09498c694f5689b67c696a66374137b2_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

09498c694f5689b67c696a66374137b2_JaffaCakes118
Size

249KB
MD5

09498c694f5689b67c696a66374137b2
SHA1

fa4a7a19a9e1cca05c7c4754fc4e0bd34a7e6aaf
SHA256

ab53e37da45862123f2a2e97e628eb5c8883ffabdab5f12de69d4460c9d0111b
SHA512

78f5612c412090d497d2db8ff6356cdf506db489f2eaa31152e7d711e23078fc5053628d69ee255a98ddaf0aec3ae727178f130abdd283425692825cb6bfbbd9
SSDEEP

6144:KyCc8n0RiuHWtq8zRH50yWjrxpKoWWIXRNjq1LHf2p:fvBWtq8zjanwPC7fg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09498c694f5689b67c696a66374137b2_JaffaCakes118

Files

09498c694f5689b67c696a66374137b2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5b5f88b09dea3464958f2b95f112bb90

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

HeapFree
VirtualAlloc
VirtualFree
lstrcpyW
GetLastError
HeapAlloc
GlobalDeleteAtom
LeaveCriticalSection
CreateEventW
CancelWaitableTimer
QueryPerformanceFrequency
LoadLibraryW
lstrlenW
ReleaseMutex
WaitForMultipleObjectsEx
GetModuleHandleA
GetStartupInfoW
ResetEvent
GetTickCount
SetWaitableTimer
OpenEventW
WaitForMultipleObjects
VerifyVersionInfoW
MulDiv
OpenProcess
GlobalAddAtomW
CloseHandle
MapViewOfFile
SetThreadExecutionState
GetProcessShutdownParameters
CreateMutexW
CreateWaitableTimerW
GetCurrentThread
FlushInstructionCache
WaitForSingleObject
SetStdHandle
GetCurrentProcess

atl

ord32
ord44
ord45
ord30
ord17
ord58
ord23
ord57

msvcrt

__CxxFrameHandler
_onexit
?terminate@@YAXXZ
__set_app_type
_purecall
_exit
fputws
_wcmdln
wcstol
_wfopen
_controlfp
__wgetmainargs
free
??1type_info@@UAE@XZ
wcsstr
_ftol
_adjust_fdiv
exit
??2@YAPAXI@Z
_CxxThrowException
_XcptFilter
_cexit
_initterm
__p__commode

user32

GetWindowLongW
SetWindowsHookExW
IntersectRect
PostMessageW
GetClientRect
GetAncestor
DrawIconEx
MonitorFromWindow
UnhookWindowsHookEx
CreateWindowExW
CloseDesktop
EqualRect
GetDesktopWindow
EnumDisplaySettingsW
UnregisterDeviceNotification
LoadStringW
GetUserObjectInformationW
CharNextW
PtInRect
InflateRect
MoveWindow
DestroyIcon
SendInput
EnumDisplayMonitors
FillRect
SystemParametersInfoW
GetPropW
MonitorFromPoint
SetWindowLongW

advapi32

GetLengthSid
RegQueryValueExA
RegCloseKey
OpenThreadToken
RegOpenKeyExA
SetSecurityDescriptorDacl
RegCreateKeyW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW

ole32

CoCreateInstance
CoUninitialize

gdi32

DeleteObject
CreateSolidBrush

hid

HidD_GetProductString
HidD_FreePreparsedData
HidP_GetSpecificButtonCaps
HidP_GetUsageValue

setupapi

SetupDiGetClassDevsExW
SetupDiEnumDeviceInfo
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList

Sections

.text
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b5f88b09dea3464958f2b95f112bb90

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

atl

msvcrt

user32

advapi32

ole32

gdi32

hid

setupapi

Sections

.text Size: 172KB - Virtual size: 172KB

.data Size: 68KB - Virtual size: 67KB

.rsrc Size: 7KB - Virtual size: 572KB

.text
Size: 172KB - Virtual size: 172KB

.data
Size: 68KB - Virtual size: 67KB

.rsrc
Size: 7KB - Virtual size: 572KB