9bf7a2cf740e4fa32c30e6d11cc33f43_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

9bf7a2cf740e4fa32c30e6d11cc33f43_JaffaCakes118
Size

254KB
MD5

9bf7a2cf740e4fa32c30e6d11cc33f43
SHA1

1d09d1a8785c43d87256a6a0fc499952b5fd6c50
SHA256

491535653824685369cecfb7b069ab2f2a3114e02d158dbdb2541e1b4b9558f1
SHA512

7c0a264993002559672f3ae3343bd119c7677b8de9187330c5f445b6cd63e4d79d698730ff3d050d063fd3e16e1028c2b1e5ab754d29379ccfb038965a9829df
SSDEEP

3072:U/w6gCmvZZ1g9nTR61F/tNnr4U7BRScmJ8Re1YBRyD+4KABiQ3AwZI9tBkPL/Z27:iwVhk8cgSVLaGD8bQNZqU/Zq7Pmyjrx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bf7a2cf740e4fa32c30e6d11cc33f43_JaffaCakes118

Files

9bf7a2cf740e4fa32c30e6d11cc33f43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ad2f82b8ad02523c94a5d495b2dab38

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

PatBlt
GetObjectW
CreateDCW
CreateSolidBrush
SelectObject
CreateCompatibleBitmap
DeleteDC
CreateCompatibleDC
DeleteObject

kernel32

LeaveCriticalSection
HeapFree
IsDebuggerPresent
LockResource
EnterCriticalSection
lstrcmpiW
HeapSize
GetModuleHandleW
CreateFileW
RaiseException
GetFileSize
SystemTimeToTzSpecificLocalTime
DeleteCriticalSection
FindClose
LocalAlloc
FindFirstFileW
lstrlenW
GetTimeZoneInformation
FormatMessageW
UnhandledExceptionFilter
EnumResourceNamesW
SizeofResource
GetCurrentThreadId
FindResourceExW
GetSystemTime
LoadResource
FindResourceW
HeapDestroy
LocalFree
HeapAlloc
GetSystemTimeAsFileTime
ReadFile
SetUnhandledExceptionFilter
OutputDebugStringW
FreeLibrary
ProcessIdToSessionId
GetProcessHeap
CloseHandle
HeapReAlloc
SystemTimeToFileTime
LoadLibraryExW
CompareFileTime
VirtualAllocEx

ole32

CoTaskMemRealloc
CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

oleaut32

VarUI4FromStr

user32

CharNextW
GetForegroundWindow
AllowSetForegroundWindow
DestroyIcon
GetSystemMetrics
GetDesktopWindow
DrawIconEx
GetActiveWindow
LoadImageW

esent

JetFreeBuffer
JetCloseFile
JetDupCursor
JetGetDatabaseFileInfo
JetCreateDatabase2
JetMakeKey
JetCreateInstance
JetDefragment
JetSetLS
JetOpenTempTable3
JetAddColumn
JetInit2
JetEnumerateColumns
JetTerm2
JetDeleteIndex
JetMove
ese

wmpshell

DllRegisterServer
DllCanUnloadNow

Sections

.YolX
Size: 1KB - Virtual size: 27KB

IMAGE_SCN_MEM_READ

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.UrnGiP
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.awBQJUL
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.slUCrgA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GdUqi
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fvTRZ
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mHTN
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.GjQNcMz
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ZJhdvo
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sIVhg
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6ad2f82b8ad02523c94a5d495b2dab38

Headers

File Characteristics

Imports

gdi32

kernel32

ole32

oleaut32

user32

esent

wmpshell

Sections

.YolX Size: 1KB - Virtual size: 27KB

.text Size: 17KB - Virtual size: 17KB

.UrnGiP Size: 1KB - Virtual size: 1KB

.awBQJUL Size: 2KB - Virtual size: 1KB

.slUCrgA Size: 2KB - Virtual size: 1KB

.data Size: 7KB - Virtual size: 61KB

.GdUqi Size: 2KB - Virtual size: 2KB

.rdata Size: 208KB - Virtual size: 207KB

.fvTRZ Size: 1024B - Virtual size: 790B

.mHTN Size: 512B - Virtual size: 396B

.rsrc Size: 5KB - Virtual size: 4KB

.GjQNcMz Size: 512B - Virtual size: 266B

.ZJhdvo Size: 1KB - Virtual size: 1KB

.sIVhg Size: 2KB - Virtual size: 2KB

.YolX
Size: 1KB - Virtual size: 27KB

.text
Size: 17KB - Virtual size: 17KB

.UrnGiP
Size: 1KB - Virtual size: 1KB

.awBQJUL
Size: 2KB - Virtual size: 1KB

.slUCrgA
Size: 2KB - Virtual size: 1KB

.data
Size: 7KB - Virtual size: 61KB

.GdUqi
Size: 2KB - Virtual size: 2KB

.rdata
Size: 208KB - Virtual size: 207KB

.fvTRZ
Size: 1024B - Virtual size: 790B

.mHTN
Size: 512B - Virtual size: 396B

.rsrc
Size: 5KB - Virtual size: 4KB

.GjQNcMz
Size: 512B - Virtual size: 266B

.ZJhdvo
Size: 1KB - Virtual size: 1KB

.sIVhg
Size: 2KB - Virtual size: 2KB