f568f53aeae5c8e5ddf22b239016ef79_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f568f53aeae5c8e5ddf22b239016ef79_JaffaCakes118
Size

92KB
MD5

f568f53aeae5c8e5ddf22b239016ef79
SHA1

0deea32b500c7da8dacbcb329acff29e8732a03d
SHA256

67f709a22b56ffda63b17e6fcb2a16b2d996366b798ee5a18c4a2d2cac6783ac
SHA512

417562de82a2988b25aa272283a127d450bd01d56df6993239e33978a9cd73cbbabedf34c3feb98b12506dfcb6b9698562b74912e9c1f0ab1ad17d2075dc8296
SSDEEP

1536:Z/MgFGQCHxgUaFarKN0bYad+exuSOfCNGT7DIaUpm7Eimpo/GvfG:vApg9j0bYaVnNGT7DI3pm74pWyG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f568f53aeae5c8e5ddf22b239016ef79_JaffaCakes118

Files

f568f53aeae5c8e5ddf22b239016ef79_JaffaCakes118
.exe windows:0 windows x86 arch:x86

d78203d8bf62cda092bca733603a2aba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_controlfp
_initterm
__getmainargs
_acmdln
exit
_cexit
__setusermatherr
_XcptFilter
_exit
_c_exit
wcscpy
_wcsicmp
free
malloc

advapi32

RegOpenKeyExA
RegQueryValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey
AllocateAndInitializeSid
FreeSid
OpenThreadToken
OpenProcessToken
GetTokenInformation
CheckTokenMembership

kernel32

lstrlenW
GetSystemWindowsDirectoryW
LocalFree
LocalAlloc
GetCurrentProcess
GetLastError
GetCurrentThread
CloseHandle
lstrcmpiW
WaitForMultipleObjects
OpenEventW
CreateEventW
SetEvent
CreateMutexW
SetLastError
GetCommandLineW
GetWindowsDirectoryW
lstrcmpW
ExitProcess
GetVersionExW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
GetStartupInfoA
lstrcatW
GetNumberFormatW
lstrcpyW
VirtualAlloc
GetCurrentThreadId

gdi32

CreateFontIndirectW
CreatePenIndirect
SetTextColor
BitBlt
SetBkColor
CreateSolidBrush
CreateCompatibleDC
SetMapMode
TextOutW
GetTextMetricsW
SetBkMode
RealizePalette
SelectPalette
GetObjectW
StretchBlt
CreateBitmap
DeleteDC
CreateRoundRectRgn
SelectObject
Polyline
DeleteObject

user32

FindWindowW
MapVirtualKeyW
GetAsyncKeyState
SetTimer
SendMessageW
EndDialog
LoadStringW
EnableWindow
MessageBoxW
DialogBoxParamW
IsWindow
GetKeyboardLayout
GetWindowThreadProcessId
wsprintfW
CheckDlgButton
GetClientRect
DestroyWindow
InvalidateRect
WinHelpW
GetKeyboardType
SetClassLongW
RegisterClassW
LoadCursorW
CreateWindowExW
GetSystemMetrics
SetWindowPos
SetWindowLongW
GetKeyState
wsprintfA
DrawIconEx
LoadImageW
SetWindowRgn
ToUnicodeEx
LoadIconW
GetWindowLongW
GetSysColor
ReleaseDC
GetDC
MapVirtualKeyExW
CloseDesktop
GetUserObjectInformationW
OpenDesktopW
OpenInputDesktop
PostMessageW
SetThreadDesktop
GetThreadDesktop
EndPaint
BeginPaint
DefWindowProcW
SetProcessWindowStation
OpenWindowStationW
GetProcessWindowStation
CloseWindowStation
MoveWindow
GetDesktopWindow
GetWindowRect
AllowSetForegroundWindow
SetForegroundWindow
GetForegroundWindow
ShowWindow
IsIconic
DispatchMessageW
TranslateMessage
GetMessageW
UpdateWindow
RegisterWindowMessageW
KillTimer
EnableMenuItem
CheckMenuRadioItem
CheckMenuItem
ReleaseCapture
SetCapture
SetCursor
ChildWindowFromPointEx
ScreenToClient
GetCursorPos
PostQuitMessage
SendInput
ActivateKeyboardLayout

comdlg32

ChooseFontW

winmm

PlaySoundW
midiInAddBuffer
WOW32DriverCallback
DrvGetModuleHandle
mciLoadCommandResource
waveOutGetID
mmioDescend
waveInReset
joy32Message
mixerGetNumDevs
waveInGetErrorTextW
midiStreamOut
mid32Message
waveOutWrite
mod32Message
mmioInstallIOProcA

shell32

ShellExecuteW

ole32

CoUninitialize
CoInitialize

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Ci
Size: 2KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lFpGv
Size: 2KB - Virtual size: 22KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.V
Size: 2KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vbyqvn
Size: 2KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d78203d8bf62cda092bca733603a2aba

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

gdi32

user32

comdlg32

winmm

shell32

ole32

Sections

.text Size: 14KB - Virtual size: 13KB

.Ci Size: 2KB - Virtual size: 31KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 6KB - Virtual size: 206KB

.lFpGv Size: 2KB - Virtual size: 22KB

.V Size: 2KB - Virtual size: 22KB

.vbyqvn Size: 2KB - Virtual size: 29KB

.rsrc Size: 54KB - Virtual size: 53KB

.reloc Size: 3KB - Virtual size: 4KB

.text
Size: 14KB - Virtual size: 13KB

.Ci
Size: 2KB - Virtual size: 31KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 6KB - Virtual size: 206KB

.lFpGv
Size: 2KB - Virtual size: 22KB

.V
Size: 2KB - Virtual size: 22KB

.vbyqvn
Size: 2KB - Virtual size: 29KB

.rsrc
Size: 54KB - Virtual size: 53KB

.reloc
Size: 3KB - Virtual size: 4KB