9e9b17ab9b1fec080ea3e9571ea8a226_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

9e9b17ab9b1fec080ea3e9571ea8a226_JaffaCakes118
Size

260KB
MD5

9e9b17ab9b1fec080ea3e9571ea8a226
SHA1

d3bd6921aef95925b9566dcb0192e428218c941d
SHA256

9f2fc39542f8e995ce8bb63c20f861ff24a8f5dfe87681f940464e5df6213b76
SHA512

c867a51d986811d41b9fff00b4152c1ac215a2efebe83c7d49ad94d073fc054353ec260a4962f88e2759ce8ca3d092df7b510bcfcc57c824e9c22eba86c8d6ba
SSDEEP

6144:QXPiJYDJmAqz3Q86H1T303540+/wsphmeqLM:QfiqDdqz3Q5324DwsDkM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9e9b17ab9b1fec080ea3e9571ea8a226_JaffaCakes118

Files

9e9b17ab9b1fec080ea3e9571ea8a226_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9ec1252ae6d995f4de655468ec233448

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapSize
Sleep
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetLastError
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
WriteFile
ExitProcess
TerminateProcess
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
SetStdHandle
WriteConsoleW
CreateFileW
CloseHandle
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
lstrcatA
lstrcpyA
GetModuleHandleW
GetProcAddress
EnumDateFormatsA
GetCurrentProcess
HeapCreate
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DecodePointer
IsProcessorFeaturePresent
HeapFree
HeapAlloc
RaiseException
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
FlushFileBuffers

user32

BeginPaint
GetDlgCtrlID
CallWindowProcA
SetScrollPos
SetScrollRange
GetDlgItem
SetWindowPos
EndPaint
GetDesktopWindow
LoadImageA
DrawFrameControl
SendMessageA
TrackMouseEvent
BeginDeferWindowPos
DestroyWindow
SetWindowTextA
DefWindowProcA
SetMessageQueue
SetLayeredWindowAttributes
MessageBoxA
FindWindowA
GetDC
EndDialog
SetCapture
DlgDirListComboBoxA
GetClientRect
InvalidateRect
IsIconic
GetWindow
DeferWindowPos
SetActiveWindow
EndDeferWindowPos
MonitorFromPoint
GetMonitorInfoA
CreatePopupMenu
AppendMenuA
DestroyMenu
LoadIconA
GetCursorPos
SetForegroundWindow
TrackPopupMenu
GetCursorInfo
ScreenToClient
GetIconInfo
DrawIcon
CreateDialogParamW
GetDlgItemTextA

gdi32

SetTextColor
CreateCompatibleDC
GetTextMetricsA
DeleteDC
CreatePen
SetWindowExtEx
CreateSolidBrush
SelectObject
Rectangle
DeleteObject
SetBkMode
CreateMetaFileA

shell32

Shell_NotifyIconA

ole32

CoInitializeEx
CoGetInterfaceAndReleaseStream
CoUninitialize
CoTaskMemFree
StgCreateDocfile

avifil32

AVIStreamStart
AVIStreamInfoA
AVIStreamLength
AVIFileOpenA
AVIFileCreateStreamA
AVIFileRelease

dbghelp

SymInitialize
EnumerateLoadedModules
SymGetTypeInfo

setupapi

CM_Get_Child
SetupDiGetClassDevsA
CM_Get_Class_Key_NameA

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ec1252ae6d995f4de655468ec233448

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

avifil32

dbghelp

setupapi

Sections

.text Size: 75KB - Virtual size: 75KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 154KB - Virtual size: 153KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 75KB - Virtual size: 75KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 154KB - Virtual size: 153KB

.reloc
Size: 10KB - Virtual size: 9KB