d0f1015c0aa6ef6ca260b807e452a311_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d0f1015c0aa6ef6ca260b807e452a311_JaffaCakes118
Size

261KB
MD5

d0f1015c0aa6ef6ca260b807e452a311
SHA1

406ed5e70ffd8037bd10008d96475edad706ad54
SHA256

e32669c449629bc13ddbfc0b64cd6eec781253217c5db0feea7ccede5ab28dfc
SHA512

39065ff0287f4b9c43a9b2a861eace1330fffbd58880d3092caaf236111e2dab97a24c85d4dc6cc273da0da43808f9154e11674d135c7624a8eff90143496a9f
SSDEEP

3072:4/fEqC58KXuwJIlP5iJJDTnRQs4aPhwc6A/xvnS+iAqWIDLqPMJGjeQwnzNGXVAw:Kf+58KXYEJ95ZP1/9HikiPXQwneV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0f1015c0aa6ef6ca260b807e452a311_JaffaCakes118

Files

d0f1015c0aa6ef6ca260b807e452a311_JaffaCakes118
.exe windows:5 windows x64 arch:x64

ad76b1681080875ff5d460bda15bd213

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

wextract.pdb

Imports

msvcrt

_fmode
_commode
__setusermatherr
_initterm
__set_app_type
_acmdln
exit
_cexit
_exit
_c_exit
__getmainargs
_XcptFilter
__C_specific_handler
memcpy
memset

advapi32

RegQueryInfoKeyA
RegCreateKeyExA
RegQueryValueExA
AllocateAndInitializeSid
EqualSid
GetTokenInformation
RegSetValueExA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
FreeSid

kernel32

GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStartupInfoA
EnumResourceLanguagesA
MulDiv
GetDiskFreeSpaceA
GetCurrentProcessId
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
lstrlenA
GetModuleFileNameA
GetSystemDirectoryA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
lstrcatA
ReadFile
WriteFile
SetFilePointer
SetFileTime
GetTickCount
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
QueryPerformanceCounter
LocalFileTimeToFileTime

gdi32

GetDeviceCaps

user32

GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
GetSystemMetrics
MessageBeep
SetDlgItemTextA
LoadStringA
GetDesktopWindow
EndDialog
ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongPtrA
GetWindowLongPtrA
CallWindowProcA
DispatchMessageA
PeekMessageA
MsgWaitForMultipleObjects
SendMessageA
SetWindowPos
ReleaseDC

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad76b1681080875ff5d460bda15bd213

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

advapi32

kernel32

gdi32

user32

comctl32

version

Sections

.text Size: 63KB - Virtual size: 62KB

.data Size: 1KB - Virtual size: 9KB

.pdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 193KB - Virtual size: 192KB

.text
Size: 63KB - Virtual size: 62KB

.data
Size: 1KB - Virtual size: 9KB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 193KB - Virtual size: 192KB