fa029c9a1d4ce7168a233ece68771cf1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fa029c9a1d4ce7168a233ece68771cf1_JaffaCakes118
Size

644KB
MD5

fa029c9a1d4ce7168a233ece68771cf1
SHA1

e9f03692ce8206af6e9cbe69631002bc19737c8c
SHA256

af53c01294aec72b645a807b34d149237cfd69ba3aad1b4844ada6ddc453bbec
SHA512

fd14d7c5d213b4516d941ce4bb8076d548d2dd769f36feaba9a2d619f943ac30e810e9dc19ffe0d10b81880c61a192a2fb84511a8c302824c4dc0af0a5b371c1
SSDEEP

12288:jIonZe/AGFj4kJO1hVHx5otYx1nNewvSAtc8nOMS04X:jIoZeB54kk1TR5Q0QYVycORr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa029c9a1d4ce7168a233ece68771cf1_JaffaCakes118

Files

fa029c9a1d4ce7168a233ece68771cf1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

50bf0ff0a3f54b648cdef4f6e1fb2f36

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnregisterConsoleIME
FreeLibrary
DebugActiveProcess
SetConsoleTextAttribute
ExitProcess
GetSystemDefaultLangID
GetSystemDefaultLCID
GetExpandedNameA
EnumTimeFormatsW
VirtualAlloc
CreateSemaphoreA
GetVolumeNameForVolumeMountPointA
WriteFileGather
FormatMessageA
RemoveDirectoryW
GetProcessTimes
VirtualProtectEx
OpenSemaphoreA
Heap32First

hhsetup

?RemoveCollection@CCollection@@QAEKH@Z
?GetFirstTitle@CCollection@@QAEPAVCTitle@@XZ
?GetNextFolder@CFolder@@QAEPAV1@XZ
?GetCollectionFileName@CCollection@@QAEPBDXZ
?bIsVisable@CFolder@@QAEHXZ
?AddCollection@CCollection@@QAEPAVCColList@@XZ
?GetSampleLocation@CCollection@@QAEPADXZ
?AddLocation@CCollection@@QAEPAVCLocation@@PBG000PAK@Z
?SetNextTitle@CTitle@@QAEXPAV1@@Z
?GetVolumeW@CLocation@@QAEPBGXZ
?WriteFolder@CCollection@@AAEHPAPAVCFolder@@@Z
?SetNextLocation@CLocation@@QAEXPAV1@@Z
?AddFolder@CCollection@@QAEPAVCFolder@@PBGKPAKG@Z
?GetTitle@CLocation@@QAEPADXZ
?AddLocationHistory@CTitle@@QAEKKPBD00PBVCLocation@@00H@Z

setupapi

CM_Create_Range_List
SetupDiCreateDeviceInfoA
SetupQueryInfFileInformationW
SetupQueueDeleteA
SetupGetLineByIndexW
SetupOpenMasterInf
SetupInstallServicesFromInfSectionExW
CM_Get_Device_ID_List_ExA
CM_Dup_Range_List
CM_Get_Global_State_Ex
SetupSetPlatformPathOverrideA
CM_Get_Device_ID_ListA
SetupDiGetDeviceInfoListClass
CM_Get_Resource_Conflict_Count

opengl32

glRasterPos3sv
glGetLightfv
glLightModelfv
glColor4usv
glGetTexLevelParameteriv
glScissor
glCopyTexImage1D
glIndexMask
glColor4ubv
glVertex4iv
GlmfEndPlayback
glNormal3s
glGetTexEnviv
glLightfv
glTexEnviv

duser

SetGadgetOrder
DUserStopAnimation
RemoveGadgetMessageHandler
SetGadgetRect
SetGadgetFocus
DeleteHandle
SetGadgetRotation
DUserDeleteGadget
DUserCastClass
DUserFindClass
InvalidateGadget
GetStdColorBrushI
GetMessageExA

user32

GetWindowDC
GetParent
GetMenu

Sections

.text
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idat_87
Size: 135KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50bf0ff0a3f54b648cdef4f6e1fb2f36

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

hhsetup

setupapi

opengl32

duser

user32

Sections

.text Size: 328KB - Virtual size: 328KB

.rdata Size: 176KB - Virtual size: 176KB

.idat_87 Size: 135KB - Virtual size: 208KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 328KB - Virtual size: 328KB

.rdata
Size: 176KB - Virtual size: 176KB

.idat_87
Size: 135KB - Virtual size: 208KB

.rsrc
Size: 3KB - Virtual size: 2KB