6f021b2e87d7e93a518457fd7c175a2a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6f021b2e87d7e93a518457fd7c175a2a_JaffaCakes118
Size

86KB
MD5

6f021b2e87d7e93a518457fd7c175a2a
SHA1

6842fb00be280698e77fbfdc57d5e3bc2e19301b
SHA256

da187faa78687bc7778a02f1c725a8e47288ef5c6e4c3b7e3edcb2734414b2e8
SHA512

aeb7ecd7ca2b86021feec4bbcb15be62798d2b7db35ba41040d903bb5297c18d3813421c956eb1c4486d7d6905b52375eb941a3b91f1ae7df76389d8954fa514
SSDEEP

1536:x+84GGpVl9qUKw5wfQtB+5GQOTdEhALYywBu3PGVQ7dy:15Gpxtwg+5pOTmT2PG27dy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f021b2e87d7e93a518457fd7c175a2a_JaffaCakes118

Files

6f021b2e87d7e93a518457fd7c175a2a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1405b97b615751afaa909eba25b4804d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
TerminateProcess
GetProcAddress
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetCommandLineW
GetStartupInfoA
lstrcpyW
GetLastError
LoadLibraryW
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
GetVersionExW
Sleep
CreateProcessW
CloseHandle
GetExitCodeProcess
GetSystemDirectoryW
GetExitCodeThread
TerminateThread
WaitForSingleObject
SetEvent
CreateMutexW
WaitForMultipleObjects
CreateThread
CreateEventW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
ReleaseMutex
OpenFileMappingW
OpenEventW
SetLastError
FreeLibrary
LoadLibraryA
HeapFree
GetProcessHeap
HeapAlloc
DeleteCriticalSection

msvcrt

__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
__p__fmode
__p__commode
wcsncpy
_XcptFilter
_adjust_fdiv
_c_exit
wcstok
_wcsicmp
swprintf
srand
_wcsnicmp
wcslen
fopen
vfprintf
fputs
_vsnprintf
fflush
fclose
__setusermatherr
_initterm
__getmainargs
_acmdln
_cexit
_exit
exit
wcsncat

user32

GetWindowRect
LoadStringW
LoadCursorW
GetSysColorBrush
RegisterClassW
InvalidateRgn
DefWindowProcW
GetClientRect
BeginPaint
EndPaint
UnregisterClassW
GetDesktopWindow
GetWindowLongW
EnableWindow
DialogBoxParamW
IsWindow
GetParent
GetDlgItem
EndDialog
LoadIconW
MessageBoxW
SendDlgItemMessageW
PostMessageW
SetWindowLongW
SystemParametersInfoW
GetDC
ReleaseDC
SendMessageW
EnumWindows
GetSystemMetrics
SetForegroundWindow
GetWindowThreadProcessId
GetClassNameW
SetWindowPos

winmm

waveInGetDevCapsA
PlaySoundW
waveOutGetDevCapsW
waveOutSetVolume
waveOutGetVolume
mixerGetID
waveOutGetDevCapsA
waveInGetDevCapsW
timeGetTime

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
StringFromGUID2

advapi32

RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegFlushKey

gdi32

LineTo
Rectangle
GetStockObject
CreateSolidBrush
MoveToEx
GetDeviceCaps
CreateFontIndirectW
DeleteObject
CreatePen
SelectObject

dsound

ord1

comctl32

PropertySheetW
ord17
CreatePropertySheetPageW

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uuu9
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1405b97b615751afaa909eba25b4804d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

winmm

ole32

advapi32

gdi32

dsound

comctl32

Sections

.text Size: 47KB - Virtual size: 46KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 27KB - Virtual size: 26KB

.uuu9 Size: 7KB - Virtual size: 6KB

.text
Size: 47KB - Virtual size: 46KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 27KB - Virtual size: 26KB

.uuu9
Size: 7KB - Virtual size: 6KB