ef8d765be0a56721315738dbe06e8988_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ef8d765be0a56721315738dbe06e8988_JaffaCakes118
Size

315KB
MD5

ef8d765be0a56721315738dbe06e8988
SHA1

125f2a95c2cb086c237c0157cb059e027838fbad
SHA256

74315a3912527dafba8fc6644ea8de66a5cb56d54e7905a1194fce4334ed1a8b
SHA512

74331c8742915543b0fcf82c6c476984e9e68a73d21881fb4182117216d983112987f5c779237270bed91bda5f13d32297931f3aa5d32a3b63b0ca08770d1fb1
SSDEEP

6144:swKr4gS3RG3qHGDblUglgEg3psGLa4L2PKwb8El6/:guR/HEBUUc3WC2iBn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef8d765be0a56721315738dbe06e8988_JaffaCakes118

Files

ef8d765be0a56721315738dbe06e8988_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5dcadcfbe8fb014f6a841444b7daa722

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

corpol.pdb

Imports

msvcrt

_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_controlfp
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
__setusermatherr
_wtoi
_wtol
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
wcschr
swscanf
wcstoul
_ftol
_purecall

advapi32

RegOpenKeyExW
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyA
RegEnumValueA
RegSetValueExA
RegEnumKeyA
RegCreateKeyExW
RegSetValueExW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegCreateKeyW

kernel32

GetLastError
CreateMutexW
SetLastError
GetProcAddress
GetModuleHandleW
lstrcmpW
lstrcatW
CloseHandle
WriteFile
MulDiv
Sleep
lstrcmpiW
WriteProfileStringW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
LoadLibraryA
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
GetStartupInfoA
GetCommandLineW
lstrlenW
lstrcpyW
CreateFileW
GetFileSize
ReadFile
GetVersionExW
GetNumberFormatW

gdi32

TextOutW
RestoreDC
PatBlt
GetTextColor
RealizePalette
ExtTextOutW
BitBlt
CreateCompatibleBitmap
SetLayout
SelectObject
DeleteObject
SetBkColor
SelectPalette
SetTextColor
SetBkMode
CreatePalette
CreateBitmap
CreateCompatibleDC
GetTextMetricsW
DeleteDC
SetTextAlign
Rectangle
GetTextExtentPoint32W
SaveDC
CreateSolidBrush
SetPaletteEntries
GetStockObject
GetNearestColor
GetNearestPaletteIndex
GetPaletteEntries
GetDeviceCaps
CreateFontIndirectW

user32

SetTimer
KillTimer
SetCaretBlinkTime
SwapMouseButton
SetSysColors
SetFocus
GetFocus
GetForegroundWindow
DrawCaptionTempW
SetSysColorsTemp
LoadIconW
EnumDisplaySettingsW
ChangeDisplaySettingsW
SendMessageTimeoutW
FindWindowW
GetWindowRect
MapWindowPoints
SetWindowPos
ShowWindow
SetWindowLongW
LoadStringW
SendMessageW
GetDlgItem
SendDlgItemMessageW
SetDlgItemTextW
wsprintfW
GetWindowLongW
MessageBoxW
ReleaseDC
GetDC
GetDesktopWindow
SystemParametersInfoW
GetWindow
GetDlgCtrlID
GetTopWindow
GetClientRect
HiliteMenuItem
EnableMenuItem
LoadMenuW
OffsetRect
InflateRect
GetSystemMetrics
FillRect
DrawFrameControl
DestroyIcon
DrawTextW
DrawEdge
LoadImageW
InvalidateRect
DefWindowProcW
EndPaint
BeginPaint
GetSysColor
RegisterClassW
LoadCursorW
PostMessageW
GetParent
SetWindowTextW
EnableWindow

comctl32

PropertySheetW

comdlg32

GetSaveFileNameW

shell32

ShellExecuteW

ole32

CoInitialize
CoCreateInstance

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 229KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5dcadcfbe8fb014f6a841444b7daa722

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

advapi32

kernel32

gdi32

user32

comctl32

comdlg32

shell32

ole32

Sections

.text Size: 29KB - Virtual size: 28KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 229KB - Virtual size: 237KB

.bss Size: - Virtual size: 10KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 29KB - Virtual size: 28KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 229KB - Virtual size: 237KB

.bss
Size: - Virtual size: 10KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 2KB - Virtual size: 2KB