b55572dcf7190c1ab368ef4090e48b45_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b55572dcf7190c1ab368ef4090e48b45_JaffaCakes118
Size

88KB
MD5

b55572dcf7190c1ab368ef4090e48b45
SHA1

04853353dc7c3e2f6967bac3ad73343266c168b1
SHA256

1d0ff1a114a0c8219e40cca895d55de32396032ca7b4f12e6b3179c8e0096afd
SHA512

0330f7c1c75470c30c5136d9e2238e93d7fc23288a94168e97be948428258abe0806dda74e992651b654a20c520f94f1811c69b186d748c526c9e66289346a1c
SSDEEP

1536:aq9BUHa+SlanwGtYA/dtKfm8hzR6DMAgEas8l6aK8VjKD:aq9+o0nXtDdcf1hdqrKfK84D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b55572dcf7190c1ab368ef4090e48b45_JaffaCakes118

Files

b55572dcf7190c1ab368ef4090e48b45_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b28f1e37db3adc1995bf401ca65650b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
ExitWindowsEx
CharPrevA
GetDlgItemTextA
GetWindowLongA
GetDesktopWindow
DispatchMessageA
SendMessageA
PeekMessageA
GetDlgItem
SetWindowLongA
GetWindowRect
LoadStringA
EnableWindow
EndDialog
SetDlgItemTextA
CallWindowProcA
MsgWaitForMultipleObjects
ShowWindow
MessageBoxA
GetDC
CharNextA
ReleaseDC
SendDlgItemMessageA
MessageBeep
CharUpperA
SetWindowPos
SetWindowTextA
DialogBoxIndirectParamA
SetForegroundWindow

advapi32

RegCloseKey
CryptGetHashParam
RegQueryValueExA
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
RegOpenKeyExA

ole32

OleInitialize
CLSIDFromProgID
CoCreateInstance

gdi32

GetStockObject
DeleteObject
CreateFontIndirectA
GetObjectA

kernel32

ReleaseSemaphore
FindNextFileW
GetSystemDefaultLangID
GetFileSize
CreateDirectoryW
SetUnhandledExceptionFilter
DeviceIoControl
CloseHandle
RemoveDirectoryW
GetFileAttributesW
GetTempPathW
GetCurrentThreadId
GetWindowsDirectoryA
CreateSemaphoreA
FindResourceW
IsBadReadPtr
DeleteFileW
GetSystemDirectoryW
FindFirstFileW
GetPrivateProfileIntW
GetVersionExA
GetUserDefaultLangID
ReleaseMutex
CreateFileW
HeapFree
GetTickCount
GetProcessHeap
VirtualUnlock
lstrlenA
LocalFree
GetPrivateProfileStringW
SetFilePointer
QueryPerformanceCounter
OpenFileMappingW
GetSystemTime
SetFileAttributesA
VirtualAlloc
GetTempFileNameW
CreateFileA
SetEndOfFile
GetStartupInfoA
CreateMutexA
UnhandledExceptionFilter
VirtualFree
VirtualLock
LockResource
GetCurrentProcessId
WriteFile
SetLastError
HeapAlloc
InterlockedDecrement
GetSystemTimeAsFileTime
InterlockedIncrement
FindClose
lstrcmpiA
OpenSemaphoreA
GlobalWire
SizeofResource
GetCurrentProcess
ReadFile
GetLastError
MultiByteToWideChar
LoadResource

ntdll

RtlCreateSecurityDescriptor
NtQueryObject
RtlEqualUnicodeString
NtSetSecurityObject
NtQuerySecurityObject
RtlInitUnicodeString
RtlInitAnsiString

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 130KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b28f1e37db3adc1995bf401ca65650b6

Headers

File Characteristics

Imports

user32

advapi32

ole32

gdi32

kernel32

ntdll

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 6KB - Virtual size: 122KB

.rsrc Size: 3KB - Virtual size: 3KB

.edata Size: 130KB - Virtual size: 191KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 6KB - Virtual size: 122KB

.rsrc
Size: 3KB - Virtual size: 3KB

.edata
Size: 130KB - Virtual size: 191KB