f0009c93500bc8998a7ac8430d001b2b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f0009c93500bc8998a7ac8430d001b2b_JaffaCakes118
Size

353KB
MD5

f0009c93500bc8998a7ac8430d001b2b
SHA1

48a1640922f3d8abd953ab4c2c0600096784edec
SHA256

cd70dd79d19bbb146db9ad4ef51b93154fa4cc2b6f8172b161f8fd520eccf55c
SHA512

3f6a38fda9aab9d686da3c22288916921d8496a079930b94c0ea9a7ec223a48be8c1da59bf664330b5c054506494f2ddca7fbbd8e71008b382ef800560c5e150
SSDEEP

6144:D1OHMqZ3r1WOSHFbRwkaBgu4ChCKEQXfZScxR6SpF7uPdQyRDhscPGtQ3HsGqlWj:D1CB3rJSHFbakaBgGHR6SpFyPdZRTiQw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0009c93500bc8998a7ac8430d001b2b_JaffaCakes118

Files

f0009c93500bc8998a7ac8430d001b2b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

42c649866669e4580bce3cb6dbdbeaa3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

polstore.pdb

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpynW
lstrlenW
lstrcmpiW
ExitProcess
GetModuleHandleA
GetStartupInfoW
GetCommandLineW
ExpandEnvironmentStringsW
lstrcpyW

advapi32

RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegCreateKeyA
RegOpenKeyA
RegFlushKey

user32

MapDialogRect
SetRect
CreateWindowExW
PostMessageW
DestroyIcon
CheckRadioButton
IsDlgButtonChecked
GetSysColor
IsWindowVisible
GetDialogBaseUnits
GetFocus
UpdateWindow
GetNextDlgTabItem
GetClientRect
DrawFocusRect
LoadCursorA
SetCursor
GetWindowRect
MapWindowPoints
FillRect
InvalidateRect
GetSysColorBrush
LoadBitmapW
GetDesktopWindow
LoadStringA
SendDlgItemMessageA
SetDlgItemTextW
SendMessageA
SetWindowTextA
GetDC
ReleaseDC
WinHelpW
ShowWindow
GetDlgItem
GetWindowTextW
EnableWindow
SetFocus
DialogBoxParamW
PeekMessageA
IsWindowEnabled
LoadIconA
GetUpdateRect
CallWindowProcA
BeginPaint
EndPaint
DrawIcon
wsprintfA
SetWindowPos
GetParent
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
GetDlgItemTextA
SetClassLongA
GetWindowLongA
MonitorFromWindow
GetMonitorInfoW
GetWindow
CopyRect
LoadCursorW
DestroyWindow
SystemParametersInfoA
MessageBoxExW
PostMessageA
RegisterClipboardFormatA
CreateWindowExA
MoveWindow
GetWindowDC
SetCapture
SetWindowLongA
ReleaseCapture
GetWindowLongW
DrawTextExW
SendDlgItemMessageW
EndDialog
SetWindowLongW
SetWindowTextW
SendMessageW
LoadStringW
MessageBoxW

ntdll

RtlAnsiStringToUnicodeString
RtlInitUnicodeString
RtlOemToUnicodeN
NtOpenThreadToken
NtImpersonateAnonymousToken
NtCreateFile
NtFsControlFile
NtSetInformationThread
RtlUnicodeToOemN
NlsMbOemCodePageTag
RtlxUnicodeStringToOemSize
RtlUnicodeStringToOemString
NtOpenProcessToken
NtQueryInformationToken
RtlCopyLuid
NtClose
RtlAllocateHeap
RtlFreeHeap
RtlInitAnsiString
RtlUnicodeStringToAnsiString
RtlFreeUnicodeString
RtlNtStatusToDosError
RtlUnicodeToMultiByteN

ole32

CLSIDFromString
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoTaskMemFree
ReleaseStgMedium
CoCreateInstance

msvcrt

_purecall
malloc
_initterm
memcpy
free
memset
_onexit
__dllonexit
_adjust_fdiv
_itow
realloc

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 199KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42c649866669e4580bce3cb6dbdbeaa3

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

user32

ntdll

ole32

msvcrt

Sections

.text Size: 95KB - Virtual size: 95KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 199KB - Virtual size: 208KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 95KB - Virtual size: 95KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 199KB - Virtual size: 208KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB