ef10e7bd573865a1aca8646dee0c63fc_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ef10e7bd573865a1aca8646dee0c63fc_JaffaCakes118
Size

164KB
MD5

ef10e7bd573865a1aca8646dee0c63fc
SHA1

d282b5978388bbf039bb58365666b70bd8f198e5
SHA256

69c3dfb65bb38139098465d0ea311c48b0f6569ded2189ed18577b3dfba2cabf
SHA512

fe0ec13cfe6af400c0203e1d12dee5a6b93d92f6855aafa7c9c265109464b22a7235082c38002ed4dc07ce920f1e9dd841b4ac8f806ad9c7c2ced559d209e329
SSDEEP

3072:AwquAp7dfU//ra85Dilvk8IAiMeOW7NlnW4PKUEIUeRrrJt4MgSG4LWRC0R0LC3c:AmAp7dfO/rFmxNiMW44PjEINRZteSGaj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef10e7bd573865a1aca8646dee0c63fc_JaffaCakes118

Files

ef10e7bd573865a1aca8646dee0c63fc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e93aec73a95d6745e536340798c2872e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
_vsnprintf
wcslen
qsort
_except_handler3
_vsnwprintf

user32

EndDeferWindowPos
GetUpdateRect
GetSysColorBrush
SendDlgItemMessageW
ClientToScreen
GetCursorPos
SetParent
GetDC
CreateIconIndirect
GetIconInfo
LoadImageW
CopyImage
InflateRect
GetWindow
LoadStringA
GetWindowTextA
LoadIconW
SetDlgItemTextW
GetDlgItemTextW
GetSysColor
FillRect
DrawFocusRect
CreatePopupMenu
AppendMenuW
TrackPopupMenu
DestroyMenu
ChildWindowFromPointEx
GetFocus
LoadCursorW
SetCursor
EndDialog
GetWindowDC
ReleaseDC
InvalidateRect
GetClientRect
DeferWindowPos
CheckDlgButton
EnableWindow
ShowWindow
SetWindowTextW
GetWindowTextW
MessageBeep
GetWindowTextLengthW
SetWindowPos
GetSystemMetrics
SetPropW
SendMessageW
PostMessageW
GetParent
RemovePropW
CallWindowProcW
GetPropW
SetFocus
GetDlgCtrlID
GetWindowRect
MapWindowPoints
EnumChildWindows
GetDlgItem
SetWindowLongW
DestroyIcon
LoadStringW
ScreenToClient
GetWindowLongW
SetWindowContextHelpId
WinHelpW
DestroyWindow
BeginDeferWindowPos
MessageBoxA
DialogBoxParamW
DialogBoxIndirectParamW
ReleaseCapture
GetCapture
CheckRadioButton
CreateWindowExW

gdi32

SetTextColor
DeleteObject
SetBkMode
DeleteDC
CreateCompatibleDC
TextOutW
SelectObject
GetTextMetricsW
CreateSolidBrush
StretchDIBits
CreateCompatibleBitmap
Rectangle
GetStockObject
BitBlt
SetStretchBltMode
GetObjectW
GetBitmapBits
StretchBlt
CreateBitmap
SetDIBitsToDevice
MoveToEx
SetTextAlign
SetBkColor
IntersectClipRect
CreateFontIndirectW
GetTextExtentPointW

kernel32

CreateMutexW
ReleaseActCtx
ReleaseMutex
WaitForSingleObject
GetCurrentThreadId
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
CloseHandle
LoadResource
LockResource
FreeResource
MultiByteToWideChar
GetModuleFileNameW
LoadLibraryW
GetProcAddress
FreeLibrary
lstrcmpA
lstrcmpW
LocalFree
LocalAlloc
lstrlenA
lstrlenW
IsBadWritePtr
GetModuleFileNameA
DeactivateActCtx
ActivateActCtx
SetLastError
GetLastError
AddRefActCtx
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleW
CreateActCtxW
GetWindowsDirectoryW
lstrcpynW
SearchPathW
FindClose
FindFirstFileW
FindResourceW

advapi32

RegQueryValueExW
RegCloseKey
RegSetValueExW
RegCreateKeyW

msimg32

TransparentBlt

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

shlwapi

wnsprintfW
ord215
ord346

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.9e3c
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1o2p
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.16as
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aeas
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.k1kl
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ps1i
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.t3ta
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ksi1
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.12i1
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.123f
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eaa
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ze
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1teaX
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.134
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.724
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.182
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.381
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.832
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ii32
Size: 512B - Virtual size: 238B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.i832
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.i833
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.i803
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.i804
Size: 512B - Virtual size: 246B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1928
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1hgh
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.10gh
Size: 512B - Virtual size: 226B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.9102
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e93aec73a95d6745e536340798c2872e

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

user32

gdi32

kernel32

advapi32

msimg32

version

shlwapi

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 2KB

.9e3c Size: 199KB - Virtual size: 198KB

.1o2p Size: 199KB - Virtual size: 198KB

.16as Size: 512B - Virtual size: 216B

.aeas Size: 512B - Virtual size: 216B

.k1kl Size: 512B - Virtual size: 216B

.ps1i Size: 512B - Virtual size: 216B

.t3ta Size: 512B - Virtual size: 216B

.ksi1 Size: 512B - Virtual size: 216B

.12i1 Size: 512B - Virtual size: 216B

.123f Size: 512B - Virtual size: 216B

.eaa Size: 512B - Virtual size: 216B

.ze Size: 512B - Virtual size: 216B

.1teaX Size: 512B - Virtual size: 216B

.134 Size: 512B - Virtual size: 216B

.724 Size: 512B - Virtual size: 216B

.182 Size: 512B - Virtual size: 216B

.381 Size: 512B - Virtual size: 216B

.832 Size: 512B - Virtual size: 216B

.ii32 Size: 512B - Virtual size: 238B

.i832 Size: 512B - Virtual size: 202B

.i833 Size: 512B - Virtual size: 218B

.i803 Size: 512B - Virtual size: 222B

.i804 Size: 512B - Virtual size: 246B

.1928 Size: 512B - Virtual size: 202B

.1hgh Size: 512B - Virtual size: 222B

.10gh Size: 512B - Virtual size: 226B

.9102 Size: 512B - Virtual size: 262B

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 512B - Virtual size: 312B

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 2KB

.9e3c
Size: 199KB - Virtual size: 198KB

.1o2p
Size: 199KB - Virtual size: 198KB

.16as
Size: 512B - Virtual size: 216B

.aeas
Size: 512B - Virtual size: 216B

.k1kl
Size: 512B - Virtual size: 216B

.ps1i
Size: 512B - Virtual size: 216B

.t3ta
Size: 512B - Virtual size: 216B

.ksi1
Size: 512B - Virtual size: 216B

.12i1
Size: 512B - Virtual size: 216B

.123f
Size: 512B - Virtual size: 216B

.eaa
Size: 512B - Virtual size: 216B

.ze
Size: 512B - Virtual size: 216B

.1teaX
Size: 512B - Virtual size: 216B

.134
Size: 512B - Virtual size: 216B

.724
Size: 512B - Virtual size: 216B

.182
Size: 512B - Virtual size: 216B

.381
Size: 512B - Virtual size: 216B

.832
Size: 512B - Virtual size: 216B

.ii32
Size: 512B - Virtual size: 238B

.i832
Size: 512B - Virtual size: 202B

.i833
Size: 512B - Virtual size: 218B

.i803
Size: 512B - Virtual size: 222B

.i804
Size: 512B - Virtual size: 246B

.1928
Size: 512B - Virtual size: 202B

.1hgh
Size: 512B - Virtual size: 222B

.10gh
Size: 512B - Virtual size: 226B

.9102
Size: 512B - Virtual size: 262B

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 512B - Virtual size: 312B