f9d10aae879316f1b370c494c65513e9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f9d10aae879316f1b370c494c65513e9_JaffaCakes118
Size

894KB
MD5

f9d10aae879316f1b370c494c65513e9
SHA1

01d639e00c8956d37412d85bb478e6a3e07bf192
SHA256

b6a2e91958391fed1a97b16f49bc2a2a6eb65beed63ead61582070a7917b2cbc
SHA512

90f74b0bf1c448dcfed9e35ee10dc798e4b5138bdbebdfba8e76759c1536adfdfd20f592bdd3845244bca741e70ff55507315459a59acd9cef412f957e6250e4
SSDEEP

12288:yW787HOYzZSLlaUFe1OYpSX8eBfjRgeYlSC6WLmg9YTjxdFAUswT5WLd+KIydnuT:OLOYzZSLlawX8ayaCzr9s7psY6+KrdK/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9d10aae879316f1b370c494c65513e9_JaffaCakes118

Files

f9d10aae879316f1b370c494c65513e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

673df7b0350ff14f47dddf1eb227eb7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_DragEnter
DestroyPropertySheetPage
ImageList_GetBkColor
ImageList_Draw

user32

DefMDIChildProcA
ShowScrollBar
GetClipboardSequenceNumber
CheckDlgButton
CloseWindowStation
OpenIcon
EmptyClipboard
GetMenuStringA
DestroyCaret
GetMessageExtraInfo
GetWindowWord
GetClipboardFormatNameA
OpenDesktopA
ChangeClipboardChain
GetMenuItemRect
OpenClipboard
VkKeyScanA
IsCharLowerW
EnumWindowStationsA

kernel32

GetProcessHeap
GetCompressedFileSizeW
ExitProcess
GlobalFlags
GetOEMCP
WritePrivateProfileStringA
WriteFile
ExitThread
LeaveCriticalSection
SetConsoleOutputCP
GetBinaryTypeA
_llseek
IsProcessorFeaturePresent
GenerateConsoleCtrlEvent
QueryDosDeviceW
GetProcessTimes
FreeResource
EraseTape
GetModuleFileNameW
DeleteFiber
GlobalAddAtomW
LCMapStringA
SetConsoleCursorPosition
GlobalAddAtomA
GetACP
CreateProcessA
EnumSystemCodePagesW
WriteConsoleOutputCharacterA
GetVersion
UnhandledExceptionFilter
GetEnvironmentStringsW
GetTimeZoneInformation
GetAtomNameA
GetLocaleInfoW
SetEvent
LocalReAlloc
SetConsoleTitleA
ReadFile
GetBinaryTypeW
EnumCalendarInfoW
GetSystemTimeAsFileTime
lstrcpynA
DeleteCriticalSection

advapi32

ObjectCloseAuditAlarmA
RegFlushKey
RegCreateKeyW
CryptExportKey
QueryServiceLockStatusW
RegQueryValueExA
StartServiceCtrlDispatcherA
StartServiceA
ReportEventW
LookupPrivilegeDisplayNameA
CryptReleaseContext
SetNamedSecurityInfoW
RegUnLoadKeyA
CopySid
SetSecurityDescriptorSacl
UnlockServiceDatabase

msvcrt

_mbsdec
perror
_wtol
_snwprintf
fread
_setmode
_getdcwd
_lseeki64
_beginthread
wcscoll
_itoa
wscanf
_ui64tow
_mbsrchr
_strdup
_chmod
_mbctoupper
mktime
_stricoll
_wsetlocale
ftell
_wstrdate
_controlfp
_isctype
iswxdigit

Sections

.text
Size: 11KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 597KB - Virtual size: 596KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

673df7b0350ff14f47dddf1eb227eb7a

Headers

File Characteristics

Imports

comctl32

user32

kernel32

advapi32

msvcrt

Sections

.text Size: 11KB - Virtual size: 227KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 597KB - Virtual size: 596KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 11KB - Virtual size: 227KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 597KB - Virtual size: 596KB

.rsrc
Size: 17KB - Virtual size: 16KB