c81c6bcd4aa644a569f764b9c83ba46e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

c81c6bcd4aa644a569f764b9c83ba46e_JaffaCakes118
Size

28KB
MD5

c81c6bcd4aa644a569f764b9c83ba46e
SHA1

78026c4adcfc4616c284644a7cfceb290c178a44
SHA256

c9706ce419a1c3b4fcc4471cdcc01f7db0f96025b3e5f0f9a36c109e836935e8
SHA512

98f40eaead2fcfb4b37ccd7acd389a32c426c759e73ea428351c3f592ade06516313bbf6c96ea077be2838cb320bcc0dca1492801a45ad2da49c653bdf784687
SSDEEP

768:isES7RSOw6hkl90vf+CclZJb0hFXK/iRdj+2MOc:iPS1aokl9vlZJghFL7j7Rc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c81c6bcd4aa644a569f764b9c83ba46e_JaffaCakes118

Files

c81c6bcd4aa644a569f764b9c83ba46e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7e2d3c907a683dbc875b0b950a5f507

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExW
MakeSelfRelativeSD
InitializeSid
GetUserNameW
SetSecurityDescriptorSacl
MapGenericMask
RegDeleteValueW
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
RegCreateKeyExW
GetSidSubAuthorityCount
OpenThreadToken
RegEnumKeyExW
InitializeAcl
GetSecurityDescriptorDacl
GetLengthSid
GetAclInformation
GetAce
LookupAccountSidW
RegDeleteKeyW
GetSecurityDescriptorLength
LookupAccountNameW
GetSidSubAuthority
AddAccessAllowedAce
GetTokenInformation
RegQueryValueExW
SetSecurityDescriptorGroup
GetSidLengthRequired
GetSecurityDescriptorOwner
RegCloseKey
OpenProcessToken
AddAce
InitializeSecurityDescriptor
GetSidIdentifierAuthority
RegSetValueExW
SetSecurityDescriptorOwner
IsValidSid
GetSecurityDescriptorGroup

msvcrt

wcsspn
wcscspn
wcstol
swprintf
wcschr
_ftol
wcscpy
wcstoul
_snwprintf
__dllonexit
_onexit
__CxxFrameHandler
wcsncat
_wcsupr
wcsncpy
_ltow
wcscmp
malloc
_initterm
_purecall
_wtoi
free
wcspbrk
wcslen
_wtol
_wcsicmp
realloc
_wcsicoll
wcscat
wcsstr
wcsncmp
_adjust_fdiv

gdi32

BitBlt
GetTextMetricsW
ExtTextOutW
PatBlt
SetStretchBltMode
GetTextExtentPointW
CreateFontIndirectW
DeleteObject
GetBkColor
SetBkColor
CreateCompatibleDC
GetDeviceCaps
SetTextColor
StretchBlt
SelectObject
GetPixel
CreateBitmap
SetBkMode
GetObjectW
DeleteDC

ole32

CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CLSIDFromString
CoInitializeEx
CoUninitialize
StringFromGUID2
StringFromIID

comctl32

ImageList_Destroy
ImageList_SetOverlayImage
InitCommonControlsEx
PropertySheetW
ImageList_LoadImageW
CreatePropertySheetPageW
ImageList_Draw

rtutils

TraceDumpExA

kernel32

IsBadReadPtr
GetProcessHeap
OutputDebugStringW
lstrlenW
IsBadStringPtrW
SetEvent
GetLocalTime
LockResource
ResetEvent
GetLastError
GetLocaleInfoW
HeapFree
lstrlenA
GetCurrentProcess
LocalAlloc
IsBadWritePtr
GetCurrentThreadId
DeleteCriticalSection
GlobalSize
EnterCriticalSection
FlushInstructionCache
DisableThreadLibraryCalls
VirtualAlloc
MultiByteToWideChar
MulDiv
DuplicateHandle
lstrcpyW
TryEnterCriticalSection
GlobalLock
GlobalFree
TerminateThread
InitializeCriticalSection
LocalFree
GetTickCount
InterlockedIncrement
GlobalUnlock
GetCurrentThread
LoadResource
HeapAlloc
GetWindowsDirectoryW
InterlockedDecrement
CreateEventW
lstrcmpW
CreateThread
WaitForSingleObject
PulseEvent
GetModuleHandleW
CloseHandle
LeaveCriticalSection
GlobalAlloc
Sleep

shell32

ShellExecuteW

user32

FindWindowExW
MapWindowPoints
GetWindowRect
BeginPaint
PeekMessageW
ShowWindow
wsprintfW
DefWindowProcW
LoadStringW
SetScrollInfo
IsWindowEnabled
GetWindowTextLengthW
ScreenToClient
IsDialogMessageW
SetTimer
GetCursorPos
CheckRadioButton
CallWindowProcW
GetActiveWindow
GetClassLongW
PostMessageW
OffsetRect
SetRectEmpty
GetMenuItemID
GetClientRect
CheckMenuItem
CheckDlgButton
SetDlgItemTextW
DestroyWindow
LoadBitmapW
WinHelpW
GetClassInfoExW
EnableMenuItem
GetWindowLongW
IsWindow
LoadIconW
GetScrollInfo
UpdateWindow
LoadCursorW
GetWindowTextW
GetSysColorBrush
SetWindowLongW
DialogBoxParamW
SetWindowTextW
LoadMenuW
CreateWindowExW
MoveWindow
GetDC
KillTimer
ValidateRect
RegisterClassExW
PtInRect
ReleaseDC
DrawTextW
MessageBoxW
EndDialog
GetDialogBaseUnits
GetSysColor
GetSubMenu
EnableWindow
DefDlgProcW
GetDlgItem
InvalidateRect
TrackPopupMenu
SetClassLongW
SetParent
GetParent
DestroyMenu
IsDlgButtonChecked
GetMenuItemCount
TranslateMessage
DispatchMessageW
SendDlgItemMessageW
EndPaint
CreateDialogParamW
SetFocus
SendMessageW
PostThreadMessageW
SetCursor
RedrawWindow
MsgWaitForMultipleObjects
ClientToScreen
SetWindowPos
InflateRect

ddraw

DirectDrawCreate

ntdll

NtQueryTimerResolution
RtlAddAccessAllowedObjectAce
RtlAdjustPrivilege
NtQuerySemaphore

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d7e2d3c907a683dbc875b0b950a5f507

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

msvcrt

gdi32

ole32

comctl32

rtutils

kernel32

shell32

user32

ddraw

ntdll

Sections

.text Size: 1KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 80KB

.rsrc Size: 2KB - Virtual size: 2KB

.rdata Size: 15KB - Virtual size: 14KB

.reloc Size: 512B - Virtual size: 56B

.idata Size: 6KB - Virtual size: 34KB

.text
Size: 1KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 80KB

.rsrc
Size: 2KB - Virtual size: 2KB

.rdata
Size: 15KB - Virtual size: 14KB

.reloc
Size: 512B - Virtual size: 56B

.idata
Size: 6KB - Virtual size: 34KB