0ff9d07fa3e89e0981e6efc76c853af3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0ff9d07fa3e89e0981e6efc76c853af3_JaffaCakes118
Size

152KB
MD5

0ff9d07fa3e89e0981e6efc76c853af3
SHA1

0d4706d3459cf4792e944b42d0635ff15028d43d
SHA256

a1d5065d9786c56a59791ab081bf0a4b6555aa8e951d6d6b67ccd325ad503f65
SHA512

8a1aef603213d59f4a9c514fe987361f030f68c639ae2969d8a3caf5787352f70d4afdf68db3dcb305c2fce3aeb9ac148d7e9bf4312ece8e497426d70fbaba75
SSDEEP

3072:auz9BxgAspo6qvVju2PIPpW80Mej9JeVK:auJBxOpo6qtClPfZeJYK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ff9d07fa3e89e0981e6efc76c853af3_JaffaCakes118

Files

0ff9d07fa3e89e0981e6efc76c853af3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

560a0c217e61c592c96e90df4803d20e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

connect
WSAStartup
inet_addr
htons
WSACleanup
recv
socket
closesocket
gethostbyname
send

kernel32

MulDiv
GlobalUnlock
RtlMoveMemory
GetProcAddress
GlobalFree
LockResource
ExitProcess
GetCommandLineW
CreateMutexW
lstrcmpA
lstrlenA
lstrcpynA
HeapAlloc
HeapFree
GetModuleHandleW
VirtualFree
GetProcessHeap
SizeofResource
WideCharToMultiByte
TerminateThread
Sleep
GetVersionExW
lstrcpynW
TerminateProcess
lstrcatA
lstrcmpW
lstrlenW
GetStartupInfoW
GetLastError
VirtualAlloc
GetLocalTime
Process32FirstW
Process32NextW
lstrcatW
CreateToolhelp32Snapshot
GetCurrentThreadId
CloseHandle
GetCurrentProcessId
lstrcpyW
CreateThread
lstrcpyA
LoadLibraryW
GlobalAlloc
FreeResource
GlobalLock
LoadResource
FreeLibrary
FindResourceW
OpenProcess

user32

ReleaseCapture
MessageBoxW
SetWindowsHookExW
CreateWindowExW
FindWindowExW
CreateDialogParamW
SetMenu
ShowWindow
LoadStringW
GetCursorPos
SetWindowPos
GetSysColor
SendDlgItemMessageW
EndDialog
SetWindowLongW
GetDlgItem
EnableMenuItem
SetClassLongW
SystemParametersInfoW
GetWindowTextW
LoadMenuW
GetAsyncKeyState
GetWindowTextA
LoadIconW
RegisterClassExW
SetFocus
GetClientRect
FindWindowW
wsprintfA
IsWindowEnabled
LoadCursorW
AttachThreadInput
TrackMouseEvent
DialogBoxParamW
SetForegroundWindow
GetSubMenu
SetCapture
TrackPopupMenu
SendDlgItemMessageA
LockSetForegroundWindow
GetWindowRect
GetWindowTextLengthW
SetCursor
DestroyWindow
MapWindowPoints
UpdateWindow
EnableWindow
SetWindowTextW
DestroyIcon
CallWindowProcW
DefWindowProcW
GetDC
ReleaseDC
GetWindowThreadProcessId
SendMessageW

gdi32

CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
GetTextExtentPoint32W
SetTextColor
SelectObject
GetDeviceCaps
DeleteDC
GetStockObject
TextOutW
GetObjectW
CreateFontW
SetBkColor

advapi32

RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegQueryValueExW

shell32

ShellExecuteW
Shell_NotifyIconW

ole32

CoUninitialize
CoInitialize
CreateStreamOnHGlobal

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

560a0c217e61c592c96e90df4803d20e

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 11KB

.tls Size: 6KB - Virtual size: 5KB

.rsrc Size: 125KB - Virtual size: 124KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 11KB

.tls
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 125KB - Virtual size: 124KB