b112d0ee37dde5267c8d2b6817c2a700_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b112d0ee37dde5267c8d2b6817c2a700_JaffaCakes118
Size

254KB
MD5

b112d0ee37dde5267c8d2b6817c2a700
SHA1

9676a3f739e3dc645856c67aa51d016f27f9336d
SHA256

2afc66a713f5d5d7d743d41ae8f9f61be09840943fc23a140ff61c90caacb3f1
SHA512

1773a16d35f8924a9cac305ee52e46a791f836aca69ee3fe38e812e0eee1872ec0950e70418c63302f38b6a8ec65d6d6858317a81d953f37b8b8faae0632ea31
SSDEEP

6144:P8x7+Bptx0I6rlkUf1QNMmTThDiQm1vg5+czIsgr8QfQg:P8Apx0I6daMmTThDog5+NsgYQfQg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b112d0ee37dde5267c8d2b6817c2a700_JaffaCakes118

Files

b112d0ee37dde5267c8d2b6817c2a700_JaffaCakes118
.exe windows:4 windows x86 arch:x86

10974da1bfd83cb221219d4dc0e6d4d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Destroy

kernel32

CreateEventA
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
DeleteCriticalSection
GetSystemTime
TryEnterCriticalSection
FindResourceW
SizeofResource
LoadResource
LockResource
lstrlenA
FreeResource
SystemTimeToFileTime
FileTimeToSystemTime
GetModuleHandleW
FindResourceExW
GetPrivateProfileIntW
FreeLibrary
lstrcmpiW
RaiseException
WideCharToMultiByte
DisableThreadLibraryCalls
CreateMutexW
CreateThread
ExitThread
CreateWaitableTimerA
SetWaitableTimer
WaitForMultipleObjects
ResumeThread
ResetEvent
CreateMutexA
ReleaseMutex
WaitForSingleObject
GetStringTypeExW
FlushFileBuffers
CreateFileA
ReadFile
WriteConsoleW
GetConsoleOutputCP
LoadLibraryExW
SetLastError
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
FlushInstructionCache
lstrlenW
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetSystemTimeAsFileTime
GetModuleHandleA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetFileType
SetHandleCount
GetStdHandle
WriteFile
HeapSize
IsValidCodePage
GetOEMCP
GetACP
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
RtlUnwind
LCMapStringA
LCMapStringW
HeapDestroy
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree

user32

DestroyWindow
SetWindowLongW
GetWindowLongW
LoadStringW
ShowWindow
UnregisterClassA
DefWindowProcW
CallWindowProcW
ClientToScreen
MoveWindow
LoadImageW
GetSystemMetrics
CharNextW
SendMessageW
EnableWindow
MessageBoxW
GetWindowRect
IsWindow
CreateWindowExW
LoadCursorW
GetClassInfoExW
RegisterClassExW
GetClientRect

gdi32

DeleteObject

advapi32

RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegDeleteValueW
RegQueryInfoKeyW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegCreateKeyW

ole32

OleSetContainedObject
CLSIDFromProgID
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
CoTaskMemFree
CoCreateInstance

oleaut32

VariantInit
SysFreeString
SysAllocStringLen
VariantClear
LoadRegTypeLi
UnRegisterTypeLi
LoadTypeLi
RegisterTypeLi
VarUI4FromStr
SafeArrayDestroy
SafeArrayCreate
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
VariantChangeType
SysStringByteLen
SysAllocStringByteLen
SysStringLen
VarBstrCat
VarBstrCmp
SysAllocString

shlwapi

SHDeleteKeyW

wininet

InternetGetCookieW

query

FsCiShutdown
LoadIFilter
BindIFilterFromStream
CIMakeICommand
CIRestrictionToFullTree
DoneCIPerformanceData
LocateCatalogsW

verifier

VerifierSetFlags

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.U
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WzVC
Size: 512B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pL
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htAXQ
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wy
Size: 1024B - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.A
Size: 1024B - Virtual size: 938B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gqJCf
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CA
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 212KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10974da1bfd83cb221219d4dc0e6d4d7

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

ole32

oleaut32

shlwapi

wininet

query

verifier

Sections

.text Size: 17KB - Virtual size: 17KB

.U Size: 1KB - Virtual size: 1KB

.WzVC Size: 512B - Virtual size: 744B

.pL Size: 1024B - Virtual size: 1KB

.htAXQ Size: 2KB - Virtual size: 2KB

.rdata Size: 4KB - Virtual size: 4KB

.wy Size: 1024B - Virtual size: 1010B

.A Size: 1024B - Virtual size: 938B

.gqJCf Size: 1024B - Virtual size: 1KB

.CA Size: 1024B - Virtual size: 1KB

.data Size: 212KB - Virtual size: 335KB

.tc Size: 1024B - Virtual size: 1KB

.rsrc Size: 9KB - Virtual size: 9KB

.text
Size: 17KB - Virtual size: 17KB

.U
Size: 1KB - Virtual size: 1KB

.WzVC
Size: 512B - Virtual size: 744B

.pL
Size: 1024B - Virtual size: 1KB

.htAXQ
Size: 2KB - Virtual size: 2KB

.rdata
Size: 4KB - Virtual size: 4KB

.wy
Size: 1024B - Virtual size: 1010B

.A
Size: 1024B - Virtual size: 938B

.gqJCf
Size: 1024B - Virtual size: 1KB

.CA
Size: 1024B - Virtual size: 1KB

.data
Size: 212KB - Virtual size: 335KB

.tc
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 9KB - Virtual size: 9KB