JaffaCakes118_15ee9ed881a1fa6ca203b4331c8a2b77

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_15ee9ed881a1fa6ca203b4331c8a2b77
Size

226KB
MD5

15ee9ed881a1fa6ca203b4331c8a2b77
SHA1

080d957fa710bed67cf8a0b73b92c8aec17fb9c4
SHA256

29313db19895622a4020f88e1a60ed4b8ba6e6fee02e4916c429c26fd7506aac
SHA512

25a4261cab3361497c0e3cc452356677deea04d98ad287f4fe7d771a4b60099274e6f7ed6f78b52b22304d1e2f2b0a4c7705e46185e0e950c6eb90061887263a
SSDEEP

6144:d5lNeKSv2HHJk7Ydla1tg3G4LDr7OO8qwI:d5/eKSv2HHW7YdlaX2CLqwI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_15ee9ed881a1fa6ca203b4331c8a2b77

Files

JaffaCakes118_15ee9ed881a1fa6ca203b4331c8a2b77
.exe windows:4 windows x86 arch:x86

3984eb0e9bb481b2951a36307e51dfc5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumberFormatW
ExpandEnvironmentStringsA
SetCalendarInfoA
lstrcatW
GlobalFindAtomA
ConnectNamedPipe
CreateSemaphoreA
GetACP
GetCurrentThreadId
FindResourceA
CreatePipe
GetCommandLineW
GetTempFileNameW
GetLastError
GetSystemDirectoryA
GetLongPathNameA
GetCurrentDirectoryW
EnumCalendarInfoW
InitializeCriticalSection
OpenSemaphoreA
IsDebuggerPresent
FileTimeToLocalFileTime
MoveFileA
CopyFileExA
RaiseException
CompareFileTime
GetDateFormatW
FatalAppExitW
GetProcAddress
GetTimeFormatA
RemoveDirectoryW
CreateMutexA
IsBadStringPtrA
SetLocaleInfoW
GetWindowsDirectoryW
FatalAppExitA
AddAtomA
GetComputerNameA
GetDiskFreeSpaceA
GetTimeFormatW
ReadDirectoryChangesW
LoadLibraryA
SearchPathW
ExpandEnvironmentStringsW
GlobalFindAtomW
GetLongPathNameW
GetTempPathA

user32

AppendMenuA
MessageBeep
PeekMessageW
EnableMenuItem
GetFocus
GetMenuInfo
FlashWindow
SendMessageW
InsertMenuW
ActivateKeyboardLayout
GetSysColor
LoadMenuIndirectW
SetCursor
CallWindowProcW
GetForegroundWindow
SetWindowPos
LoadIconW
FindWindowA
ArrangeIconicWindows

gdi32

TranslateCharsetInfo
FrameRgn
CreateHatchBrush
ExtSelectClipRgn
Pie
GetMapMode
CreateDCA
GetLogColorSpaceW
GetCharABCWidthsFloatA
GetOutlineTextMetricsW
GetStretchBltMode
ArcTo
EnumObjects
StrokeAndFillPath
SelectPalette

advapi32

RegSaveKeyW
RegReplaceKeyW
RegOpenKeyW
RegOpenKeyA
RegReplaceKeyA
RegCloseKey
RegDeleteValueW
RegSaveKeyA

shlwapi

StrRChrA
PathGetDriveNumberA
wnsprintfA
StrFromTimeIntervalA
PathFindFileNameW
UrlCombineA
SHDeleteEmptyKeyW

comdlg32

PageSetupDlgW
PageSetupDlgA

sqlunirl

_GetModuleFileName@12
_CreateDC_@16
_NDdeGetTrustedShare_@20
_GetTempFileName_@16
_SetWindowText@8
_SetCurrentDirectory_@4
_LoadIcon@8
_GetCharacterPlacement_@24
_SetFileSecurity_@12
_ObjectOpenAuditAlarm_@48
_GetWindowLong@8
_EnumServicesStatus_@32
_RegReplaceKey_@16
_EnumPropsEx_@12
_LookupPrivilegeName_@16
_RemoveProp@8
_GetDiskFreeSpace_@20
_CreateMDIWindow_@40
_GlobalAddAtom_@4
_FindWindowEx_@16
_GetWindowTextLength@4
_GetTextExtentPoint32@16
_SHGetPathFromIDList_@8
_GetUserName@8

wsock32

GetTypeByNameA
accept
s_perror
htons
EnumProtocolsA

crypt32

CryptUnregisterOIDInfo
CertGetCRLContextProperty
CryptDecryptMessage
CertFreeCertificateContext
CryptSIPLoad
CryptEnumOIDInfo

Sections

.nyMLkL
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tB
Size: 2KB - Virtual size: 383KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Bljv
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gh
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dNbVSI
Size: 4KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.KpcfSV
Size: 4KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NyNX
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.k
Size: 3KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nqphjK
Size: 1024B - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3984eb0e9bb481b2951a36307e51dfc5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

comdlg32

sqlunirl

wsock32

crypt32

Sections

.nyMLkL Size: 9KB - Virtual size: 9KB

.tB Size: 2KB - Virtual size: 383KB

.Bljv Size: 83KB - Virtual size: 83KB

.gh Size: 12KB - Virtual size: 12KB

.dNbVSI Size: 4KB - Virtual size: 47KB

.KpcfSV Size: 4KB - Virtual size: 314KB

.NyNX Size: 86KB - Virtual size: 85KB

.data Size: 11KB - Virtual size: 291KB

.k Size: 3KB - Virtual size: 460KB

.nqphjK Size: 1024B - Virtual size: 180KB

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 1024B - Virtual size: 1024B

.nyMLkL
Size: 9KB - Virtual size: 9KB

.tB
Size: 2KB - Virtual size: 383KB

.Bljv
Size: 83KB - Virtual size: 83KB

.gh
Size: 12KB - Virtual size: 12KB

.dNbVSI
Size: 4KB - Virtual size: 47KB

.KpcfSV
Size: 4KB - Virtual size: 314KB

.NyNX
Size: 86KB - Virtual size: 85KB

.data
Size: 11KB - Virtual size: 291KB

.k
Size: 3KB - Virtual size: 460KB

.nqphjK
Size: 1024B - Virtual size: 180KB

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 1024B - Virtual size: 1024B