86f1edcd4f0cc5d129fe77a5a411a232_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

86f1edcd4f0cc5d129fe77a5a411a232_JaffaCakes118
Size

108KB
MD5

86f1edcd4f0cc5d129fe77a5a411a232
SHA1

91d854c48207c58b49274726e9014217254e5bb5
SHA256

01edcb9506c2dc816fc3972fda7522f59fe8606e19adc7e764580bfcc9193df8
SHA512

9abaff32da8775f5846d03eb7128866f9a51d0acd1839ce58bf560482a5e36cdff81d12933e56f7d3f28c25453cd03bd324575010065177e442a916f09716fca
SSDEEP

1536:S8wVfQ2SCV2ggtjLZcdpC6rHnWMdIMgFsmPw9miRlv15zDmrg3jy7pA:PwlXxpxpC+WSWPw91l95uUzy7p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86f1edcd4f0cc5d129fe77a5a411a232_JaffaCakes118

Files

86f1edcd4f0cc5d129fe77a5a411a232_JaffaCakes118
.exe windows:4 windows x86 arch:x86

887e3285a655d7ca020ded9fabf89bb5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17
ImageList_SetBkColor

oleaut32

SysAllocStringLen
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SetErrorInfo
SysAllocString
SysFreeString
SysStringLen
VarI4FromStr
VariantInit

shell32

ShellExecuteW
Shell_NotifyIconW

setupapi

CMP_GetBlockedDriverInfo
SetupDiGetClassImageList
SetupDiGetClassImageIndex
CM_Connect_MachineW
CM_Disconnect_Machine
CM_Get_Child_Ex
CM_Get_Class_Name_ExW
CM_Get_DevNode_Registry_PropertyW
CM_Get_DevNode_Registry_Property_ExW
CM_Get_DevNode_Status_Ex
CM_Get_Device_ID_ExW
CM_Get_Device_ID_List_ExW
CM_Get_Device_ID_List_Size_ExW
CM_Get_Device_Interface_ListW
CM_Get_Device_Interface_List_SizeW
CM_Get_Parent_Ex
CM_Get_Sibling_Ex
CM_Is_Dock_Station_Present
CM_Locate_DevNodeW
CM_Locate_DevNode_ExW
CM_Open_DevNode_Key_Ex
CM_Request_Device_Eject_ExW
SetupDiDestroyClassImageList

shlwapi

StrChrW
wnsprintfW

user32

DestroyWindow
DestroyMenu
DestroyIcon
DefWindowProcW
DialogBoxParamW
CreatePopupMenu
ClientToScreen
CheckDlgButton
CharNextW
AppendMenuW
DispatchMessageW
EndDialog
EnableWindow
FindWindowW
GetClassInfoW
GetDlgItem
GetMessagePos
GetMessageW
GetParent
GetSysColor
GetSystemMetrics
GetWindow
GetWindowLongW
InvalidateRect
IsDialogMessageW
IsDlgButtonChecked
IsWindow
KillTimer
LoadCursorW
LoadIconW
LoadImageW
LoadStringW
MessageBoxW
MsgWaitForMultipleObjects
PeekMessageW
PostMessageW
PostQuitMessage
RegisterClassW
ScreenToClient
SendMessageW
SetCursor
SetTimer
SetWindowLongW
ShowWindow
TrackPopupMenu
TranslateMessage
WinHelpW
wsprintfW
CreateWindowExW

kernel32

FreeLibrary
lstrlenW
lstrlenA
lstrcpynW
lstrcpyW
lstrcmpiW
lstrcmpW
lstrcatW
WriteFile
WideCharToMultiByte
WaitNamedPipeW
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
TerminateProcess
Sleep
SizeofResource
SetStdHandle
SetLastError
SetHandleCount
SetFilePointer
SetEvent
RtlUnwind
ReadFile
QueryPerformanceCounter
OpenEventW
MultiByteToWideChar
LocalReAlloc
LocalFree
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryExW
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GetVolumeNameForVolumeMountPointW
GetVersionExA
GetTickCount
GetSystemTimeAsFileTime
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProcAddress
GetOEMCP
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetFileType
GetExitCodeThread
GetEnvironmentStringsW
GetEnvironmentStringsA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCommandLineA
GetCPInfo
GetACP
DeleteCriticalSection
CloseHandle
CreateEventW
CreateFileW
DebugBreak
FreeEnvironmentStringsW
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FindResourceW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsA

advapi32

GetServiceDisplayNameW
OpenSCManagerW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyW
RegCreateKeyExW
RegCloseKey
CloseServiceHandle

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

887e3285a655d7ca020ded9fabf89bb5

Headers

File Characteristics

Imports

comctl32

oleaut32

shell32

setupapi

shlwapi

user32

kernel32

advapi32

Sections

.text Size: 68KB - Virtual size: 67KB

.data Size: 28KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 68KB - Virtual size: 67KB

.data
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB