JaffaCakes118_aaf1faf1e44de04789176be8797324ae

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_aaf1faf1e44de04789176be8797324ae
Size

257KB
MD5

aaf1faf1e44de04789176be8797324ae
SHA1

f69be34c98ed056cac6bdcf359e21a11ef8b1c16
SHA256

2e7b85313648856c82ca10c77174704238e647046435321a2f84bfb3ede30c8e
SHA512

43c544755a319ca9d53505e1c1860f3f1a680cbd42a80697f9bd14e010bcd0617a1451b27c85969464bd0a7f7541c19cf24e28429c23b2aa3ea7260cdb0cab65
SSDEEP

6144:AdZOqpOODuHL/us9cYWGxIxRpxQL+kRiBChDp7MpxXTq2:skODuHyseYW2IzT4R3ht7Mx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_aaf1faf1e44de04789176be8797324ae

Files

JaffaCakes118_aaf1faf1e44de04789176be8797324ae
.exe windows:4 windows x86 arch:x86

9226372961b736e140670af607ea1b7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeA
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
ExitProcess
GetSystemDirectoryW
GetLongPathNameW
GetCurrentThreadId
GetVersionExA
GetProcessHeap
GetLastError
TlsAlloc
GetCurrentThread
FileTimeToSystemTime
FileTimeToLocalFileTime
Sleep
GetEnvironmentVariableA
HeapCreate
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeLibrary
LoadLibraryA
InitializeCriticalSection
MultiByteToWideChar
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeW
LoadLibraryW
GetLocaleInfoA
GetLocaleInfoW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatA
GetDateFormatA
Beep
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
CreateDirectoryA
RemoveDirectoryA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
CreateDirectoryW
MoveFileW
RemoveDirectoryW
MoveFileA
RaiseException
GetExitCodeProcess
WaitForSingleObject
GetSystemInfo
DuplicateHandle
CreatePipe
SystemTimeToFileTime
BeginUpdateResourceW
GetProcAddress

security

SealMessage
CompleteAuthToken

user32

EnableWindow
CopyIcon
SetWindowLongW
CreateDialogIndirectParamA
LoadMenuW
DestroyCursor
TrackPopupMenuEx
RegisterWindowMessageA
GetMenuStringW
wsprintfW
CreateWindowExA
FindWindowW
GetMenuStringA
SetActiveWindow
IsWindow
GetMenuItemInfoA
SetFocus
OffsetRect
RegisterClassExA
WaitForInputIdle

gdi32

RemoveFontResourceExW
CreateColorSpaceW
GetTextExtentPointW
CreateScalableFontResourceW
CreateFontIndirectA
CreateFontW
CreateFontIndirectW

Sections

.text
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.F
Size: 3KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aGH
Size: 92KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.t
Size: 4KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pOIs
Size: 2KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XFP
Size: 1KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Cvhg
Size: 122KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9226372961b736e140670af607ea1b7c

Headers

File Characteristics

Imports

kernel32

security

user32

gdi32

Sections

.text Size: 14KB - Virtual size: 16KB

.F Size: 3KB - Virtual size: 229KB

.aGH Size: 92KB - Virtual size: 137KB

.t Size: 4KB - Virtual size: 257KB

.rdata Size: 3KB - Virtual size: 26KB

.pOIs Size: 2KB - Virtual size: 174KB

.XFP Size: 1KB - Virtual size: 52KB

.data Size: 5KB - Virtual size: 173KB

.Cvhg Size: 122KB - Virtual size: 218KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 14KB - Virtual size: 16KB

.F
Size: 3KB - Virtual size: 229KB

.aGH
Size: 92KB - Virtual size: 137KB

.t
Size: 4KB - Virtual size: 257KB

.rdata
Size: 3KB - Virtual size: 26KB

.pOIs
Size: 2KB - Virtual size: 174KB

.XFP
Size: 1KB - Virtual size: 52KB

.data
Size: 5KB - Virtual size: 173KB

.Cvhg
Size: 122KB - Virtual size: 218KB

.rsrc
Size: 8KB - Virtual size: 7KB