9152ce65e39b77d8cf7d2a77d21cbdde_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

9152ce65e39b77d8cf7d2a77d21cbdde_JaffaCakes118
Size

741KB
MD5

9152ce65e39b77d8cf7d2a77d21cbdde
SHA1

7cb1b2ae742bc314d1152ae7262d34535a0ea3c9
SHA256

484ef58a71aeecff9c4f574e2d52de2f2e8ec5c84cd823125c965d6ce7b56432
SHA512

fecc781d1b683aa303b51293b91402886e35e6211995b6a7834f3d483c86c6f53024536cdfad62b48c04cb690c9253b002741ad044b3d5ccb40a089165d9317e
SSDEEP

12288:Iw6pZaAwgsqlXAiKPDFlzEK/segl1Jn6rjN6LSs1EAoyNTqnWlKjBMgKIXr8A3:Iw6KgsqKtPwUsl1krhVs1lXlKjSWn3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9152ce65e39b77d8cf7d2a77d21cbdde_JaffaCakes118

Files

9152ce65e39b77d8cf7d2a77d21cbdde_JaffaCakes118
.exe windows:6 windows x86 arch:x86

71c2f50028ee8aeb695ee29f6e47d85b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
RtlUnwind
GetPrivateProfileSectionNamesA
GetVersion
GetOEMCP
WaitForMultipleObjectsEx
SetVolumeMountPointA
LocalHandle
GetNumberFormatA
GlobalGetAtomNameA
GetACP
GlobalUnWire
WriteProfileSectionW
GetNumberFormatW
BackupRead
GetCurrencyFormatA
FindAtomA
GetOverlappedResult
LocalAlloc
FindFirstVolumeMountPointW
OpenProcess
ReadFileScatter
GetComputerNameA
FoldStringW
WaitForSingleObjectEx
PostQueuedCompletionStatus
QueryInformationJobObject
EnumResourceLanguagesA
SetVolumeLabelA
EnumTimeFormatsA
DisconnectNamedPipe
IsDebuggerPresent
DeleteFileA
OutputDebugStringA
GetAtomNameW
UnmapViewOfFile
GetSystemDefaultLCID
VerifyVersionInfoA
GetCommandLineW
GetFileAttributesExA
DnsHostnameToComputerNameA
EnumDateFormatsExW
IsSystemResumeAutomatic
SetEndOfFile
RequestWakeupLatency
GlobalHandle
GetMailslotInfo
EnumResourceNamesW
_hwrite
QueryPerformanceCounter
SetSystemTimeAdjustment
FindNextChangeNotification
OpenFileMappingA
GetShortPathNameA
IsBadWritePtr
SetFileAttributesA
GetStdHandle
GlobalWire
lstrcpyA
SetSystemPowerState
SetNamedPipeHandleState
IsValidCodePage
GetModuleHandleA
IsBadCodePtr
GlobalUnlock
FoldStringA
GetComputerNameExA
GlobalSize
FindFirstVolumeW
CreatePipe
IsBadReadPtr
GetNamedPipeHandleStateA
InterlockedExchangeAdd
GetCommState
FreeResource
ConvertDefaultLocale
DefineDosDeviceA
FileTimeToSystemTime
GetLastError
DeleteTimerQueue
OpenEventW
GetSystemTimeAsFileTime
HeapAlloc
OpenWaitableTimerA
_lcreat
IsValidLanguageGroup
CancelDeviceWakeupRequest
ReleaseSemaphore
DnsHostnameToComputerNameW
EnumLanguageGroupLocalesW
GetFullPathNameA
InterlockedCompareExchange
FreeUserPhysicalPages
GetSystemDefaultLangID
GetVersionExW

shlwapi

PathCombineA
PathAppendA

advapi32

RegOpenKeyExA
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
RegQueryValueExA
RegCloseKey
RegSetValueExW

user32

LoadIconW
EnableMenuItem
LoadCursorW
DrawMenuBar
GetClientRect
TranslateAcceleratorW
InvalidateRect
IsZoomed
ShowWindow
GetDlgItemTextW
OffsetRect
SetCapture
DialogBoxParamW
LoadStringA
DestroyWindow
MoveWindow
InvertRect
GetSubMenu
WaitMessage
LoadBitmapW
CheckDlgButton
GetDlgItem
GetForegroundWindow
UpdateWindow
RegisterClassW
LoadAcceleratorsW
FillRect
EndDialog
FrameRect
EndPaint
CreateWindowExW
MessageBoxA
GetSystemMetrics
DispatchMessageW
GetWindowPlacement
WinHelpW
wsprintfW
DrawTextW
ReleaseCapture
BeginPaint
PeekMessageW
GetDesktopWindow
IsIconic
GetMenu
SetRect
MessageBoxW
DefMDIChildProcA
GetMessageW
GetWindowRect
ReleaseDC
SendMessageW
SetDlgItemTextW
IsDlgButtonChecked
GetDC
IntersectRect
CheckRadioButton
PtInRect
DefWindowProcW
PostMessageW
UnionRect

comctl32

InitCommonControlsEx

Sections

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 262KB - Virtual size: 261KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 268KB - Virtual size: 623KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71c2f50028ee8aeb695ee29f6e47d85b

Headers

File Characteristics

Imports

kernel32

shlwapi

advapi32

user32

comctl32

Sections

.rdata Size: 4KB - Virtual size: 4KB

.text Size: 262KB - Virtual size: 261KB

.data Size: 268KB - Virtual size: 623KB

.rdata Size: 8KB - Virtual size: 8KB

.rsrc Size: 189KB - Virtual size: 189KB

.reloc Size: 7KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 4KB

.text
Size: 262KB - Virtual size: 261KB

.data
Size: 268KB - Virtual size: 623KB

.rdata
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 189KB - Virtual size: 189KB

.reloc
Size: 7KB - Virtual size: 8KB