ff88e0b65fd5e6915c9fc9d7dce32ed1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ff88e0b65fd5e6915c9fc9d7dce32ed1_JaffaCakes118
Size

125KB
MD5

ff88e0b65fd5e6915c9fc9d7dce32ed1
SHA1

7005aa61dd678bbc1c0fcb51891c6562c725aa88
SHA256

0a8958b53b1a5fe3e3ff935315301f96c08be808218c6fd34e1cb8ba4bd98da9
SHA512

992a614e04be81d01a0e8c420b7f50899e93aa35c59892034c6c899fc731c317d52c09a0089f4f527ee97742add53462adfdb27b8824c13a1b30178680295423
SSDEEP

1536:t7gpqflgVJnkgQo7Nk91kbxp4xzoxDp/KJkFiSou7UGlYsjeuyKq3R9T:CtJu1aNxDNfjLY/uyKqBV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff88e0b65fd5e6915c9fc9d7dce32ed1_JaffaCakes118

Files

ff88e0b65fd5e6915c9fc9d7dce32ed1_JaffaCakes118
.exe windows:2 windows x86 arch:x86

d446a299340dcf6b288045b12ef72595

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile
SetTapeParameters
BackupWrite
CreateThread
GetProcessHeap
FileTimeToSystemTime
SetEndOfFile
GetTapePosition
EraseTape
WriteTapemark
SetLastError
GetFileSize
UnhandledExceptionFilter
GetTimeZoneInformation
GetVersion
GetSystemTimeAsFileTime
MultiByteToWideChar
HeapCreate
BackupSeek
GetCurrentDirectoryA
SystemTimeToTzSpecificLocalTime
Sleep
SetUnhandledExceptionFilter
LeaveCriticalSection
GetCurrentThread
VerSetConditionMask
SetFilePointer
FileTimeToLocalFileTime
HeapAlloc
WaitForSingleObject
GetCurrentProcess
ExitThread
GetLastError
InitializeCriticalSection
VirtualAlloc
DeleteCriticalSection
ReadFile
LoadResource
CloseHandle
TerminateThread
GetLocalTime
ReleaseMutex
GetFileInformationByHandle
CreateMutexA
GetUserDefaultLCID
FlushFileBuffers
WideCharToMultiByte
GlobalFree
OpenMutexA
GetTapeStatus
PrepareTape
GetProcessHeaps
GetTapeParameters
SystemTimeToFileTime

ole32

CoCreateGuid
CoTaskMemFree
CLSIDFromString
StringFromGUID2
CoInitializeSecurity
CoCreateInstance

ntdll

iswctype
NtSetQuotaInformationFile
wcstoul
NtQueryQuotaInformationFile

netapi32

NetShareGetInfo
NetApiBufferFree
NetWkstaGetInfo

user32

GetIconInfo
GetSystemMetrics
ChildWindowFromPoint
IsWindow
GetMessageA
DefWindowProcA
GetWindowThreadProcessId
GetWindowRect
SetParent
DestroyWindow
SetCursor
TranslateMessage
ExitWindowsEx
CallNextHookEx
FlashWindow
GetCursorPos
GetSysColor
SetTimer
GetParent
WindowFromPoint
GetWindow
EnableWindow
InvalidateRgn
KillTimer
CreateWindowExA
DispatchMessageA
UpdateWindow
GetSubMenu
GetDC
SetWindowPos
RegisterClassExA
ReleaseDC
GetNextDlgGroupItem
ShowWindow
GetMenu
SendMessageA
GetMenuItemID
GetAsyncKeyState
RemoveMenu
CreateIconFromResource
PostQuitMessage
SetActiveWindow
InflateRect

mpr

WNetCloseEnum

gdi32

CreateRectRgn
CreateBitmap
BitBlt
Rectangle
PatBlt
CreateCompatibleBitmap

comctl32

ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageCount
ImageList_AddMasked
DestroyPropertySheetPage

advapi32

InitializeAcl
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
GetAce
EqualSid
GetTokenInformation
CloseServiceHandle
GetSecurityDescriptorDacl
RegFlushKey
QueryServiceStatus
RegCloseKey
RegOpenKeyExA
OpenProcessToken
AdjustTokenPrivileges
AllocateAndInitializeSid
ControlService

msvcrt

_local_unwind2
_snwprintf
memmove
fread
_cexit
_wcslwr
wcspbrk
fseek
__CxxFrameHandler
_onexit
wcschr
__p__fmode
_controlfp
wcscmp
_filelength
_wcsupr
exit
wcslen
_mbscpy
_exit
__setusermatherr
malloc
ftell
fclose
_wcsicmp
__set_app_type
wprintf
_wcsrev
wcsncat
_XcptFilter
_wfopen
wcsncmp
swscanf
_initterm
_vsnwprintf
_fdopen
_CxxThrowException
_errno
_open_osfhandle

shell32

SHGetSpecialFolderLocation
SHGetMalloc

setupapi

SetupGetIntField
SetupCloseInfFile
SetupFindNextLine

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d446a299340dcf6b288045b12ef72595

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

ntdll

netapi32

user32

mpr

gdi32

comctl32

advapi32

msvcrt

shell32

setupapi

Sections

.text Size: 79KB - Virtual size: 79KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 12KB - Virtual size: 16KB

.reloc Size: 28KB - Virtual size: 56KB

.text
Size: 79KB - Virtual size: 79KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 12KB - Virtual size: 16KB

.reloc
Size: 28KB - Virtual size: 56KB