22c14d4687fd58fd3bd4d15ee7f8ce18_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

22c14d4687fd58fd3bd4d15ee7f8ce18_JaffaCakes118
Size

46KB
MD5

22c14d4687fd58fd3bd4d15ee7f8ce18
SHA1

b02862e26da45eed80e3b4a475ca6bdc7b9371b8
SHA256

f51d726685a9e9d33681a372a8246c70ac1ad91b024f69550eaa3a63cd62c8d0
SHA512

bdff23d4ba9f0c192fe4ba4621f3eb6fc78e2dec6fbcc19887bc856860b26a0cb6dca49f5d34e97d89228c2ae44f8d9c7543ab649fbfd00226c5894a3e4b992f
SSDEEP

768:FVNT/MAOGtp5IK/2Qv3aWcduECvL54edeX5yargXaEOAimLYXs:FVNMGp/v3aNCvLq1qaEOqLYXs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22c14d4687fd58fd3bd4d15ee7f8ce18_JaffaCakes118

Files

22c14d4687fd58fd3bd4d15ee7f8ce18_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b4e6aeaae05a0235daa214b76ae7d0c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetLastError
GetTickCount
GetCurrentProcess
MultiByteToWideChar
GetSystemDirectoryW
GetVersionExA
GetProcessHeap
GetStartupInfoW
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsAlloc
GetCurrentThreadId
HeapCreate
ExitProcess
GetModuleFileNameA
GetEnvironmentStringsW
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
Sleep
GetLocaleInfoA
InitializeCriticalSection
LoadLibraryA
CreateMutexW
GetProcAddress

user32

GetSystemMetrics
GetDesktopWindow
WinHelpA
RegisterClassW
GetMenuItemInfoW
IsDlgButtonChecked
SetDlgItemTextA
GetClassInfoW
GetKeyboardLayout
LoadIconW
GetSysColorBrush
SetForegroundWindow
GetClassInfoExA
GetMessageW
GetMenuStringW
SetMenu
RegisterWindowMessageW
LoadImageA
SetCursorPos
EnableWindow
GetForegroundWindow
MonitorFromRect
DestroyIcon
PostMessageA
CreateDialogIndirectParamW
DialogBoxIndirectParamW
AdjustWindowRect

advapi32

RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegDeleteKeyW
CloseServiceHandle
StartServiceW
OpenServiceW
OpenSCManagerW

uxtheme

GetThemeBool
CloseThemeData

gdi32

CreateFontIndirectExA
CreateColorSpaceW
RemoveFontResourceA
GetTextExtentPointA
StretchDIBits
DeleteObject
CreatePen
SetEnhMetaFileBits
CreatePalette

Sections

.text
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.LU
Size: 512B - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.v
Size: 12KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.TrSSs
Size: 4KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.oVPl
Size: 9KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b4e6aeaae05a0235daa214b76ae7d0c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

uxtheme

gdi32

Sections

.text Size: 12KB - Virtual size: 16KB

.rdata Size: 2KB - Virtual size: 21KB

.LU Size: 512B - Virtual size: 339KB

.v Size: 12KB - Virtual size: 99KB

.TrSSs Size: 4KB - Virtual size: 213KB

.data Size: 4KB - Virtual size: 147KB

.oVPl Size: 9KB - Virtual size: 71KB

.rsrc Size: 9KB - Virtual size: 9KB

.text
Size: 12KB - Virtual size: 16KB

.rdata
Size: 2KB - Virtual size: 21KB

.LU
Size: 512B - Virtual size: 339KB

.v
Size: 12KB - Virtual size: 99KB

.TrSSs
Size: 4KB - Virtual size: 213KB

.data
Size: 4KB - Virtual size: 147KB

.oVPl
Size: 9KB - Virtual size: 71KB

.rsrc
Size: 9KB - Virtual size: 9KB