16c60d885c368431d964b02f002cf717_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

16c60d885c368431d964b02f002cf717_JaffaCakes118
Size

22KB
MD5

16c60d885c368431d964b02f002cf717
SHA1

d53a71131822edc7c274fa408f38277280c2d788
SHA256

2e1c0e8659ba78904e6f18d94ad409a78b26305c927bbf6e3f78a09b1098444c
SHA512

c580bd0f40858c725104d68aee00a6161d1735b846aeb9e76f1c5ab9e44fefd24e60e1f6c4a66b4f04dc0c481a237abefbb69edd0a36bb65e0aad1190ea0137a
SSDEEP

384:n0SjX3nujGgAS00IzLX3KJF0cO6b+HXSPSe2ZK9WZ25n7WslVIjnRv:0SjujdAS00InX55CSXSMN257bVIj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16c60d885c368431d964b02f002cf717_JaffaCakes118

Files

16c60d885c368431d964b02f002cf717_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3c7793686398282e6d9883da358cd5e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcslen
_adjust_fdiv
_initterm
__CxxFrameHandler
free
malloc

kernel32

TerminateProcess
GetCurrentProcessId
LeaveCriticalSection
LocalAlloc
lstrlenW
GetSystemTimeAsFileTime
AddAtomA
GetLastError
EnterCriticalSection
QueryPerformanceCounter
UnhandledExceptionFilter
DeleteCriticalSection
MulDiv
InterlockedDecrement
SetLastError
InterlockedIncrement
IsBadWritePtr
InitializeCriticalSection
GetCurrentThreadId
VirtualAlloc
GetTickCount
GetCurrentProcess
SetUnhandledExceptionFilter
LocalFree
Sleep

cmdial32

AutoDialFunc

crypt32

CryptLoadSip

user32

LoadStringW
ChildWindowFromPoint
GetWindowTextW
GetDlgCtrlID
SetRect
IsWindowVisible
GetDlgItem
RegisterClassExW
LoadImageW
KillTimer
WinHelpW
wsprintfW
SendMessageW
DrawIconEx
SendDlgItemMessageW
UnregisterClassW
GetSysColor
CreateWindowExW
GetSystemMetrics
MapWindowPoints
UnregisterDeviceNotification
GetCursorPos
InvalidateRect
BeginPaint
MessageBoxW
PostMessageW
ScreenToClient
DrawTextW
ReleaseDC
GetClientRect
SetTimer
GetWindowRect
GetWindowDC
IsWindow
EndPaint
GetMessageTime
SetWindowPos
RedrawWindow
DestroyIcon
GetDC
GetParent
SetWindowLongW
AppendMenuA
EnableWindow
DefWindowProcW
DestroyWindow
GetWindowLongW

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

shlwapi

StrCpyNW
StrNCatW
StrDupW

gdi32

SetViewportExtEx
PaintRgn
GetStockObject
LineTo
SetWindowExtEx
DPtoLP
BitBlt
GetRgnBox
SetBkMode
SetViewportOrgEx
Ellipse
SetDCPenColor
CreateCompatibleDC
CreatePolygonRgn
GetDeviceCaps
DeleteDC
SetMapMode
CreatePenIndirect
DeleteObject
SetBkColor
MoveToEx
GetMapMode
CreateSolidBrush
ExtTextOutW
CreateFontW
SetTextColor
SelectObject

comctl32

CreatePropertySheetPageW
PropertySheetW

Sections

.text
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c7793686398282e6d9883da358cd5e7

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

cmdial32

crypt32

user32

advapi32

shlwapi

gdi32

comctl32

Sections

.text Size: 512B - Virtual size: 436B

.rsrc Size: 12KB - Virtual size: 11KB

.idata Size: 3KB - Virtual size: 3KB

.data Size: - Virtual size: 80KB

.rdata Size: 5KB - Virtual size: 4KB

.text
Size: 512B - Virtual size: 436B

.rsrc
Size: 12KB - Virtual size: 11KB

.idata
Size: 3KB - Virtual size: 3KB

.data
Size: - Virtual size: 80KB

.rdata
Size: 5KB - Virtual size: 4KB