dd11539a8bdbf9067438b7a83f40918f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

dd11539a8bdbf9067438b7a83f40918f_JaffaCakes118
Size

279KB
MD5

dd11539a8bdbf9067438b7a83f40918f
SHA1

cc54854fbc543c972c8384e44d7d588f8de582d5
SHA256

8d1347740db0b821998bad83fe814f346802709e39fb66c0a40ccb9b46c06c0d
SHA512

74e74c3e1272c7786ec1ae6599125e3b699cd6f8365bcaddb70bf066db3e7fa4bb74d19d1cf67be60a5a36b5bb14c3f7fb730d4035561e64e67f84fe0ee7299e
SSDEEP

6144:/DM6Ei8o2tbyyzk11/A2xJLc/u8G20e2Lvs3CYR8za:/TES24zzLcPIvSC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd11539a8bdbf9067438b7a83f40918f_JaffaCakes118

Files

dd11539a8bdbf9067438b7a83f40918f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0df1f6bd4dd567d0e3191696170a9550

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

GetLengthSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCreateKeyW
RegDeleteKeyW
RegQueryValueExA
RegSetValueW
SetSecurityDescriptorGroup
RegOpenKeyExA
RegCloseKey
RegSetValueExW
OpenThreadToken

gdi32

CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject

atl

ord16
ord57
ord45
ord17
ord44

kernel32

QueryPerformanceFrequency
SetWaitableTimer
GetSystemDirectoryW
CreateWaitableTimerW
CompareStringW
MulDiv
CloseHandle
WaitForMultipleObjects
GetTickCount
InitializeCriticalSection
SetPriorityClass
GetCurrentProcess
CreateEventW
VirtualFree
DeleteCriticalSection
EnterCriticalSection
SetPriorityClass
SetProcessShutdownParameters
VirtualAllocEx
WaitForMultipleObjectsEx
GetCurrentThreadId
GetStartupInfoW
ResetEvent
OpenProcess
DuplicateHandle
MapViewOfFile
GetProcAddress
ReleaseMutex
FlushInstructionCache
GetProcessShutdownParameters
lstrcpyW
UnmapViewOfFile

msvcrt

swscanf
wcscpy
_XcptFilter
_wfopen
__p__commode
??2@YAPAXI@Z
wcslen
__dllonexit
_CIpow
_itow
_controlfp
wcsstr
??3@YAXPAX@Z
_cexit
fclose
_wcsicmp
wcscmp
__CxxFrameHandler
free
wcstol
_CxxThrowException

user32

DefWindowProcW
GetSysColorBrush
SystemParametersInfoW
UpdateLayeredWindow
LoadStringW
SetWindowLongW
IsWindow
GetThreadDesktop
RegisterDeviceNotificationW
ClientToScreen
CharNextW
MonitorFromWindow
MoveWindow
DestroyIcon
WindowFromPoint
GetDesktopWindow
IntersectRect
LoadImageW
CreateWindowExW
GetMonitorInfoW
PtInRect
DispatchMessageW
UnregisterDeviceNotification
GetPropW

ole32

CoUninitialize
CoTaskMemFree
CoInitializeSecurity
CoInitializeEx

hid

HidD_GetPreparsedData
HidD_GetAttributes
HidD_GetHidGuid
HidP_MaxUsageListLength
HidP_GetUsageValue

setupapi

SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsExW

Sections

.text
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 552KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0df1f6bd4dd567d0e3191696170a9550

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

gdi32

atl

kernel32

msvcrt

user32

ole32

hid

setupapi

Sections

.text Size: 177KB - Virtual size: 177KB

.data Size: 70KB - Virtual size: 69KB

.rsrc Size: 30KB - Virtual size: 552KB

.text
Size: 177KB - Virtual size: 177KB

.data
Size: 70KB - Virtual size: 69KB

.rsrc
Size: 30KB - Virtual size: 552KB