661eff5cf8de3f4e61e430dbcedca41d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

661eff5cf8de3f4e61e430dbcedca41d_JaffaCakes118
Size

458KB
MD5

661eff5cf8de3f4e61e430dbcedca41d
SHA1

8a7d1f5ef8160d257e3db7dd50113578c5d78134
SHA256

384cd54c05195c83f1ce05ad19baa1ae900b5659c3c3094b5af9d3f6584584b9
SHA512

a1759c15372891d83155bd74866845625417cbc99e9348c282032b517f995bee3e0bfcdd30f1270a24aa48a5f5a224ad2c1220bc068b7d6977ef509004855ab2
SSDEEP

12288:bVuDtWwXFGgmYv0eCIxGDvUja/FLeoZe8//Ne:wDtWqFGgPcpwdoLee

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
661eff5cf8de3f4e61e430dbcedca41d_JaffaCakes118

Files

661eff5cf8de3f4e61e430dbcedca41d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ccaa6a3739ba07714b9cc6f162d9f575

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_purecall
free
malloc
_adjust_fdiv
mbstowcs
_ftol
??3@YAXPAX@Z
??2@YAPAXI@Z
atoi
_vsnwprintf
_initterm
memmove

user32

SetRect
SetRectEmpty
IsRectEmpty
CharPrevW
DestroyWindow
GetDC
ReleaseDC
PeekMessageW
TranslateMessage
MessageBoxW
LoadStringW
EnableWindow
GetDlgItem
SetDlgItemTextW
wsprintfW
DispatchMessageW
DialogBoxParamW
IsDlgButtonChecked
GetDlgItemInt
EndDialog
SendMessageW
CheckDlgButton
SetDlgItemInt
SendDlgItemMessageW
MessageBeep

kernel32

GetLastError
GlobalSize
GetCurrentThreadId
DeleteCriticalSection
IsBadReadPtr
ResetEvent
EnterCriticalSection
InitializeCriticalSection
lstrcpyW
lstrcmpW
WideCharToMultiByte
MultiByteToWideChar
GetOverlappedResult
ReadFile
CloseHandle
CreateEventW
GetFileSize
GetDiskFreeSpaceW
GetFullPathNameW
CreateFileW
QueryPerformanceCounter
LeaveCriticalSection
WriteFile
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalHandle
MulDiv
GlobalLock
GlobalAlloc
LocalFree
LocalAlloc
lstrlenA
lstrcpynW
lstrlenW
lstrcatW
SetErrorMode
lstrcatA
lstrcpyA
DisableThreadLibraryCalls
GetTickCount

gdi32

CreateHalftonePalette
CreatePalette

winmm

mmioRead
mmioOpenW
mmioWrite
mmioSeek
mmioClose

advapi32

RegQueryValueExA
RegOpenKeyW
RegOpenKeyA
RegCloseKey
RegQueryValueW
RegEnumKeyW

ole32

CoGetMarshalSizeMax
CoMarshalInterface
CreateStreamOnHGlobal
CoUnmarshalInterface
CoCreateInstance
OleGetClipboard
ReleaseStgMedium
OleSetClipboard
OleUninitialize
OleInitialize
CoGetMalloc
OleFlushClipboard

msacm32

acmMetrics
acmGetVersion
acmFormatDetailsW
acmFormatTagDetailsW
acmStreamPrepareHeader
acmStreamSize
acmStreamOpen
acmFormatSuggest
acmStreamClose
acmStreamUnprepareHeader
acmStreamConvert
acmFormatChooseW

msvfw32

ICCompressorFree
ICCompressorChoose
ICClose
ICGetInfo
ICLocate
ICSendMessage
ICOpen
ICDecompress
ICCompress
ICGetDisplayFormat

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.upx
Size: 1024B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hyas
Size: 1024B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qdata
Size: 213KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 1024B - Virtual size: 122B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ldata
Size: 213KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ccaa6a3739ba07714b9cc6f162d9f575

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

user32

kernel32

gdi32

winmm

advapi32

ole32

msacm32

msvfw32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 1KB

.idata Size: 1024B - Virtual size: 112B

.upx Size: 1024B - Virtual size: 54B

.hyas Size: 1024B - Virtual size: 74B

.pdata Size: 1024B - Virtual size: 108B

.qdata Size: 213KB - Virtual size: 212KB

.adata Size: 1024B - Virtual size: 122B

.ldata Size: 213KB - Virtual size: 212KB

.rsrc Size: 11KB - Virtual size: 10KB

.reloc Size: 1024B - Virtual size: 8KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 1KB

.idata
Size: 1024B - Virtual size: 112B

.upx
Size: 1024B - Virtual size: 54B

.hyas
Size: 1024B - Virtual size: 74B

.pdata
Size: 1024B - Virtual size: 108B

.qdata
Size: 213KB - Virtual size: 212KB

.adata
Size: 1024B - Virtual size: 122B

.ldata
Size: 213KB - Virtual size: 212KB

.rsrc
Size: 11KB - Virtual size: 10KB

.reloc
Size: 1024B - Virtual size: 8KB