f1412caefb3ab60c86ab06110e838453_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f1412caefb3ab60c86ab06110e838453_JaffaCakes118
Size

52KB
MD5

f1412caefb3ab60c86ab06110e838453
SHA1

fba98d0f889b85e206d6ba1a3ba0bcbfa108fb06
SHA256

25c5bf120eaa9d5ff0016149c90744dde3bf3ecedede93dd4ce3d0482fd32ad9
SHA512

8aa8edd3d079cb2f49e9f4a441e319a1d2998ef733d7f1c997d989c64d53a2ededaf1c86c3768ec19d45c63e37cd11b6054dc1c038fc6572527e54c891104e27
SSDEEP

1536:DUWusXsR3JUujbd/grMDFDYNs6+ROWRf4TbL:xXsR5UMt3JU6ROWB4TH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1412caefb3ab60c86ab06110e838453_JaffaCakes118

Files

f1412caefb3ab60c86ab06110e838453_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e09eabf6da7ba43725c5a67c4d341f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TrackPopupMenu
GetPropW
SendMessageW
GetDC
GetParent
SetWindowLongW
SetClipboardData
GetWindowTextW
SetCursor
SetDlgItemTextW
MessageBoxW
MoveWindow
GetSubMenu
GetAsyncKeyState
GetCapture
PostMessageW
ScreenToClient
DestroyMenu
EnableMenuItem
LoadStringW
EndDialog
RemovePropW
ReleaseDC
SendDlgItemMessageW
LoadMenuW
GetClientRect
GetDlgItem
ShowWindow
GetSysColor
CallWindowProcW
SetWindowTextW
LoadIconW
GetCursorPos
GetWindowLongW
EmptyClipboard
CloseClipboard
SetPropW
InvalidateRect
MapDialogRect
ClientToScreen
LoadCursorW
PtInRect
GetSystemMetrics
OpenClipboard
ExitWindowsEx
ReleaseCapture
GetWindowTextLengthW
DialogBoxParamW
GetWindowRect
SetCapture
SetWindowsHookExW

oleaut32

SysFreeString
VariantInit
SysAllocString
VariantClear

kernel32

SetFileTime
RemoveDirectoryW
GlobalAlloc
GetDriveTypeW
MapViewOfFile
GetDateFormatW
FindNextFileW
GetWindowsDirectoryW
GetDiskFreeSpaceExW
SetThreadPriority
WritePrivateProfileStringW
SetEndOfFile
GetCurrentDirectoryW
SetLastError
OpenProcess
VirtualProtectEx
GetPrivateProfileStringW
VirtualAlloc
CreateFileMappingW
GetTimeFormatW
GetFileSize
ReadFile
GetModuleHandleW
GetVolumeInformationW
SetPriorityClass
GetFileTime
GetCurrentThreadId
FormatMessageW
LoadLibraryExW
LoadResource
GetPriorityClass
SetUnhandledExceptionFilter
MoveFileW
IsDebuggerPresent
WriteFile
ResumeThread
LocalFree
FindResourceW
CopyFileW
FreeLibrary
GlobalUnlock
DeleteCriticalSection
EnterCriticalSection
SizeofResource
CloseHandle
ReadProcessMemory
WideCharToMultiByte
CreateThread
FileTimeToSystemTime
CreateProcessW
GetSystemDirectoryW
FreeResource
FlushFileBuffers
UnhandledExceptionFilter
GetFullPathNameW
SetFileAttributesW
GetSystemInfo
WriteProcessMemory
FindClose
SetThreadLocale
LockResource
DeleteFileW
GlobalFree
DisableThreadLibraryCalls
GetDiskFreeSpaceW
GlobalMemoryStatus
GetComputerNameW
LocalAlloc
FindResourceExW
GetSystemTimeAsFileTime
VirtualFree
GetLocalTime
UnmapViewOfFile
GetCommandLineW
CreateSemaphoreW
GetThreadLocale
GlobalLock
LeaveCriticalSection
MoveFileExW
QueryDosDeviceW
VirtualQueryEx
WaitForSingleObject
RaiseException
GetTempFileNameW
GetLogicalDrives
FindFirstFileW
MulDiv
FreeEnvironmentStringsW
CreateFileW
SetFilePointer
VirtualAllocEx

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
GetUserNameW
AllocateAndInitializeSid
RegSetValueExW
RegDeleteKeyW
SetNamedSecurityInfoW
RegCreateKeyExW
RegUnLoadKeyW
RegOpenKeyExW
RegLoadKeyW
RegCloseKey
RegEnumValueW
RegDeleteValueW
LookupAccountSidW
FreeSid
RegQueryValueExW

mscms

CreateProfileFromLogColorSpaceA
UnregisterCMMW
SelectCMM
GetColorDirectoryA
CheckBitmapBits
SetColorProfileElementReference
GetPS2ColorRenderingIntent
UninstallColorProfileA

atl

AtlIPersistPropertyBag_Load
AtlAxGetHost
AtlCreateTargetDC

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.a
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.VLAwlW
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.HIZQ
Size: 512B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zDtH
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QIRb
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xZDH
Size: 512B - Virtual size: 633B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.epxLT
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.YHaSXt
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NQ
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 211KB - Virtual size: 506KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.KD
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.miDHAp
Size: 1024B - Virtual size: 953B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Vvqe
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e09eabf6da7ba43725c5a67c4d341f2

Headers

DLL Characteristics

File Characteristics

Imports

user32

oleaut32

kernel32

advapi32

mscms

atl

Sections

.text Size: 16KB - Virtual size: 16KB

.a Size: 1KB - Virtual size: 1KB

.VLAwlW Size: 1KB - Virtual size: 1KB

.HIZQ Size: 512B - Virtual size: 592B

.zDtH Size: 2KB - Virtual size: 2KB

.QIRb Size: 1024B - Virtual size: 1KB

.rdata Size: 5KB - Virtual size: 4KB

.xZDH Size: 512B - Virtual size: 633B

.epxLT Size: 1KB - Virtual size: 2KB

.YHaSXt Size: 2KB - Virtual size: 3KB

.NQ Size: 1KB - Virtual size: 1KB

.data Size: 211KB - Virtual size: 506KB

.KD Size: 2KB - Virtual size: 2KB

.miDHAp Size: 1024B - Virtual size: 953B

.Vvqe Size: 1024B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 476B

.text
Size: 16KB - Virtual size: 16KB

.a
Size: 1KB - Virtual size: 1KB

.VLAwlW
Size: 1KB - Virtual size: 1KB

.HIZQ
Size: 512B - Virtual size: 592B

.zDtH
Size: 2KB - Virtual size: 2KB

.QIRb
Size: 1024B - Virtual size: 1KB

.rdata
Size: 5KB - Virtual size: 4KB

.xZDH
Size: 512B - Virtual size: 633B

.epxLT
Size: 1KB - Virtual size: 2KB

.YHaSXt
Size: 2KB - Virtual size: 3KB

.NQ
Size: 1KB - Virtual size: 1KB

.data
Size: 211KB - Virtual size: 506KB

.KD
Size: 2KB - Virtual size: 2KB

.miDHAp
Size: 1024B - Virtual size: 953B

.Vvqe
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 476B