bf12dc7cc8d4b249061d1c0a8729d272_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bf12dc7cc8d4b249061d1c0a8729d272_JaffaCakes118
Size

226KB
MD5

bf12dc7cc8d4b249061d1c0a8729d272
SHA1

91c2b9af5882d11d776d9a9d1c0238a2f626d0b2
SHA256

eef146c12e807887e211e251a508e86191f2555c848c04ab01aa569126b24253
SHA512

a09c3e3f5f383fc91d19331c3c14d6a7cf5836c7e70cfdcae108deddc8289aacb3b7619063cc3fdf6e935e528a2a65d3af80fb18cf880044afb79a3edea7e2a3
SSDEEP

6144:xWkPjI1/8yerIUzBVULotfllrBD9atje:skPS0yea+Dct

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf12dc7cc8d4b249061d1c0a8729d272_JaffaCakes118

Files

bf12dc7cc8d4b249061d1c0a8729d272_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fd7ef25dff02cb42460762df973334bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
DispatchMessageA
EnableWindow
EndDialog
EnumDisplayDevicesA
FindWindowA
GetDlgItem
GetDlgItemTextA
ChangeDisplaySettingsA
ChangeDisplaySettingsExA
GetWindowLongA
GetWindowTextA
CharNextA
LoadStringA
MessageBoxA
MsgWaitForMultipleObjects
PeekMessageA
PostMessageA
RegisterClipboardFormatA
SendMessageA
SetWindowLongA
TranslateMessage
WinHelpA
wsprintfA

gdi32

DeleteDC
DeleteObject
GetDIBits
CreateCompatibleDC

advapi32

GetSecurityDescriptorDacl
GetSecurityDescriptorOwner
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
OpenSCManagerW
OpenServiceW
QueryServiceStatus
RegCloseKey
RegCreateKeyExW
RegOpenKeyExA
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
SetNamedSecurityInfoW
CloseServiceHandle
ConvertStringSecurityDescriptorToSecurityDescriptorW

kernel32

DelayLoadFailureHook
DeleteFileW
DisableThreadLibraryCalls
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FreeLibrary
GetCurrentProcess
GetEnvironmentVariableW
GetFileAttributesW
GetLastError
GetProcAddress
GetShortPathNameW
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
CloseHandle
InterlockedCompareExchange
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MoveFileExW
MoveFileW
OpenEventA
OpenEventW
OpenFileMappingA
OpenFileMappingW
OpenMutexA
OpenMutexW
OpenSemaphoreA
OpenSemaphoreW
ReadFile
RemoveDirectoryW
CreateDirectoryW
CreateEventA
CreateEventW
SetCurrentDirectoryW
CreateFileMappingA
CreateFileMappingW
SetLastError
CreateFileW
TermsrvAppInstallMode
TlsAlloc
TlsSetValue
CreateMutexA
CreateMutexW
WriteFile
lstrcpyW
lstrlenW
CreateSemaphoreA
CreateSemaphoreW

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd7ef25dff02cb42460762df973334bc

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

Sections

.text Size: 156KB - Virtual size: 155KB

.rdata Size: 30KB - Virtual size: 29KB

.data Size: 17KB - Virtual size: 32KB

.reloc Size: 11KB - Virtual size: 12KB

.rsrc Size: 10KB - Virtual size: 12KB

.text
Size: 156KB - Virtual size: 155KB

.rdata
Size: 30KB - Virtual size: 29KB

.data
Size: 17KB - Virtual size: 32KB

.reloc
Size: 11KB - Virtual size: 12KB

.rsrc
Size: 10KB - Virtual size: 12KB