0f21ac0c5499e764eaa17df9d1fba8f4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0f21ac0c5499e764eaa17df9d1fba8f4_JaffaCakes118
Size

185KB
MD5

0f21ac0c5499e764eaa17df9d1fba8f4
SHA1

013dbe33ea7bd5e6c6353db5580aa2068e2303e1
SHA256

45f159b9b8dee88dca9227ed08a7c68c5ebbd367fed64980e0a93e3d9b36205b
SHA512

1040b5c4fd76db108a5fad47da7677190aab15474db597b3ed726fcec65c949144ae7e4b903134b63ca6fa4cda427c5c87aae29563a0521e9172721830a95211
SSDEEP

3072:YQVNNMXMKKpPiB+B1bpKRKYdwUh/lkKeFg2gaLNwd24ySKp5:YW7MX9KxiYbG/lhoKySe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f21ac0c5499e764eaa17df9d1fba8f4_JaffaCakes118

Files

0f21ac0c5499e764eaa17df9d1fba8f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a16418acb82806cba512ea2e9d191569

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoW
VerQueryValueA

shell32

SHGetSpecialFolderPathA
SHGetSpecialFolderPathW

advapi32

RegDeleteValueA
RegOpenKeyExA
CryptEncrypt
CryptReleaseContext
CryptCreateHash
CryptGetHashParam
CryptHashData
CryptAcquireContextA
RegEnumValueA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegCloseKey
CryptImportKey
RegSetValueExA
CryptDestroyKey
CryptDestroyHash
RegDeleteKeyA

kernel32

GetShortPathNameW
UnmapViewOfFile
LocalFree
GlobalSize
Sleep
CreateFileA
DisableThreadLibraryCalls
GetProcessAffinityMask
GlobalFree
LocalAlloc
EnumResourceTypesW
GetTickCount
CreateFileW
GlobalAlloc
WriteFile
GetFileSize
WideCharToMultiByte
GetFileAttributesA
MapViewOfFile
ReadFile
CreateFileMappingA
SetFilePointer
CloseHandle

gdiplus

GdipCreateBitmapFromFile
GdipFree
GdipAlloc
GdipCreateBitmapFromFileICM
GdipDisposeImage
GdipGetImagePixelFormat
GdipCloneImage

winmm

timeGetTime
timeSetEvent

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA

ole32

CoTaskMemAlloc
OleLockRunning
CoGetClassObject
CoInitializeSecurity
CreateStreamOnHGlobal
CoInitialize
StringFromGUID2
CoSetProxyBlanket
CreateItemMoniker
CoTaskMemRealloc
CreateBindCtx
StgCreateDocfile
CLSIDFromProgID
StgIsStorageFile
GetRunningObjectTable
OleUninitialize
CoCreateInstance
CoUninitialize
StgOpenStorage
CoTaskMemFree
BindMoniker
OleInitialize
CLSIDFromString

wininet

InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle

user32

GetWindowRect
KillTimer
CharNextA
ReleaseCapture
DrawTextA
LoadCursorA
SetRect
GetParent
PostThreadMessageA
GetWindowLongA
SetParent
SetCapture
SetFocus
ShowWindow
EnumDisplayDevicesA
RedrawWindow
RegisterClassExA
MsgWaitForMultipleObjects
SendNotifyMessageA
SendMessageTimeoutA
DestroyAcceleratorTable
CreateDialogParamA
EndPaint
GetDC
GetSysColor
GetFocus
UnregisterClassA
IsChild
DispatchMessageA
GetClassInfoExA
RegisterWindowMessageA
SetTimer
IsWindow
wsprintfA
GetWindowTextLengthA
GetClassNameA
PostMessageA
wvsprintfA
GetWindow
DefWindowProcA
FillRect
CallWindowProcA
MoveWindow
CreateWindowExA
ReleaseDC
GetClientRect
InvalidateRect
FindWindowA
GetDlgItem
GetDesktopWindow
BeginPaint
GetActiveWindow
InvalidateRgn
SendMessageA
SetWindowTextA
GetWindowTextA
SetWindowLongA
GetQueueStatus
CreateAcceleratorTableA
PeekMessageA
CopyRect
EqualRect
DestroyWindow
SetWindowPos

gdi32

CreateCompatibleDC
DeleteObject
CreateSolidBrush
RealizePalette
GetDIBits
CreateCompatibleBitmap
BitBlt
CreateFontA
SelectObject
CreateDIBSection
SelectPalette
ExtEscape
SetStretchBltMode
CreateDIBitmap
StretchDIBits
GetObjectA
DeleteDC
GetStockObject
GetDeviceCaps
SetBkMode

shlwapi

PathFileExistsW
PathCombineW

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a16418acb82806cba512ea2e9d191569

Headers

File Characteristics

Imports

version

shell32

advapi32

kernel32

gdiplus

winmm

setupapi

ole32

wininet

user32

gdi32

shlwapi

Sections

.text Size: 106KB - Virtual size: 106KB

.rdata Size: 5KB - Virtual size: 4KB

.bss Size: 71KB - Virtual size: 71KB

.tls Size: 1024B - Virtual size: 120KB

.text
Size: 106KB - Virtual size: 106KB

.rdata
Size: 5KB - Virtual size: 4KB

.bss
Size: 71KB - Virtual size: 71KB

.tls
Size: 1024B - Virtual size: 120KB