aace148c043b389fcf77c171552395e0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

aace148c043b389fcf77c171552395e0_JaffaCakes118
Size

144KB
MD5

aace148c043b389fcf77c171552395e0
SHA1

76d3db2f202e938247aeaacd1fa3ee9f7d72480f
SHA256

b1887737a4a7b164bf0a7e0df838d9b459211315d713fd8ce8bc726580300951
SHA512

fae401f754f69bd982e90a1bd5d3ffc1d1acb0e042f94a8c2cddf4c68d955ac9e84327d8854e4a18ec14c706598b049b0ab9803769944b989f2ba5f32a3b13a5
SSDEEP

3072:gTZO01axoMkagFZYdIMJxmpmXoecvm0MGmXzmnGu+cB3AWdAZA:gNJ1mFg8LMpm4G0MzmT/m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aace148c043b389fcf77c171552395e0_JaffaCakes118

Files

aace148c043b389fcf77c171552395e0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

389aecae70bea80a2d54950f26d1b46a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetOpenA
InternetGetLastResponseInfoA
HttpQueryInfoA
InternetQueryOptionA
InternetCloseHandle

user32

MsgWaitForMultipleObjects
GetMenuState
GetCursorPos
UnionRect
SetKeyboardState
RegisterWindowMessageA
GetPropA
SetClassLongA
IsWindowUnicode
DeleteMenu
TranslateMDISysAccel
CreateWindowExW
GetActiveWindow
DefWindowProcA
EnumClipboardFormats
OffsetRect
PostThreadMessageA
GetDC
CreatePopupMenu
SetWindowPos
UnpackDDElParam
InsertMenuItemA
IsZoomed
CharToOemA
EnumThreadWindows
SetCaretPos
GetWindowRect
GetScrollInfo
GetWindowPlacement
DrawMenuBar
LoadBitmapA
SetWindowRgn
SetScrollInfo
SetWindowTextA
IsClipboardFormatAvailable
GetSystemMetrics
GetIconInfo
GetWindowLongW

kernel32

SetFileAttributesA
VirtualQueryEx
lstrcpyA
GetCurrentProcess
GetTimeZoneInformation
LocalFree
ResetEvent
HeapFree
LoadLibraryExA
MulDiv
lstrlenW
GlobalReAlloc
SetThreadLocale
LocalLock
UnmapViewOfFile
lstrcmpA
CreateFileMappingA
GetVersion
LocalAlloc
TerminateProcess
MapViewOfFileEx
ReadFile
WaitForMultipleObjects
GetExitCodeThread
FindClose
TerminateProcess
SetThreadAffinityMask
OutputDebugStringA
GetModuleHandleA
CloseHandle
RaiseException
GetWindowsDirectoryA

imm32

ImmSetCompositionFontA

comctl32

ImageList_Replace
ImageList_Remove
ImageList_SetDragCursorImage
ImageList_LoadImageA

version

GetFileVersionInfoA

gdi32

SelectPalette
GetCurrentPositionEx
GetTextExtentPoint32W
SetTextAlign
DeleteObject
SetWindowOrgEx
RectVisible
SetRectRgn
SetEnhMetaFileBits
GetPixel
GetPaletteEntries
GetClipBox
Polygon
GetTextColor
GetBitmapBits
RoundRect
SetPixel
OffsetRgn

shell32

SHBrowseForFolderA
SHGetSpecialFolderPathA
DragQueryFileA
DragFinish

netrqcap

_Nan
_Snan
_LXbig
_FDenorm
_FDscale
_FCosh
_Xbig
_Inf
_LNan
_LDscale
_Sinh

ole32

OleUninitialize
OleSetClipboard
StringFromCLSID
CreateDataAdviseHolder
StringFromGUID2

comdlg32

GetOpenFileNameA
GetSaveFileNameA

oleaut32

CreateErrorInfo
SetErrorInfo

winmm

timeEndPeriod

Sections

.text
Size: 119KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

389aecae70bea80a2d54950f26d1b46a

Headers

DLL Characteristics

File Characteristics

Imports

wininet

user32

kernel32

imm32

comctl32

version

gdi32

shell32

netrqcap

ole32

comdlg32

oleaut32

winmm

Sections

.text Size: 119KB - Virtual size: 120KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 18KB - Virtual size: 20KB

.rsrc Size: 2KB - Virtual size: 4KB

.text
Size: 119KB - Virtual size: 120KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 18KB - Virtual size: 20KB

.rsrc
Size: 2KB - Virtual size: 4KB