1a193f5dc4aabbd9b58e20699a366b09_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1a193f5dc4aabbd9b58e20699a366b09_JaffaCakes118
Size

115KB
MD5

1a193f5dc4aabbd9b58e20699a366b09
SHA1

953b299197d239d8cac87d28bd2600fbb59e5b6b
SHA256

ff072d53e1ddac237b5d214b997e45defc57a102e7ca3135a3331618577de8d1
SHA512

bdd638b008526790b5d7e6c043bd592eddee48bf75c0f5a9c98a39e7e05295a3595ffb4275c9600278323db98083fb9589c75f4388b25d303378a6899244ae2c
SSDEEP

1536:IbrnZxjUGG2irT7RmDZ/nvpnuBjTHgP5jW+G5Lv45Mh:IbrnZ1irTAFfRnA+G5v45Mh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a193f5dc4aabbd9b58e20699a366b09_JaffaCakes118

Files

1a193f5dc4aabbd9b58e20699a366b09_JaffaCakes118
.exe windows:5 windows x86 arch:x86

44d283fa9eca314f2723842c3b3b0cd9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
GetProcessHeap
LCMapStringW
GetStringTypeW
ExitProcess
GetTickCount
ExpandEnvironmentStringsA
GetSystemWindowsDirectoryA
GetFileAttributesExA
WaitForSingleObject
TerminateThread
FreeLibrary
lstrcpyA
lstrcatA
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
SearchPathA
OpenFileMappingA
CreateFileMappingA
MapViewOfFileEx
CloseHandle
VirtualAlloc
UnmapViewOfFile
VirtualFree
VirtualProtect
GetModuleHandleA
lstrcmpA
GetModuleFileNameA
lstrlenA
lstrcmpiA
EnterCriticalSection
LeaveCriticalSection
lstrcpynA
DeleteCriticalSection
InitializeCriticalSection
GetProcAddress
LoadLibraryA
GetStringTypeA
GetLastError
HeapFree
HeapAlloc
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
RaiseException
HeapCreate
HeapReAlloc
GetModuleHandleW
Sleep
WriteFile
GetStdHandle
MultiByteToWideChar
ReadFile
SetHandleCount
GetFileType
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
InitializeCriticalSectionAndSpinCount
SetStdHandle
FlushFileBuffers
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
SetEndOfFile

gdi32

FrameRgn
GetCharWidthFloatW
GetFontUnicodeRanges
TranslateCharsetInfo
GetEnhMetaFilePixelFormat
CreateDIBSection
BitBlt
GetROP2
ExtEscape
SetBitmapDimensionEx
GetObjectA
SaveDC
DeleteMetaFile
CopyEnhMetaFileW
CreateFontW
FixBrushOrgEx
FlattenPath
SetPixelFormat
UnrealizeObject
CreateRectRgn
CreateBitmapIndirect
CreateEllipticRgn
Pie
UpdateColors
PtVisible
GetBkMode
RectVisible
SetDeviceGammaRamp
FillPath
GetCharWidthW
CreateCompatibleDC
GetEnhMetaFileDescriptionA
GetDCPenColor
GetMiterLimit
GetKerningPairsA
EqualRgn
GetMetaFileA
GetOutlineTextMetricsA
SetTextCharacterExtra
ColorCorrectPalette
CreateColorSpaceA
GetGlyphOutlineA
EnumICMProfilesA
SetMetaFileBitsEx
GetTextCharacterExtra
PatBlt
PolyBezierTo
CreateScalableFontResourceW
CreateScalableFontResourceA
ExtCreatePen
PlayMetaFile
DeleteDC
GetCharWidthA
TextOutA
GetEnhMetaFileHeader
PolyPolygon
SetTextAlign
CreateFontIndirectExW
ExcludeClipRect
PolyDraw
GetTextExtentPoint32A
RemoveFontMemResourceEx
PolyTextOutW
PolylineTo
GetFontData
EnumICMProfilesW
Polygon
SetPixel
SetRectRgn
GetPixelFormat
GetObjectType
IntersectClipRect
SetPaletteEntries
GetPaletteEntries
ExtCreateRegion
GetEnhMetaFileA
SetDCPenColor
CreateMetaFileW
GetMetaFileBitsEx
GdiAlphaBlend
AbortPath
SetICMMode
CreatePalette
CheckColorsInGamut
SelectPalette
SetColorAdjustment
AnimatePalette
CreatePenIndirect
GetTextFaceA
FloodFill
SetSystemPaletteUse
GetBitmapDimensionEx
GetTextExtentExPointA
RemoveFontResourceA
OffsetRgn
GetEnhMetaFilePaletteEntries
GetICMProfileA
SetBrushOrgEx
PathToRegion
PolyTextOutA
SetBkColor
GetSystemPaletteEntries
SetWindowExtEx
GetCharABCWidthsFloatW
ExtTextOutW
OffsetClipRgn
CreateMetaFileA
GetDCOrgEx
CancelDC
AddFontResourceA
SetROP2

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA

comsvcs

CoCreateActivity
MTSCreateActivity

crypt32

CertRegisterSystemStore
CryptDecodeObject
CertAddStoreToCollection
CertVerifyTimeValidity
CryptGetDefaultOIDDllList
CertAddEncodedCTLToStore
CertCreateCTLEntryFromCertificateContextProperties
CryptMsgCountersign
CryptBinaryToStringW
CryptSetKeyIdentifierProperty
CryptGetAsyncParam
CertAddEncodedCertificateToStore
PFXExportCertStoreEx
CryptImportPublicKeyInfoEx
CertVerifyRevocation
CryptVerifyCertificateSignatureEx
CryptHashToBeSigned
CryptQueryObject
CryptMsgCountersignEncoded
CertCloseStore
CryptImportPublicKeyInfo
CertFindCRLInStore
CertDeleteCRLFromStore
CertGetValidUsages
CertCompareCertificateName
CryptDecryptAndVerifyMessageSignature
CertEnumCRLsInStore
CryptFindCertificateKeyProvInfo
CryptFindOIDInfo
CryptRegisterDefaultOIDFunction
CryptBinaryToStringA
CertVerifyCRLTimeValidity
CertAddSerializedElementToStore
CertCreateCertificateChainEngine
CertOIDToAlgId
CertFindRDNAttr
CryptInstallOIDFunctionAddress
CertFindCertificateInCRL
CryptExportPublicKeyInfoEx
CertGetCTLContextProperty
CertGetCRLContextProperty
CertGetIssuerCertificateFromStore
CertSetCertificateContextPropertiesFromCTLEntry
CryptMsgOpenToDecode
CertEnumSubjectInSortedCTL
CertVerifySubjectCertificateContext
CertGetCertificateChain
CryptGetOIDFunctionAddress
CertGetPublicKeyLength
CertAddCertificateLinkToStore
CertEnumCTLsInStore
CryptVerifyDetachedMessageSignature
CertGetStoreProperty
CryptUnregisterOIDInfo
CryptFreeOIDFunctionAddress
CertVerifyCRLRevocation
CryptEnumKeyIdentifierProperties

imm32

ImmGetVirtualKey
ImmGetCandidateListW
ImmInstallIMEW
ImmDestroyContext
ImmAssociateContext
ImmRegisterWordW
ImmGetCompositionFontW
ImmNotifyIME
ImmGetOpenStatus
ImmSetCompositionWindow
ImmGetConversionStatus
ImmGetCandidateWindow
ImmGetCandidateListCountA
ImmSetConversionStatus
ImmGetConversionListW
ImmSimulateHotKey
ImmReleaseContext
ImmGetImeMenuItemsW
ImmEscapeA
ImmUnregisterWordA
ImmGetConversionListA
ImmIsUIMessageA
ImmIsUIMessageW
ImmConfigureIMEW
ImmSetCandidateWindow
ImmInstallIMEA

iphlpapi

SetIpNetEntry
GetUdpStatistics
GetIpStatistics
DeleteProxyArpEntry
SendARP
IpReleaseAddress
GetExtendedUdpTable
GetFriendlyIfIndex
DisableMediaSense
IpRenewAddress
DeleteIPAddress
GetAdaptersInfo
GetUdpStatisticsEx
AddIPAddress
GetTcpTable
GetPerAdapterInfo
GetTcpStatistics
GetOwnerModuleFromUdpEntry
GetOwnerModuleFromTcpEntry
SetIpTTL

msi

ord131
ord175
ord246
ord262
ord126
ord204
ord102
ord247
ord242

comctl32

ImageList_ReplaceIcon
ImageList_Merge
ImageList_BeginDrag
InitCommonControlsEx
PropertySheetW
FlatSB_GetScrollRange
ImageList_SetDragCursorImage
ord6
ord5
ImageList_Replace
ImageList_SetOverlayImage
ord16
ImageList_Copy
FlatSB_EnableScrollBar
ord321
FlatSB_SetScrollPos
FlatSB_GetScrollProp
ord412
ImageList_Destroy
ImageList_GetImageCount
InitializeFlatSB
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_GetBkColor
ImageList_DragShowNolock
ord410
ord329
ImageList_Remove
ord3
ord4
ImageList_Write
_TrackMouseEvent
FlatSB_SetScrollProp
CreateStatusWindowW
ImageList_AddMasked
ImageList_Add
InitMUILanguage
ord13
FlatSB_ShowScrollBar
ord335
ord327
GetMUILanguage

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

44d283fa9eca314f2723842c3b3b0cd9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

advapi32

comsvcs

crypt32

imm32

iphlpapi

msi

comctl32

Sections

.text Size: 78KB - Virtual size: 78KB

.rdata Size: 21KB - Virtual size: 21KB

.data Size: 14KB - Virtual size: 21KB

.text
Size: 78KB - Virtual size: 78KB

.rdata
Size: 21KB - Virtual size: 21KB

.data
Size: 14KB - Virtual size: 21KB