19032df4db9ad1659f1a994b4ed69d22_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

19032df4db9ad1659f1a994b4ed69d22_JaffaCakes118
Size

128KB
MD5

19032df4db9ad1659f1a994b4ed69d22
SHA1

3c04b9fcf1bc05b5f939d2c646d89aeee6b5e871
SHA256

28649c5bd2599a3a6efa891a7e4c7645c43bc8654fecfa4a8eec78abfe96efac
SHA512

9c598c5968772cf30dd46ba675cf6b8152a0fcbb90ff1e8eb0b030e82313b8d71b75e6a36920149f6920b8a23fb9cf94812b3fc46f8f9bb6bffbd40161c7d140
SSDEEP

3072:fhiSlYhwaUfdbyB2EyWn+tNqoKWy7XxgV2:pNYhPe9yB2P3SXx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19032df4db9ad1659f1a994b4ed69d22_JaffaCakes118

Files

19032df4db9ad1659f1a994b4ed69d22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7fda9ee2384ce635f9d875f03d62c075

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

wvsprintfA
wvsprintfA
RegisterClassW
GetSystemMetrics
LoadCursorW
MsgWaitForMultipleObjects
WaitMessage
GetDC
PeekMessageW
GetThreadDesktop
SetTimer
RegisterClipboardFormatA
CharUpperW
GetUserObjectInformationW
ReleaseDC
RegisterClipboardFormatA
SetScrollInfo
GetAppCompatFlags2
SystemParametersInfoW
DispatchMessageW
GetDCEx
DrawTextA
CharLowerBuffW
CharUpperBuffW
SetScrollInfo
GetDC
SetTimer
TranslateMessageEx
GetAppCompatFlags2
GetWindowLongW

kernel32

ReadFile
CreateProcessW
LoadLibraryExA
ReadFile
ReadFile
GetSystemTime
DeviceIoControl
Sleep
DeviceIoControl
GetSystemTimeAsFileTime
CreateFileA
GetSystemTime
LoadLibraryExA
GetStartupInfoW
GetSystemTime
WaitForSingleObject
CreateFileA
LoadLibraryA
ReleaseMutex
GetStartupInfoA
GetStartupInfoW
VirtualProtectEx
GetSystemTimeAsFileTime
Sleep
ReadFile
CreateProcessA
GetSystemTime
LoadLibraryExA
WaitForSingleObject
CreateProcessW
SleepEx
GetProcAddress
Sleep
GetLastError
LoadLibraryA
GetCommandLineA
SetHandleInformation
lstrcmpiA
SetSystemTime
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
GetSystemTime
GetStartupInfoW
CreateFileA
Sleep
SleepEx
WaitForSingleObjectEx
ReleaseMutex
LoadLibraryExA
DeviceIoControl
ReleaseMutex
CreateProcessA
CreateProcessA
ReadProcessMemory
WaitForSingleObject
GetSystemTime
Sleep
ReadProcessMemory
LoadLibraryA
TerminateProcess
WaitForSingleObjectEx
LoadLibraryA
ReadProcessMemory
ReadProcessMemory
LoadLibraryExW
CreateProcessW
SleepEx
CreateProcessA
VirtualProtect
VirtualProtect
LoadLibraryExW
WaitForSingleObjectEx
LoadLibraryExW
TerminateProcess
ReleaseMutex
TerminateProcess
LoadLibraryExA
CreateProcessW
GetStartupInfoA
VirtualProtectEx
ReadProcessMemory
LoadLibraryExA
WaitForSingleObjectEx
SleepEx
GetSystemTime
WriteProcessMemory
CreateFileA
WaitForSingleObject
GetSystemTime
GetSystemTime
VirtualProtectEx
WriteProcessMemory
GetStartupInfoW
LoadLibraryExA
VirtualProtect
Sleep
GetSystemTime
CreateFileA
LoadLibraryExA
ReadProcessMemory
CreateProcessA
ReadFile
LoadLibraryExA
CreateProcessW
LoadLibraryExA
Sleep
VirtualProtect
WriteProcessMemory
WaitForSingleObjectEx
LoadLibraryA
VirtualProtect
CreateProcessA
WriteProcessMemory
ReleaseMutex
TerminateProcess
CreateProcessW
CreateFileA
LoadLibraryExA
CreateProcessW
WriteProcessMemory
LoadLibraryExW
ReadFile
GetSystemTimeAsFileTime
LoadLibraryA
ReadProcessMemory
WriteProcessMemory
CreateFileA
DeviceIoControl
LoadLibraryExW
VirtualProtect
TerminateProcess
CreateProcessA
LoadLibraryA
GetStartupInfoA
WriteProcessMemory
Sleep
VirtualProtect
CreateProcessA
ReadFile
CreateProcessW
LoadLibraryExW
LoadLibraryA
GetStartupInfoA
GetStartupInfoW
GetSystemTime
GetSystemTimeAsFileTime
CreateProcessA
GetStartupInfoW
TerminateProcess
LoadLibraryExA
WriteProcessMemory
ReadFile
VirtualProtectEx
CreateProcessW
WaitForSingleObject
WaitForSingleObjectEx
GetSystemTimeAsFileTime
LoadLibraryExA
GetSystemTimeAsFileTime
GetSystemTime
CreateProcessW
ReadProcessMemory
LoadLibraryA
VirtualProtectEx
GetStartupInfoW
GetStartupInfoA
TerminateProcess
WriteProcessMemory
LoadLibraryExA
WaitForSingleObject
VirtualProtect
CreateProcessA

advapi32

MakeSelfRelativeSD
MakeSelfRelativeSD
RegOpenKeyExW
RevertToSelf
MakeSelfRelativeSD
RegQueryValueExW
ImpersonateNamedPipeClient
GetSecurityDescriptorDacl
RevertToSelf
RevertToSelf
ImpersonateNamedPipeClient
GetTokenInformation
GetTokenInformation
GetSecurityDescriptorDacl
MakeSelfRelativeSD
AccessCheck
AccessCheck
OpenThreadToken
MakeSelfRelativeSD
GetTokenInformation

gdi32

CreateBitmap
GetClipBox
OffsetWindowOrgEx
GdiDrawStream
CreateCompatibleBitmap
IntersectClipRect
GetViewportExtEx
GetLayout
SelectObject
SelectObject
SetDCBrushColor
GetObjectW
GetViewportOrgEx
GdiReleaseDC
SelectObject
CreateCompatibleBitmap
BitBlt
TextOutW
GetTextCharsetInfo
GetWindowExtEx

comdlg32

GetFileTitleW
GetFileTitleW
GetFileTitleW
GetFileTitleA
GetFileTitleA
GetFileTitleW
GetFileTitleW
GetFileTitleA
GetFileTitleA
GetFileTitleA
GetFileTitleW
GetFileTitleA
GetFileTitleW
GetFileTitleA
GetFileTitleW
GetFileTitleW
GetFileTitleW
GetFileTitleW
GetFileTitleA
GetFileTitleA

Sections

.text
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.line
Size: 75KB - Virtual size: 156KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_MEM_READ

111cnn
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ

qwerty
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7fda9ee2384ce635f9d875f03d62c075

Headers

File Characteristics

Imports

user32

kernel32

advapi32

gdi32

comdlg32

Sections

.text Size: 17KB - Virtual size: 20KB

.line Size: 75KB - Virtual size: 156KB

.data Size: 2KB - Virtual size: 4KB

.idata Size: 11KB - Virtual size: 12KB

111cnn Size: 4KB - Virtual size: 4KB

qwerty Size: 512B - Virtual size: 4KB

.rsrc Size: 17KB - Virtual size: 20KB

.text
Size: 17KB - Virtual size: 20KB

.line
Size: 75KB - Virtual size: 156KB

.data
Size: 2KB - Virtual size: 4KB

.idata
Size: 11KB - Virtual size: 12KB

111cnn
Size: 4KB - Virtual size: 4KB

qwerty
Size: 512B - Virtual size: 4KB

.rsrc
Size: 17KB - Virtual size: 20KB