fd7c9adbab8a17ad77baa453192d33bc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fd7c9adbab8a17ad77baa453192d33bc_JaffaCakes118
Size

1.2MB
MD5

fd7c9adbab8a17ad77baa453192d33bc
SHA1

4b06bb179a2c4ba7bd8ca3c3e936654c679c3a4b
SHA256

17858bfc64ce7a5019b4dacd542809f4129df8c3db6f55e53556ddac0648eb5f
SHA512

b66742bc5e266ee6640ae512e6df323947b7d38d624d69b14530782f6378f2a3feabd95b94f0371d37116b1e773df94105704a03b97ab2cb2cc6d91c8263593c
SSDEEP

24576:18hnBLV/TWir+3r5f/hiJcoLCJGb/ci0TaU5SMVLy2xZjK42JB+dKI:12BJbWiybN/hGcoLt74TsyCqK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd7c9adbab8a17ad77baa453192d33bc_JaffaCakes118

Files

fd7c9adbab8a17ad77baa453192d33bc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1ad1a85f4841ebd367c6ac27b5f96f61

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

netapi32

NetApiBufferFree
NetShareEnum
NetWkstaGetInfo

ntdll

isdigit
NtSetQuotaInformationFile
iswctype

user32

UpdateWindow
TranslateMessage
MapDialogRect
CopyRect
WindowFromPoint
DestroyWindow
RegisterClassExA
ClientToScreen
SendMessageA
SetActiveWindow
GetAsyncKeyState
ShowWindow
ExitWindowsEx
GetWindowThreadProcessId
GetDesktopWindow
ScreenToClient
GetKeyState
CreateIconFromResource
BringWindowToTop
DefWindowProcA
GetClientRect
GetCursorPos
GetMessageA
CreateWindowExA
RemoveMenu
DispatchMessageA
ReleaseDC
PostQuitMessage
GetMenuItemCount

advapi32

RegFlushKey
RegOpenKeyExA
ControlService
GetTokenInformation
InitializeAcl
QueryServiceStatus
CloseEncryptedFileRaw

ole32

CoInitializeEx
CLSIDFromString
CoCreateGuid

shell32

SHGetSpecialFolderLocation

comctl32

ImageList_GetImageCount

msvcrt

_wfopen
fwrite
memmove
_CxxThrowException
wcsstr
wcstok
exit
realloc
fclose
wprintf
_purecall
swscanf
calloc
_initterm
_wcsicmp
wcslen
_controlfp
_cexit
_putenv
__set_app_type
_filelength
_open_osfhandle

gdi32

CreateRectRgn
SelectObject
DeleteObject
CombineRgn

kernel32

LeaveCriticalSection
GetLastError
FileTimeToLocalFileTime
GetTapeParameters
SetErrorMode
HeapAlloc
LockResource
VirtualAlloc
OpenMutexA
CreateMutexA
SetFilePointer
GetVersion
ReleaseMutex
FindClose
CloseHandle
GetProcAddress
GetFileSize
SetTapePosition
GetSystemTime
GlobalFree
QueryPerformanceCounter
EraseTape
GetProcessHeap
HeapQueryInformation
HeapFree
ReleaseSemaphore
SetFileTime
GetCurrentProcessId
BackupWrite

syssetup

AsrRestorePlugPlayRegistryData

Sections

.text
Size: 845KB - Virtual size: 845KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ad1a85f4841ebd367c6ac27b5f96f61

Headers

DLL Characteristics

File Characteristics

Imports

netapi32

ntdll

user32

advapi32

ole32

shell32

comctl32

msvcrt

gdi32

kernel32

syssetup

Sections

.text Size: 845KB - Virtual size: 845KB

.data Size: 323KB - Virtual size: 323KB

.rsrc Size: 37KB - Virtual size: 3.1MB

.text
Size: 845KB - Virtual size: 845KB

.data
Size: 323KB - Virtual size: 323KB

.rsrc
Size: 37KB - Virtual size: 3.1MB