86ed9945f4d05fead06e3bc7905da70d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

86ed9945f4d05fead06e3bc7905da70d_JaffaCakes118
Size

321KB
MD5

86ed9945f4d05fead06e3bc7905da70d
SHA1

bb35b779ad34f2d05b252331f6598a519fffed38
SHA256

2b5ff2546f304c5becee95a33f4eef88ee107c270c0c683e9c2142a3c7ddaf12
SHA512

f86f6455795bae5880080aaa848b0b3a9870f966f4c8f7c0b47d199b7ec9ceb09418e8872e2043a1b13cb97744a3c44c1e7de5323546605843672585316c6137
SSDEEP

6144:jP5mRBEvwZXfzFDXlwL16MAvcUmoQDVyNfuOiodMHnptyKqCBz3:bAYkXtXlwjTDVyZOSWt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86ed9945f4d05fead06e3bc7905da70d_JaffaCakes118

Files

86ed9945f4d05fead06e3bc7905da70d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2641baaa4071df38bf3516114843186b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

iswctype
fopen
fprintf
fclose
wcstol
_ltow
memmove
wcschr
_splitpath
_snprintf
sprintf
_except_handler3
_wmakepath
_close
_snwprintf
wcsncat
_open
_wstat
_stat
_winmajor
memset
_access
_wfullpath
_fullpath
strcmp
_errno
swprintf
calloc
wcsncmp
_wcsnicmp
wcscpy
wcsrchr
wcscat
_wsplitpath
wcslen
free
malloc
_wopen
_waccess
wcscmp
_wcsicmp
wcsncpy

comctl32

PropertySheetW
ImageList_ReplaceIcon
ImageList_Create
PropertySheetA

shell32

SHGetSpecialFolderLocation
SHGetFileInfoA
SHGetMalloc
SHChangeNotify
SHGetDesktopFolder

user32

IsDlgButtonChecked
CheckDlgButton
LoadBitmapA
DispatchMessageA
GetMessageA
GetWindow
FindWindowExA
ReleaseDC
CharUpperBuffW
FindWindowA
GetActiveWindow
wsprintfA
DialogBoxParamA
PostQuitMessage
CountClipboardFormats
DialogBoxParamW
EndDialog
SetFocus
OffsetRect
ShowWindow
PostMessageA
GetInputState
LoadMenuA
IsWindow
LoadStringW
LoadStringA
SetWindowTextW
SetWindowTextA
GetWindowTextW
GetWindowTextA
MessageBoxW
LoadIconA
EnableWindow
CreateWindowExA
SendMessageA
RegisterClassExA
DefWindowProcA
LoadCursorA
GetClipboardOwner
GetForegroundWindow
GetDoubleClickTime
GetFocus
SetCursor
GetClipboardSequenceNumber
GetDlgItem
EnumWindows
TranslateMessage
SetWindowLongA
SendMessageW
GetWindowLongA
MessageBoxA
GetDesktopWindow
GetClipboardViewer
GetDlgCtrlID
GetCapture
GetParent
GetWindowRect
GetCaretBlinkTime
GetSystemMetrics
MoveWindow

ole32

CoCreateInstance
CoInitialize
CoUninitialize

kernel32

GetCurrentProcessId
TlsSetValue
GetLogicalDrives
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoA
GetTickCount
TerminateProcess
OpenMutexA
InterlockedExchange
GetSystemTimeAsFileTime
OpenEventW
CloseHandle
FindFirstFileA
InterlockedCompareExchange
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentDirectoryA
GetThreadLocale
FindNextFileA
GetProcessHeap
GetDateFormatA
GetTempFileNameA
LocalFree
CreateEventA
DisableThreadLibraryCalls
GetModuleFileNameA
FindResourceA
DeleteCriticalSection
GetVersionExA
InterlockedDecrement
HeapCreate
TlsFree
GetOEMCP
InitializeCriticalSection
HeapFree
SetFileAttributesA
GetStdHandle
lstrcpynW
VerLanguageNameW
VerLanguageNameA
WaitForSingleObjectEx
CreateSemaphoreW
SetErrorMode
EnterCriticalSection
FindResourceW
GlobalFree
GetVersion
SetLastError
SetFilePointer
LeaveCriticalSection
GetPrivateProfileStringW
GetPrivateProfileStringA
GetCommandLineA
DeleteFileW
DeleteFileA
CreateDirectoryW
CreateDirectoryA
GetUserDefaultUILanguage
IsDebuggerPresent
WritePrivateProfileStringW
FormatMessageW
WritePrivateProfileStringA
ReadFile
GetTempPathW
TlsAlloc
ResetEvent
GetTempPathA
GetSystemDirectoryW
PulseEvent
GetSystemDirectoryA
GetCurrentProcess
GetProfileStringW
GlobalMemoryStatusEx
GetProfileStringA
AreFileApisANSI
LoadLibraryExW
LoadLibraryExA
GetLastError
WriteFile
HeapAlloc
OutputDebugStringW
CreateThread
GetLogicalDriveStringsW
FindFirstFileW
FindNextFileW
GetAtomNameA
GetUserDefaultLangID
FindClose
LoadLibraryA
GetACP
GetProcAddress
FreeLibrary
AddAtomA
lstrlenW
GetModuleHandleA
WideCharToMultiByte
CreateFileW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
MultiByteToWideChar
CreateFileA

advapi32

RegOpenKeyExA
RegOpenKeyExW
RegCreateKeyExA
RegCreateKeyExW
RegDeleteValueA
RegDeleteValueW
RegSetValueExA
RegSetValueExW
RegQueryInfoKeyA
RegQueryInfoKeyW
RegDeleteKeyA
RegDeleteKeyW
RegQueryValueExA
RegQueryValueExW
RegEnumValueA
RegEnumValueW
RegEnumKeyExA
RegEnumKeyExW
RegCloseKey

comdlg32

GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetSaveFileNameW

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueA

Sections

.text
Size: 93KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 194KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 65KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2641baaa4071df38bf3516114843186b

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

comctl32

shell32

user32

ole32

kernel32

advapi32

comdlg32

version

Sections

.text Size: 93KB - Virtual size: 95KB

.data Size: 194KB - Virtual size: 206KB

.bss Size: - Virtual size: 65KB

.rsrc Size: 29KB - Virtual size: 28KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 93KB - Virtual size: 95KB

.data
Size: 194KB - Virtual size: 206KB

.bss
Size: - Virtual size: 65KB

.rsrc
Size: 29KB - Virtual size: 28KB

.reloc
Size: 4KB - Virtual size: 4KB