b8d7f4ec5ff7e51c523bf346d248c2f1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b8d7f4ec5ff7e51c523bf346d248c2f1_JaffaCakes118
Size

74KB
MD5

b8d7f4ec5ff7e51c523bf346d248c2f1
SHA1

f304cf366ad718ecf855d7a0562ea86343891f28
SHA256

644f6dec29f627d96fb36505b21f75015b054e7465fd35eeb4c1593e0db9e9c6
SHA512

966f8d24e57215c03b54ed04923592f7b61d5e1a5c57951b00197c86a34e4a54d7b360af3c0c1cf322187ea8c16ea6cb3b6cc2cd3fcf06b4969d33f93bbacc73
SSDEEP

1536:KoBD9nt+A/ktfCbyHoIrI5yzga/idf5vqk+4i0/p1Rh:jD9IA/JGHBc55vdftqkN/Rh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8d7f4ec5ff7e51c523bf346d248c2f1_JaffaCakes118

Files

b8d7f4ec5ff7e51c523bf346d248c2f1_JaffaCakes118
.exe windows:6 windows x86 arch:x86

8b9c04bbbff23b005a3459f0614b0ec4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DFDWiz.pdb

Imports

advapi32

TraceMessage
OpenProcessToken
RegEnumKeyExW
EventWrite
RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
InitiateShutdownW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
EventUnregister
EventRegister
RegEnumValueW

kernel32

GlobalFree
MulDiv
HeapFree
HeapAlloc
WriteFile
CreateFileW
GetCurrentProcess
GetCurrentThreadId
LocalFree
CreateEventW
OpenMutexW
FormatMessageW
GetProcessHeap
RegisterApplicationRestart
HeapSetInformation
GetSystemTime
SystemTimeToFileTime
CloseHandle
LoadLibraryA
OutputDebugStringA
GetModuleFileNameW
SetLastError
GetLastError
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetModuleHandleA
CreateMutexW
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoA
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
GetVolumePathNamesForVolumeNameW
DeviceIoControl
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetVersionExW

gdi32

DeleteObject
SetAbortProc
SetMapMode
GetDeviceCaps
CreateFontIndirectW
SelectObject
StartDocW
StartPage
EndPage
EndDoc
AbortDoc
DeleteDC

user32

SendMessageW
DefWindowProcW
SetWindowLongW
DestroyWindow
DialogBoxParamW
EndDialog
SetDlgItemTextW
LoadStringW
MessageBoxW
SetCursor
GetWindowLongW
SetWindowPos
LoadIconW
CreateWindowExW
MsgWaitForMultipleObjects
DispatchMessageW
PeekMessageW
LoadCursorW
PostMessageW
GetParent
ShowWindow
GetDlgItem
TranslateMessage
IsDialogMessageW
EnableWindow
CreateDialogParamW
SetFocus
EnumThreadWindows
DrawTextW

msvcrt

memset
_ftol2_sse
_wcslwr
_wcsupr
wcsstr
??2@YAPAXI@Z
??3@YAXPAX@Z
_vsnwprintf
__getmainargs
_controlfp
?terminate@@YAXXZ
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
__CxxFrameHandler3
_wcsicmp
memcpy
_cexit

shell32

ShellExecuteExW

ole32

StringFromGUID2
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateGuid
CoCreateInstance

ntdll

WinSqmAddToStream
WinSqmEventEnabled
WinSqmEventWrite
WinSqmEndSession
NtQuerySystemTime
WinSqmStartSession

userenv

GetUserProfileDirectoryW

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces

oleaut32

SysAllocString
VariantInit
SysFreeString
VariantClear

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8b9c04bbbff23b005a3459f0614b0ec4

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

kernel32

gdi32

user32

msvcrt

shell32

ole32

ntdll

userenv

setupapi

oleaut32

Sections

.text Size: 54KB - Virtual size: 53KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 11KB - Virtual size: 24KB

.text
Size: 54KB - Virtual size: 53KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 11KB - Virtual size: 24KB