62451ad7b09024c89bc35f3250c1c871_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

62451ad7b09024c89bc35f3250c1c871_JaffaCakes118
Size

139KB
MD5

62451ad7b09024c89bc35f3250c1c871
SHA1

10ea312e87e026e8e20b95bb0dbe1a27574a1421
SHA256

24073c3bea1f728157f070a30af25768546c712b5c71d1ae00f1ef869f057bae
SHA512

b3dfefbc03af3ffa06f36497623aa00ea2e27b9c83d93e25cd0577ca7d19d72a464dd4449de80ccc01d97cddb45e71a68303946ecab1994124ea0e4b47f8a438
SSDEEP

3072:bljzF5HCgTtCAMHGNCJHr/sQoMfPn+X3Oyw6067wTLSa4DXtc:ZjzF5HCOtCF/WMfP+X3UxowTLH4h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62451ad7b09024c89bc35f3250c1c871_JaffaCakes118

Files

62451ad7b09024c89bc35f3250c1c871_JaffaCakes118
.exe windows:5 windows x86 arch:x86

173151e243a7eb2b2a044b4f618874a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Read
ImageList_SetBkColor
ImageList_SetIconSize

kernel32

CreateMutexA
GetFullPathNameA
CloseHandle
FreeResource
GetLocaleInfoA
WaitForMultipleObjects
TerminateThread
GetUserDefaultLCID
GetLastError
TerminateProcess
GetWindowsDirectoryA
GetExitCodeProcess
MapViewOfFileEx
VirtualFree
UnmapViewOfFile
CreateFileMappingA
FileTimeToLocalFileTime
GlobalGetAtomNameA
TryEnterCriticalSection
GetModuleHandleA
GlobalFree
VirtualQuery
GetVersionExA
GetCurrentProcess
GetThreadLocale
GlobalAlloc
GetModuleHandleA
lstrlenW
CreateFileMappingA
WideCharToMultiByte
TerminateProcess
GetLocalTime
SetLastError
GetProfileIntA
CopyFileA

gdi32

CreateCompatibleDC
DeleteDC
SelectPalette
GetPaletteEntries
GetEnhMetaFilePaletteEntries
CreatePatternBrush
ExtTextOutW
FrameRgn
SetDIBColorTable
GetDIBColorTable
GetEnhMetaFileDescriptionA
ExtCreatePen
DeleteEnhMetaFile
GetDIBits
SetViewportOrgEx
UnrealizeObject
SetTextCharacterExtra
GdiFlush
IntersectClipRect
GetTextExtentPoint32W
SetWindowExtEx
BitBlt
StartPage
CreateDIBSection
CreateEnhMetaFileA
CreateICA
DeleteObject
SelectClipRgn
GetMapMode

user32

ScrollDC
GetFocus
IsCharAlphaNumericA
CreateIcon
SetPropA
BringWindowToTop
GetScrollInfo
EnumWindows
GetTopWindow
DrawTextW
RedrawWindow
EnableWindow
IsClipboardFormatAvailable
OffsetRect
GetClassNameA
GetMenuItemInfoW
GetWindowTextW
ChildWindowFromPointEx
EnableScrollBar
DefFrameProcA
GetClassNameW
GetClipboardFormatNameA
SetClipboardData
CheckMenuItem
DestroyIcon
AdjustWindowRectEx
CreateIconIndirect
BeginPaint
DeleteMenu
CharUpperBuffA
GetWindowLongW
EnumThreadWindows
IsIconic
CharToOemA
SetRect
GetClientRect
SendMessageA
GetKeyboardType

ole32

DoDragDrop
OleInitialize
CreateDataAdviseHolder
CoInitialize
ReleaseStgMedium
OleDraw
IsAccelerator
RegisterDragDrop

imm32

ImmSetCompositionFontA
ImmGetContext

mprm2nls

_Inf
_Tolower
_FXbig
_FDscale
_FDnorm
_Stof
_Wcrtomb
_LDtest

oleaut32

SafeArrayGetLBound
SafeArrayGetElement
SafeArrayAccessData

wininet

HttpOpenRequestA
InternetCrackUrlA

shell32

SHGetMalloc
SHBrowseForFolderA

advapi32

RegOpenKeyExA
InitializeSecurityDescriptor
RegCreateKeyExA
RegSetValueExA

urlmon

CoInternetCreateSecurityManager

Sections

.text
Size: 132KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

173151e243a7eb2b2a044b4f618874a3

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

gdi32

user32

ole32

imm32

mprm2nls

oleaut32

wininet

shell32

advapi32

urlmon

Sections

.text Size: 132KB - Virtual size: 136KB

.rdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 4KB

.text
Size: 132KB - Virtual size: 136KB

.rdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 4KB