d19338c0731b69d6d767035673310363_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d19338c0731b69d6d767035673310363_JaffaCakes118
Size

209KB
MD5

d19338c0731b69d6d767035673310363
SHA1

870db7f2da165a2834ea3ba77a44ebc7adc55e19
SHA256

e415e2371de12e3c01f290b1234d7a4495300c09719468d6825ce67a93f621b8
SHA512

fceda9cc7be2767c45b25b16bbf7245e6fd442dd04bf8caf6ac976533d9ffa742ffb3a622660032c6eabb42baa1002fedfbc7f71d0a8b8fe5606202f5701c8f2
SSDEEP

6144:DOB8K/S3r3FfK3yDrjQVEzUIVhK+2aZyRO:DBKKzFfKCbQVEzNz4R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d19338c0731b69d6d767035673310363_JaffaCakes118

Files

d19338c0731b69d6d767035673310363_JaffaCakes118
.exe windows:4 windows x86 arch:x86

681262d45b7a9535aa53c20cfd2bf9b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenMutexW
GetModuleHandleA
GetTempFileNameA
GetNumberFormatW
ExpandEnvironmentStringsA
GetMailslotInfo
GetExitCodeProcess
FindResourceW
GetModuleFileNameW
GetProcAddress
ConnectNamedPipe
CreateFileMappingW
Beep
lstrlenW
CreateThread
GetHandleInformation
SetLocaleInfoA
SetThreadPriority
GetLogicalDriveStringsW
GetLastError
GetSystemTime
CreateMailslotA
OpenSemaphoreW
GetFullPathNameA
GlobalAlloc
QueryPerformanceCounter
OpenSemaphoreA
CreateSemaphoreW
GetVersionExA
SetCurrentDirectoryA
MulDiv
GetStringTypeA
GetFileType
lstrcpyA
GlobalGetAtomNameA
SetPriorityClass
GetStartupInfoW
InitializeCriticalSection
GetFileAttributesA
CreateMutexW
GetEnvironmentVariableW
GetFullPathNameW
ExitThread
GetTempPathW

user32

SetWindowLongA
GetDC
TrackPopupMenu
CharNextA
AnimateWindow
CopyImage
AppendMenuW
wsprintfA
CreateDesktopA
SetCapture
GetIconInfo
LoadBitmapA
GetClassNameW
IsChild
SetCursor
CreateDesktopW
GetDlgItem
GetMenuItemRect
GetClientRect
GetMenuItemInfoA
BringWindowToTop
UpdateWindow
MonitorFromRect
UpdateLayeredWindow
LoadIconW
IsWindowEnabled
LoadCursorA
OpenClipboard
GetMessageW
DefWindowProcA
RemoveMenu

gdi32

EndPath
CreatePatternBrush
UpdateColors
GetCharacterPlacementW
GetGlyphIndicesW
GetObjectType
CreateDCA
GetMetaFileA

advapi32

RegOpenKeyExA
RegQueryInfoKeyW
RegOpenKeyW
RegOpenKeyExW

shell32

SHGetDataFromIDListW
SHGetFolderLocation
SHCreateDirectory
SHGetFolderPathW
StrRStrA
StrRStrW

ole32

CoGetCallerTID
CoDosDateTimeToFileTime
CoCreateInstanceEx
CoInitializeEx
OleInitialize
OleCreate
CoFileTimeNow

oleaut32

SafeArrayPutElement
VarR8FromDisp
VarI4FromUI4

setupapi

pSetupGuidFromString
SetupDiDeleteDeviceInfo
SetupScanFileQueueA
SetupDiGetClassDevPropertySheetsW
SetupDiClassGuidsFromNameExA

ws2_32

htonl
gethostbyaddr
setsockopt
getnameinfo
getservbyport
htons
WSACreateEvent
sendto

inetcomm

MimeOleCreateHeaderTable
CreateSMTPTransport
MimeOleSMimeCapRelease
MimeOleSetPropW
MimeOleCreateByteStream
EssSignCertificateEncodeEx
MimeOleParseRfc822AddressW
MimeOleSetBodyPropA
EssReceiptRequestDecodeEx
EssReceiptEncodeEx
HrGetDisplayNameWithSizeForFile

crypt32

CertGetStoreProperty
CertUnregisterSystemStore
I_CertSrvProtectFunction
CertSerializeCRLStoreElement
CertSerializeCTLStoreElement
CertAddCRLLinkToStore
CryptHashMessage
RegDeleteValueU
CryptMsgGetAndVerifySigner
CryptVerifySignatureU

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cKhu
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.AqeNl
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.G
Size: 1KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Dv
Size: 2KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.NEEiJj
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RD
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.R
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MM
Size: 2KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VvQw
Size: 1KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

681262d45b7a9535aa53c20cfd2bf9b3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

setupapi

ws2_32

inetcomm

crypt32

Sections

.text Size: 12KB - Virtual size: 11KB

.cKhu Size: 2KB - Virtual size: 36KB

.AqeNl Size: 4KB - Virtual size: 20KB

.G Size: 1KB - Virtual size: 29KB

.Dv Size: 2KB - Virtual size: 31KB

.NEEiJj Size: 1KB - Virtual size: 8KB

.data Size: 6KB - Virtual size: 5KB

.RD Size: 1024B - Virtual size: 11KB

.R Size: 1024B - Virtual size: 4KB

.MM Size: 2KB - Virtual size: 25KB

.VvQw Size: 1KB - Virtual size: 179KB

.rsrc Size: 172KB - Virtual size: 171KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 11KB

.cKhu
Size: 2KB - Virtual size: 36KB

.AqeNl
Size: 4KB - Virtual size: 20KB

.G
Size: 1KB - Virtual size: 29KB

.Dv
Size: 2KB - Virtual size: 31KB

.NEEiJj
Size: 1KB - Virtual size: 8KB

.data
Size: 6KB - Virtual size: 5KB

.RD
Size: 1024B - Virtual size: 11KB

.R
Size: 1024B - Virtual size: 4KB

.MM
Size: 2KB - Virtual size: 25KB

.VvQw
Size: 1KB - Virtual size: 179KB

.rsrc
Size: 172KB - Virtual size: 171KB

.reloc
Size: 1KB - Virtual size: 1KB