071d124209e31541de9f33f496f4a07d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

071d124209e31541de9f33f496f4a07d_JaffaCakes118
Size

175KB
MD5

071d124209e31541de9f33f496f4a07d
SHA1

2169dda86456412b8bf2008883214b093fb43757
SHA256

eb74bf788541c55492076f7114f4a75315c958819a439d74ab00c9a5e7cbeba1
SHA512

20779f6cda36e1a371e07658642984cf1682b17f1520d963fe2bc20629102f8a14bfe7d0fa1205187ccbad01358c63b0eb907f09d539086bd28b0edd699039fa
SSDEEP

1536:HEpzJ89yp8UNwGevc5T+583y4fo3osehaQXQZnAxQwUnOO8V7xTAg:HEpzJ89KNFeOa5enhRXQJwU1W7x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
071d124209e31541de9f33f496f4a07d_JaffaCakes118

Files

071d124209e31541de9f33f496f4a07d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

be0b80bc7d9f95ae5b927aae1f6e4325

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ctl3d32

Ctl3dGetVer
Ctl3dEnabled
Ctl3dUnregister
Ctl3dRegister
Ctl3dCtlColor

wtsapi32

WTSQueryUserToken
WTSSetUserConfigW
WTSVirtualChannelWrite
WTSFreeMemory
WTSUnRegisterSessionNotification
WTSVirtualChannelOpen
WTSRegisterSessionNotification
WTSSetSessionInformationW
WTSEnumerateServersA
WTSOpenServerW
WTSVirtualChannelQuery
WTSVirtualChannelPurgeInput
WTSQuerySessionInformationA

cryptdll

MD5Init
MD5Update
MD5Final
CDBuildVect
CDLocateRng

advapi32

RegEnumKeyW
CreateServiceA
RegOpenKeyA
RegSaveKeyA
LogonUserW
RegLoadKeyA
GetUserNameW
RegRestoreKeyW
RegUnLoadKeyW
CryptSignHashW
ReadEventLogW
OpenEventLogW
RegDeleteValueA

user32

MessageBoxW
IsWindow
InsertMenuW
MessageBoxExA
GetMessageW
DispatchMessageW
GetDlgItemTextA
FindWindowA
LoadMenuA
CharToOemW
CreateDesktopA
DrawStateW
IsDialogMessageW
GetClassLongW

kernel32

WriteFile
LoadLibraryExA
GetProcessHeap
OpenMutexW
GetLogicalDriveStringsA
lstrlenA
InitializeCriticalSection
SleepEx
CreateMutexW
GetCommandLineA
GetModuleHandleA
GetStringTypeW
GetConsoleAliasA
lstrcatW
HeapFree
CreateFileW
GetACP
GetProcAddress

Sections

.text
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be0b80bc7d9f95ae5b927aae1f6e4325

Headers

DLL Characteristics

File Characteristics

Imports

ctl3d32

wtsapi32

cryptdll

advapi32

user32

kernel32

Sections

.text Size: 139KB - Virtual size: 138KB

Size: 15KB - Virtual size: 15KB

.data Size: 1024B - Virtual size: 972B

.rsrc Size: 18KB - Virtual size: 18KB

.text
Size: 139KB - Virtual size: 138KB

.data
Size: 1024B - Virtual size: 972B

.rsrc
Size: 18KB - Virtual size: 18KB