42bd313be50008f41cdec7d8230b7e97_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

42bd313be50008f41cdec7d8230b7e97_JaffaCakes118
Size

112KB
MD5

42bd313be50008f41cdec7d8230b7e97
SHA1

8d6b4ae8084411c6a082dabdfa4e714337481323
SHA256

fa91e41e621bdcbf1d64fc17103f1bc3c06bb5ad1a74b8a343c5e53c909c130e
SHA512

265442f89b129b53b4522d648958f7b787e53a65237be1d759a2e06b750a887fa70f94f4fa00b8c105f49fd7029d7999d52eedbc650fa8ae178d046168d17c67
SSDEEP

1536:zEXrJtk8SLa/9XJQ8uGY3xrrNCede/AzNN3hp/SPRDMP2Y/skNH9heYyNygOx5b:zRoXuvrr9djzNGRDMOssaH9g5gxB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42bd313be50008f41cdec7d8230b7e97_JaffaCakes118

Files

42bd313be50008f41cdec7d8230b7e97_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fdd1ddc5615b82f2050470b9252618f9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetFileTitleA
PrintDlgA
PageSetupDlgA

kernel32

CreateFileW
CreateProcessA
CreateProcessW
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeviceIoControl
ExitProcess
ExitThread
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstChangeNotificationW
FindFirstFileA
FindFirstFileW
FindNextChangeNotification
FindNextFileA
FindNextFileW
FormatMessageA
FormatMessageW
GetCompressedFileSizeW
GetCurrentDirectoryW
GetCurrentProcess
GetDiskFreeSpaceA
GetDriveTypeA
GetExitCodeThread
GetFileSize
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLogicalDriveStringsA
GetLogicalDriveStringsW
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
CreateFileMappingA
GetSystemTime
GetTempFileNameA
GetTempFileNameW
GetTempPathW
GetTickCount
GetUserDefaultLangID
GetVersionExA
CreateFileA
GetVolumeInformationW
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalSize
GlobalUnlock
HeapAlloc
InterlockedIncrement
LoadLibraryA
LoadLibraryW
LocalFree
MapViewOfFile
MoveFileA
MoveFileW
MultiByteToWideChar
ReadFile
RemoveDirectoryA
RemoveDirectoryW
SetEndOfFile
SetEvent
SetFilePointer
SetFileTime
SetLastError
SetPriorityClass
SystemTimeToFileTime
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
lstrcatA
CreateDirectoryW
CreateDirectoryA
CopyFileW
CopyFileA
CompareFileTime
GetStartupInfoA
GetVolumeInformationA

advapi32

RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
GetUserNameW
RegQueryValueExA
RegOpenKeyExA

shell32

SheChangeDirA
ShellExecuteA
SHGetSpecialFolderLocation
SHFileOperationA
SHBrowseForFolderA
SHChangeNotify
SHGetPathFromIDListA
SHGetDesktopFolder
SHGetFileInfoA
SHGetMalloc

ole32

RevokeDragDrop
ReleaseStgMedium
RegisterDragDrop
OleInitialize
DoDragDrop
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
OleUninitialize

user32

UpdateWindow
wsprintfA
UpdateLayeredWindow
TranslateMessage
TranslateMDISysAccel
TranslateAcceleratorW
TranslateAcceleratorA
TrackPopupMenuEx
TileWindows
ShowWindow
ShowScrollBar
SetWindowTextW
SetWindowLongW
SetWindowLongA
CallWindowProcA
CharLowerA
CharLowerW
CharPrevA
CharUpperA
CharUpperW
CheckDlgButton
CheckMenuItem
CheckMenuRadioItem
CreateAcceleratorTableA
CreateIconIndirect
CreateMenu
CreateWindowExA
CreateWindowExW
DdeConnectList
DdeGetLastError
DestroyAcceleratorTable
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageW
DrawMenuBar
DrawStateW
EmptyClipboard
EnableWindow
EndPaint
FindWindowA
FlashWindowEx
GetCapture
GetClassInfoA
GetClassInfoW
GetClientRect
GetDlgItem
GetGUIThreadInfo
GetInputState
GetKeyState
GetMenuItemCount
GetMenuItemInfoA
GetMenuItemInfoW
GetSubMenu
GetTitleBarInfo
GetUserObjectInformationA
GetWindowLongA
GetWindowPlacement
GetWindowTextA
GetWindowTextW
InsertMenuItemA
InvalidateRect
IsDlgButtonChecked
IsWindowEnabled
IsZoomed
KillTimer
LoadAcceleratorsA
LoadAcceleratorsW
LoadBitmapA
LoadCursorA
LoadIconA
LockSetForegroundWindow
LookupIconIdFromDirectory
MapDialogRect
MapVirtualKeyA
MessageBoxW
ModifyMenuW
NotifyWinEvent
OpenClipboard
PostMessageA
PostQuitMessage
RegisterClassA
RemoveMenu
SendMessageW
SetDebugErrorLevel
SetMenu
SetMenuItemInfoW
SetTimer

msvcrt

memset
rand
memmove
strlen
wcslen
wcsncmp
memcpy
memcmp
srand
malloc
_CxxThrowException
_XcptFilter
__CxxFrameHandler
__dllonexit
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_adjust_fdiv
_beginthreadex
_controlfp
_except_handler3
_exit
_initterm
_onexit
_purecall
_wcsicmp
exit
free

Sections

.text
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fdd1ddc5615b82f2050470b9252618f9

Headers

DLL Characteristics

File Characteristics

Imports

comdlg32

kernel32

advapi32

shell32

ole32

user32

msvcrt

Sections

.text Size: 22KB - Virtual size: 24KB

.rdata Size: 69KB - Virtual size: 72KB

.data Size: 18KB - Virtual size: 20KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 22KB - Virtual size: 24KB

.rdata
Size: 69KB - Virtual size: 72KB

.data
Size: 18KB - Virtual size: 20KB

.rsrc
Size: 1024B - Virtual size: 4KB