLOSE
Cla$FILE_CREATE
CLA$FILE_DESTROY
Cla$FILE_NAME
Cla$FILE_NEXT
Cla$FILE_OPEN
Cla$FILE_POSITIONf
Cla$FILE_POSITIONk
Cla$FILE_REGETf
Cla$FILE_REGETk
Cla$FILE_SETf
Cla$FOCUS
Cla$FREEqueue
Cla$FREEqueuea
Cla$freestr
Cla$FreeUfo
Cla$freewindow
Cla$GETINI
Cla$GETPOSITION
Cla$GetPropS
Cla$GETqueuekey
Cla$GETqueueptr
Cla$GETREG
Cla$HALT
Cla$HIDE
Cla$init
Cla$INSTANCE
Cla$KEYCODE
Cla$LASTFIELD
Cla$LONGPATH
Cla$longtostr
Cla$Mem2Ufo
Cla$MessageBox
Cla$MONTH
Cla$NewMemB
Cla$NewMemT
Cla$NewMemZ
Cla$NEWqueue
Cla$NOTIFICATION
Cla$OPENowned
Cla$OPENwindow
Cla$POINTERqueue
Cla$PopAString
Cla$PopBind
Cla$PopCString
Cla$PopString
Cla$PopTemp
Cla$POPUP
Cla$POST
Cla$PushAString
Cla$PushBind
Cla$PushCString
Cla$PushLong
Cla$PushPictDec
Cla$PushPictLong
Cla$PushString
Cla$PushUfo
Cla$PUTINI
Cla$PUTqueue
Cla$PUTqueuekey
Cla$PUTREG
Cla$pwopen
Cla$RANDOM
Cla$realdistinct
Cla$RECORDSqueue
Cla$RefAssignAny
Cla$REGISTEREVENT
Cla$SELECT
Cla$SETCURSOR
Cla$SETKEYCODE
Cla$SETPATH
Cla$SETPOSITION
Cla$SetPropF
Cla$SetPropS
Cla$SetPropV
Cla$SETTARGET
Cla$SHORTPATH
Cla$SORTqueuekey
Cla$Stack2DStack
Cla$Stack2Ufo
Cla$StackCLIP
Cla$StackCompareN
Cla$StackCompareNEQ
Cla$StackConcat
Cla$StackConcatR
Cla$StackErrstr
Cla$StackHeap
Cla$StackINSTRING
Cla$StackLEFT
Cla$StackLen
Cla$StackLOWER
Cla$STACKpop
Cla$StackRotate
Cla$StackSUB
Cla$StackUPPER
Cla$StartEventLoop
Cla$StashBP
Cla$storecstr
Cla$storestr
Cla$THREAD
Cla$THREAD_FILE
Cla$TODAY
Cla$UNHIDE
Cla$UNREGISTEREVENT
Cla$WHAT
Cla$YEAR
NewCriticalSection
THR$GetInstance
_exit
_free
_malloc
__sysinit
__sysstart

clawe

ds_HideWindow
ds_PutReg
ds_SetEndSessionHandler
ds_SetOkToEndSessionHandler
ds_ShowWindow
ds_VisibleOnDesktop
ds_WinTaskbarBalloon
WinAlert
WinTaskbarAddIcon
WinTaskbarChangeIcon
WinTaskbarRemoveIcon

kernel32

lstrcpy
OutputDebugStringA

lspzipx

LSZIP_EXECUTE
LSZIP_INCLUDE
LSZIP_INIT
LSZIP_PIN
LSZIP_VER

user32

CallWindowProcA
PostMessageA
RegisterWindowMessageA
SystemParametersInfoA

Sections

.text
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cwtls
Size: 1024B - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9683bab4bc6f1b4fb4d1417061b384f3

Headers

File Characteristics

Imports

claasc

clados

clanet

clarun

clawe

kernel32

lspzipx

user32

Sections

.text Size: 142KB - Virtual size: 142KB

.data Size: 42KB - Virtual size: 58KB

.cwtls Size: 1024B - Virtual size: 62KB

.idata Size: 6KB - Virtual size: 6KB

.rsrc Size: 77KB - Virtual size: 76KB

.reloc Size: 19KB - Virtual size: 18KB

.text
Size: 142KB - Virtual size: 142KB

.data
Size: 42KB - Virtual size: 58KB

.cwtls
Size: 1024B - Virtual size: 62KB

.idata
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 77KB - Virtual size: 76KB

.reloc
Size: 19KB - Virtual size: 18KB