955064e11d42d43c1ae165e66ffcd537_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

955064e11d42d43c1ae165e66ffcd537_JaffaCakes118
Size

280KB
MD5

955064e11d42d43c1ae165e66ffcd537
SHA1

656713a45b210661df6a647f2b6cf160e4a21400
SHA256

94d672a87298bed8553efb6af80940e56ec32c9f451dc1414b7212ef00ceadda
SHA512

02814c1882cc0fe3c71078d92e5f3e7989f09511e451f7c2e5d837ba75f22f190dd7a0e2e68110e03219f9c08a7edb029da9a3e7e359fa7cbedb6d6db410b1c1
SSDEEP

6144:2iSes1qfegOV5nM3eXdN4nvJtFD+Z53oxpmzmmtFX:2pq2gOV5n9XdN4vB+Zt3/X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
955064e11d42d43c1ae165e66ffcd537_JaffaCakes118

Files

955064e11d42d43c1ae165e66ffcd537_JaffaCakes118
.exe windows:5 windows x86 arch:x86

17a0ea50acaf331d7ce78c5bad52034a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFileEx
WriteFile
CreateFileA
WaitNamedPipeA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
FlushFileBuffers
GetLocaleInfoA
HeapSize
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
Sleep
FreeEnvironmentStringsA
DisconnectNamedPipe
SetHandleCount
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
HeapCreate
HeapReAlloc
VirtualAlloc
VirtualFree
DeleteCriticalSection
GetStartupInfoA
CloseHandle
GetStdHandle
GetConsoleScreenBufferInfo
FindResourceExA
FormatMessageA
LocalFree
GetProfileStringA
lstrcmpiA
CreateEventA
lstrlenA
OutputDebugStringA
WaitForSingleObject
LoadLibraryW
GetProcAddress
LoadLibraryA
GetTimeFormatA
EnumSystemLanguageGroupsA
GlobalAlloc
GlobalFree
GetConsoleTitleA
GetCurrentProcessId
GetCommandLineA
RtlUnwind
IsDebuggerPresent
GetProcessHeap
HeapAlloc
HeapFree
GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
LeaveCriticalSection
EnterCriticalSection
ExitProcess
GetModuleHandleW
GetTickCount
GetFileType
SetConsoleTitleA
GetEnvironmentStrings
GetModuleHandleA

user32

CreateWindowExA
GetDlgItem
MoveWindow
FindWindowExA
GetDesktopWindow
SetWindowPos
DestroyIcon
GetDC
SetWindowTextA
wsprintfA
UpdateWindow
GetClientRect
EndDialog
FillRect
NotifyWinEvent
GetSysColor
LoadImageA
GetKeyState
DefMDIChildProcA
keybd_event
ShowWindow
ReleaseDC
FindWindowW
SendMessageA
FindWindowA
DrawIconEx
AppendMenuA
SendDlgItemMessageA
BeginPaint
SetRect
DrawTextA
EndPaint
DefWindowProcA
DrawFrameControl
OemKeyScan
LoadBitmapA
SetMenuItemInfoA
GetMenuItemInfoA
InsertMenuItemA
KillTimer
DialogBoxIndirectParamA
SetCapture
GetWindow
GetClassNameA
GetMenu
DestroyMenu
SetMenu
IntersectRect
AttachThreadInput
GetCursorPos
BeginDeferWindowPos
DialogBoxParamA
EndDeferWindowPos
SetForegroundWindow
SetFocus
CreateMenu
LoadMenuA

gdi32

CreateMetaFileA
CreateCompatibleDC
GetRegionData
CreateFontA
SelectObject
SetTextColor
DeleteObject
GetObjectA
GetDIBits
DeleteDC
CreateBitmap
SetBkColor
GetTextExtentPoint32A
SetBkMode
GetTextCharsetInfo
CombineRgn
TextOutA
GetStockObject
MoveToEx
LineTo

winspool.drv

OpenPrinterA
EnumJobsA
ClosePrinter

advapi32

GetSidIdentifierAuthority
GetSidLengthRequired
GetSidSubAuthority

shell32

SHGetFileInfoA
SHGetFileInfoW

ole32

RegisterDragDrop
PropVariantCopy
PropVariantClear

wininet

FtpSetCurrentDirectoryA

ws2_32

WSAGetLastError

netapi32

NetShareGetInfo
NetAuditClear

avicap32

capGetDriverDescriptionA

winscard

SCardEstablishContext

iphlpapi

GetAdaptersInfo
GetNetworkParams

pdh

PdhCollectQueryData

wintrust

OpenPersonalTrustDBDialog

opengl32

wglMakeCurrent

winhttp

WinHttpReceiveResponse

setupapi

SetupDiGetClassDevsA

bcrypt

BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
BCryptHashData
BCryptCreateHash
BCryptGetProperty
BCryptFinishHash

Sections

.text
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17a0ea50acaf331d7ce78c5bad52034a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

wininet

ws2_32

netapi32

avicap32

winscard

iphlpapi

pdh

wintrust

opengl32

winhttp

setupapi

bcrypt

Sections

.text Size: 133KB - Virtual size: 133KB

.rdata Size: 39KB - Virtual size: 38KB

.data Size: 6KB - Virtual size: 12KB

.rsrc Size: 101KB - Virtual size: 100KB

.text
Size: 133KB - Virtual size: 133KB

.rdata
Size: 39KB - Virtual size: 38KB

.data
Size: 6KB - Virtual size: 12KB

.rsrc
Size: 101KB - Virtual size: 100KB