92810d10e1fffc3ddf8ba756a52d0169_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

92810d10e1fffc3ddf8ba756a52d0169_JaffaCakes118
Size

2.2MB
MD5

92810d10e1fffc3ddf8ba756a52d0169
SHA1

4452a08f17d91a3d5d0ebae9024ce88d6d975815
SHA256

bbaaf1ed6368956b495943773fe56d7296220d8664eb9537975400c9b8afccb8
SHA512

20e0ce08e44368ab63b4af38dd14c850ed24bb42930af92aaa93604271cdf5d211e5899945d16fb0aab229b52fb436f9f33566045a4bd5fc106214b1a913b7c5
SSDEEP

24576:SR/yiP2qVBSPON2pFefNHN2TvdA5WwpEOdxYwSDSoMRLp6f7J/:CjKPa2pU3ZphRSDWLIfN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92810d10e1fffc3ddf8ba756a52d0169_JaffaCakes118

Files

92810d10e1fffc3ddf8ba756a52d0169_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1b2ca96aef79da7f37f007743a7dc5b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateIcon
DestroyCursor
LoadCursorW
IsRectEmpty
GetClassInfoExW
CreateWindowExW
SubtractRect
FillRect
GetCursorPos
IsWindow
CharPrevW
IsCharUpperW
ReleaseCapture
GetClientRect
GetScrollRange
GetWindowDC
UpdateWindow
AppendMenuW
GetMenuItemID
CreateMenu
GetSystemMetrics
IsWindowEnabled
MsgWaitForMultipleObjectsEx
PostMessageW

crypt32

CryptProtectData
CertGetNameStringW
CryptHashPublicKeyInfo
CryptExportPKCS8
CryptExportPublicKeyInfo
CertFindExtension
CertGetCertificateChain
CryptHashCertificate
CertGetEnhancedKeyUsage
CertControlStore
CertAddCertificateContextToStore
CertAddEncodedCertificateToStore
CertSetCertificateContextProperty
CertEnumCertificatesInStore
CertVerifyCertificateChainPolicy
CertVerifyTimeValidity
CryptFindOIDInfo
CertCloseStore
CertOpenStore
CryptMsgGetParam
CryptMsgUpdate
CryptMsgClose
CryptEnumOIDInfo
CryptMsgOpenToDecode

kernel32

SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
HeapFree
RtlUnwind
OutputDebugStringW
GetStringTypeW
HeapReAlloc
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetProcAddress
LocalFree
VirtualAlloc
HeapAlloc
HeapSize
GetEnvironmentStringsW
InitAtomTable
ReadFile
GetSystemTime
OpenWaitableTimerW
LoadLibraryExW
GetCommandLineW
FindResourceW
FindResourceExW
CreateFileW
AreFileApisANSI
OpenJobObjectW
GetACP
GetOEMCP
GetCPInfo
GetThreadLocale
GetUserDefaultLCID
GetConsoleWindow
RaiseException
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
IsProcessorFeaturePresent
IsDebuggerPresent
IsValidCodePage
EnterCriticalSection
LeaveCriticalSection
GetConsoleMode

wtsapi32

WTSEnumerateSessionsW

advapi32

RegCreateKeyExW
RegEnumValueW

ole32

CoGetMalloc
CLSIDFromString
CLSIDFromProgID

opengl32

glClear
glClearColor
glCopyTexImage2D
glDeleteTextures
glDepthMask
glDisable
glDrawArrays
glEnable
glFlush
glGenTextures
glGetError
glGetIntegerv
glIsEnabled
glStencilMask
glStencilOp
glTexSubImage2D

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 385KB - Virtual size: 7.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tany5u
Size: 698KB - Virtual size: 698KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.atkn
Size: 369KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.o44a6
Size: 290KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b2ca96aef79da7f37f007743a7dc5b2

Headers

File Characteristics

Imports

user32

crypt32

kernel32

wtsapi32

advapi32

ole32

opengl32

Sections

.text Size: 115KB - Virtual size: 115KB

.data Size: 385KB - Virtual size: 7.5MB

.idata Size: 4KB - Virtual size: 4KB

.xdata Size: 1024B - Virtual size: 724B

.tany5u Size: 698KB - Virtual size: 698KB

.atkn Size: 369KB - Virtual size: 368KB

.o44a6 Size: 290KB - Virtual size: 290KB

.rsrc Size: 363KB - Virtual size: 362KB

.text
Size: 115KB - Virtual size: 115KB

.data
Size: 385KB - Virtual size: 7.5MB

.idata
Size: 4KB - Virtual size: 4KB

.xdata
Size: 1024B - Virtual size: 724B

.tany5u
Size: 698KB - Virtual size: 698KB

.atkn
Size: 369KB - Virtual size: 368KB

.o44a6
Size: 290KB - Virtual size: 290KB

.rsrc
Size: 363KB - Virtual size: 362KB