d09e3a13dfb7e6e86fa902a89addcfe3_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d09e3a13dfb7e6e86fa902a89addcfe3_JaffaCakes118
Size

156KB
MD5

d09e3a13dfb7e6e86fa902a89addcfe3
SHA1

e9632e050086e5437a1f350bde79669096f1505b
SHA256

e8848b9aaa780d2c9bf511a0a20a90380468c9ca032183ce0eb927aa9bc44a70
SHA512

0c217d36b51d3b9c774b0904fa1e659727f2e49301c8a9b68bdd4db1f4ed76bc6802ca41d6d4cda07579529789de38f36c1bc4d9ccea19058021553c1c47334f
SSDEEP

3072:7aT3VNV3lp2y9GiZd7t6nQdF8zRPJfN2lmxMqqDLy/Rxt:7avhlp/dZSEF89hl+qqDLuR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d09e3a13dfb7e6e86fa902a89addcfe3_JaffaCakes118

Files

d09e3a13dfb7e6e86fa902a89addcfe3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

13e6ce544a189bea306ea56633bbc3c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
LoadResource
FindResourceA
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
DeleteFileA
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
GlobalAlloc
lstrlenW
MultiByteToWideChar
GlobalUnlock
GlobalLock
lstrcmpA
FlushInstructionCache
GetCurrentProcess
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
LoadLibraryA
GetProcAddress
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GlobalHandle
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
CreateFileA
FreeEnvironmentStringsA
UnhandledExceptionFilter
WideCharToMultiByte
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetEnvironmentVariableA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
HeapSize
HeapAlloc
HeapReAlloc
TerminateProcess
RaiseException
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapFree
GlobalFree
FreeResource
SetEndOfFile
GetFileSize
ReadFile
WaitForSingleObject
ReleaseMutex
CreateMutexA
GetFileType
GetModuleFileNameA
SetFilePointer
GetVersionExA
lstrlenA
WriteFile
FlushFileBuffers
CloseHandle
LocalAlloc
LocalFree
GetLastError
GetTimeZoneInformation
GetLocalTime
RtlUnwind
GetSystemDirectoryA
FreeEnvironmentStringsW

user32

GetWindowTextA
DialogBoxIndirectParamA
GetActiveWindow
RegisterClassA
GetSysColor
LoadCursorA
DefDlgProcA
DialogBoxParamA
MessageBoxA
GetDlgItemInt
EndDialog
GetWindowRect
SystemParametersInfoA
MapWindowPoints
SetDlgItemInt
wsprintfA
CreateWindowExA
InvalidateRgn
InvalidateRect
SetCapture
ReleaseCapture
CreateAcceleratorTableA
GetDesktopWindow
RedrawWindow
IsWindow
GetParent
GetClassNameA
SetWindowPos
GetFocus
IsChild
SetFocus
GetDC
ReleaseDC
BeginPaint
GetClientRect
FillRect
EndPaint
CallWindowProcA
GetDlgItem
SendMessageA
GetWindowLongA
GetWindowTextLengthA
SetWindowTextA
SetWindowLongA
GetWindow
LoadStringA
CharLowerA
CharNextA
DefWindowProcA
RegisterWindowMessageA
GetClassInfoExA
RegisterClassExA
DestroyWindow
FindWindowA
GetSystemMetrics
LoadImageA

gdi32

GetObjectA
GetDeviceCaps
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
CreateSolidBrush
GetStockObject

advapi32

SetFileSecurityA
SetSecurityDescriptorDacl
AllocateAndInitializeSid
SetEntriesInAclA
InitializeSecurityDescriptor
FreeSid

ole32

CoUninitialize
CoInitialize
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
OleLockRunning

oleaut32

SysFreeString
SysAllocStringLen
SysAllocString
SysStringLen
LoadRegTypeLi
VariantClear
OleCreateFontIndirect
SafeArrayDestroy
SafeArrayPutElement
SafeArrayCreate

comctl32

InitCommonControlsEx

shlwapi

SHSetValueA
SHDeleteValueA
SHGetValueA

setupapi

SetupPromptReboot

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13e6ce544a189bea306ea56633bbc3c5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

comctl32

shlwapi

setupapi

Sections

.text Size: 96KB - Virtual size: 92KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 28KB - Virtual size: 32KB

.rsrc Size: 16KB - Virtual size: 12KB

.text
Size: 96KB - Virtual size: 92KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 28KB - Virtual size: 32KB

.rsrc
Size: 16KB - Virtual size: 12KB