136e9d2b029c1638474152167bfde9a3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

136e9d2b029c1638474152167bfde9a3_JaffaCakes118
Size

2.7MB
MD5

136e9d2b029c1638474152167bfde9a3
SHA1

3583a670a8c9de971ffe53c0022de88311c7caf7
SHA256

81b0912a3be73556b1dc4f66b5f6cc486a96bf9453d0e8657685365c010dc7e6
SHA512

c2b6ab10b25bd0cf2176ef9fe138956ac739c9980d2ddab89d1bb4b9820a5bb14f12593760fbf561fccf49debc7b5e22cefc4d155e209231ef3c90abf3875bce
SSDEEP

24576:Re/dlM1eLM2fTUNBBkEOf3xPtBAYw3rzpw+OL/BraSforE0:RensYTUJsh/AYw3ZmtzQrE0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
136e9d2b029c1638474152167bfde9a3_JaffaCakes118

Files

136e9d2b029c1638474152167bfde9a3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dc88553ea8288a833386b26fa36c30a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

WSAAsyncSelect
WSAAsyncGetHostByName

shell32

CommandLineToArgvW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
SHBrowseForFolderW
SHGetDesktopFolder
SHGetFileInfoW

kernel32

lstrlenW
ExpandEnvironmentStringsW
GetDiskFreeSpaceW
SetFileAttributesW
SystemTimeToFileTime
GetCommProperties
CloseHandle
SetStdHandle
GetConsoleMode
GetConsoleCP
WaitForMultipleObjects
EnterCriticalSection
SetErrorMode
GetEnvironmentStringsW
GetCurrentProcess
HeapReAlloc
HeapDestroy
VirtualAlloc
LocalAlloc
LCMapStringW
SetFilePointerEx
WriteConsoleW
GetUserDefaultUILanguage
CreateFileW
HeapSize
HeapAlloc
GetStringTypeW
OutputDebugStringW
RtlUnwind
LoadLibraryExW
HeapFree
LeaveCriticalSection
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
IsDebuggerPresent
GetModuleHandleW
FlushFileBuffers
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
Sleep
InitializeCriticalSectionAndSpinCount
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter

advapi32

RegQueryValueExW

urlmon

CreateURLMoniker
CoInternetParseUrl

crypt32

CertGetNameStringW
CertNameToStrW
CryptHashPublicKeyInfo
CryptAcquireCertificatePrivateKey
CertControlStore
CertFreeCTLContext
CertAddEncodedCertificateToStore
CertFreeCRLContext
CryptQueryObject
CertFreeCertificateContext
CertCreateCertificateContext
CertEnumCertificatesInStore
CryptMsgGetParam
CryptMsgClose
CryptMsgOpenToDecode
CryptDecodeObject
CryptEncodeObjectEx
CertGetCertificateContextProperty
CertVerifyCertificateChainPolicy

user32

SetCursor
GetWindowTextLengthW
GetScrollRange
LockWindowUpdate
InvalidateRect
GetDC
WindowFromDC
EnableWindow
MsgWaitForMultipleObjects
GetInputState
GetCaretBlinkTime
GetActiveWindow
GetDialogBaseUnits
GetDlgItemTextW
IsIconic
GetClassInfoExW
CallWindowProcW
PostMessageW
SendMessageTimeoutW
PeekMessageW
DispatchMessageW
DrawFocusRect
SetRect
InflateRect
SetWindowLongW
ImpersonateDdeClientWindow
OemKeyScan
AdjustWindowRectEx

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 540KB - Virtual size: 7.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cdnr5a
Size: 391KB - Virtual size: 390KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.01r6
Size: 587KB - Virtual size: 586KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uaimo
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.3yfid
Size: 354KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 362KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc88553ea8288a833386b26fa36c30a5

Headers

File Characteristics

Imports

wsock32

shell32

kernel32

advapi32

urlmon

crypt32

user32

Sections

.text Size: 135KB - Virtual size: 135KB

.data Size: 540KB - Virtual size: 7.1MB

.idata Size: 4KB - Virtual size: 3KB

.xdata Size: 1024B - Virtual size: 724B

.cdnr5a Size: 391KB - Virtual size: 390KB

.01r6 Size: 587KB - Virtual size: 586KB

.uaimo Size: 356KB - Virtual size: 356KB

.3yfid Size: 354KB - Virtual size: 354KB

.rsrc Size: 362KB - Virtual size: 362KB

.text
Size: 135KB - Virtual size: 135KB

.data
Size: 540KB - Virtual size: 7.1MB

.idata
Size: 4KB - Virtual size: 3KB

.xdata
Size: 1024B - Virtual size: 724B

.cdnr5a
Size: 391KB - Virtual size: 390KB

.01r6
Size: 587KB - Virtual size: 586KB

.uaimo
Size: 356KB - Virtual size: 356KB

.3yfid
Size: 354KB - Virtual size: 354KB

.rsrc
Size: 362KB - Virtual size: 362KB