0c08b99ff67c18ce1af3679a5b8835e1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0c08b99ff67c18ce1af3679a5b8835e1_JaffaCakes118
Size

619KB
MD5

0c08b99ff67c18ce1af3679a5b8835e1
SHA1

5d20a7a528965410c850ad4ba0e6298e79bb219f
SHA256

8cc8ea18c7976ddf87f243710656566e005f8e48a0dd60ca690772d3dd043333
SHA512

a3ed5ef44ff5131e549df7987214c77655dc81e6c2df2e422064f0568ffe9bdd21820debe64f348fa53787b8bf39ab6fd469f0eda4393c2616bb8b1c4e9850a5
SSDEEP

12288:ld2ACYyLMspkT8WnY8ibuHIyeAcrc2XuR6A6N9XFh8LJ5rY:PmLMspiGiHIyehc7RkPVB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c08b99ff67c18ce1af3679a5b8835e1_JaffaCakes118

Files

0c08b99ff67c18ce1af3679a5b8835e1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

45d81535cc39ff452c124aa84f96ebae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
FreeSid
RegEnumValueA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclA
AllocateAndInitializeSid
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
AddAccessAllowedAce
RegSetKeySecurity
SetFileSecurityA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

comctl32

ImageList_LoadImageA

kernel32

LockResource
LoadResource
FindResourceA
DeleteFileA
GetTickCount
Sleep
GetLocaleInfoA
GetThreadLocale
GetCurrentProcess
GetProcAddress
LoadLibraryA
GetVersionExA
FlushInstructionCache
GetLocalTime
GetModuleHandleA
CloseHandle
SetFileTime
WriteFile
SetEndOfFile
SetFilePointer
GetFileAttributesA
GetTempFileNameA
CompareFileTime
GetFileInformationByHandle
CreateFileA
CopyFileA
MoveFileA
SetFileAttributesA
GetFullPathNameA
RemoveDirectoryA
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
GetShortPathNameA
WaitForSingleObject
lstrlenA
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentThreadId
CreateDirectoryA
GetUserDefaultLangID
OpenProcess
GetLocaleInfoW
WideCharToMultiByte
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
GlobalMemoryStatus
GetDiskFreeSpaceA
LoadLibraryExA
WriteConsoleA
SetStdHandle
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ReadFile
VirtualAlloc
VirtualFree
HeapCreate
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetFileType
GetStdHandle
SetHandleCount
HeapSize
IsValidCodePage
GetOEMCP
GetProcessHeap
GetACP
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
LCMapStringW
LCMapStringA
GetCPInfo
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleW
RaiseException
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FreeLibrary
GetLastError
LocalFree
FindNextFileA
FindFirstFileA
FindClose
GetCurrentDirectoryA
GetWindowsDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
MulDiv
SizeofResource
SetThreadLocale
FreeResource
WriteConsoleW
GetConsoleOutputCP
InitializeCriticalSection
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
FlushViewOfFile

user32

GetWindowDC
ReleaseDC
SetCapture
MessageBoxA
FindWindowA
GetWindowThreadProcessId
WaitForInputIdle
GetFocus
AdjustWindowRectEx
MoveWindow
GetWindowRect
MapWindowPoints
GetClassNameA
PostMessageA
PeekMessageA
IsDialogMessageA
GetMessageA
DispatchMessageA
GetWindow
CreateDialogParamA
LoadIconA
SetFocus
InvalidateRect
BeginPaint
ReleaseCapture
DrawFrameControl
GetWindowTextLengthA
GetWindowTextA
DrawTextA
DrawFocusRect
EndPaint
DefWindowProcA
GetParent
CreateWindowExA
SetWindowTextA
SetWindowPos
GetWindowLongA
SetWindowLongA
DestroyWindow
UnregisterClassA
LoadCursorA
RegisterClassExA
ExitWindowsEx
GetDlgItemTextA
SetDlgItemTextA
SendMessageA
GetClientRect
GetSystemMetrics
IsDlgButtonChecked
GetDlgItem
ShowWindow
CheckDlgButton
SendDlgItemMessageA
IsWindow
GetDC

gdi32

BitBlt
DeleteDC
SetTextAlign
TextOutA
SetTextColor
SetBkColor
SetBkMode
ExtTextOutA
SelectObject
GetStockObject
CreateCompatibleBitmap
SetDIBits
DeleteObject
GetDeviceCaps
CreateFontA
CreateCompatibleDC

shell32

SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
ShellExecuteExA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

VariantInit
VariantClear

Sections

.text
Size: 376KB - Virtual size: 375KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45d81535cc39ff452c124aa84f96ebae

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

version

comctl32

kernel32

user32

gdi32

shell32

ole32

oleaut32

Sections

.text Size: 376KB - Virtual size: 375KB

.rdata Size: 70KB - Virtual size: 69KB

.data Size: 13KB - Virtual size: 22KB

.rsrc Size: 294KB - Virtual size: 294KB

.text
Size: 376KB - Virtual size: 375KB

.rdata
Size: 70KB - Virtual size: 69KB

.data
Size: 13KB - Virtual size: 22KB

.rsrc
Size: 294KB - Virtual size: 294KB