d58fb28760b403a97336bad0f48a6ec6_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d58fb28760b403a97336bad0f48a6ec6_JaffaCakes118
Size

48KB
MD5

d58fb28760b403a97336bad0f48a6ec6
SHA1

e9eb165ea7e4c937b38d8e5ecffd6f49c8fcdc90
SHA256

48f56c207f0307f114d78030af7705a6d581ff2f08fa76554efe723cf788b664
SHA512

b35a28c26901f749e2e34d2e317689381686eda461c180227c033c6d548da390a37272a0aba23a552b0073a9c9415d458d4e2ae5a79b212e0d7f33622a1f59d7
SSDEEP

768:r7Q3FUYaCzMbYGQvFm3wVok8gqpO6iVIHa/zy8POPo1lwU4DeF80yf:r7Q3FUYagMBkKhjqIHcWQPwUi10yf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d58fb28760b403a97336bad0f48a6ec6_JaffaCakes118

Files

d58fb28760b403a97336bad0f48a6ec6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d91db59377747d9082bb2eacf5fa4959

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
InitializeCriticalSection
LocalFree
GetSystemDirectoryA
HeapAlloc
lstrcmpiA
VirtualAlloc
FreeLibrary
SetEvent
lstrcmpA
CloseHandle
CreateThread
CreateFileA
LocalAlloc
GetProcessHeap
lstrcpynA
GetWindowsDirectoryA
CreateEventA
HeapSize
lstrcpyA
LoadLibraryA
DeleteCriticalSection
DisableThreadLibraryCalls
GetDiskFreeSpaceA
lstrlenA
lstrcatA
GetProcAddress
InterlockedIncrement
InterlockedDecrement
HeapFree
GetTickCount
HeapReAlloc

user32

GetDC
SetDlgItemTextA
SetWindowTextA
DestroyWindow
GetWindowLongA
EnableWindow
InvalidateRect
LoadImageA
TranslateMessage
LoadBitmapA
PeekMessageA
GetWindowRect
GetClientRect
SetWindowLongA
SendMessageA
GetWindowTextA
DispatchMessageA
CharUpperA
MsgWaitForMultipleObjects
DrawTextA
IsWindow
wsprintfA
CreateDialogParamA
GetDlgItem
DestroyIcon
ShowWindow
GetSysColor
LoadStringA
SendDlgItemMessageA
EndDialog
CharPrevA
DialogBoxParamA
IsDialogMessageA
IsDlgButtonChecked
CheckDlgButton
SetWindowPos
MessageBoxA
ReleaseDC

advpack

RegInstall

ntdll

NtAddAtom

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

gdi32

DeleteDC
DPtoLP
CreateFontIndirectA
SetBkColor
GetTextMetricsA
SetViewportOrgEx
SelectObject
SetWindowOrgEx
BitBlt
ModifyWorldTransform
CreateCompatibleDC
DeleteObject
SaveDC
SetTextColor
GetObjectA
SetGraphicsMode
ExtTextOutA
RestoreDC
CreateSolidBrush
GetDeviceCaps

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

atl

AtlMarshalPtrInProc

advapi32

RegOpenKeyExA
RegCloseKey
RegEnumValueA
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA

Sections

.textbss
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d91db59377747d9082bb2eacf5fa4959

Headers

File Characteristics

Imports

kernel32

user32

advpack

ntdll

version

gdi32

ole32

atl

advapi32

Sections

.textbss Size: - Virtual size: 1.3MB

.text Size: 512B - Virtual size: 428B

.idata Size: 46KB - Virtual size: 45KB

.rdata Size: 512B - Virtual size: 32B

.reloc Size: 512B - Virtual size: 448B

.textbss
Size: - Virtual size: 1.3MB

.text
Size: 512B - Virtual size: 428B

.idata
Size: 46KB - Virtual size: 45KB

.rdata
Size: 512B - Virtual size: 32B

.reloc
Size: 512B - Virtual size: 448B