25e9d24bd4202918128c136414eef882_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

25e9d24bd4202918128c136414eef882_JaffaCakes118
Size

569KB
MD5

25e9d24bd4202918128c136414eef882
SHA1

9e3c997c373dea8484045817b4ea8b4d876a5fb4
SHA256

c74eda9b840c1fb16488a2607d4cfc58eeb7e87edd5e39f672ef4f6798fbbf26
SHA512

2c7926d8a85362a07b3b8e0a02ec629eeb2278781f2c64bb7a214d6df294c4e3bd7350a9c42eda0c32ba458a48458e34905caef6a5a2ebc5c96ce5b00c760d43
SSDEEP

12288:oY9gkJpmZoq1GFEATPPrwbZRM6lKEGZNB:oYOpKhgFKE0N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25e9d24bd4202918128c136414eef882_JaffaCakes118

Files

25e9d24bd4202918128c136414eef882_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d05157051e0fd08e668875587b143179

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

FreeIconList

comctl32

ImageList_EndDrag
DrawStatusTextW
CreateStatusWindowA
ImageList_GetIcon
ImageList_SetIconSize
ImageList_SetImageCount
CreateUpDownControl
ImageList_SetFlags
ImageList_Merge
InitCommonControlsEx
ImageList_Destroy
ImageList_GetImageRect
ImageList_Read

user32

DialogBoxIndirectParamW
CharNextA
GetMenuCheckMarkDimensions
DlgDirListA
CascadeChildWindows
ShowWindow
GetDoubleClickTime
GetCaretPos
DestroyMenu
GetCapture
CharLowerBuffA
EnumPropsExA
RegisterClassExA
CharToOemBuffA
CharNextW
MessageBoxA
RegisterClassA
DefWindowProcW
DestroyWindow
SetClassLongW
SetLastErrorEx
CreateWindowExW
CreateIconFromResource
SetMenuItemInfoW

wininet

HttpQueryInfoW
InternetFindNextFileW

advapi32

LookupPrivilegeDisplayNameW
CryptHashData
RegDeleteKeyA
LogonUserA
CryptEnumProvidersW
LogonUserW
RegEnumKeyExW
LookupPrivilegeDisplayNameA
RegDeleteKeyW
ReportEventA
RevertToSelf
CryptSignHashW

kernel32

DebugBreak
TlsAlloc
OpenEventW
GetStringTypeExA
GetPrivateProfileStringW
CreateFileW
GetTickCount
EnumSystemLocalesA
InterlockedExchange
FoldStringA
GetModuleFileNameW
DeleteFileA
GetCurrentThread
EnumResourceNamesA
SetEnvironmentVariableA
FillConsoleOutputAttribute
VirtualFree
UnhandledExceptionFilter
GetDateFormatA
WaitForMultipleObjects
GetCommandLineA
CloseHandle
QueryPerformanceCounter
lstrlenA
GetVersionExW
CompareStringA
GetTimeZoneInformation
MultiByteToWideChar
IsValidLocale
GetStartupInfoA
GetPrivateProfileSectionNamesA
GetEnvironmentStrings
SetLastError
ReadFile
IsBadReadPtr
CompareStringW
HeapFree
GetModuleHandleW
GetStdHandle
GetPriorityClass
EnumCalendarInfoA
VirtualProtect
SetHandleCount
GetStartupInfoW
GetUserDefaultLCID
CreateMutexA
GetLocaleInfoA
VirtualAlloc
lstrcpyn
GetProcAddress
GetACP
WriteConsoleOutputCharacterW
CreateDirectoryW
GetLogicalDriveStringsW
GetStringTypeA
InterlockedCompareExchange
lstrcpynW
HeapReAlloc
ReadConsoleOutputA
GetEnvironmentStringsW
GetSystemTime
ReleaseMutex
VirtualQuery
RtlUnwind
RtlFillMemory
GetModuleFileNameA
WriteConsoleW
LCMapStringA
GetCurrentThreadId
LeaveCriticalSection
GetTimeFormatA
GetCurrentProcess
CreateFileA
CreateDirectoryExW
LCMapStringW
GetConsoleScreenBufferInfo
GetLastError
GetPrivateProfileStringA
MoveFileW
GetLocaleInfoW
HeapSize
LoadLibraryA
TerminateProcess
ReadConsoleOutputCharacterW
GetSystemInfo
FreeLibraryAndExitThread
GetProfileSectionA
SetConsoleOutputCP
LocalFlags
HeapAlloc
GetSystemTimeAsFileTime
WriteFile
GetFileType
GetModuleHandleA
TlsGetValue
GetOEMCP
GetVersionExA
SetFilePointer
GetLocalTime
FreeEnvironmentStringsA
TlsSetValue
HeapDestroy
OpenMutexA
GetCommandLineW
CreateNamedPipeA
GetNumberFormatA
GetSystemTimeAdjustment
IsBadWritePtr
EnumCalendarInfoExA
GetCurrentProcessId
ExitProcess
SetComputerNameW
WideCharToMultiByte
EnumResourceTypesA
TlsFree
FlushFileBuffers
HeapCreate
LockFile
GetStringTypeW
EnumResourceTypesW
IsValidCodePage
DeleteCriticalSection
InitializeCriticalSection
SystemTimeToFileTime
GetCPInfo
FindNextChangeNotification
SetStdHandle
EnterCriticalSection
FreeEnvironmentStringsW
SetFileAttributesA

Sections

.text
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 251KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 110KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d05157051e0fd08e668875587b143179

Headers

File Characteristics

Imports

shell32

comctl32

user32

wininet

advapi32

kernel32

Sections

.text Size: 170KB - Virtual size: 170KB

.rdata Size: 251KB - Virtual size: 250KB

.data Size: 110KB - Virtual size: 125KB

.rsrc Size: 36KB - Virtual size: 36KB

.text
Size: 170KB - Virtual size: 170KB

.rdata
Size: 251KB - Virtual size: 250KB

.data
Size: 110KB - Virtual size: 125KB

.rsrc
Size: 36KB - Virtual size: 36KB