cd029e33c112b708012d38f23e04e9f6_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

cd029e33c112b708012d38f23e04e9f6_JaffaCakes118
Size

153KB
MD5

cd029e33c112b708012d38f23e04e9f6
SHA1

2b155579b45a6121d48b3673ee68902e76f46f71
SHA256

43f97bcde426b7ee438e80e127dfa750b1b3c9a0b1b387b6188f8f0d011b2359
SHA512

4facbb3c2e0196b5f4db1cf8b8f59b0726dde22434015f15c91709683a479f4b49a2fd8907777e7e442555f2069583cc8ccb979fac33ce8124b61d336d622f9d
SSDEEP

3072:UrH42HWGkZ2aMFy0qtlum26GH7pVB5j8vrzabpnVcRC+Szaf8gd5E+uLCi+J+N:iYaW2y0qt0m2B7/Dj02pnVCSzdWE+uLB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/loop.exe

Files

cd029e33c112b708012d38f23e04e9f6_JaffaCakes118
.cab
loop.exe
.exe windows:5 windows x86 arch:x86

ce16bcd31f5789ddf87dd5c8800cb094

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawIconEx
CallWindowProcW
SetWindowLongW
GetWindowLongW
GetDlgItem
GetParent
ReleaseCapture
PostMessageW
UpdateWindow
InvalidateRect
OffsetRect
PtInRect
ScreenToClient
GetCursorPos
BeginPaint
SendMessageW
DefWindowProcW
GetWindowRect
PostQuitMessage
GetDC
ReleaseDC
GetClientRect
MoveWindow
CopyRect
DestroyWindow
LoadImageW
DestroyIcon
LoadBitmapW
GetSystemMetrics
TrackPopupMenu
DestroyMenu
DrawStateW
SetMenuItemInfoW
CheckMenuItem
AppendMenuW
CreatePopupMenu
ExitWindowsEx
wsprintfW
RegisterWindowMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
CreateAcceleratorTableW
GetFocus
DestroyAcceleratorTable
GetClassNameW
IsChild
ClientToScreen
GetSysColor
CharNextW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
GetKeyboardLayoutList
GetClassInfoExW
EnableWindow
AdjustWindowRectEx
GetWindow
MonitorFromWindow
RedrawWindow
EndDialog
DialogBoxIndirectParamW
DrawTextW
LoadCursorW
SetCursor
SetRect
ShowWindow
GetDesktopWindow
GetActiveWindow
SetWindowPos
FindWindowW
GetKeyboardState
keybd_event
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
SetActiveWindow
SetFocus
MonitorFromPoint
GetMonitorInfoW
MessageBoxW
GetClassLongW
FillRect
SetTimer
IntersectRect
KillTimer
MapWindowPoints
LoadStringW
EnumWindows
UnregisterClassA
WindowFromPoint

kernel32

GetTempFileNameW
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetModuleHandleExW
DecodePointer
EncodePointer
IsDebuggerPresent
GetCommandLineA
WritePrivateProfileStringW
MoveFileW
GetEnvironmentVariableW
SetFileAttributesW
RemoveDirectoryW
SetEndOfFile
GetStdHandle
GetLogicalDriveStringsW
EnterCriticalSection
ResumeThread
OpenEventA
DuplicateHandle
CreateSemaphoreA
CancelIo
DisconnectNamedPipe
GetOverlappedResult
CreateNamedPipeW
ConnectNamedPipe
SetNamedPipeHandleState
PeekNamedPipe
LeaveCriticalSection
LoadResource
FindResourceW
SizeofResource
FreeResource
MulDiv
GetLastError
GlobalFree
GlobalLock
GlobalAlloc
GetCurrentThreadId
CloseHandle
WaitForSingleObject
CreateEventW
OpenProcess
GetProcAddress
lstrcmpiA
lstrcmpA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
WriteConsoleW
WriteConsoleA
ExpandEnvironmentStringsW
GetLocaleInfoA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStringTypeA
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetDateFormatA
GetTimeFormatA
IsValidCodePage
GetOEMCP
HeapCreate
GetStringTypeW
LCMapStringW
LCMapStringA
GetCPInfo
GetStartupInfoW
GlobalMemoryStatusEx
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TlsFree
DeleteAtom
FindAtomW
TlsAlloc
AddAtomW
OpenThread
GetAtomNameW
TlsSetValue
TlsGetValue
VirtualAlloc
FlushInstructionCache
DeleteFileW
GlobalReAlloc
lstrlenW
LoadLibraryA
QueryDosDeviceW
RaiseException
GetExitCodeProcess
GetModuleHandleW
GetVersionExW
FindResourceExW
MultiByteToWideChar
GetVersion
GetCurrentProcess
LocalFree
GetModuleFileNameW
FreeConsole
GetCurrentProcessId
CreateMutexW
Sleep
GetModuleHandleA
LoadLibraryW
ReadFile
CreateFileW
LocalAlloc
InitializeCriticalSection
FreeLibrary
DeleteCriticalSection
CreateProcessW
SetLastError
GetWindowsDirectoryW
WideCharToMultiByte
GetTickCount
GetTempPathW
GetTimeZoneInformation
GetSystemInfo
GetPrivateProfileStringW
GetSystemTimeAsFileTime
GetDiskFreeSpaceExW
IsValidLocale
GetFileSize
GetUserDefaultUILanguage
CopyFileW
WriteFile
lstrcpyW
GetFileAttributesW
MoveFileExW
DeviceIoControl
FindNextFileW
lstrcmpiW
GetLocaleInfoW
GetFullPathNameW
LoadLibraryExW
GetACP
SetEvent
ExitProcess
CreateThread
GetModuleFileNameA
TerminateThread
GlobalFindAtomW
TerminateProcess
OpenMutexW
SetErrorMode
GetSystemTime
SystemTimeToFileTime
WaitForMultipleObjects
ResetEvent
CreateEventA
GetSystemWindowsDirectoryW
GetVolumeInformationW
VirtualFree
ReleaseSemaphore
HeapFree
GetProcessHeap
HeapAlloc
IsProcessorFeaturePresent
HeapDestroy
HeapReAlloc
HeapSize
LocalFileTimeToFileTime
SetFilePointerEx
GetFileSizeEx
OutputDebugStringW
FormatMessageW

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ce16bcd31f5789ddf87dd5c8800cb094

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 95KB - Virtual size: 94KB

.rdata Size: 131KB - Virtual size: 130KB

.data Size: 4KB - Virtual size: 92KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 95KB - Virtual size: 94KB

.rdata
Size: 131KB - Virtual size: 130KB

.data
Size: 4KB - Virtual size: 92KB

.rsrc
Size: 20KB - Virtual size: 20KB