b16c7b30a978b9c65822a8de97d1125d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b16c7b30a978b9c65822a8de97d1125d_JaffaCakes118
Size

308KB
MD5

b16c7b30a978b9c65822a8de97d1125d
SHA1

55f95d64a320345810b58a9db944ee08d4642329
SHA256

4c4e2e709404195fdf91ea945d5ca0deb5ceddd6eddad27bdc07cd5a6ef4394e
SHA512

d3d379997251662ef477a6b1bb3b093d9ba8c36fa568583418b3958eb4e8d1ce1a312a541ecd982ba5b647e857c5cf81c10795ed79ba70bcea97b63526f61c84
SSDEEP

6144:r0tCk2UheqfFYXArpoXzZ6fTe6VV8k3RrW:wWqfF8zZCvFBr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b16c7b30a978b9c65822a8de97d1125d_JaffaCakes118

Files

b16c7b30a978b9c65822a8de97d1125d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03196503fee42ce04d659c09f0c546e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\xeeolmeqh\bqoxmp.pdb

Imports

comctl32

ImageList_AddMasked
ImageList_ReplaceIcon
InitCommonControlsEx
ImageList_GetIconSize
ImageList_Create
ImageList_GetIcon
ImageList_LoadImageW
PropertySheetW
ord17

kernel32

WideCharToMultiByte
GetPrivateProfileIntA
FreeEnvironmentStringsA
FindClose
GetTickCount
CreateMutexA
GetTimeFormatA
GetModuleHandleA
DeleteFileA
HeapSize
HeapAlloc
SetUnhandledExceptionFilter
GetStartupInfoA
GlobalMemoryStatus
CompareStringW
SuspendThread
IsValidCodePage
SetThreadPriority
DuplicateHandle
GetEnvironmentStrings
HeapReAlloc
ReadFile
FreeLibrary
InterlockedDecrement
GetShortPathNameA
GetConsoleMode
lstrlenA
GetVersion
GetStdHandle
CreateFileA
WaitForMultipleObjects
LCMapStringW
MultiByteToWideChar
LCMapStringA
EnterCriticalSection
TlsAlloc
GlobalAlloc
ReleaseSemaphore
GetEnvironmentStringsW
GetFullPathNameA
QueryPerformanceCounter
WriteFile
TlsFree
SetHandleCount
CreateEventA
GetWindowsDirectoryA
LockResource
GetComputerNameA
GlobalLock
CreateSemaphoreA
LoadLibraryA
SetLastError
HeapFree
GetConsoleOutputCP
SizeofResource
CopyFileA
SetEndOfFile
FreeEnvironmentStringsW
TlsSetValue
lstrlenW
InterlockedIncrement
HeapDestroy
VirtualProtect
GetCurrentProcess
GetThreadLocale
GetTimeZoneInformation
UnhandledExceptionFilter
WriteConsoleW
FileTimeToSystemTime
RtlUnwind
RaiseException
lstrcmpW
GetUserDefaultLangID
WaitForSingleObject
SetFilePointer
GetLocaleInfoA
GetPrivateProfileStringA
LocalFree
GetTempPathA
FileTimeToLocalFileTime
GetSystemInfo
GlobalFlags
GlobalReAlloc
TerminateProcess
GetConsoleCP
GetCurrentDirectoryA
FlushFileBuffers
CreateThread
GetCurrentThreadId
SetEvent
HeapCreate
GetCurrentProcessId
WriteConsoleA
GetModuleFileNameA
VirtualFree
GetACP
EnumSystemLocalesA
CreateFileW
GetFileAttributesA
GetOEMCP
MoveFileA
LeaveCriticalSection
GetSystemTimeAsFileTime
CloseHandle
OutputDebugStringA
LoadResource
DeleteCriticalSection
GetLocalTime
InitializeCriticalSection
GetEnvironmentVariableA
EnumResourceLanguagesA
GlobalHandle
FindFirstFileA
CompareStringA
GetLastError
GetVersionExA
SetEnvironmentVariableA
GetFileSize
VirtualAlloc
GetCurrentThread
GetTempFileNameA
GetStringTypeW
GetCommandLineA
GetCPInfo
SetFileAttributesA
InterlockedExchange
GlobalFree
GetSystemDirectoryA
VirtualQuery
Sleep
GetFileType
GetFileInformationByHandle
SetStdHandle
GetDateFormatA
TlsGetValue
ExitProcess
IsDebuggerPresent
GetProcessHeap
GetStringTypeA
lstrcmpiA
LocalReAlloc
GetProcAddress

advapi32

RegSetValueA
RegEnumKeyA
RegEnumKeyExA
RegCreateKeyExA
InitializeSecurityDescriptor
RegQueryValueA
GetUserNameA
GetFileSecurityA
RegQueryInfoKeyA
RegDeleteValueA
SetSecurityDescriptorDacl
RegEnumValueA
RegOpenKeyA
RegCreateKeyA
SetFileSecurityA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
OpenProcessToken
RegSetValueExA

user32

GetActiveWindow
GetMenuItemCount
WaitForInputIdle
UnregisterClassA
DestroyWindow
DefWindowProcA
DestroyAcceleratorTable
PtInRect
IsIconic
IntersectRect
SetWindowPos
DestroyIcon
LoadStringA
LoadMenuA
DispatchMessageA
DestroyMenu
CopyIcon
GetMessageTime
GetDC
RegisterClassA
MessageBoxA
CreateWindowExA
GetDlgCtrlID
CreateDialogIndirectParamA
IsRectEmpty
GetForegroundWindow
LoadAcceleratorsA
ReleaseCapture
HideCaret
GetClassInfoExA
ScreenToClient
RegisterClassExA
MapWindowPoints
KillTimer
LoadIconA
UnhookWindowsHookEx
FillRect
GetLastActivePopup
GetWindowTextA
TrackPopupMenu
ShowWindow
GetMenu
IsWindowEnabled
SetCapture
MessageBeep
CopyRect
GrayStringA
DrawTextExA
EndDialog
GetSysColorBrush
GetSystemMetrics
LoadCursorA
PeekMessageA
GetScrollInfo
CheckMenuItem
ValidateRect

shlwapi

PathFindFileNameA
PathRemoveFileSpecA
PathIsUNCA
PathFindExtensionA

winmm

mciGetErrorStringA
waveOutGetNumDevs
mixerGetLineInfoA
waveOutGetDevCapsA
mixerGetDevCapsA
waveOutGetVolume
waveOutOpen
waveOutUnprepareHeader
waveOutWrite
waveOutReset
timeGetTime
mixerGetLineControlsA
mixerSetControlDetails
mciSendStringA
mixerGetNumDevs
mciSendCommandA
mixerOpen
waveOutPause
waveOutClose
waveOutRestart
PlaySoundA
mixerGetControlDetailsA
mixerClose
waveOutPrepareHeader

Sections

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03196503fee42ce04d659c09f0c546e9

Headers

File Characteristics

PDB Paths

Imports

comctl32

kernel32

advapi32

user32

shlwapi

winmm

Sections

.text Size: 98KB - Virtual size: 98KB

.rdata Size: 83KB - Virtual size: 83KB

.data Size: 70KB - Virtual size: 70KB

.rsrc Size: 47KB - Virtual size: 47KB

.text
Size: 98KB - Virtual size: 98KB

.rdata
Size: 83KB - Virtual size: 83KB

.data
Size: 70KB - Virtual size: 70KB

.rsrc
Size: 47KB - Virtual size: 47KB