8572849b8e8d0aa42b730b3d6d96d43b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8572849b8e8d0aa42b730b3d6d96d43b_JaffaCakes118
Size

552KB
MD5

8572849b8e8d0aa42b730b3d6d96d43b
SHA1

b400808b6fcfae88c79d88783c0bdf6b504f0391
SHA256

fa8ac709a6e57bd376626112d12fe901fb98155ac56ea4d2bc99b8c837ad1873
SHA512

4b462a797d93ca99a7f89c2bc61eb6fb6b545cf95a05cb5bc757686b90c1802f37397c5f5a20b6091cd8380f436df605f3232ea7f0f3443a56a012ce5a4c6d0c
SSDEEP

12288:rS30AxhhkNTkq7hYP7CMA1SDUqiuoYaLIoMNfSd9kVkN++IudC:e30AV2vhj1KhiCaL+NfU0sI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8572849b8e8d0aa42b730b3d6d96d43b_JaffaCakes118

Files

8572849b8e8d0aa42b730b3d6d96d43b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bf26e28d7f3aa53b36d6d50bcd17175f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

h:\y

Imports

comctl32

DrawStatusText
ImageList_ReplaceIcon
ImageList_Create
ImageList_BeginDrag
InitMUILanguage
ImageList_LoadImageW
CreatePropertySheetPageW
ImageList_DragMove
ImageList_SetDragCursorImage
ImageList_SetBkColor
DrawInsert
ImageList_Remove
InitCommonControlsEx
CreateUpDownControl
ImageList_AddMasked
DrawStatusTextW
ImageList_Destroy
ImageList_LoadImageA
ImageList_SetFlags
ImageList_Read
CreateStatusWindowW
DestroyPropertySheetPage

comdlg32

ReplaceTextA

user32

GetNextDlgGroupItem
DdeSetUserHandle
DdePostAdvise
DestroyWindow
RegisterClassExA
SendMessageTimeoutA
DlgDirSelectComboBoxExW
UnloadKeyboardLayout
GetWindowRect
InsertMenuA
GetAsyncKeyState
DlgDirSelectComboBoxExA
CharUpperBuffW
DrawFocusRect
CreateDialogIndirectParamA
RegisterClassW
DdeNameService
RegisterHotKey
EnumDisplaySettingsW
OpenWindowStationA
DdeKeepStringHandle
CopyIcon
GetScrollRange
ShowWindow
DdeCreateStringHandleA
CreateMenu
RegisterClassA
InSendMessage
ArrangeIconicWindows
OpenInputDesktop
GetClassInfoW
RegisterWindowMessageA
MessageBoxA
LoadImageW
GetUpdateRect
EnumWindowStationsW
SetUserObjectSecurity
DefWindowProcA
IsMenu
InsertMenuW
CreateWindowExW

kernel32

EnumCalendarInfoExW
GetModuleHandleA
lstrcpyn
LoadLibraryA
GetStdHandle
EnterCriticalSection
lstrcmpi
CreateFileA
FreeEnvironmentStringsW
HeapReAlloc
InterlockedIncrement
SetHandleCount
VirtualFreeEx
CompareStringA
LCMapStringW
GetCPInfo
GetStringTypeW
HeapFree
MultiByteToWideChar
GetAtomNameA
ExitProcess
LeaveCriticalSection
ReadFile
LocalFileTimeToFileTime
MoveFileExA
TlsAlloc
GetLogicalDriveStringsW
UnhandledExceptionFilter
GlobalLock
SetFilePointer
CreateDirectoryExW
RtlUnwind
GetConsoleCursorInfo
DeleteCriticalSection
GetProcAddress
FlushInstructionCache
InitializeCriticalSection
GetSystemTime
GetFileType
GetTickCount
HeapCreate
GetLocalTime
OpenWaitableTimerW
CreateMutexW
GetProfileSectionA
WaitCommEvent
GetSystemTimeAsFileTime
VirtualUnlock
GetCurrentThreadId
GetEnvironmentStrings
IsBadWritePtr
TlsFree
GetCommandLineA
FlushFileBuffers
LoadModule
CloseHandle
Sleep
SetVolumeLabelW
InterlockedExchange
HeapAlloc
GetThreadPriorityBoost
LCMapStringA
GetLastError
DeleteFiber
WriteFile
CreateMutexA
GetCurrencyFormatW
GetEnvironmentStringsW
FreeEnvironmentStringsA
SetEnvironmentVariableA
GetModuleFileNameW
HeapDestroy
OpenMutexA
GetLocaleInfoW
GlobalAddAtomA
GetCurrentProcess
GetEnvironmentVariableW
LockFile
WriteConsoleW
GetCalendarInfoW
SetStdHandle
GetFileAttributesA
InterlockedDecrement
GetVersion
GetStringTypeA
lstrlen
SetConsoleActiveScreenBuffer
VirtualFree
SetLastError
VirtualAlloc
GetModuleFileNameA
WriteConsoleOutputA
TlsGetValue
TlsSetValue
GetCurrentThread
GetCommandLineW
lstrcmp
GetStartupInfoW
GetCurrentProcessId
TerminateProcess
GetTimeZoneInformation
QueryPerformanceCounter
SetThreadIdealProcessor
WideCharToMultiByte
CompareStringW
OpenSemaphoreW
SetComputerNameA
VirtualQuery
GetStartupInfoA

Sections

.text
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bf26e28d7f3aa53b36d6d50bcd17175f

Headers

File Characteristics

PDB Paths

Imports

comctl32

comdlg32

user32

kernel32

Sections

.text Size: 152KB - Virtual size: 149KB

.rdata Size: 256KB - Virtual size: 254KB

.data Size: 116KB - Virtual size: 140KB

.rsrc Size: 24KB - Virtual size: 20KB

.text
Size: 152KB - Virtual size: 149KB

.rdata
Size: 256KB - Virtual size: 254KB

.data
Size: 116KB - Virtual size: 140KB

.rsrc
Size: 24KB - Virtual size: 20KB