5ec065a8010408221e42cb940c5ffcb0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5ec065a8010408221e42cb940c5ffcb0_JaffaCakes118
Size

117KB
MD5

5ec065a8010408221e42cb940c5ffcb0
SHA1

38d9a317280de66a16d707fd886c1ec7d482bb3c
SHA256

2e97dd145802a7bea836a8bf62356e04f30124217d2c61f928be5bfb9fbb98ef
SHA512

681d71a09428d236bcaa75e103b4cd74b4b57fd88509b0d5478d41ffd9093ccab94f9877c47de2d89518508e9e411540cdc1e10cea135a18f304e3203b126b56
SSDEEP

3072:aq9+o0nXtDdcf1hdqrKfK84hRb7sJk7gAXzf7:B9+o0nXtDdo1hd4KR4vbwJCf7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ec065a8010408221e42cb940c5ffcb0_JaffaCakes118

Files

5ec065a8010408221e42cb940c5ffcb0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b28f1e37db3adc1995bf401ca65650b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
ExitWindowsEx
CharPrevA
GetDlgItemTextA
GetWindowLongA
GetDesktopWindow
DispatchMessageA
SendMessageA
PeekMessageA
GetDlgItem
SetWindowLongA
GetWindowRect
LoadStringA
EnableWindow
EndDialog
SetDlgItemTextA
CallWindowProcA
MsgWaitForMultipleObjects
ShowWindow
MessageBoxA
GetDC
CharNextA
ReleaseDC
SendDlgItemMessageA
MessageBeep
CharUpperA
SetWindowPos
SetWindowTextA
DialogBoxIndirectParamA
SetForegroundWindow

advapi32

RegCloseKey
CryptGetHashParam
RegQueryValueExA
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
RegOpenKeyExA

ole32

OleInitialize
CLSIDFromProgID
CoCreateInstance

gdi32

GetStockObject
DeleteObject
CreateFontIndirectA
GetObjectA

kernel32

ReleaseSemaphore
FindNextFileW
GetSystemDefaultLangID
GetFileSize
CreateDirectoryW
SetUnhandledExceptionFilter
DeviceIoControl
CloseHandle
RemoveDirectoryW
GetFileAttributesW
GetTempPathW
GetCurrentThreadId
GetWindowsDirectoryA
CreateSemaphoreA
FindResourceW
IsBadReadPtr
DeleteFileW
GetSystemDirectoryW
FindFirstFileW
GetPrivateProfileIntW
GetVersionExA
GetUserDefaultLangID
ReleaseMutex
CreateFileW
HeapFree
GetTickCount
GetProcessHeap
VirtualUnlock
lstrlenA
LocalFree
GetPrivateProfileStringW
SetFilePointer
QueryPerformanceCounter
OpenFileMappingW
GetSystemTime
SetFileAttributesA
VirtualAlloc
GetTempFileNameW
CreateFileA
SetEndOfFile
GetStartupInfoA
CreateMutexA
UnhandledExceptionFilter
VirtualFree
VirtualLock
LockResource
GetCurrentProcessId
WriteFile
SetLastError
HeapAlloc
InterlockedDecrement
GetSystemTimeAsFileTime
InterlockedIncrement
FindClose
lstrcmpiA
OpenSemaphoreA
GlobalWire
SizeofResource
GetCurrentProcess
ReadFile
GetLastError
MultiByteToWideChar
LoadResource

ntdll

RtlCreateSecurityDescriptor
NtQueryObject
RtlEqualUnicodeString
NtSetSecurityObject
NtQuerySecurityObject
RtlInitUnicodeString
RtlInitAnsiString

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 130KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b28f1e37db3adc1995bf401ca65650b6

Headers

File Characteristics

Imports

user32

advapi32

ole32

gdi32

kernel32

ntdll

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 6KB - Virtual size: 122KB

.rsrc Size: 3KB - Virtual size: 3KB

.edata Size: 130KB - Virtual size: 191KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 6KB - Virtual size: 122KB

.rsrc
Size: 3KB - Virtual size: 3KB

.edata
Size: 130KB - Virtual size: 191KB