dc2c60c00b903e21ae70f02998d1ba46_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

dc2c60c00b903e21ae70f02998d1ba46_JaffaCakes118
Size

1.5MB
MD5

dc2c60c00b903e21ae70f02998d1ba46
SHA1

cd58ed126908718d61fe622588bbff1668fb3c01
SHA256

b33fb395e5d7d7d164d3026472e66282ae93611738a60c4e3ff199e67a027838
SHA512

216c37d4ca8bc01332ed0a7da44c2c8ac38abbe85737bb7225ef77f822bc17b5b07bb3afadd1df219edbca50754c85f48512fa38d385ed96ad186e1c03a66224
SSDEEP

24576:1vYbYKnbmtGMVTgPgRZYYinpJ40OeY8ejj7pmfwvYBiM2wGktrII2gm+OcowR2rA:UvhY8evljoiMbGUjffbsyuaQslzEvcT/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc2c60c00b903e21ae70f02998d1ba46_JaffaCakes118

Files

dc2c60c00b903e21ae70f02998d1ba46_JaffaCakes118
.exe windows:5 windows x86 arch:x86

19377fec19261c9f7d68ed6511edbd60

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
GetProcAddress
lstrcmpiW
GetDriveTypeA
GetModuleFileNameA
SystemTimeToFileTime
SetLastError
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
LockResource
FindResourceExW
GetComputerNameW
GetSystemDirectoryW
GetSystemInfo
GetLocalTime
GetTimeZoneInformation
GetNativeSystemInfo
GetCommandLineW
WideCharToMultiByte
LoadLibraryA
VirtualAlloc
VirtualFree
CreateFileA
GetLocaleInfoW
InterlockedIncrement
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
SetFilePointer
ReadFile
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
QueryPerformanceCounter
lstrlenW
GetTempFileNameW
CreateFileW
GetSystemTime
WriteFile
GetModuleFileNameW
GetDriveTypeW
GetTempPathW
RaiseException
OpenEventW
GetModuleHandleA
GetCurrentThreadId
GetProcessHeap
GetModuleHandleW
IsProcessorFeaturePresent
GetVersion
GetCurrentProcessId
GetProcessVersion
OpenMutexW
CreateMutexA
CloseHandle
GetLastError
Sleep
OpenMutexA
WaitForSingleObject
GetTickCount
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
ExitProcess
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
EnterCriticalSection
SetStdHandle
HeapFree
HeapAlloc
HeapDestroy
HeapReAlloc
HeapSize
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
VirtualQuery
GetStartupInfoW
LCMapStringA
LCMapStringW
GetCPInfo
TlsGetValue

user32

ReleaseDC
GetDC
GetForegroundWindow
GetSystemMetrics
GetSysColor
ClientToScreen
DefWindowProcW
DestroyWindow
CharNextW
GetCursor
GetSysColorBrush
GetFocus
GetDesktopWindow
GetCursorPos
ChildWindowFromPoint
UnregisterClassA

gdi32

CreateSolidBrush
SetTextColor
SetBkMode
TextOutW
LineTo
FillPath
FloodFill
CreateRectRgn
CreateEllipticRgn
CreateRoundRectRgn
CombineRgn
CreateCompatibleDC
SelectObject
GetStockObject
CreatePen
Rectangle
Ellipse
DeleteObject
DeleteDC
MoveToEx
CreateCompatibleBitmap

advapi32

RegSetValueExW
RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey

ole32

CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitialize
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

VarUI4FromStr

shlwapi

PathStripToRootW
PathStripToRootA

comctl32

InitCommonControlsEx

Sections

.text
Size: 895KB - Virtual size: 894KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 321KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19377fec19261c9f7d68ed6511edbd60

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

shlwapi

comctl32

Sections

.text Size: 895KB - Virtual size: 894KB

.rdata Size: 30KB - Virtual size: 29KB

.data Size: 5KB - Virtual size: 13KB

.rsrc Size: 321KB - Virtual size: 321KB

.text
Size: 895KB - Virtual size: 894KB

.rdata
Size: 30KB - Virtual size: 29KB

.data
Size: 5KB - Virtual size: 13KB

.rsrc
Size: 321KB - Virtual size: 321KB