a07e5615d34938bb2e5ed6e4afd59625_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a07e5615d34938bb2e5ed6e4afd59625_JaffaCakes118
Size

449KB
MD5

a07e5615d34938bb2e5ed6e4afd59625
SHA1

02b67986e9034b55bf4f492b1b7cd962e5e30e39
SHA256

3260470220338d8da383c33b894f91121afe7dd70b5a673e7f603857c7b871d4
SHA512

ad9bd27b2229c2601440919577b1b738d55035a3f065d267e6a33208a93ba7ee08541e35cec4b810923ad2d5d1fe05fc9c7113af63a3cf46495ec8b9240e7e39
SSDEEP

6144:EdNn9ezJjyCyvHa9D/ArX8c3/pJZh3TktVk5Ekbf5AOlG7RjYEh+k:89ezwCyfa9+J33TktVk5Hbf5QjPMk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a07e5615d34938bb2e5ed6e4afd59625_JaffaCakes118

Files

a07e5615d34938bb2e5ed6e4afd59625_JaffaCakes118
.exe windows:5 windows x86 arch:x86

37ecb7ed42a2682cfbbba0bb9abc1a71

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Projects\LightInstaller 471\trunc\Release\LightInstaller.pdb

Imports

ws2_32

gethostbyname
WSAStartup
WSAGetLastError
closesocket
listen
bind
htons
socket
gethostname
connect
accept
send
recv

wininet

HttpQueryInfoA
FtpCommandA
FtpFindFirstFileA
InternetGetCookieA
InternetCreateUrlA
InternetCanonicalizeUrlA
InternetCrackUrlA
HttpSendRequestExA
HttpEndRequestA
InternetGetLastResponseInfoA
FtpSetCurrentDirectoryA
InternetAutodial
InternetCloseHandle
InternetWriteFile
InternetSetOptionA
InternetQueryOptionA
InternetReadFile
HttpSendRequestA
InternetOpenA
InternetConnectA
HttpOpenRequestA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

DeleteFileA
RemoveDirectoryA
Sleep
MulDiv
WideCharToMultiByte
GetLocalTime
SystemTimeToFileTime
FileTimeToDosDateTime
GetFileSizeEx
CloseHandle
GetModuleFileNameA
LoadLibraryA
lstrcatA
CreateFileA
GetCurrentProcessId
TerminateProcess
FreeLibrary
lstrlenA
lstrcmpiA
MultiByteToWideChar
IsDBCSLeadByte
lstrlenW
LoadLibraryExA
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
InterlockedIncrement
SetUnhandledExceptionFilter
LocalFree
CreateDirectoryA
CopyFileA
GetFileAttributesW
CreateDirectoryW
SetFilePointer
SetEndOfFile
FormatMessageA
CreateFileW
ReadFile
WriteFile
GetModuleFileNameW
GetFileSize
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
lstrcpyA
GetCurrentDirectoryA
CompareStringA
GetFileAttributesA
SetFileAttributesA
SetFileTime
MoveFileA
CreateThread
GetFileTime
GetExitCodeThread
TerminateThread
WaitForSingleObject
GetTickCount
CreateMutexA
ReleaseMutex
QueryPerformanceCounter
InterlockedPopEntrySList
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedPushEntrySList
InterlockedCompareExchange
VirtualProtect
GetModuleHandleW
GetSystemInfo
VirtualQuery
ExitThread
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
UnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapSize
HeapCreate
DeleteCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
InitializeCriticalSection
GetProcAddress
FlushInstructionCache
GetCurrentProcess
SetLastError
RaiseException
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
TlsFree
LCMapStringW
GetStringTypeW
ExitProcess
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetSystemTimeAsFileTime
GetLastError
GetTempPathA
LockResource
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
GetConsoleCP
GetConsoleMode
LoadLibraryW
SetStdHandle
WriteConsoleW
FlushFileBuffers
EncodePointer
DecodePointer

user32

CharLowerA
SetTimer
UpdateWindow
CharNextA
DialogBoxParamA
wsprintfA
DispatchMessageA
PeekMessageA
TranslateMessage
KillTimer
GetActiveWindow
SetWindowTextA
GetDC
DestroyWindow
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
CallWindowProcA
GetWindow
GetKeyState
ReleaseCapture
GetCapture
SetCapture
SetFocus
GetWindowLongA
GetSysColorBrush
GetSysColor
SetCursor
PtInRect
GetCursorPos
DefWindowProcA
SetRectEmpty
EndDialog
SetDlgItemTextA
LoadIconA
SetWindowLongA
CreateWindowExA
LoadCursorA
GetClassInfoExA
DrawFocusRect
GetFocus
IsWindowEnabled
SetWindowPos
ReleaseDC
DrawTextA
GetWindowDC
EndPaint
FillRect
GetClientRect
BeginPaint
IsWindow
ShowWindow
EnableWindow
MoveWindow
PostMessageA
MessageBoxA
GetWindowTextA
SendMessageA
LoadBitmapA
GetParent
ScreenToClient
GetWindowRect
GetDlgItem
UnregisterClassA
RegisterClassExA

gdi32

CreateSolidBrush
DeleteObject
SelectObject
GetStockObject
CreateCompatibleDC
SetTextColor
GetDeviceCaps
BitBlt
DeleteDC
SetBkMode
CreateDCA
CreateCompatibleBitmap
GetTextExtentPoint32A
CreateFontIndirectA
SetBkColor
GetObjectA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
RegDeleteValueA
RegEnumKeyExA
RegQueryInfoKeyW
RegCreateKeyExA

shell32

SHGetFolderPathA
ShellExecuteA

ole32

CoInitialize
CoUninitialize
CoCreateGuid
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CLSIDFromProgID
CoGetClassObject
CoGetMalloc
OleRun
StringFromCLSID

oleaut32

VarUI4FromStr

comctl32

PropertySheetA
CreatePropertySheetPageA
DestroyPropertySheetPage

msimg32

TransparentBlt

Sections

.text
Size: 282KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

37ecb7ed42a2682cfbbba0bb9abc1a71

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

wininet

version

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

msimg32

Sections

.text Size: 282KB - Virtual size: 282KB

.rdata Size: 70KB - Virtual size: 69KB

.data Size: 10KB - Virtual size: 17KB

.rsrc Size: 62KB - Virtual size: 62KB

.reloc Size: 23KB - Virtual size: 22KB

.text
Size: 282KB - Virtual size: 282KB

.rdata
Size: 70KB - Virtual size: 69KB

.data
Size: 10KB - Virtual size: 17KB

.rsrc
Size: 62KB - Virtual size: 62KB

.reloc
Size: 23KB - Virtual size: 22KB