8c61a50dc938e4fd60d5cd460053c034_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8c61a50dc938e4fd60d5cd460053c034_JaffaCakes118
Size

559KB
MD5

8c61a50dc938e4fd60d5cd460053c034
SHA1

0de1a13cf035a3bdbce39d0884e6b537de9555c1
SHA256

c0e8bb2f56c9b0d427b6eacaef625ded97433921d80f57a23a1e418a769e9eca
SHA512

47984a1b8a4b34a8bbfc274c42add388d37ded27392f95bc519a07d67d715bbcebabe9d39c7369c79ce488efb20a1d56efce83b29750a6e482b6c6c1eb844542
SSDEEP

12288:LR8aE61zfmjriXaHE7jGr7SCsYwop8Hp+REjCZwKMK:ia7zfmjriXaHE70OuqERFOB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c61a50dc938e4fd60d5cd460053c034_JaffaCakes118

Files

8c61a50dc938e4fd60d5cd460053c034_JaffaCakes118
.exe windows:4 windows x86 arch:x86

323996b2c79430adb2e1fa42e276ef40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glVertex4iv
glTexCoord4sv
glPushName

user32

GetDlgCtrlID
EnumChildWindows
GetWindowTextLengthA
GetWindow
EndDialog
DialogBoxIndirectParamA
SetDlgItemInt
SetForegroundWindow
GetSysColor
CreateWindowExA
SendDlgItemMessageA
SetWindowPlacement
ArrangeIconicWindows
GetDlgItemInt
GetDialogBaseUnits

ole32

CreateBindCtx
CoGetCurrentProcess
BindMoniker
RevokeDragDrop
OleRegEnumFormatEtc
OleDuplicateData
OleIsCurrentClipboard
OleDraw
StringFromGUID2
OleCreateDefaultHandler
ReadFmtUserTypeStg
CLSIDFromProgID
CreateDataCache
IsAccelerator

gdi32

EqualRgn
CreateDCA
DeleteObject
ChoosePixelFormat
AngleArc
AddFontResourceA
CloseMetaFile
ExcludeClipRect
CreateDiscardableBitmap
CloseEnhMetaFile
Arc
CancelDC
GetBkMode
CopyMetaFileW

comctl32

InitializeFlatSB
UninitializeFlatSB
CreatePropertySheetPageA
DestroyPropertySheetPage
CreateToolbarEx
ord8
CreateStatusWindowW
ord17

shlwapi

StrCSpnA
StrCmpNA
StrCSpnW
StrToIntA
StrStrA

kernel32

GetModuleHandleA
GetProcAddress
VirtualAllocEx
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

uxtheme

HitTestThemeBackground
CloseThemeData
SetWindowTheme
GetThemeFont
DrawThemeEdge
GetThemePosition

usp10

ScriptString_pcOutChars
ScriptShape
ScriptGetGlyphABCWidth
ScriptString_pSize
ScriptStringFree
ScriptStringOut
ScriptXtoCP

cryptui

CryptUIWizExport
CryptUIDlgViewContext
CryptUIWizDigitalSign
CryptUIWizImport

ntdsapi

DsGetDomainControllerInfoA

Sections

.text
Size: 510KB - Virtual size: 509KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

323996b2c79430adb2e1fa42e276ef40

Headers

File Characteristics

Imports

opengl32

user32

ole32

gdi32

comctl32

shlwapi

kernel32

uxtheme

usp10

cryptui

ntdsapi

Sections

.text Size: 510KB - Virtual size: 509KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 306KB

.rsrc Size: 41KB - Virtual size: 41KB

.text
Size: 510KB - Virtual size: 509KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 306KB

.rsrc
Size: 41KB - Virtual size: 41KB