de0d7b0ed403425590167e9d1403aaa5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

de0d7b0ed403425590167e9d1403aaa5_JaffaCakes118
Size

580KB
MD5

de0d7b0ed403425590167e9d1403aaa5
SHA1

794db62cf7dfbe25bb88d2035a3bacda585a7e6b
SHA256

cb3e4aa39cf6bc343027b86cd53d30d14406240a344badc40372a4d0803fef28
SHA512

85f9e2d11daef9480d28525612913db88142bded1fde0175ddc0d5b3faf57d1f483f28c656120c6b92d04d5ae4199047d80d49e587b38c175bfd45c83c8bc2eb
SSDEEP

12288:Ed2ACYyLMspkT8WnY8ibuHIyeAcrc2X4R6A6N9XFh8LJ5B:QmLMspiGiHIyehc5RkPV2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de0d7b0ed403425590167e9d1403aaa5_JaffaCakes118

Files

de0d7b0ed403425590167e9d1403aaa5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

45d81535cc39ff452c124aa84f96ebae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
FreeSid
RegEnumValueA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclA
AllocateAndInitializeSid
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
AddAccessAllowedAce
RegSetKeySecurity
SetFileSecurityA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

comctl32

ImageList_LoadImageA

kernel32

LockResource
LoadResource
FindResourceA
DeleteFileA
GetTickCount
Sleep
GetLocaleInfoA
GetThreadLocale
GetCurrentProcess
GetProcAddress
LoadLibraryA
GetVersionExA
FlushInstructionCache
GetLocalTime
GetModuleHandleA
CloseHandle
SetFileTime
WriteFile
SetEndOfFile
SetFilePointer
GetFileAttributesA
GetTempFileNameA
CompareFileTime
GetFileInformationByHandle
CreateFileA
CopyFileA
MoveFileA
SetFileAttributesA
GetFullPathNameA
RemoveDirectoryA
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
GetShortPathNameA
WaitForSingleObject
lstrlenA
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentThreadId
CreateDirectoryA
GetUserDefaultLangID
OpenProcess
GetLocaleInfoW
WideCharToMultiByte
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
GlobalMemoryStatus
GetDiskFreeSpaceA
LoadLibraryExA
WriteConsoleA
SetStdHandle
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ReadFile
VirtualAlloc
VirtualFree
HeapCreate
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetFileType
GetStdHandle
SetHandleCount
HeapSize
IsValidCodePage
GetOEMCP
GetProcessHeap
GetACP
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
LCMapStringW
LCMapStringA
GetCPInfo
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleW
RaiseException
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FreeLibrary
GetLastError
LocalFree
FindNextFileA
FindFirstFileA
FindClose
GetCurrentDirectoryA
GetWindowsDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
MulDiv
SizeofResource
SetThreadLocale
FreeResource
WriteConsoleW
GetConsoleOutputCP
InitializeCriticalSection
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
FlushViewOfFile

user32

GetWindowDC
ReleaseDC
SetCapture
MessageBoxA
FindWindowA
GetWindowThreadProcessId
WaitForInputIdle
GetFocus
AdjustWindowRectEx
MoveWindow
GetWindowRect
MapWindowPoints
GetClassNameA
PostMessageA
PeekMessageA
IsDialogMessageA
GetMessageA
DispatchMessageA
GetWindow
CreateDialogParamA
LoadIconA
SetFocus
InvalidateRect
BeginPaint
ReleaseCapture
DrawFrameControl
GetWindowTextLengthA
GetWindowTextA
DrawTextA
DrawFocusRect
EndPaint
DefWindowProcA
GetParent
CreateWindowExA
SetWindowTextA
SetWindowPos
GetWindowLongA
SetWindowLongA
DestroyWindow
UnregisterClassA
LoadCursorA
RegisterClassExA
ExitWindowsEx
GetDlgItemTextA
SetDlgItemTextA
SendMessageA
GetClientRect
GetSystemMetrics
IsDlgButtonChecked
GetDlgItem
ShowWindow
CheckDlgButton
SendDlgItemMessageA
IsWindow
GetDC

gdi32

BitBlt
DeleteDC
SetTextAlign
TextOutA
SetTextColor
SetBkColor
SetBkMode
ExtTextOutA
SelectObject
GetStockObject
CreateCompatibleBitmap
SetDIBits
DeleteObject
GetDeviceCaps
CreateFontA
CreateCompatibleDC

shell32

SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
ShellExecuteExA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

VariantInit
VariantClear

Sections

.text
Size: 376KB - Virtual size: 375KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45d81535cc39ff452c124aa84f96ebae

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

version

comctl32

kernel32

user32

gdi32

shell32

ole32

oleaut32

Sections

.text Size: 376KB - Virtual size: 375KB

.rdata Size: 70KB - Virtual size: 69KB

.data Size: 13KB - Virtual size: 22KB

.rsrc Size: 294KB - Virtual size: 294KB

.text
Size: 376KB - Virtual size: 375KB

.rdata
Size: 70KB - Virtual size: 69KB

.data
Size: 13KB - Virtual size: 22KB

.rsrc
Size: 294KB - Virtual size: 294KB