aeaec6d6be8074c0ed28f208dd131b33_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

aeaec6d6be8074c0ed28f208dd131b33_JaffaCakes118
Size

166KB
MD5

aeaec6d6be8074c0ed28f208dd131b33
SHA1

17a2dafbecb17e011e0e31113378c08f852a4779
SHA256

e2a8279a746302eaee3b097320d287318e4ae7de434df82d3a1f98d5e04e14f1
SHA512

082a31cbe3d15dcfaff4f111a166a10ff3272338a00b9d56b301aef01ea88653d190510454338371683562f27cba12cc2817b6c1812f348aff8514a082794826
SSDEEP

1536:iNpbWTono2PF9yJH9KBjH7ZoSQoL+Qz6Aj/z1Myap5nJ9NUEn2tTJ3/IYO8J3yro:bdKFOoL16AXVap5Jbjn2z3/1Mrof

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aeaec6d6be8074c0ed28f208dd131b33_JaffaCakes118

Files

aeaec6d6be8074c0ed28f208dd131b33_JaffaCakes118
.exe windows:6 windows x86 arch:x86

3959c5d315644154f491048fbe913a3e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

iedw.pdb

Imports

kernel32

CreateFileMappingW
InitializeCriticalSection
HeapSetInformation
SetUnhandledExceptionFilter
GetCommandLineW
MapViewOfFile
CreateFileW
GlobalFree
OpenProcess
DeleteCriticalSection
SetLastError
CreateProcessW
SearchPathW
FindResourceW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
LoadLibraryExW
GetLastError
LoadResource
GetSystemWindowsDirectoryW
DeactivateActCtx
ActivateActCtx
ReleaseActCtx
CreateActCtxW
OpenEventW
CreateEventW
LoadLibraryW
GetProcAddress
FreeLibrary
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetModuleHandleA
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
CloseHandle
GetModuleHandleW
UnmapViewOfFile
GetTempPathW
GetTickCount
GetTempFileNameW
SetEvent
GetVersionExW
FindResourceExW
GetModuleFileNameW

gdi32

SetTextColor
GetObjectW
CreateFontIndirectW
SetBkMode
CreatePen
SelectObject
Polyline
DeleteObject

user32

GetAncestor
EndDialog
ShowWindow
GetParent
SendMessageW
PostQuitMessage
PeekMessageW
DispatchMessageW
TranslateMessage
MsgWaitForMultipleObjects
SetWindowLongW
DialogBoxParamW
PostMessageW
MessageBoxW
SendDlgItemMessageW
LoadIconW
LoadImageW
SetDlgItemTextW
GetSysColor
SetWindowPos
GetDlgItem
EnableWindow
LoadStringW
SetWindowTextW
GetSysColorBrush
FillRect
DrawIconEx
GetWindowLongW

msvcrt

__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
??_U@YAPAXI@Z
__set_app_type
memcpy
_controlfp
??2@YAPAXI@Z
??_V@YAXPAX@Z
??3@YAXPAX@Z
memset
_vsnwprintf
_wcsnicmp
_wcsicmp
__p__fmode
bsearch

ntdll

RtlUnwind

shlwapi

ord437
SHStrDupW
ord219
PathFindFileNameW
PathRemoveFileSpecW
PathAppendW
PathQuoteSpacesW
StrCmpW
ord158
StrToIntW
ord172

shell32

ord28
ord16
ExtractIconExW
CommandLineToArgvW
SHCreateShellItem
SHGetDesktopFolder
ord152
ord17

dbghelp

MiniDumpReadDumpStream
MiniDumpWriteDump

oleaut32

SysStringLen
SysFreeString
SysAllocString
SysAllocStringLen

ole32

CreateBindCtx
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc

shdocvw

ord159

iertutil

ord32

sfc

SfcIsFileProtected

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 99KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3959c5d315644154f491048fbe913a3e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

gdi32

user32

msvcrt

ntdll

shlwapi

shell32

dbghelp

oleaut32

ole32

shdocvw

iertutil

sfc

advapi32

Sections

.text Size: 47KB - Virtual size: 47KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 8KB - Virtual size: 7KB

.text Size: 99KB - Virtual size: 100KB

.text
Size: 47KB - Virtual size: 47KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 7KB

.text
Size: 99KB - Virtual size: 100KB