f05bdc6dfa30d2382307ac1fe3ac0859_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f05bdc6dfa30d2382307ac1fe3ac0859_JaffaCakes118
Size

163KB
MD5

f05bdc6dfa30d2382307ac1fe3ac0859
SHA1

c15ebdfd7463ba6603addfe122afe0226d7b9e31
SHA256

7b9bb9d6402fe768de2343f9e0891a0c8daec1ebd205a3efbb9c65973823170c
SHA512

2c1f06bb99a08633d0ec91a24eebcdce38a86a44356c117fe2ef888fe4b2f58166a7dd78ee6beddbc0ac0f196bbd8add3e393426a208d2df13df53c613db5c65
SSDEEP

3072:/DUftgVICIp4wmOU+KLfr405p36oO7tCfnKxYE8nci21IRuUE4Zd:LUftgV42jrL36oO7tClRci2auV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f05bdc6dfa30d2382307ac1fe3ac0859_JaffaCakes118

Files

f05bdc6dfa30d2382307ac1fe3ac0859_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8649b187d317721031285cc997ffecff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
GetOverlappedResult
SetErrorMode
GetLastError
ResetEvent
GetModuleHandleA
lstrcpynW
lstrlenA
GlobalUnlock
lstrcatA
GetACP
GetSystemTimeAsFileTime
WriteFile
GetDiskFreeSpaceW
LocalFree
SetUnhandledExceptionFilter
GlobalAlloc
DeleteCriticalSection
MulDiv
LoadLibraryW
EnterCriticalSection
GlobalFree
GetFullPathNameW
lstrcpyA
IsBadReadPtr
WideCharToMultiByte
CreateFileW
QueryPerformanceCounter
CloseHandle
GetTickCount
lstrcpyW
LeaveCriticalSection
GetCurrentProcessId
LocalAlloc
MultiByteToWideChar
GlobalReAlloc
GlobalSize
ReadFile
GetFileSize
lstrcmpW

msacm32

acmStreamSize
acmStreamOpen
acmFormatTagDetailsW
acmStreamUnprepareHeader
acmStreamPrepareHeader
acmFormatSuggest
acmMetrics
acmStreamConvert
acmFormatChooseW
acmFormatDetailsW
acmGetVersion
acmStreamClose

ole32

CoUnmarshalInterface
CoGetMarshalSizeMax
OleUninitialize
CoCreateInstance
OleInitialize
CoMarshalInterface
OleSetClipboard
OleGetClipboard
CreateStreamOnHGlobal
CoGetMalloc
ReleaseStgMedium
OleFlushClipboard

msvcrt

__p__commode
__getmainargs
_ftol
??3@YAXPAX@Z
_adjust_fdiv
exit
atoi
memmove
_vsnwprintf
malloc
??2@YAPAXI@Z
_initterm
mbstowcs
free
_purecall
__set_app_type

user32

DestroyWindow
GetDlgItem
SendDlgItemMessageW
CharPrevW
SetRect
IsRectEmpty
EndDialog
SendMessageW
ReleaseDC
MessageBeep
CheckDlgButton
LoadStringW
SetDlgItemInt
PeekMessageW
EnableWindow
DialogBoxParamW
GetDC
TranslateMessage
SetRectEmpty
wsprintfW
IsDlgButtonChecked
SetDlgItemTextW
MessageBoxW

winmm

mmioSeek
mmioOpenW
mmioClose
mmioWrite
mmioRead

advapi32

RegOpenKeyA
RegCloseKey
RegOpenKeyW
RegQueryValueExA
RegQueryValueW
RegEnumKeyW

msvfw32

ICCompressorFree
ICSendMessage
ICCompress
ICDecompress
ICOpen
ICClose
ICCompressorChoose
ICGetDisplayFormat
ICGetInfo

Sections

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8649b187d317721031285cc997ffecff

Headers

File Characteristics

Imports

kernel32

msacm32

ole32

msvcrt

user32

winmm

advapi32

msvfw32

Sections

.text Size: 98KB - Virtual size: 98KB

.idata Size: 40KB - Virtual size: 39KB

.rsrc Size: 23KB - Virtual size: 23KB

.text
Size: 98KB - Virtual size: 98KB

.idata
Size: 40KB - Virtual size: 39KB

.rsrc
Size: 23KB - Virtual size: 23KB