fb18619968ec4e6b75f1ddfec64ffe1c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fb18619968ec4e6b75f1ddfec64ffe1c_JaffaCakes118
Size

430KB
MD5

fb18619968ec4e6b75f1ddfec64ffe1c
SHA1

b863360a43273ee7d39122425ae6f710da1d5c75
SHA256

6a86bf8c513d1dc9ffcaafe061edf52fb75002e7b09a9bb3ffaf51f24fd36e9c
SHA512

499eb603a998bd02b187f2c840509fabf4c6ccf79929017f3961b0500feb2cf942f473c2ef9d6e879dd35d7296204e8ac6495bcbd37225088df22a8cd0c0cacf
SSDEEP

3072:QeF5jKUv5O2uScxSpo8zKJiyh7iOKo+52W8Rd4x1GPEQHuglvEYjCeHVr7:zEREbotW8kiHHNEYj5r7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb18619968ec4e6b75f1ddfec64ffe1c_JaffaCakes118

Files

fb18619968ec4e6b75f1ddfec64ffe1c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

788103b59f5735291b7e77b0ff5a39a6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextFileA
DeleteFileA
FindFirstFileA
Sleep
GetCurrentProcessId
GetCommandLineA
lstrcmpA
CompareStringW
CompareStringA
GetTimeZoneInformation
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
InitializeCriticalSectionAndSpinCount
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
FindClose
GetOEMCP
GetCPInfo
HeapSize
HeapReAlloc
VirtualAlloc
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetCurrentThread
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
RemoveDirectoryA
GetLocalTime
SystemTimeToFileTime
CompareFileTime
VirtualProtect
lstrcatA
CreateFileA
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
GetFileSize
ReadFile
WideCharToMultiByte
SizeofResource
WriteFile
GetCurrentProcess
CloseHandle
GetACP
LoadLibraryA
OutputDebugStringA
GetProcAddress
lstrcmpiA
ExitProcess
lstrlenA
CreateMutexA
GetLastError
lstrcpyA
GetModuleHandleA
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
GetModuleHandleW
RtlUnwind
HeapAlloc
RaiseException
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
SetEnvironmentVariableA

user32

CopyRect
FrameRect
InflateRect
DrawTextA
DrawIconEx
GetDesktopWindow
GetWindowDC
ReleaseDC
GetSystemMetrics
CreatePopupMenu
InsertMenuItemA
MessageBeep
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
SetForegroundWindow
GetCursorPos
TrackPopupMenuEx
DestroyWindow
DialogBoxParamA
DefWindowProcA
GetDlgItemTextA
wsprintfA
FindWindowA
EnableWindow
PostMessageA
IsDlgButtonChecked
SendMessageA
UpdateWindow
SendDlgItemMessageA
GetDlgItem
SetClassLongA
GetSysColor
EndDialog
GetDlgCtrlID
RegisterHotKey
LoadCursorA
RegisterClassExA
CreateWindowExA
MessageBoxA
SetMenuDefaultItem
LoadMenuA
GetSubMenu
LoadIconA
UnregisterHotKey

gdi32

CreateSolidBrush
CreatePen
SetBkMode
MoveToEx
LineTo
GetStockObject
SelectObject
GetTextExtentPoint32A
CreateFontA
CreateBrushIndirect
SetBkColor
SetTextColor
DeleteObject

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetFileSecurityA
RegDeleteKeyA
RegOpenKeyA
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegDeleteValueA

shell32

ShellExecuteExA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
SHGetFolderPathA
Shell_NotifyIconA

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mywin
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

788103b59f5735291b7e77b0ff5a39a6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 105KB - Virtual size: 104KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 11KB - Virtual size: 16KB

.mywin Size: 196KB - Virtual size: 196KB

.rsrc Size: 99KB - Virtual size: 98KB

.text
Size: 105KB - Virtual size: 104KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 11KB - Virtual size: 16KB

.mywin
Size: 196KB - Virtual size: 196KB

.rsrc
Size: 99KB - Virtual size: 98KB