bc20a70a3a476310395bc73c17d786fc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bc20a70a3a476310395bc73c17d786fc_JaffaCakes118
Size

250KB
MD5

bc20a70a3a476310395bc73c17d786fc
SHA1

f346a97dd3f4eadc7a43ffd0ab284a1f18612e57
SHA256

4939bd988bed31c8102fd3eea1106783ea97c2d31b56eab85d740fc234182375
SHA512

9db2c533895c8dbbd7289d18f3e34b16402fab2b96eaf2b2a36c8402cd0edafa1757e04e232b94c0b0ccb6828e276e1af577666f767e80db9ebe4d26ddf03711
SSDEEP

6144:K9rFOnm1ub6SITCugg6D2Di9lhj3X/KXNCtX3gvL4J/dqG:K9/65IT39pDiM9MXFJH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc20a70a3a476310395bc73c17d786fc_JaffaCakes118

Files

bc20a70a3a476310395bc73c17d786fc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cdd1166c5ec214194785b32c77081d78

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

hid

HidP_GetUsages
HidD_GetProductString
HidD_GetAttributes
HidP_GetSpecificValueCaps

advapi32

OpenProcessToken
RegQueryValueExA
GetTokenInformation
RegSetValueExW
OpenThreadToken
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
RegEnumKeyW
RegOpenKeyExA
RegQueryValueExW

atl

ord20
ord58
ord43
ord44

ole32

CoCreateInstance
CoInitializeSecurity

user32

CallNextHookEx
DrawIconEx
MonitorFromPoint
GetPropW
CallWindowProcW
EqualRect
OpenDesktopW
GetSysColorBrush
CharNextW
SetWindowsHookExW
InflateRect
UnregisterDeviceNotification
GetMessageW
ClientToScreen
SystemParametersInfoW
ShowWindow
PostThreadMessageW
DestroyIcon
SetCursorPos
GetDoubleClickTime
FillRect
GetSystemMetrics
SetWindowLongW
IsWindow
GetUserObjectInformationW
GetClientRect
GetDesktopWindow
ReleaseDC

msvcrt

_XcptFilter
__wgetmainargs
??1type_info@@UAE@XZ
_CIpow
_initterm
exit
_c_exit
fputws
_wcsicmp
?terminate@@YAXXZ
__p__commode
swscanf
wcscmp
_cexit
_wfopen
__CxxFrameHandler
fclose
_onexit

setupapi

SetupDiEnumDeviceInterfaces
SetupDiEnumDeviceInfo
SetupDiGetDeviceInterfaceDetailW

kernel32

GetCurrentProcess
InitializeCriticalSection
VirtualAllocEx
GetOverlappedResult
SetPriorityClass
MulDiv
EnterCriticalSection
CloseHandle
CreateEventW
InitializeCriticalSectionAndSpinCount
ResetEvent
VerSetConditionMask
GetTickCount
OpenProcess
GetCommandLineW
UnmapViewOfFile
InterlockedIncrement
HeapAlloc
FreeLibrary
SetPriorityClass
GetCurrentThread
SetWaitableTimer
CompareStringW
MapViewOfFile
GetProcessShutdownParameters
GetProcAddress
CancelWaitableTimer
VirtualFree
SetEvent
WaitForMultipleObjectsEx
QueryPerformanceFrequency
VerifyVersionInfoW
SetThreadExecutionState
lstrlenW

Sections

.text
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 592KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cdd1166c5ec214194785b32c77081d78

Headers

DLL Characteristics

File Characteristics

Imports

hid

advapi32

atl

ole32

user32

msvcrt

setupapi

kernel32

Sections

.text Size: 174KB - Virtual size: 174KB

.data Size: 69KB - Virtual size: 68KB

.rsrc Size: 5KB - Virtual size: 592KB

.text
Size: 174KB - Virtual size: 174KB

.data
Size: 69KB - Virtual size: 68KB

.rsrc
Size: 5KB - Virtual size: 592KB