73df7b2169eedaad94b084326bd10744_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

73df7b2169eedaad94b084326bd10744_JaffaCakes118
Size

432KB
MD5

73df7b2169eedaad94b084326bd10744
SHA1

8446a632a69fcf727466e581afa73c15227fd143
SHA256

42031cfe4e4dee21323afb0f085e59fe18485274beab9ffd483e5c5ce7b008d0
SHA512

7f5582ef2d55a1f0c2f408c28f59aab8d85e81d377eacc8980d1e6d9e385f417d906afe425e4e1d24d529c6e55774423084aecfa2ca14b181f1c9b21ddc7c628
SSDEEP

12288:PkY9cnPzEmCLeub1KxPtDFn/xlmKTN7g16P7:P92nLEmCLeSAxPtp/xcu7g16P7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73df7b2169eedaad94b084326bd10744_JaffaCakes118

Files

73df7b2169eedaad94b084326bd10744_JaffaCakes118
.exe windows:4 windows x86 arch:x86

032d48fcee04d70f21ed3231fc8a04e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\ioehasmj.pdb

Imports

comctl32

InitCommonControlsEx
CreateToolbarEx
ImageList_Destroy
CreateStatusWindowA
ImageList_GetIconSize
ImageList_GetDragImage
ImageList_DrawEx

kernel32

SetThreadAffinityMask
TlsFree
HeapDestroy
GetACP
GetCurrentThreadId
LoadLibraryA
CompareStringA
RtlZeroMemory
GetCurrentThread
GlobalDeleteAtom
GetStringTypeW
SetLocaleInfoW
GlobalGetAtomNameA
GetProfileSectionW
GetLocalTime
TlsGetValue
SetEnvironmentVariableA
FreeEnvironmentStringsA
CreateNamedPipeW
InterlockedIncrement
SetFileAttributesW
TlsSetValue
EnumSystemLocalesA
GetModuleFileNameW
GetStringTypeA
GetFileType
FlushInstructionCache
GetFileAttributesExW
GetStartupInfoA
SetLastError
RtlUnwind
GetThreadSelectorEntry
ReadFile
CompareStringW
TerminateProcess
GetCurrentDirectoryW
HeapFree
WaitNamedPipeA
SetHandleCount
LCMapStringA
ReadConsoleOutputCharacterA
GetWindowsDirectoryA
ExitProcess
GetCPInfo
DuplicateHandle
LCMapStringW
DeleteFiber
GetFullPathNameW
lstrcpynW
SetConsoleWindowInfo
FreeEnvironmentStringsW
IsBadWritePtr
EnumDateFormatsExW
GetCurrencyFormatA
VirtualAlloc
DeleteCriticalSection
LeaveCriticalSection
WriteConsoleOutputA
WriteFile
GlobalReAlloc
InitializeCriticalSection
lstrcmpiW
EnterCriticalSection
WideCharToMultiByte
FindClose
InterlockedExchange
CreateMutexA
InterlockedDecrement
AddAtomW
VirtualQuery
GetSystemTimeAsFileTime
GetEnvironmentVariableA
CreatePipe
GetThreadContext
GetCurrentProcess
GetModuleFileNameA
GetConsoleTitleW
SetFilePointer
FlushFileBuffers
HeapAlloc
GetCommandLineA
lstrcpyW
EnumResourceLanguagesW
GetTimeZoneInformation
VirtualFree
SetPriorityClass
VirtualFreeEx
FindResourceExW
OpenMutexA
GetOEMCP
LoadLibraryExW
GetProcAddress
GetTickCount
GetStdHandle
WriteConsoleOutputW
GetCalendarInfoW
GetEnvironmentStringsW
CloseHandle
SetLocalTime
GetSystemTime
GetCurrentProcessId
SetThreadPriority
lstrcpynA
GetModuleHandleA
GetLastError
MultiByteToWideChar
SetStdHandle
FileTimeToLocalFileTime
LoadResource
HeapReAlloc
GetPrivateProfileStringW
WriteProfileSectionA
SetCurrentDirectoryA
SetConsoleCtrlHandler
OpenMutexW
GetEnvironmentStrings
GetProfileStringW
QueryPerformanceCounter
HeapCreate
UnhandledExceptionFilter
GetVersion
TlsAlloc

user32

SetCursorPos
OpenWindowStationA
EmptyClipboard
UnregisterClassA
MessageBoxA
RegisterWindowMessageA
FindWindowExW
CharPrevA
DispatchMessageW
DestroyWindow
GetPropA
GetMenuCheckMarkDimensions
OffsetRect
RegisterClassExA
DlgDirSelectExW
MessageBoxW
DrawCaption
SetScrollRange
GetWindowWord
DrawIcon
ChildWindowFromPointEx
GetWindowRgn
GetUserObjectInformationA
CreateWindowExA
DdeNameService
CopyRect
DdeConnect
FindWindowA
EndMenu
SetWindowsHookExA
EnableScrollBar
CopyImage
SendIMEMessageExA
CreateDialogIndirectParamW
TabbedTextOutW
CountClipboardFormats
MessageBoxIndirectA
LoadMenuA
DefWindowProcA
DdeFreeStringHandle
ActivateKeyboardLayout
CreateWindowExW
DdeCreateStringHandleA
SetWindowLongA
NotifyWinEvent
GetCapture
ShowWindow
WaitForInputIdle
CallNextHookEx
OpenIcon
CreateWindowStationW
EnumDisplayMonitors
GetUpdateRgn
RegisterClassExW
RegisterClassA

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

032d48fcee04d70f21ed3231fc8a04e9

Headers

File Characteristics

PDB Paths

Imports

comctl32

kernel32

user32

Sections

.text Size: 144KB - Virtual size: 143KB

.rdata Size: 132KB - Virtual size: 128KB

.data Size: 96KB - Virtual size: 111KB

.rsrc Size: 56KB - Virtual size: 52KB

.text
Size: 144KB - Virtual size: 143KB

.rdata
Size: 132KB - Virtual size: 128KB

.data
Size: 96KB - Virtual size: 111KB

.rsrc
Size: 56KB - Virtual size: 52KB