JaffaCakes118_024e8e19468947e14692437eeec093a8

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_024e8e19468947e14692437eeec093a8
Size

794KB
MD5

024e8e19468947e14692437eeec093a8
SHA1

f2034dad6414262d0986165a93b471af4f96602c
SHA256

ecafea6473923c6c5f47978821cd1548254a8f956865cf76ecdd008eab2fcae8
SHA512

d117d513a2489d39837ac879cf766cc097bb1abeed75cf71af86e8bac6c34a44b980c5f50c34c8844f77d9a9652b71d793b835a4c734d2096f7ba9d3ddf230d0
SSDEEP

12288:MejqLHQTqmvRokC9PHUBYOTIYk+PrPv7EZW8hcxMFYUw9X6Iq+9heGjxMDzhAzoQ:nwOquRokC9/FBq8OeFYzAIocxGmz/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_024e8e19468947e14692437eeec093a8

Files

JaffaCakes118_024e8e19468947e14692437eeec093a8
.exe windows:4 windows x86 arch:x86

3e57a15876d7747e69a493d7507d8f72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

AdjustTokenPrivileges
GetUserNameW
LookupPrivilegeValueW
OpenProcessToken

gdi32

CreateFontIndirectW
SetBkMode
SetTextColor

kernel32

CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
lstrlenA

msvcrt

_strdup
_stricoll
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_fpreset
_fullpath
_iob
_isctype
_onexit
_pctype
_setmode
_strdup
abort
atexit
calloc
free
fwrite
malloc
mbstowcs
memcpy
realloc
setlocale
signal
strcoll
strlen
tolower
vfprintf
wcstombs

user32

BeginPaint
CharUpperW
CloseClipboard
CreateWindowExW
DefWindowProcW
DestroyWindow
DialogBoxParamW
DrawTextW
EmptyClipboard
EndDialog
EndPaint
GetClipboardData
GetDC
GetMessageW
IsClipboardFormatAvailable
LoadBitmapW
LoadCursorW
LoadIconW
LoadMenuW
MoveWindow
OpenClipboard
PeekMessageW
PostMessageW
RegisterClassExW
ReleaseCapture
ReleaseDC
SetCapture
SetClipboardData
SetForegroundWindow
SetWindowPos
ShowWindow
ToAscii
UpdateWindow
WinHelpW
wsprintfW

Sections

.text
Size: 524KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 168B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e57a15876d7747e69a493d7507d8f72

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

msvcrt

user32

Sections

.text Size: 524KB - Virtual size: 524KB

.data Size: 181KB - Virtual size: 180KB

.rdata Size: 1024B - Virtual size: 896B

.eh_fram Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 168B

.idata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 79KB - Virtual size: 79KB

.text
Size: 524KB - Virtual size: 524KB

.data
Size: 181KB - Virtual size: 180KB

.rdata
Size: 1024B - Virtual size: 896B

.eh_fram
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 168B

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 79KB - Virtual size: 79KB