bfca091cb5e03abecc18e13c2018f33d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bfca091cb5e03abecc18e13c2018f33d_JaffaCakes118
Size

177KB
MD5

bfca091cb5e03abecc18e13c2018f33d
SHA1

90a18b5c90b949bcba5414c5300ca12a86745ec1
SHA256

ca44cb2c8e2560c7eeac3f9baa2f845ecd1889ebc16ca76df83294e25427ff28
SHA512

fbbf187f866630f4ff91d961f31155a767e402fe5164d330078795ee7fb5613cb51bce6fd0ad533d3e116e3fdd9c6ac86747d6c1f315395cba6495115e477837
SSDEEP

3072:uyZlN/JnGSrhqhLBc+foAKyFQm7d92wg5wUGsJ35sY:uEnxrhqh1c+3beo2wLsJ35sY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfca091cb5e03abecc18e13c2018f33d_JaffaCakes118

Files

bfca091cb5e03abecc18e13c2018f33d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

441c72be6a6952c127d83ae51be90bdb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winhttp

WinHttpOpen
WinHttpQueryHeaders
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetStatusCallback
WinHttpOpenRequest
WinHttpConnect
WinHttpCloseHandle

kernel32

GetCurrentThreadId
lstrlenA
InterlockedIncrement
SetLastError
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
lstrcmpiW
FreeLibrary
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
lstrcpynW
MulDiv
WideCharToMultiByte
GetSystemInfo
GetVersionExW
GetLocaleInfoW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapReAlloc
GetStringTypeW
HeapCreate
GetStdHandle
WriteFile
MultiByteToWideChar
HeapSize
Sleep
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
lstrlenW
InterlockedDecrement
GetCurrentProcess
FlushInstructionCache
GetModuleHandleW
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
IsValidCodePage
CreateFileW
CloseHandle
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
LoadLibraryW
GetStartupInfoW
HeapSetInformation
GetCommandLineW
ExitProcess
GetProcAddress
InterlockedCompareExchange
InterlockedPushEntrySList
HeapFree
GetProcessHeap
HeapAlloc
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
InterlockedPopEntrySList
RtlUnwind
EncodePointer
DecodePointer
LCMapStringW

user32

GetDesktopWindow
GetSystemMetrics
GetDC
UnregisterClassA
GetParent
GetWindow
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
ReleaseDC
MapWindowPoints
SetWindowPos
GetDlgItem
SendMessageW
SetWindowTextW
GetWindowLongW
EndDialog
LoadCursorW
SetCursor
DefWindowProcW
DestroyWindow
GetActiveWindow
DialogBoxParamW
CharNextW
LoadStringW
SetWindowLongW
GetClientRect

gdi32

GetDeviceCaps
DPtoLP
CreateFontIndirectW
DeleteObject

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW

shell32

ShellExecuteW
ShellExecuteExW

ole32

CoTaskMemFree
CoUninitialize
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

VarUI4FromStr

gdiplus

GdiplusStartup

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rrdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

441c72be6a6952c127d83ae51be90bdb

Headers

DLL Characteristics

File Characteristics

Imports

winhttp

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

gdiplus

iphlpapi

Sections

.text Size: 75KB - Virtual size: 74KB

.rdata Size: 21KB - Virtual size: 20KB

.data Size: 5KB - Virtual size: 13KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 7KB - Virtual size: 7KB

.rrdata Size: 60KB - Virtual size: 60KB

.text
Size: 75KB - Virtual size: 74KB

.rdata
Size: 21KB - Virtual size: 20KB

.data
Size: 5KB - Virtual size: 13KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 7KB

.rrdata
Size: 60KB - Virtual size: 60KB