0a6efe0481458ca3195a09dc221092c3_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0a6efe0481458ca3195a09dc221092c3_JaffaCakes118
Size

2.3MB
MD5

0a6efe0481458ca3195a09dc221092c3
SHA1

2e084c1b66f805fe6113118d316615e3675505b4
SHA256

653244add20fc777b4a48e2bca4e4814d285a9ff575546f47a1bd8f12a8d1abb
SHA512

c4c442db62c91c68033b707961e66cb19ecf301355685382e1814fd0b73604ee5a17ca33e588ca739747bae1ce60662d8144678ebf65c10c8cb5c9f80f9faea5
SSDEEP

24576:iIG8JYOZ1ztssyDyrujCA5XeBLKyAJM5/C4GJiU:iIG8rna3uKjzG/XGJiU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a6efe0481458ca3195a09dc221092c3_JaffaCakes118

Files

0a6efe0481458ca3195a09dc221092c3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

390f14c088eb88d3a43a044547f8f4c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawEdge
GetMessageW
DdeUnaccessData
GetComboBoxInfo
SystemParametersInfoW
SetScrollInfo
IsDialogMessageW
GetTopWindow
GetWindowLongW
DrawFocusRect
ChildWindowFromPoint
AdjustWindowRectEx
GetWindowRect
EnumPropsExW
LockWindowUpdate
SetActiveWindow
GetMenuItemInfoW
CreateMenu
GetMenu
LoadAcceleratorsW
SetTimer
SendDlgItemMessageW
IsDlgButtonChecked
CheckRadioButton
DialogBoxParamW
SetWindowPos
IsWindow
CreateWindowExW
GetClassInfoW
UnregisterClassW
DefWindowProcW
ExitWindowsEx
RegisterWindowMessageW

advapi32

RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
OpenSCManagerW
RegDeleteValueW

urlmon

CoInternetCreateSecurityManager

comctl32

ImageList_GetDragImage
ImageList_DragMove
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Read
ImageList_SetBkColor
ImageList_GetImageCount
InitCommonControlsEx
CreatePropertySheetPageW
CreateToolbarEx
_TrackMouseEvent
FlatSB_SetScrollInfo
FlatSB_SetScrollProp
ImageList_Copy
InitializeFlatSB

mpr

WNetGetResourceInformationW
WNetEnumResourceW

psapi

EnumDeviceDrivers

kernel32

RtlUnwind
LoadLibraryExW
HeapFree
OutputDebugStringW
EnterCriticalSection
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
HeapAlloc
HeapReAlloc
HeapSize
IsDebuggerPresent
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW
LeaveCriticalSection
IsBadStringPtrW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetVersion
GlobalAlloc
VirtualAlloc
ReleaseSemaphore
SetFilePointer
GetFileTime
lstrcmpW
CreateEventW
GetModuleHandleW
GetCommandLineW
GetPrivateProfileIntW
GetFileAttributesW
DeleteFileW
FindFirstFileW
GetVersionExW
MultiByteToWideChar
GetThreadLocale
GetConsoleWindow
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 936KB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.st7i
Size: 249KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.toeo
Size: 400KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ce31
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.4o3wa7
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 365KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

390f14c088eb88d3a43a044547f8f4c5

Headers

File Characteristics

Imports

user32

advapi32

urlmon

comctl32

mpr

psapi

kernel32

Sections

.text Size: 77KB - Virtual size: 77KB

.data Size: 936KB - Virtual size: 7.4MB

.idata Size: 4KB - Virtual size: 3KB

.xdata Size: 1024B - Virtual size: 724B

.st7i Size: 249KB - Virtual size: 248KB

.toeo Size: 400KB - Virtual size: 400KB

.ce31 Size: 175KB - Virtual size: 174KB

.4o3wa7 Size: 139KB - Virtual size: 138KB

.rsrc Size: 365KB - Virtual size: 364KB

.text
Size: 77KB - Virtual size: 77KB

.data
Size: 936KB - Virtual size: 7.4MB

.idata
Size: 4KB - Virtual size: 3KB

.xdata
Size: 1024B - Virtual size: 724B

.st7i
Size: 249KB - Virtual size: 248KB

.toeo
Size: 400KB - Virtual size: 400KB

.ce31
Size: 175KB - Virtual size: 174KB

.4o3wa7
Size: 139KB - Virtual size: 138KB

.rsrc
Size: 365KB - Virtual size: 364KB