ad03828350ddc178639319944d36cacc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ad03828350ddc178639319944d36cacc_JaffaCakes118
Size

142KB
MD5

ad03828350ddc178639319944d36cacc
SHA1

91a4f79c30712edbe9b95b4917b1df731975d2ba
SHA256

a8593aed9f6614796a6cf1adef6d22fc25ec67af9425657f56be1c6e0336b78f
SHA512

5d221b26778a712eaf1ff9f8d59057582bd3d8eedc85d1e53b609022ed9128d41ac43792e6886a33a059b58b4311a42f31c7104b6ebfebc86136c93de6beb3aa
SSDEEP

3072:R0gMlDriC6rkEMjzUA0rJuhoyOhiKDV3uIQyiqTCHte8O:RKrHEMjJ0eehiAV3uIDTCHte8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad03828350ddc178639319944d36cacc_JaffaCakes118

Files

ad03828350ddc178639319944d36cacc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d22b86140503c9f60459804cdbaeb06a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
VirtualProtect
SetEndOfFile
CreateFileA
VirtualFree
MultiByteToWideChar
GetPrivateProfileStringA
VirtualAlloc
GetTempFileNameW
InterlockedDecrement
WriteConsoleOutputCharacterW
GetProcAddress
GetStartupInfoA
GetModuleHandleW
GetCurrentProcessId
LoadLibraryW
OutputDebugStringA
VerifyVersionInfoW
lstrcmpA
WriteConsoleOutputW
DeleteVolumeMountPointW
FindNextFileW
SetFilePointer
FileTimeToLocalFileTime
ExitThread
LocalAlloc
LCMapStringW
GetModuleHandleA

msvcrt

fflush
_ftol
wcslen
wcschr
_wcsicmp
__getmainargs
wcsncat
_snwprintf
wcsrchr
wcscat
swscanf
malloc
exit
__p__commode
calloc
memset
_adjust_fdiv
__initenv
_wcsnicmp
time
toupper
strpbrk
_purecall
__dllonexit

user32

MsgWaitForMultipleObjects
GetWindowTextLengthW
SetProcessWindowStation
PostThreadMessageW
LoadCursorA
DispatchMessageW
SetDlgItemTextA
CharNextW
SetCursor
SetActiveWindow
UnhookWindowsHookEx
SetRectEmpty
GetDlgItemInt
GetKeyState
DrawMenuBar
DialogBoxParamW
PostQuitMessage
SetWindowLongW
DestroyMenu
SetCapture
SystemParametersInfoW
PtInRect
GetWindowLongA
IsWindowEnabled
DefWindowProcW

gdi32

SetBkColor
CreateRoundRectRgn
GetRegionData
SetPixel
SaveDC
BitBlt
SetWindowExtEx
CreateSolidBrush
SetStretchBltMode
CreateCompatibleDC
GetDeviceCaps
GetStockObject
GetObjectW
MoveToEx
StretchBlt
SelectPalette
CreateFontIndirectW
CreatePalette

tapi32

phoneGetDisplay
MMCGetProviderList
lineAddProvider
lineInitializeExW
lineGetID
lineUnparkA
lineSetupConferenceA
lineGetProviderListW
lineDrop
phoneConfigDialogA
lineSetAgentSessionState
lineSetAgentStateEx
lineAddProviderA
lineGetDevConfigW
lineSetLineDevStatus

Exports

Exports

GetFullDescInfo
ProvidePath

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d22b86140503c9f60459804cdbaeb06a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

tapi32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 36B

.data Size: 50KB - Virtual size: 50KB

.edata Size: 39KB - Virtual size: 38KB

.rsrc Size: 34KB - Virtual size: 33KB

.reloc Size: 512B - Virtual size: 108B

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 36B

.data
Size: 50KB - Virtual size: 50KB

.edata
Size: 39KB - Virtual size: 38KB

.rsrc
Size: 34KB - Virtual size: 33KB

.reloc
Size: 512B - Virtual size: 108B