9353fc884263a518e0cf9d081d74ad16_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

9353fc884263a518e0cf9d081d74ad16_JaffaCakes118
Size

678KB
MD5

9353fc884263a518e0cf9d081d74ad16
SHA1

0a455439ea499ab7885d5882ae9c966dbb7fd389
SHA256

4c6b583d199e8459dfcf57eeb6a2044c06c71b195a9fbd81e002610f13e5a660
SHA512

a47decf3c59d963aed3b66d1012a9e348a8404f2bd25d72400530c676484550f89a6cf0696584b18164e4bab3f6c2472570d5a190a571afff58296c43a21796a
SSDEEP

12288:QSVOqyYsnTd7hZrnl6EgXDHNLaY1tjTsK3vIg5HxkOmmoqSO/WI0lPnKxBeyY75o:wLdNZrnl6EgXDHVaY1tjTzQX2o9tABLF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9353fc884263a518e0cf9d081d74ad16_JaffaCakes118

Files

9353fc884263a518e0cf9d081d74ad16_JaffaCakes118
.exe windows:5 windows x86 arch:x86

418581eb73659af2887e66f42c03b2f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoA
HeapSize
ReadFile
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetDateFormatA
GetTimeFormatA
MultiByteToWideChar
SetFilePointer
UnmapViewOfFile
GetACP
GetCPInfo
GetTimeZoneInformation
WideCharToMultiByte
SetEndOfFile
OpenFileMappingA
VirtualAlloc
GetModuleHandleA
GetFileAttributesA
ExitProcess
GetSystemTime
lstrcpynA
GetStdHandle
SetConsoleWindowInfo
SetConsoleScreenBufferSize
GetConsoleWindow
GetModuleFileNameA
CreateFileA
GetFileSize
CreateFileMappingA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
WriteFile
HeapReAlloc
DeleteCriticalSection
VirtualFree
GetProcessHeap
HeapCreate
LeaveCriticalSection
EnterCriticalSection
DeleteFileA
GetStartupInfoA
GetCommandLineA
GetLastError
WaitForSingleObject
MapViewOfFile
CreateEventA
IsValidCodePage
CloseHandle
RtlUnwind
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
GetOEMCP
GetOverlappedResult
HeapFree
HeapAlloc
GetModuleHandleW
Sleep
GetProcAddress
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter

user32

EnumWindowStationsW
LoadIconA
SetScrollPos
SendMessageA
GetWindow
GetWindowThreadProcessId
BeginPaint
SetRect
DrawTextExA
EndPaint
DefWindowProcA
LoadCursorA
SetScrollInfo
LoadImageA
GetDC
ReleaseDC
PostQuitMessage
SetWindowPos
RedrawWindow
GetWindowRect
MapWindowPoints
OffsetRect
DefMDIChildProcA
GetSystemMetrics
GetScrollInfo
ScrollWindow
UpdateWindow
SetActiveWindow
SendDlgItemMessageA
DialogBoxParamA
GetCursorPos
PtInRect
GetClientRect
MoveWindow
ShowWindow
SetWindowTextA
wsprintfA
GetDialogBaseUnits
SetWindowRgn
GetTopWindow

gdi32

SaveDC
GetObjectA
DeleteObject
CreateCompatibleDC
CreateDIBSection
GetCurrentObject
SelectObject
GetTextMetricsA
CreateRectRgnIndirect
SetTextColor
SetMapMode
RestoreDC
TextOutA
SetWindowExtEx
CreateRectRgn
CreateRoundRectRgn

shell32

ExtractIconExA
SHGetDesktopFolder
Shell_NotifyIconA
SHGetFolderPathA
SHBrowseForFolderA

ole32

RevokeDragDrop

oleaut32

VarBstrFromI2
VarBstrFromI4
VarBstrFromR4
OleCreateFontIndirect

ws2_32

WSAGetLastError
WSAInstallServiceClassW

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
CM_Free_Range_List
CM_Free_Res_Des
SetupDiGetClassDevsA

msi

ord17
ord8
ord64

cryptui

CryptUIWizFreeDigitalSignContext

iphlpapi

IcmpCloseHandle
CreateIpNetEntry
IcmpCreateFile

wtsapi32

WTSQuerySessionInformationA

uxtheme

IsAppThemed

esent

JetTruncateLogInstance

Sections

.text
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 330KB - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

418581eb73659af2887e66f42c03b2f6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

ws2_32

setupapi

msi

cryptui

iphlpapi

wtsapi32

uxtheme

esent

Sections

.text Size: 269KB - Virtual size: 268KB

.rdata Size: 66KB - Virtual size: 65KB

.data Size: 12KB - Virtual size: 21KB

.rsrc Size: 330KB - Virtual size: 329KB

.text
Size: 269KB - Virtual size: 268KB

.rdata
Size: 66KB - Virtual size: 65KB

.data
Size: 12KB - Virtual size: 21KB

.rsrc
Size: 330KB - Virtual size: 329KB