fde9d1900ad3333f4057a80f849a77e2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fde9d1900ad3333f4057a80f849a77e2_JaffaCakes118
Size

122KB
MD5

fde9d1900ad3333f4057a80f849a77e2
SHA1

9909b6d305d5ce1ad208cc7b48427679060204d1
SHA256

ad5efba979fec760dbf04ef41db8ddbba9731185ae0ebc7fd20b80848d253105
SHA512

8289f6960bb1aee91ccd401fa9e78351c8f59bfedfdb1136a3e7c332446def503f0f5797abbe89d86b4ac3d63fdbb3ffc512f9b6d21734fce762cb7960bd7baf
SSDEEP

3072:rPFUaV3D4I7N5c+RHEIQQysj3tEELJIrQV1NHnSK8NEo31S:Tmq3DTY+RHEI5ycdEEJ51ZSK8+GS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fde9d1900ad3333f4057a80f849a77e2_JaffaCakes118

Files

fde9d1900ad3333f4057a80f849a77e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef101c6cd1b80c01a9a03c8eeaf60801

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateInstance
CoTaskMemFree
CoInitializeEx

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsExW

msvcrt

__wgetmainargs
exit
_amsg_exit
_exit
??2@YAPAXI@Z
__p__fmode
_initterm
wcstoul
?terminate@@YAXXZ
__setusermatherr
_cexit
??3@YAXPAX@Z
_XcptFilter
_wcmdln
_wcsicmp
__p__commode
_vsnwprintf
memset
__set_app_type
_controlfp

user32

SetWindowTextW
DispatchMessageW
DestroyWindow
UnregisterDeviceNotification
TranslateMessage
GetSysColorBrush
RegisterDeviceNotificationW
SetForegroundWindow
GetSysColor
PostQuitMessage
SetDlgItemTextW
GetDlgItem
PostMessageW
IsDlgButtonChecked
LoadIconW
SetActiveWindow
DefWindowProcW
CheckDlgButton
GetWindowTextLengthW
SendMessageW
GetParent
EndDialog
GetMessageW
UnregisterClassW
EnableWindow
FindWindowExW
GetDlgCtrlID
GetWindowTextW
CreateWindowExW
GetWindowLongW
LoadStringW
SendDlgItemMessageW
ShowWindow
SetWindowLongW
SetFocus
DialogBoxParamW
SetTimer
FindWindowW
RegisterClassExW
KillTimer

advapi32

GetTraceEnableFlags
UnregisterTraceGuids
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegisterTraceGuidsW
GetTraceLoggerHandle
RegSetValueExW
RegCreateKeyExW
GetTraceEnableLevel
RegCreateKeyW
TraceMessage

crypt32

CryptEncodeObjectEx
CertEnumSystemStoreLocation
CryptEncodeObject

uxtheme

OpenThemeData
GetThemeColor
CloseThemeData
GetThemeFont

shell32

CommandLineToArgvW
ShellExecuteExW

powrprof

CallNtPowerInformation

wtsapi32

WTSRegisterSessionNotification
WTSUnRegisterSessionNotification

gdi32

SetTextColor
CreateSolidBrush
CreateFontIndirectW
SetBkColor
DeleteObject

kernel32

LockResource
QueryPerformanceCounter
InterlockedIncrement
GlobalAlloc
GetModuleHandleA
FindResourceW
TerminateProcess
LocalAlloc
SetUnhandledExceptionFilter
LocalFree
WaitForSingleObject
GetProcessVersion
GetTickCount
InterlockedDecrement
InitializeCriticalSection
WideCharToMultiByte
LeaveCriticalSection
GetCurrentThreadId
ExitProcess
GetStartupInfoW
EnterCriticalSection
GetCurrentProcess
UnhandledExceptionFilter
LoadResource
InterlockedCompareExchange
CreateThread
DeleteCriticalSection
InterlockedExchange
GetSystemTimeAsFileTime
CloseHandle
GetCurrentProcessId
FreeResource
GetLastError
Sleep

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef101c6cd1b80c01a9a03c8eeaf60801

Headers

File Characteristics

Imports

ole32

setupapi

msvcrt

user32

advapi32

crypt32

uxtheme

shell32

powrprof

wtsapi32

gdi32

kernel32

Sections

.text Size: 75KB - Virtual size: 74KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 41KB - Virtual size: 40KB

.rsrc Size: 1024B - Virtual size: 104KB

.text
Size: 75KB - Virtual size: 74KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 41KB - Virtual size: 40KB

.rsrc
Size: 1024B - Virtual size: 104KB