JaffaCakes118_f90cf1f00c117a4af196c7f5ffa9e28d

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_f90cf1f00c117a4af196c7f5ffa9e28d
Size

254KB
MD5

f90cf1f00c117a4af196c7f5ffa9e28d
SHA1

57cf25d59dd7c95aafac60843fd997c9795a5996
SHA256

3fb3def0e6972007c39f9aabeb807998cfed3ec14d4c53387c7817e08c0c5b52
SHA512

85ba711cb95fa5188ca48e860977b0da9b51c2a32783a32d76150763ee097e0cd57001eeaa2bb1658c439a1a40b1b1e3d387fc99605df7c37a9e5f1878a6ebb4
SSDEEP

3072://w6gCmvZZ1g9nTR61F/tNnr4U7BRScmJ8Re1YBRyD+4KABiQ3AwZI9tBkPL/Z27:nwVhk8cgSVLaGD8bQNZqU/Zq7Pmyjrx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_f90cf1f00c117a4af196c7f5ffa9e28d

Files

JaffaCakes118_f90cf1f00c117a4af196c7f5ffa9e28d
.exe windows:4 windows x86 arch:x86

6ad2f82b8ad02523c94a5d495b2dab38

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

PatBlt
GetObjectW
CreateDCW
CreateSolidBrush
SelectObject
CreateCompatibleBitmap
DeleteDC
CreateCompatibleDC
DeleteObject

kernel32

LeaveCriticalSection
HeapFree
IsDebuggerPresent
LockResource
EnterCriticalSection
lstrcmpiW
HeapSize
GetModuleHandleW
CreateFileW
RaiseException
GetFileSize
SystemTimeToTzSpecificLocalTime
DeleteCriticalSection
FindClose
LocalAlloc
FindFirstFileW
lstrlenW
GetTimeZoneInformation
FormatMessageW
UnhandledExceptionFilter
EnumResourceNamesW
SizeofResource
GetCurrentThreadId
FindResourceExW
GetSystemTime
LoadResource
FindResourceW
HeapDestroy
LocalFree
HeapAlloc
GetSystemTimeAsFileTime
ReadFile
SetUnhandledExceptionFilter
OutputDebugStringW
FreeLibrary
ProcessIdToSessionId
GetProcessHeap
CloseHandle
HeapReAlloc
SystemTimeToFileTime
LoadLibraryExW
CompareFileTime
VirtualAllocEx

ole32

CoTaskMemRealloc
CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

oleaut32

VarUI4FromStr

user32

CharNextW
GetForegroundWindow
AllowSetForegroundWindow
DestroyIcon
GetSystemMetrics
GetDesktopWindow
DrawIconEx
GetActiveWindow
LoadImageW

esent

JetFreeBuffer
JetCloseFile
JetDupCursor
JetGetDatabaseFileInfo
JetCreateDatabase2
JetMakeKey
JetCreateInstance
JetDefragment
JetSetLS
JetOpenTempTable3
JetAddColumn
JetInit2
JetEnumerateColumns
JetTerm2
JetDeleteIndex
JetMove
ese

wmpshell

DllRegisterServer
DllCanUnloadNow

Sections

.YolX
Size: 1KB - Virtual size: 27KB

IMAGE_SCN_MEM_READ

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.UrnGiP
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.awBQJUL
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.slUCrgA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GdUqi
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fvTRZ
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mHTN
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.GjQNcMz
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ZJhdvo
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sIVhg
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6ad2f82b8ad02523c94a5d495b2dab38

Headers

File Characteristics

Imports

gdi32

kernel32

ole32

oleaut32

user32

esent

wmpshell

Sections

.YolX Size: 1KB - Virtual size: 27KB

.text Size: 17KB - Virtual size: 17KB

.UrnGiP Size: 1KB - Virtual size: 1KB

.awBQJUL Size: 2KB - Virtual size: 1KB

.slUCrgA Size: 2KB - Virtual size: 1KB

.data Size: 7KB - Virtual size: 61KB

.GdUqi Size: 2KB - Virtual size: 2KB

.rdata Size: 208KB - Virtual size: 207KB

.fvTRZ Size: 1024B - Virtual size: 790B

.mHTN Size: 512B - Virtual size: 396B

.rsrc Size: 5KB - Virtual size: 4KB

.GjQNcMz Size: 512B - Virtual size: 266B

.ZJhdvo Size: 1KB - Virtual size: 1KB

.sIVhg Size: 2KB - Virtual size: 2KB

.YolX
Size: 1KB - Virtual size: 27KB

.text
Size: 17KB - Virtual size: 17KB

.UrnGiP
Size: 1KB - Virtual size: 1KB

.awBQJUL
Size: 2KB - Virtual size: 1KB

.slUCrgA
Size: 2KB - Virtual size: 1KB

.data
Size: 7KB - Virtual size: 61KB

.GdUqi
Size: 2KB - Virtual size: 2KB

.rdata
Size: 208KB - Virtual size: 207KB

.fvTRZ
Size: 1024B - Virtual size: 790B

.mHTN
Size: 512B - Virtual size: 396B

.rsrc
Size: 5KB - Virtual size: 4KB

.GjQNcMz
Size: 512B - Virtual size: 266B

.ZJhdvo
Size: 1KB - Virtual size: 1KB

.sIVhg
Size: 2KB - Virtual size: 2KB