1b70da2724e073a6ae74b491832bc88f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

1b70da2724e073a6ae74b491832bc88f_JaffaCakes118
Size

275KB
MD5

1b70da2724e073a6ae74b491832bc88f
SHA1

93356a7f866c011e682a76a4c223403ceabaf9fc
SHA256

bc30e80ff57e21f3b263ae3cf8bf66ba1861fd6dcc1d790b90127109918435d3
SHA512

7473b6ac986bd37ee4556f3b60fa707a4a5d5f2654dc909b29ea2babd5fc7b896742fb40a876565f849a3c91197d607cbfc6df03b6f8b57077b2e96831289165
SSDEEP

6144:1XubZutHLtgX5CYoN2FlxlgObTDwS/T9tET1AuQK:1XubZeLt0oWlvgObwS/4yuj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b70da2724e073a6ae74b491832bc88f_JaffaCakes118

Files

1b70da2724e073a6ae74b491832bc88f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d09f728611029b438616097a03d58bf7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

gdi32

GetDeviceCaps
CreateCompatibleBitmap
CreateCompatibleDC

atl

ord43
ord44
ord45
ord32
ord20
ord30
ord17
ord16

msvcrt

_itow
__set_app_type
_exit
_vsnwprintf
malloc
_wfopen
fclose
exit
_CIpow
_purecall
_onexit
__wgetmainargs
wcsstr
_adjust_fdiv
_CxxThrowException
_cexit
??2@YAPAXI@Z
wcscmp
??1type_info@@UAE@XZ
??3@YAXPAX@Z
__setusermatherr
_XcptFilter

hid

HidP_GetUsageValue
HidD_GetPreparsedData
HidD_GetHidGuid
HidP_GetSpecificValueCaps

user32

SendInput
DestroyIcon
GetThreadDesktop
EnumDisplayMonitors
GetDC
IntersectRect
OpenInputDesktop
UpdateLayeredWindow
GetMessageW
SetWindowLongW
LoadImageW
GetClientRect
CreateWindowExW
InflateRect
FillRect
SetCursorPos
DestroyWindow
MonitorFromWindow
GetPropW
MonitorFromPoint
GetAncestor
CallNextHookEx
CloseDesktop
SystemParametersInfoW
ShowWindow
GetDesktopWindow
WindowFromPoint
GetSystemMetrics

advapi32

RegEnumKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
SetSecurityDescriptorOwner
GetLengthSid
CopySid
OpenThreadToken
RegOpenKeyW
RegQueryValueExA
SetSecurityDescriptorGroup
RegDeleteKeyW
RegCreateKeyW
OpenProcessToken
RegSetValueExW

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW

kernel32

MulDiv
VirtualAllocEx
GetTickCount
InitializeCriticalSectionAndSpinCount
SetThreadPriority
CancelWaitableTimer
GetTickCount
lstrcpyW
CompareStringW
LoadLibraryW
InterlockedDecrement
CloseHandle
GetCommandLineW
HeapAlloc
SetEvent
GetSystemDirectoryW
GlobalDeleteAtom
CreateMutexW
InitializeCriticalSection
HeapFree
SetPriorityClass
SetPriorityClass
CloseHandle
GlobalAddAtomW
OpenProcess
VirtualFree
QueryPerformanceCounter
DuplicateHandle
GetProcessShutdownParameters

ole32

CoUninitialize
CoTaskMemFree
CoCreateInstance

Sections

.text
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 548KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d09f728611029b438616097a03d58bf7

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

atl

msvcrt

hid

user32

advapi32

setupapi

kernel32

ole32

Sections

.text Size: 169KB - Virtual size: 169KB

.data Size: 76KB - Virtual size: 75KB

.rsrc Size: 28KB - Virtual size: 548KB

.text
Size: 169KB - Virtual size: 169KB

.data
Size: 76KB - Virtual size: 75KB

.rsrc
Size: 28KB - Virtual size: 548KB