1953e4217d79be8902227edfaa9e3214_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1953e4217d79be8902227edfaa9e3214_JaffaCakes118
Size

250KB
MD5

1953e4217d79be8902227edfaa9e3214
SHA1

b2283822e3ce58407bda92c50e226f09d62d48e3
SHA256

e8b0289a2908e5a2aeda4b435d3f63a2d52ab6ef2cbe72f8879d75c17b6627d2
SHA512

41261997dc89df5611ea61412ba3fe829213244b55a6bccb239f0f1da875db13e31e2edbb3c8afe8877667f032ded4895367fe66d0f1dd52a33c58871f95282a
SSDEEP

6144:7X6R9B4TOmFil7uxDGt7rE/kvl5UOQliAzLSMIZGyk3R:qX4T4t7SG5UOKkMINc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1953e4217d79be8902227edfaa9e3214_JaffaCakes118

Files

1953e4217d79be8902227edfaa9e3214_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e09eabf6da7ba43725c5a67c4d341f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TrackPopupMenu
GetPropW
SendMessageW
GetDC
GetParent
SetWindowLongW
SetClipboardData
GetWindowTextW
SetCursor
SetDlgItemTextW
MessageBoxW
MoveWindow
GetSubMenu
GetAsyncKeyState
GetCapture
PostMessageW
ScreenToClient
DestroyMenu
EnableMenuItem
LoadStringW
EndDialog
RemovePropW
ReleaseDC
SendDlgItemMessageW
LoadMenuW
GetClientRect
GetDlgItem
ShowWindow
GetSysColor
CallWindowProcW
SetWindowTextW
LoadIconW
GetCursorPos
GetWindowLongW
EmptyClipboard
CloseClipboard
SetPropW
InvalidateRect
MapDialogRect
ClientToScreen
LoadCursorW
PtInRect
GetSystemMetrics
OpenClipboard
ExitWindowsEx
ReleaseCapture
GetWindowTextLengthW
DialogBoxParamW
GetWindowRect
SetCapture
SetWindowsHookExW

oleaut32

SysFreeString
VariantInit
SysAllocString
VariantClear

kernel32

SetFileTime
RemoveDirectoryW
GlobalAlloc
GetDriveTypeW
MapViewOfFile
GetDateFormatW
FindNextFileW
GetWindowsDirectoryW
GetDiskFreeSpaceExW
SetThreadPriority
WritePrivateProfileStringW
SetEndOfFile
GetCurrentDirectoryW
SetLastError
OpenProcess
VirtualProtectEx
GetPrivateProfileStringW
VirtualAlloc
CreateFileMappingW
GetTimeFormatW
GetFileSize
ReadFile
GetModuleHandleW
GetVolumeInformationW
SetPriorityClass
GetFileTime
GetCurrentThreadId
FormatMessageW
LoadLibraryExW
LoadResource
GetPriorityClass
SetUnhandledExceptionFilter
MoveFileW
IsDebuggerPresent
WriteFile
ResumeThread
LocalFree
FindResourceW
CopyFileW
FreeLibrary
GlobalUnlock
DeleteCriticalSection
EnterCriticalSection
SizeofResource
CloseHandle
ReadProcessMemory
WideCharToMultiByte
CreateThread
FileTimeToSystemTime
CreateProcessW
GetSystemDirectoryW
FreeResource
FlushFileBuffers
UnhandledExceptionFilter
GetFullPathNameW
SetFileAttributesW
GetSystemInfo
WriteProcessMemory
FindClose
SetThreadLocale
LockResource
DeleteFileW
GlobalFree
DisableThreadLibraryCalls
GetDiskFreeSpaceW
GlobalMemoryStatus
GetComputerNameW
LocalAlloc
FindResourceExW
GetSystemTimeAsFileTime
VirtualFree
GetLocalTime
UnmapViewOfFile
GetCommandLineW
CreateSemaphoreW
GetThreadLocale
GlobalLock
LeaveCriticalSection
MoveFileExW
QueryDosDeviceW
VirtualQueryEx
WaitForSingleObject
RaiseException
GetTempFileNameW
GetLogicalDrives
FindFirstFileW
MulDiv
FreeEnvironmentStringsW
CreateFileW
SetFilePointer
VirtualAllocEx

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
GetUserNameW
AllocateAndInitializeSid
RegSetValueExW
RegDeleteKeyW
SetNamedSecurityInfoW
RegCreateKeyExW
RegUnLoadKeyW
RegOpenKeyExW
RegLoadKeyW
RegCloseKey
RegEnumValueW
RegDeleteValueW
LookupAccountSidW
FreeSid
RegQueryValueExW

mscms

CreateProfileFromLogColorSpaceA
UnregisterCMMW
SelectCMM
GetColorDirectoryA
CheckBitmapBits
SetColorProfileElementReference
GetPS2ColorRenderingIntent
UninstallColorProfileA

atl

AtlIPersistPropertyBag_Load
AtlAxGetHost
AtlCreateTargetDC

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.a
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.VLAwlW
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.HIZQ
Size: 512B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zDtH
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QIRb
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xZDH
Size: 512B - Virtual size: 633B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.epxLT
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.YHaSXt
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NQ
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 211KB - Virtual size: 506KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.KD
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.miDHAp
Size: 1024B - Virtual size: 953B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Vvqe
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e09eabf6da7ba43725c5a67c4d341f2

Headers

DLL Characteristics

File Characteristics

Imports

user32

oleaut32

kernel32

advapi32

mscms

atl

Sections

.text Size: 16KB - Virtual size: 16KB

.a Size: 1KB - Virtual size: 1KB

.VLAwlW Size: 1KB - Virtual size: 1KB

.HIZQ Size: 512B - Virtual size: 592B

.zDtH Size: 2KB - Virtual size: 2KB

.QIRb Size: 1024B - Virtual size: 1KB

.rdata Size: 5KB - Virtual size: 4KB

.xZDH Size: 512B - Virtual size: 633B

.epxLT Size: 1KB - Virtual size: 2KB

.YHaSXt Size: 2KB - Virtual size: 3KB

.NQ Size: 1KB - Virtual size: 1KB

.data Size: 211KB - Virtual size: 506KB

.KD Size: 2KB - Virtual size: 2KB

.miDHAp Size: 1024B - Virtual size: 953B

.Vvqe Size: 1024B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 476B

.text
Size: 16KB - Virtual size: 16KB

.a
Size: 1KB - Virtual size: 1KB

.VLAwlW
Size: 1KB - Virtual size: 1KB

.HIZQ
Size: 512B - Virtual size: 592B

.zDtH
Size: 2KB - Virtual size: 2KB

.QIRb
Size: 1024B - Virtual size: 1KB

.rdata
Size: 5KB - Virtual size: 4KB

.xZDH
Size: 512B - Virtual size: 633B

.epxLT
Size: 1KB - Virtual size: 2KB

.YHaSXt
Size: 2KB - Virtual size: 3KB

.NQ
Size: 1KB - Virtual size: 1KB

.data
Size: 211KB - Virtual size: 506KB

.KD
Size: 2KB - Virtual size: 2KB

.miDHAp
Size: 1024B - Virtual size: 953B

.Vvqe
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 476B