84046e0e0bd0710336c998473e2b73cc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

84046e0e0bd0710336c998473e2b73cc_JaffaCakes118
Size

593KB
MD5

84046e0e0bd0710336c998473e2b73cc
SHA1

151ceb6d028188b3d545faaf9e69f5bb9b143448
SHA256

11ffe022806a29369cc73750fcd6b1c1257095e9ce9d8c109ab5a310c6af5ce2
SHA512

a51582b46d3eafb38e038eb5478a662caa6b9fbe9a0ab08ded59c33510a028be6c52838a34b94f391286f97f2d4ebbabba5e36a9d26f1093307c40a441d311e7
SSDEEP

12288:Bj8Rt2Fq7oIXn7aTIFYIBaqPtT8BDKHeV/Wb7JQvqUqQ2rZWGiHY:BoRt2GasNaqPCxE0WbgyMBHY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84046e0e0bd0710336c998473e2b73cc_JaffaCakes118

Files

84046e0e0bd0710336c998473e2b73cc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f40f3ae5b365b0b54e9d2676cff863bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetCommandLineW
GetStringTypeW
LCMapStringW
GetConsoleMode
GetConsoleCP
SetFilePointer
WideCharToMultiByte
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ExitProcess
HeapCreate
HeapAlloc
GetStdHandle
WriteFile
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetStartupInfoW
HeapSetInformation
EncodePointer
DecodePointer
RtlUnwind
HeapSize
HeapReAlloc
HeapDestroy
InterlockedPopEntrySList
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedCompareExchange
VirtualProtect
IsBadReadPtr
LoadLibraryA
VirtualFree
GetProcessHeap
HeapFree
VirtualAlloc
Sleep
SetLastError
lstrcpynW
lstrlenA
lstrcpynA
GetCurrentThreadId
lstrcmpW
GetCurrentProcessId
GetCurrentProcess
FlushInstructionCache
lstrcpyW
LoadLibraryW
GetModuleFileNameW
SetStdHandle
WriteConsoleW
CreateFileW
CloseHandle
FlushFileBuffers
LoadLibraryExW
MultiByteToWideChar
FreeLibrary
MulDiv
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
GetModuleHandleW
GetProcAddress
lstrlenW
GetVersionExW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
LeaveCriticalSection
EnterCriticalSection
RaiseException
FindResourceW
SizeofResource
LoadResource
LockResource

user32

EndDialog
GetWindow
MonitorFromWindow
GetDC
RegisterClassExW
ShowWindow
RemoveMenu
AppendMenuW
DialogBoxParamW
LoadBitmapW
LoadStringA
PostQuitMessage
LoadStringW
GetWindowRect
SetMenuDefaultItem
GetClassInfoExW
SetMenu
LoadImageW
CreatePopupMenu
GetMenu
DestroyWindow
GetSubMenu
PeekMessageW
IsMenu
SetWindowsHookExW
GetClassNameW
CallNextHookEx
GetKeyState
CharLowerW
UnhookWindowsHookEx
InflateRect
RegisterWindowMessageW
GetSysColorBrush
TrackPopupMenuEx
WindowFromPoint
MessageBeep
FrameRect
ModifyMenuW
MonitorFromPoint
GetMonitorInfoW
DrawFrameControl
GetFocus
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetActiveWindow
GetWindowThreadProcessId
IsWindowEnabled
IsWindowVisible
MapWindowPoints
PostMessageW
DestroyMenu
GetCapture
SetCursor
ReleaseDC
GetWindowDC
GetSystemMetrics
SystemParametersInfoW
GetMessagePos
PtInRect
ReleaseCapture
SetCapture
UpdateWindow
ScreenToClient
OffsetRect
GetSysColor
EndPaint
BeginPaint
SetRect
DrawEdge
DrawTextW
FillRect
CallWindowProcW
GetParent
SetFocus
InvalidateRect
GetClientRect
SetWindowPos
SendMessageW
CreateWindowExW
SetRectEmpty
LoadCursorW
CharNextW
DefWindowProcW
IsWindow
GetWindowLongW
SetWindowLongW
TranslateAcceleratorW
UnregisterClassA

gdi32

GetCurrentObject
CreateDIBSection
SetBkColor
SetBrushOrgEx
CreateFontIndirectW
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
CreateBitmap
CreatePatternBrush
PatBlt
DeleteDC
LineTo
MoveToEx
DeleteObject
GetStockObject
GetObjectW
SelectObject
SetBkMode
CreatePen
SetTextColor

ole32

CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree

oleaut32

VarUI4FromStr

advapi32

RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegCreateKeyExW

comctl32

ImageList_Destroy
ImageList_GetImageCount
ImageList_Draw
ImageList_DrawIndirect
CreateStatusWindowW
ord8
ImageList_Create
ImageList_LoadImageW
InitCommonControlsEx
ImageList_AddMasked

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 418KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f40f3ae5b365b0b54e9d2676cff863bb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

advapi32

comctl32

Sections

.text Size: 118KB - Virtual size: 118KB

.rdata Size: 29KB - Virtual size: 29KB

.data Size: 7KB - Virtual size: 16KB

.rsrc Size: 418KB - Virtual size: 418KB

.reloc Size: 11KB - Virtual size: 11KB

.text
Size: 118KB - Virtual size: 118KB

.rdata
Size: 29KB - Virtual size: 29KB

.data
Size: 7KB - Virtual size: 16KB

.rsrc
Size: 418KB - Virtual size: 418KB

.reloc
Size: 11KB - Virtual size: 11KB