acffcfdbd332aef1b9ec43cea616676f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

acffcfdbd332aef1b9ec43cea616676f_JaffaCakes118
Size

109KB
MD5

acffcfdbd332aef1b9ec43cea616676f
SHA1

b576b61afba3c62817b8413bf65183d519cbee55
SHA256

cd23c59d7b749f18fb4cdc85e7bc5da0bb11f5c70d004b3f53a9aaed27736665
SHA512

146342aa5886fd609f5663f2c98bdd9c3048c281f6cd0b2b58a7ccc6bccae971c847f11cc94b99ccbb1b5caabe8e51a6d686acb08f61822119d61bdf5ee6114b
SSDEEP

1536:DBEdE85BDugiym9FyzJauI2Lk83k+3JOufVuFwuPjgoMlePWHbl4g1xECx:DBOBDwymGFaEk8pVuFzPMjoe7P0C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acffcfdbd332aef1b9ec43cea616676f_JaffaCakes118

Files

acffcfdbd332aef1b9ec43cea616676f_JaffaCakes118
.exe windows:6 windows x86 arch:x86

c7b82e478a4e190c99ab6883de665823

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

pintool.pdb

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW

winscard

SCardGetCardTypeProviderNameW
SCardEndTransaction
SCardBeginTransaction
SCardStatusW
SCardReleaseContext
SCardDisconnect
SCardListCardsW
SCardEstablishContext

kernel32

SetErrorMode
MultiByteToWideChar
GetACP
GetLastError
HeapFree
GetProcessHeap
HeapAlloc
HeapReAlloc
GetCPInfoExW
GetProcAddress
LoadLibraryW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
GetVersionExA
GetStartupInfoA
ExitProcess
GetModuleHandleA
RaiseException
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
InterlockedIncrement
SetLastError
InterlockedDecrement
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleW
HeapDestroy
HeapCreate
VirtualFree
OutputDebugStringA
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
VirtualProtect
GetSystemInfo
VirtualQuery
FlushFileBuffers
ReadFile
CloseHandle

ntdll

RtlUnicodeStringToAnsiString
RtlNtStatusToDosError
RtlFreeAnsiString
RtlInitUnicodeString

comctl32

CreatePropertySheetPageW
InitCommonControlsEx
PropertySheetW

scarddlg

ord5

gdi32

DeleteObject
CreateFontIndirectW
GetDeviceCaps

user32

GetSystemMetrics
SetWindowPos
GetForegroundWindow
GetWindowRect
LoadStringW
LoadCursorW
SetCursor
SetWindowLongW
MessageBoxW
SetWindowTextW
GetWindowTextW
DestroyCursor
SetFocus
PostMessageW
ReleaseDC
GetDC
SystemParametersInfoW
GetDlgItem
SendMessageW
EnableWindow
ShowWindow

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xnogsyz
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c7b82e478a4e190c99ab6883de665823

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

winscard

kernel32

ntdll

comctl32

scarddlg

gdi32

user32

Sections

.text Size: 67KB - Virtual size: 67KB

.data Size: 5KB - Virtual size: 11KB

.rsrc Size: 36KB - Virtual size: 37KB

xnogsyz Size: - Virtual size: 4KB

.text
Size: 67KB - Virtual size: 67KB

.data
Size: 5KB - Virtual size: 11KB

.rsrc
Size: 36KB - Virtual size: 37KB

xnogsyz
Size: - Virtual size: 4KB