fc591d42a3a5ce5405c184be20ae94a9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fc591d42a3a5ce5405c184be20ae94a9_JaffaCakes118
Size

2.2MB
MD5

fc591d42a3a5ce5405c184be20ae94a9
SHA1

993ff914cf4cb27efa357a897c68186bcada10b1
SHA256

d9ae98d1e4322c67b78b792468feed0c831d1f79a4c480bc611abedc0e25a07f
SHA512

b43956006ce77867dc9e39999ee0102470a71337cef32fa067d1e2e961bbb1273ae128b10f6b4df760f64d7b2d81b57790e4efd64127723861f7798505a8e26f
SSDEEP

24576:2gngMXF62MkD5A6otpjcbuNRKnrmn45yZcUhZQ2Ma0sDajHgY7XI:2gngMCO50aS/Knrm4F8Q4CAaY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc591d42a3a5ce5405c184be20ae94a9_JaffaCakes118

Files

fc591d42a3a5ce5405c184be20ae94a9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b327fb888774dd6e3776938416fc0f02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefRawInputProc
GetRawInputData
SetScrollInfo
CopyIcon
LoadImageW
DestroyIcon
GetWindow
UnionRect
CopyRect
InvertRect
FrameRect
WindowFromPoint
GetClipCursor
GetWindowRect
GetClientRect
ScrollWindowEx
InvalidateRect
BeginPaint
DrawTextW
DrawIcon
CreatePopupMenu
CreateMenu
DrawMenuBar
CharUpperW
IsClipboardFormatAvailable
CallMsgFilterW
GetDlgCtrlID
EndDialog
CreateDialogIndirectParamW
BringWindowToTop
EndDeferWindowPos
IsChild
GetClassInfoW
GetMessagePos
RegisterWindowMessageW
ActivateKeyboardLayout

comdlg32

CommDlgExtendedError
ReplaceTextW
PageSetupDlgW

kernel32

HeapSize
HeapAlloc
GetStringTypeW
OutputDebugStringW
RtlUnwind
LoadLibraryExW
FlushFileBuffers
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetOEMCP
IsValidCodePage
IsDebuggerPresent
IsProcessorFeaturePresent
TlsFree
TlsSetValue
TlsGetValue
GetConsoleCP
GetConsoleMode
SetStdHandle
GetVersion
GlobalLock
VirtualAlloc
HeapReAlloc
GetFileType
SetFilePointer
SetFilePointerEx
SystemTimeToFileTime
TlsAlloc
GetModuleHandleW
GetStartupInfoW
GetFileAttributesExW
FindFirstFileW
MoveFileW
CreateNamedPipeW
GetLogicalProcessorInformation
GetACP
LCMapStringW
GetConsoleWindow
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
WriteFile
GetModuleFileNameW
DeleteCriticalSection
GetStdHandle
GetProcessHeap
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
GetModuleHandleExW
ExitProcess
DecodePointer
GetCurrentThreadId
SetLastError
GetLastError
EncodePointer
RaiseException
GetCommandLineW
WriteConsoleW
CloseHandle
GetSystemTime
CreateFileW

shell32

SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetFileInfoW
CommandLineToArgvW
Shell_NotifyIconW

shlwapi

PathCreateFromUrlW
UrlCanonicalizeW
PathStripToRootW
PathSkipRootW
PathRemoveFileSpecW
SHDeleteEmptyKeyW
PathRemoveBlanksW
PathRemoveBackslashW
PathParseIconLocationW
PathIsRelativeW
PathIsDirectoryW
PathFindNextComponentW
PathFindFileNameW
PathCombineW
PathCanonicalizeW
PathBuildRootW
SHStrDupW
StrTrimW
StrToIntW
StrPBrkW
StrFormatByteSizeW
StrCmpNW
StrChrW
SHDeleteKeyW
SHSetValueW
AssocCreate
SHCreateStreamOnFileW
PathRemoveExtensionW
StrToIntExW

advapi32

RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

setupapi

SetupDiGetDeviceInstanceIdW
CM_Locate_DevNodeW
SetupDiCallClassInstaller
SetupDiGetClassDevsExW
SetupDiEnumDriverInfoW
SetupGetIntField
SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInfoW
SetupDiOpenDeviceInterfaceW
SetupDiGetDeviceInterfaceDetailW
SetupDiBuildDriverInfoList

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 630KB - Virtual size: 7.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.n2ee
Size: 500KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.6e8eu
Size: 343KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.et13o
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 377KB - Virtual size: 377KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b327fb888774dd6e3776938416fc0f02

Headers

File Characteristics

Imports

user32

comdlg32

kernel32

shell32

shlwapi

advapi32

setupapi

Sections

.text Size: 85KB - Virtual size: 84KB

.data Size: 630KB - Virtual size: 7.0MB

.idata Size: 4KB - Virtual size: 4KB

.xdata Size: 1024B - Virtual size: 724B

.n2ee Size: 500KB - Virtual size: 500KB

.6e8eu Size: 343KB - Virtual size: 342KB

.et13o Size: 280KB - Virtual size: 279KB

.rsrc Size: 377KB - Virtual size: 377KB

.text
Size: 85KB - Virtual size: 84KB

.data
Size: 630KB - Virtual size: 7.0MB

.idata
Size: 4KB - Virtual size: 4KB

.xdata
Size: 1024B - Virtual size: 724B

.n2ee
Size: 500KB - Virtual size: 500KB

.6e8eu
Size: 343KB - Virtual size: 342KB

.et13o
Size: 280KB - Virtual size: 279KB

.rsrc
Size: 377KB - Virtual size: 377KB