aa3e8aa72b1c9a26e0b83c81365397e8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

aa3e8aa72b1c9a26e0b83c81365397e8_JaffaCakes118
Size

120KB
MD5

aa3e8aa72b1c9a26e0b83c81365397e8
SHA1

3a06d6670f0446a2db609721e66cd7cdc0c39a73
SHA256

45cc4858ddf081b689b60f51ab35ce0b4ef59f0d5c5c5128e177f479bb325404
SHA512

24c36f660736ce46bc7f86b65077aa476de7d0de813b6ed58c3698140619d3eda47832ba307552e3224f12cf1367ca0e9f2aa81c631b8c17f0856f6313bf6e21
SSDEEP

3072:WDmC4OaFNplfvTQ0sxBc727a3t2JesgH6t:WD3aFNpxccbt2Jee

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa3e8aa72b1c9a26e0b83c81365397e8_JaffaCakes118

Files

aa3e8aa72b1c9a26e0b83c81365397e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f658215fe23471f66b0940c40dea38f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AddAccessAllowedAce
RegQueryValueExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CopySid
GetLengthSid
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
OpenProcessToken
OpenThreadToken
GetTokenInformation
LookupAccountNameA
IsValidSecurityDescriptor
GetSecurityDescriptorGroup
GetSecurityDescriptorOwner
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
IsValidAcl
RegQueryInfoKeyA
GetAce
InitializeAcl
GetSecurityDescriptorDacl
GetKernelObjectSecurity
AddAce
GetAclInformation
AddAccessDeniedAce
DeleteAce
EqualSid
AdjustTokenPrivileges
LookupPrivilegeValueA

gdi32

ExtTextOutW
GetClipBox
DeleteObject
CreateFontIndirectA
ExtTextOutA
SetBkColor
GetDCOrgEx
GetTextExtentPointW
SelectObject
SetTextColor
SetBkMode
GetObjectA

kernel32

lstrlenA
lstrcmpiA
lstrcpynA
lstrlenW
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
MultiByteToWideChar
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
DebugBreak
InterlockedIncrement
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleA
GetCurrentProcess
GetCurrentThread
WaitForSingleObject
lstrcpyA
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
lstrcatA
GetVersionExA
LocalAlloc
LocalFree
GlobalFree
GlobalAlloc
InterlockedDecrement
GetCommandLineA
GetProcAddress
LockResource
LoadLibraryA
lstrcmpA
GetTickCount
SetThreadPriority
GetThreadPriority
CompareStringA
CompareStringW
GetSystemDefaultLangID
UnhandledExceptionFilter
ExitProcess
VirtualAlloc
TerminateProcess
HeapCreate
GetVersion
VirtualFree
HeapFree
HeapAlloc
GetStartupInfoA
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStrings
SetConsoleCtrlHandler
FreeEnvironmentStringsA
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
HeapReAlloc
GetFileType
RtlUnwind
WriteFile
GetStringTypeA
GetStringTypeW
FlushFileBuffers
LCMapStringA
LCMapStringW
SetStdHandle
SetFilePointer

user32

ClientToScreen
EnableMenuItem
GetWindow
EnableWindow
FindWindowA
DestroyWindow
IsWindow
GetSystemMenu
PtInRect
GetCursorPos
SetRect
TrackPopupMenu
DrawFrameControl
GetClientRect
BeginPaint
EndPaint
SystemParametersInfoA
UpdateWindow
CopyRect
ReleaseCapture
GetMessagePos
EqualRect
IsZoomed
GetDesktopWindow
InflateRect
LoadCursorA
LoadIconA
CreateDialogParamW
SendMessageW
GetDlgItem
SendDlgItemMessageA
SendDlgItemMessageW
MoveWindow
CharLowerA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
MessageBoxA
GetMessageA
IsDialogMessageA
CharNextA
KillTimer
SendMessageTimeoutA
RegisterClassA
CreateWindowExA
SetWindowLongA
GetWindowLongA
DefWindowProcA
SendMessageA
SetWindowPos
ShowWindow
RegisterClassExA
GetWindowThreadProcessId
SetWindowTextA
InvalidateRect
UnregisterClassA
wsprintfW
GetSysColor
RegisterWindowMessageA
SetFocus
GetForegroundWindow
GetFocus
OffsetRect
IntersectRect
wsprintfA
CreateDialogParamA
GetParent
SetRectEmpty
PostQuitMessage
PeekMessageA
SetForegroundWindow
PostMessageA
DispatchMessageA
MsgWaitForMultipleObjects
TranslateMessage
ScreenToClient
LoadStringA
SetCapture
IsRectEmpty
IsWindowVisible
SetTimer

ole32

CoMarshalInterface
CoInitialize
CoUninitialize
CoCreateInstance
CoRevokeClassObject
CoRegisterClassObject
ProgIDFromCLSID
CoUnmarshalInterface
CreateStreamOnHGlobal
CoReleaseMarshalData
StringFromCLSID
OleLoadFromStream
OleSaveToStream
WriteClassStm
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

RegisterTypeLi
CreateErrorInfo
SetErrorInfo
LoadRegTypeLi
VariantCopy
VariantChangeType
VariantClear
VariantInit
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysFreeString
SysStringLen
SysAllocStringLen
VarI4FromStr
LoadTypeLi

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f658215fe23471f66b0940c40dea38f6

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

user32

ole32

oleaut32

Sections

.text Size: 96KB - Virtual size: 92KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 8KB - Virtual size: 76KB

.text
Size: 96KB - Virtual size: 92KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 8KB - Virtual size: 76KB