ad9d1dc4b3647bf6b7eaf11bcc3d5a50_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ad9d1dc4b3647bf6b7eaf11bcc3d5a50_JaffaCakes118
Size

323KB
MD5

ad9d1dc4b3647bf6b7eaf11bcc3d5a50
SHA1

5ac8061ba4cff972f09c251f2b3757500d9bf7b1
SHA256

386d8481652e632a406b2f9a1da327b87b1d13049c4d7d4d4807670f8f36f891
SHA512

ae56eb78e721bfeac2891b2ab1419e535436e583b535a8d48fd3afa68b2beba0c99f00007bd6943b48e67dee4c5db077205eafb5d46064b71e468af0d800728e
SSDEEP

6144:qW+BIKuTFLVU2HvKtmihnvvLHBtd8gCWiI2cezT+sRz/k:q0TtHvKtmihnvXd8gfiZ+sdk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad9d1dc4b3647bf6b7eaf11bcc3d5a50_JaffaCakes118

Files

ad9d1dc4b3647bf6b7eaf11bcc3d5a50_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fcdd393a3f2ef3c951f3260166bed3ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

comctl32

InitCommonControlsEx

winmm

mixerGetNumDevs
mixerGetDevCapsW
mixerGetLineInfoW

kernel32

lstrcatW
GetLastError
CreateMutexW
CreateFileW
FreeLibrary
GetModuleFileNameW
GetProcAddress
LoadLibraryW
GetVersionExW
ExitProcess
GetTickCount
GetVersion
GetCurrentProcess
FreeResource
WriteFile
CloseHandle
lstrcmpiW
lstrcpynW
GetModuleHandleW
lstrlenW
FindResourceW
SizeofResource
LoadResource
LockResource
GlobalAlloc
GlobalLock
GetLogicalDriveStringsW
lstrcpyW
GetDriveTypeW
GetProcessHeap
HeapAlloc
HeapSize
HeapFree
ReadFile

user32

CallWindowProcW
SetWindowLongW
DialogBoxParamW
SetForegroundWindow
FindWindowW
IsDlgButtonChecked
CheckDlgButton
CreateDialogIndirectParamW
GetWindowLongW
DestroyIcon
LoadIconW
DeleteMenu
GetSubMenu
GetMenu
IsCharAlphaW
IsCharAlphaNumericW
MessageBoxW
PostMessageW
GetSysColorBrush
DestroyMenu
DialogBoxIndirectParamW
AppendMenuW
CreatePopupMenu
LoadStringW
GetFocus
GetDlgCtrlID
SetFocus
GetCursorPos
TrackPopupMenu
GetKeyNameTextW
EndDialog
SystemParametersInfoW
GetSystemMetrics
GetWindowRect
MapWindowPoints
LoadCursorW
SetCursor
EnableWindow
ShowWindow
RedrawWindow
GetDC
FillRect
DrawTextW
CreateWindowExW
SetWindowPos
GetClientRect
wsprintfW
SetWindowTextW
SetDlgItemTextW
GetDlgItem
SendMessageW
LoadBitmapW

gdi32

CreateCompatibleDC
GetTextExtentPoint32W
GetDeviceCaps
DeleteDC
GetStockObject
SetTextColor
CreateFontIndirectW
DeleteObject
SetBkMode
SetBkColor
CreateFontW
ExtTextOutW
SelectObject

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegQueryInfoKeyW

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW

ole32

CreateStreamOnHGlobal

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fcdd393a3f2ef3c951f3260166bed3ab

Headers

DLL Characteristics

File Characteristics

Imports

msimg32

comctl32

winmm

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 6KB - Virtual size: 9KB

.rsrc Size: 272KB - Virtual size: 271KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 6KB - Virtual size: 9KB

.rsrc
Size: 272KB - Virtual size: 271KB