8224b6132712ba0bf6710da6bf5e2fb3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8224b6132712ba0bf6710da6bf5e2fb3_JaffaCakes118
Size

88KB
MD5

8224b6132712ba0bf6710da6bf5e2fb3
SHA1

570087c0ca5a70334d4f0356217517383d161a50
SHA256

906e1ceb0dbf928ab1e4aa005f19296c615827e5716e76338766ceecb75db017
SHA512

68456623e3d0d9426ea63ac1dceef6b2bb870011cacc39ae1fa6dfdfda5fda5bc7320f8889af699f115464d93bb38ff8c854d4626dffb3d05055518fcbac1cd2
SSDEEP

1536:aq9BUHa+SlanwGtYA/dtKfm8hzR6DMAgEas8l6aK8VjKp:aq9+o0nXtDdcf1hdqrKfK84p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8224b6132712ba0bf6710da6bf5e2fb3_JaffaCakes118

Files

8224b6132712ba0bf6710da6bf5e2fb3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b28f1e37db3adc1995bf401ca65650b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
ExitWindowsEx
CharPrevA
GetDlgItemTextA
GetWindowLongA
GetDesktopWindow
DispatchMessageA
SendMessageA
PeekMessageA
GetDlgItem
SetWindowLongA
GetWindowRect
LoadStringA
EnableWindow
EndDialog
SetDlgItemTextA
CallWindowProcA
MsgWaitForMultipleObjects
ShowWindow
MessageBoxA
GetDC
CharNextA
ReleaseDC
SendDlgItemMessageA
MessageBeep
CharUpperA
SetWindowPos
SetWindowTextA
DialogBoxIndirectParamA
SetForegroundWindow

advapi32

RegCloseKey
CryptGetHashParam
RegQueryValueExA
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
RegOpenKeyExA

ole32

OleInitialize
CLSIDFromProgID
CoCreateInstance

gdi32

GetStockObject
DeleteObject
CreateFontIndirectA
GetObjectA

kernel32

ReleaseSemaphore
FindNextFileW
GetSystemDefaultLangID
GetFileSize
CreateDirectoryW
SetUnhandledExceptionFilter
DeviceIoControl
CloseHandle
RemoveDirectoryW
GetFileAttributesW
GetTempPathW
GetCurrentThreadId
GetWindowsDirectoryA
CreateSemaphoreA
FindResourceW
IsBadReadPtr
DeleteFileW
GetSystemDirectoryW
FindFirstFileW
GetPrivateProfileIntW
GetVersionExA
GetUserDefaultLangID
ReleaseMutex
CreateFileW
HeapFree
GetTickCount
GetProcessHeap
VirtualUnlock
lstrlenA
LocalFree
GetPrivateProfileStringW
SetFilePointer
QueryPerformanceCounter
OpenFileMappingW
GetSystemTime
SetFileAttributesA
VirtualAlloc
GetTempFileNameW
CreateFileA
SetEndOfFile
GetStartupInfoA
CreateMutexA
UnhandledExceptionFilter
VirtualFree
VirtualLock
LockResource
GetCurrentProcessId
WriteFile
SetLastError
HeapAlloc
InterlockedDecrement
GetSystemTimeAsFileTime
InterlockedIncrement
FindClose
lstrcmpiA
OpenSemaphoreA
GlobalWire
SizeofResource
GetCurrentProcess
ReadFile
GetLastError
MultiByteToWideChar
LoadResource

ntdll

RtlCreateSecurityDescriptor
NtQueryObject
RtlEqualUnicodeString
NtSetSecurityObject
NtQuerySecurityObject
RtlInitUnicodeString
RtlInitAnsiString

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 130KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b28f1e37db3adc1995bf401ca65650b6

Headers

File Characteristics

Imports

user32

advapi32

ole32

gdi32

kernel32

ntdll

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 6KB - Virtual size: 122KB

.rsrc Size: 3KB - Virtual size: 3KB

.edata Size: 130KB - Virtual size: 191KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 6KB - Virtual size: 122KB

.rsrc
Size: 3KB - Virtual size: 3KB

.edata
Size: 130KB - Virtual size: 191KB