88bdacf074bcfe30ce5a3b8fbe7ac858_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

88bdacf074bcfe30ce5a3b8fbe7ac858_JaffaCakes118
Size

546KB
MD5

88bdacf074bcfe30ce5a3b8fbe7ac858
SHA1

bb2f67e88aad1ce2cc79bb879b943d74962d4bea
SHA256

78b6656dfec66410bf1dac33631aefad3051337a9543c44d0be031cb04ca0ca0
SHA512

015830589f5dc28643712d6bb092b34151d91e70040836f36f23d9fd7276a3309a4cb5c302b920351c2bad16d4b2d801aa60846de05161fe06a1f28acee5c450
SSDEEP

12288:HWPZ0sWpkqRU9+QRicq5GCr7O7DxD18gIwJ3Cgt1TU22:H20n58O7O7DxD1lIwwi1TUD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88bdacf074bcfe30ce5a3b8fbe7ac858_JaffaCakes118

Files

88bdacf074bcfe30ce5a3b8fbe7ac858_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5099601b3490979ad7a1b73064a86a3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
WritePrivateProfileSectionW
EnumResourceNamesW
DuplicateHandle
GetModuleHandleA
ExpandEnvironmentStringsW
EnumTimeFormatsW
CreatePipe
CreateWaitableTimerA
GetLogicalDriveStringsA
SetEnvironmentVariableW
ClearCommBreak
WriteFile
SetCurrentDirectoryA
IsBadReadPtr
GetLargestConsoleWindowSize
IsBadWritePtr
ScrollConsoleScreenBufferA
_llseek
OutputDebugStringA
ReleaseSemaphore
GlobalFindAtomW
LoadLibraryExW
SetConsoleWindowInfo
GetConsoleCursorInfo
Beep
VirtualQuery
FileTimeToLocalFileTime
RemoveDirectoryA
GetBinaryTypeA
GetStringTypeExW
GetUserDefaultLCID
GetCommConfig
GetVersion
FindCloseChangeNotification
FindResourceExA
CreateDirectoryA
FlushConsoleInputBuffer
CreateNamedPipeW
SetConsoleTitleA
SetMailslotInfo
lstrcmpiA
GetFileAttributesExA
GlobalFindAtomA
VirtualFree
GetSystemInfo
GlobalUnlock
SearchPathW
VirtualQueryEx
GetHandleInformation
GetFileAttributesA
WritePrivateProfileStringW
SetTimeZoneInformation
SetConsoleOutputCP
CreateEventA
GlobalFlags
GetDriveTypeW
GetSystemDirectoryW
WriteConsoleOutputCharacterA
GetProfileIntA
GetBinaryTypeW
IsValidLocale
ReadConsoleInputW
TryEnterCriticalSection
LeaveCriticalSection
FindResourceExW
SwitchToFiber
SetNamedPipeHandleState
DeleteCriticalSection
GetUserDefaultLangID
GetThreadContext
OpenMutexA
VirtualProtect
GetLongPathNameA
SetFileTime
VirtualAlloc
QueryDosDeviceA
GetThreadPriority
SetThreadPriorityBoost
SetThreadLocale
GetPrivateProfileSectionW
GetOEMCP
GetACP
OutputDebugStringW
ExitProcess

user32

PostThreadMessageW
GetWindowDC
GetTopWindow
FindWindowA
GetAncestor
CreateDialogIndirectParamW
ShowOwnedPopups
GetNextDlgGroupItem
IsWindowVisible
EnumWindows
InflateRect
SetForegroundWindow
EnumThreadWindows
UnionRect
GetDialogBaseUnits
GetMessageA
GetClassInfoExW
DrawCaption
WinHelpA
InvertRect
SetCaretPos
SetCapture
GrayStringA
LoadIconW
OpenClipboard
DeferWindowPos
CreateDialogIndirectParamA
DragDetect
ClipCursor
ShowCursor
CreateDesktopW
GetUpdateRect
GetMenuItemInfoA
BeginDeferWindowPos
GetMenuInfo
ValidateRgn
CharPrevA
ChangeMenuA
GetClassInfoA
SetThreadDesktop
GetMenuStringW
EmptyClipboard
IsCharUpperW
NotifyWinEvent
SetMessageQueue
SetRect
CreateAcceleratorTableA

gdi32

CreateCompatibleDC
ExtCreatePen
GetCharWidthA
ExtTextOutW
CreateRectRgn
SetPolyFillMode
StrokeAndFillPath
DPtoLP
DeleteEnhMetaFile
InvertRgn
LineTo
LPtoDP
IntersectClipRect
CreatePolyPolygonRgn
GetOutlineTextMetricsA

comdlg32

ChooseFontW
GetOpenFileNameA

advapi32

ChangeServiceConfigW
InitializeAcl
UnlockServiceDatabase
RegConnectRegistryW
LookupAccountNameA
IsValidSid
RegSetValueExW
GetSecurityDescriptorLength
RegReplaceKeyW
ImpersonateLoggedOnUser
GetAclInformation
GetFileSecurityA
NotifyChangeEventLog
AllocateLocallyUniqueId
RegSaveKeyW
GetAce
RegSetValueW
SetThreadToken
CryptGetKeyParam
SetFileSecurityA
SetTokenInformation
DuplicateToken

shell32

SHLoadInProc
SHGetDesktopFolder
SHFileOperationW
SHGetSettings

ole32

OleRegGetUserType
CoImpersonateClient

oleaut32

SafeArrayGetElement
SysFreeString
VariantCopy
SysAllocStringLen

comctl32

CreatePropertySheetPageW
ImageList_BeginDrag

msvcrt

_vsnwprintf
__doserrno
abort
system
ftell
_flushall
freopen
ferror
fscanf
_chdrive
_umask
_strupr
_splitpath
_mbsnbicmp
_mbsrchr
signal
_wcsdup
_errno
atof
strpbrk
fputc
_stat

Sections

.text
Size: 8KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 252KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5099601b3490979ad7a1b73064a86a3e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

msvcrt

Sections

.text Size: 8KB - Virtual size: 203KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 252KB - Virtual size: 250KB

.rsrc Size: 8KB - Virtual size: 5KB

.text
Size: 8KB - Virtual size: 203KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 252KB - Virtual size: 250KB

.rsrc
Size: 8KB - Virtual size: 5KB