JaffaCakes118_bada4ee4fa165ee79d3c4e41ef0da9fc

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_bada4ee4fa165ee79d3c4e41ef0da9fc
Size

294KB
MD5

bada4ee4fa165ee79d3c4e41ef0da9fc
SHA1

e3bec8a8e52e96fc43e7b113d5b416e353c5b8dd
SHA256

f37f61aaf0fa00d97ddb7a767621ed780ae39221304600b08cad85a15061efa8
SHA512

314ccec72610b1e25faec938464581eea0fd77817dea93a02dc686fecaa02264b9cb1ee5b8ff6dd208d5c46cdeaa1f4e2ff6a3454205d977adf7a81c7b3dcffc
SSDEEP

6144:lbUjoep8/QwZucnBReWqd+bS2ZFwtgZNLhNjDYk:6jPdcneSbS2ZFwQNjD3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_bada4ee4fa165ee79d3c4e41ef0da9fc

Files

JaffaCakes118_bada4ee4fa165ee79d3c4e41ef0da9fc
.exe windows:4 windows x86 arch:x86

c77c00761a9a55564c093718146a97e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsSetValue
WriteConsoleA
UnhandledExceptionFilter
SetHandleCount
GetFileType
ReadFile
InitializeCriticalSectionAndSpinCount
GetCommandLineA
SetEndOfFile
ExpandEnvironmentStringsA
LeaveCriticalSection
GetUserDefaultLCID
GetModuleHandleW
SystemTimeToFileTime
GetOEMCP
GetSystemDirectoryA
FileTimeToSystemTime
GetModuleHandleA
WriteFile
TlsAlloc
GetConsoleCP
TlsFree
HeapReAlloc
IsDebuggerPresent
GetProcessHeap
LCMapStringA
WideCharToMultiByte
GetConsoleOutputCP
HeapDestroy
GetCurrentThreadId
VirtualAlloc
EnumSystemLocalesA
EnterCriticalSection
GetACP
FreeLibrary
SetUnhandledExceptionFilter
IsValidCodePage
CloseHandle
HeapAlloc
SetLastError
RaiseException
GetStdHandle
FreeEnvironmentStringsA
GetTempPathA
GetConsoleMode
SetFilePointer
IsValidLocale
HeapSize
GetSystemTimeAsFileTime
RtlUnwind
CreateFileA
TlsGetValue
DeleteCriticalSection
SetStdHandle
LCMapStringW
HeapFree
VirtualFree
FlushFileBuffers
GetTimeFormatA
SystemTimeToTzSpecificLocalTime
GetSystemTime
WriteConsoleW
FreeEnvironmentStringsW
GetCurrentProcess
VirtualAllocEx

rpcrt4

UuidCreate

ole32

StringFromGUID2

advapi32

SetSecurityDescriptorDacl
RegDeleteValueW
RegCreateKeyExW
RegQueryValueExW
RegDeleteKeyW
RegSetValueExW
RegQueryInfoKeyW
InitializeSecurityDescriptor
RegCloseKey
RegOpenKeyExW

ws2_32

WSCEnumProtocols
WSCDeinstallProvider
WSCGetProviderPath
WSACleanup
WSAStartup
WSCInstallProvider
WSCWriteProviderOrder

user32

GetKeyboardLayout
SetWindowLongW
OpenClipboard
GetFocus
GetMenuItemInfoA
AdjustWindowRect
GetForegroundWindow
LoadMenuA
keybd_event
CheckMenuItem
WaitMessage
SetCapture
IsIconic
GetMenuInfo
IsChild
GetCaretPos
GetKeyState
SetWindowTextA
DefWindowProcW
SetWindowRgn
LoadIconA
LoadMenuIndirectW
GetCapture
WaitForInputIdle
FindWindowW
CreateAcceleratorTableW
RegisterClassExA

kbdtuf

KbdLayerDescriptor

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 254KB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 485KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c77c00761a9a55564c093718146a97e6

Headers

File Characteristics

Imports

kernel32

rpcrt4

ole32

advapi32

ws2_32

user32

kbdtuf

Sections

.text Size: 17KB - Virtual size: 16KB

.data Size: 254KB - Virtual size: 3.3MB

.rdata Size: 3KB - Virtual size: 485KB

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 17KB - Virtual size: 16KB

.data
Size: 254KB - Virtual size: 3.3MB

.rdata
Size: 3KB - Virtual size: 485KB

.rsrc
Size: 19KB - Virtual size: 18KB