dd0d18beec8ed03a1650c45f3383dee3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

dd0d18beec8ed03a1650c45f3383dee3_JaffaCakes118
Size

194KB
MD5

dd0d18beec8ed03a1650c45f3383dee3
SHA1

30fe61a2cd71a4f72dc3a6d7f15cf0a360623c6a
SHA256

f8acaf49066e97d1b783a1f21e8b1d3769d02ccbf0ed071d366b5c325bf810bf
SHA512

676acd6ea8ec95ff85bc5aef6b609c5f0cf9c79a258ce569120c7e032e6f33d674ac0d0df4687b068777477e8adbc0fa49fc12bfd314aa2aa1f65992b51fa345
SSDEEP

6144:OLw6uI4mUUPLeJBU/utqvN+rKuwaoCGnLrz:OLw6uLm5LeJBL+KsjCGnL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd0d18beec8ed03a1650c45f3383dee3_JaffaCakes118

Files

dd0d18beec8ed03a1650c45f3383dee3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

171c055d2fefd077a5c76e87358d7890

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateCompatibleDC
SetDIBColorTable
GetViewportOrgEx
SetWindowExtEx
GetEnhMetaFileBits
GetDCOrgEx
CreateFontIndirectA
SetTextColor
LineTo
TextOutA
CreatePatternBrush
BitBlt
AbortDoc
ExcludeClipRect
GetSystemPaletteUse
SetStretchBltMode
GetPixel
RectVisible
SaveDC
GetDeviceCaps
OffsetRgn
GetPaletteEntries

user32

LoadImageA
MapDialogRect
GetClipboardFormatNameA
SetWindowLongA
SetClassLongA
EnumWindows
FrameRect
DrawIcon
GetUpdateRect
IsWindowEnabled
GetKeyboardLayout
GetWindowPlacement
RegisterWindowMessageA
ClientToScreen
MessageBoxA
SetWindowPlacement
GetClassInfoExA
GetScrollInfo
GetParent
RegisterClassW
CreateWindowExW
EnumDisplaySettingsA
PeekMessageA
GetKeyboardLayoutList
CreateMDIWindowW
SetWindowPos
DefWindowProcW
DefFrameProcA
MessageBeep

btwiimsg

_Poly
_LCosh
_FEps
_Nan
_Getctype
_LDtest
_Sinh
_Eps
_LXbig

ntdll

NtQueryInformationFile
NtSuspendThread
ZwCreateTimer
ZwSetEvent
NtProtectVirtualMemory

advapi32

RegOpenKeyA
RegOpenKeyExW
RegCloseKey

ole32

StgCreateDocfile
OleRegEnumFormatEtc
CreateFileMoniker
ProgIDFromCLSID
OleTranslateAccelerator
WriteClassStg
StringFromGUID2
WriteClassStm
CLSIDFromString
OleCreate
OleMetafilePictFromIconAndLabel
CoRegisterClassObject
OleQueryLinkFromData
OleSetClipboard
ReadClassStg
OleGetIconOfClass
CoFreeUnusedLibraries
RevokeDragDrop

kernel32

GetCurrentThreadId
GlobalReAlloc
EnterCriticalSection
VirtualFree
IsBadWritePtr
FormatMessageA
GetOEMCP
FileTimeToLocalFileTime
IsDBCSLeadByte
GetLocaleInfoA
SetPriorityClass
TlsGetValue
Sleep
InterlockedDecrement
GetFileAttributesW
CloseHandle
GlobalSize
VirtualFree
lstrcpyA
TlsAlloc
GetCurrentDirectoryW
FileTimeToDosDateTime
CloseHandle
GetCPInfo
HeapAlloc
GetCurrentDirectoryA
FreeLibrary
GetDateFormatA
FindResourceA
SetStdHandle
SetFilePointer
GetCommandLineW
GlobalAlloc
DeleteFileA
ResetEvent
OutputDebugStringW

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 167KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

171c055d2fefd077a5c76e87358d7890

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

btwiimsg

ntdll

advapi32

ole32

kernel32

Sections

.text Size: 17KB - Virtual size: 17KB

.data Size: 9KB - Virtual size: 9KB

.rsrc Size: 167KB - Virtual size: 168KB

.text
Size: 17KB - Virtual size: 17KB

.data
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 167KB - Virtual size: 168KB