JaffaCakes118_78acfa13a5d2c7f973726daa206129e0

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_78acfa13a5d2c7f973726daa206129e0
Size

274KB
MD5

78acfa13a5d2c7f973726daa206129e0
SHA1

c7fa8487d6c257c0e0b250730e6ebed87b4c2277
SHA256

4f28a44ae1aa6e59d6a5d51ee3b9bae9cac31aa4544c0731af1e4bc732a40685
SHA512

342856551a10b3fc4d31e1a53ff675cb4fa0834ada15d033d7b5a241048c50e3125ff4da99a67f1153cddd997137962bfff04d03521a33e01bb26a1ddc90a477
SSDEEP

6144:VeaworRAwxkIlQJL5GrXw8eVcSSH44PxqFs/u3G49pzA:8alr+rIyJLErXw92C+/M9p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_78acfa13a5d2c7f973726daa206129e0

Files

JaffaCakes118_78acfa13a5d2c7f973726daa206129e0
.exe windows:4 windows x86 arch:x86

8c4ed11aabc8144c2d5997cf419dbc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
CreateCompatibleDC
DeleteDC
CreateCompatibleBitmap
GetBitmapBits
BitBlt
GetDeviceCaps
SelectObject
GetObjectA
CreateDCA

user32

MessageBoxIndirectA

kernel32

FlushConsoleInputBuffer
SetLastError
FreeLibrary
GetCurrentThreadId
CloseHandle
GetStdHandle
GetThreadTimes
GlobalMemoryStatus
GetFileType
VirtualAllocEx

wsock32

WSAGetLastError
WSASetLastError
ntohl
connect
WSAStartup
htonl
bind
getservbyname
WSACancelBlockingCall
send
WSACleanup
listen
recv
closesocket
gethostbyname
getsockopt
socket
ntohs
inet_ntoa
htons
setsockopt
accept
shutdown

shlwapi

SHQueryValueExA
AssocQueryKeyW
SHRegSetUSValueA
PathParseIconLocationA
PathAppendA
PathCompactPathA
SHDeleteEmptyKeyA
PathStripToRootW
PathRemoveExtensionW
SHGetValueW
SHDeleteOrphanKeyA
SHEnumKeyExA
StrRChrIA
PathIsLFNFileSpecA
StrCatW
PathFindOnPathW
ChrCmpIW
StrFormatByteSize64A
SHSkipJunction
StrCmpIW
PathBuildRootW
wnsprintfW
PathRemoveArgsA
PathGetArgsW
PathCompactPathW
PathUnmakeSystemFolderA
PathIsURLW
PathMakeSystemFolderA
SHRegGetUSValueA
PathQuoteSpacesA
PathMakePrettyA
wvnsprintfA
PathStripPathW

fmifs

EnableVolumeCompression

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 239KB - Virtual size: 5.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 490KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c4ed11aabc8144c2d5997cf419dbc3c

Headers

File Characteristics

Imports

gdi32

user32

kernel32

wsock32

shlwapi

fmifs

Sections

.text Size: 16KB - Virtual size: 15KB

.data Size: 239KB - Virtual size: 5.7MB

.rdata Size: 2KB - Virtual size: 490KB

.rsrc Size: 11KB - Virtual size: 10KB

.reloc Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 16KB - Virtual size: 15KB

.data
Size: 239KB - Virtual size: 5.7MB

.rdata
Size: 2KB - Virtual size: 490KB

.rsrc
Size: 11KB - Virtual size: 10KB

.reloc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB