01c58ded037cda302db6c8637bd5d92b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

01c58ded037cda302db6c8637bd5d92b_JaffaCakes118
Size

857KB
MD5

01c58ded037cda302db6c8637bd5d92b
SHA1

1a2fc8f36ca632590c02fc541a2578704f7ca7cb
SHA256

b5b5d7db088ec4139c9fea8c9df84cef8ca6203b833bb13d00ced2922845db3e
SHA512

10b59a0580d5d79a620cb8945ba2e2559169d3c922443a174421dd3e9ef374ffa8ef43c50947e29ff9e9087c5f977c07403ef9cb9f8803b744cd4046e5cb3b6c
SSDEEP

12288:LqHIFdwDyNi73LfLjh8yvmBs1cfI79w/H5m2uI:UIFJNi/LTuS1R9whmf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01c58ded037cda302db6c8637bd5d92b_JaffaCakes118

Files

01c58ded037cda302db6c8637bd5d92b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

471ab8c8275d693b60f2af0025577c15

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalReAlloc
GlobalUnlock
InterlockedExchange
LoadLibraryA
LocalAlloc
LocalFree
LocalLock
LocalUnlock
MulDiv
MultiByteToWideChar
OpenFile
QueryPerformanceCounter
RaiseException
SetFileAttributesA
SetUnhandledExceptionFilter
GlobalLock
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
WideCharToMultiByte
_lclose
_lcreat
_llseek
_lopen
_lread
_lwrite
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
GlobalHandle
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemTime
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetLastError
GetFileAttributesA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetAtomNameA
GetACP
FreeLibrary
FindFirstFileA
FindClose
DeleteFileA
DeleteAtom
CreateThread
CreateFileW
CloseHandle
AddAtomA
GetModuleHandleW
VirtualAllocEx
GetCommandLineA
SystemTimeToFileTime
Sleep

user32

GetSysColorBrush
GetSystemMetrics
GetTopWindow
GetWindowDC
InsertMenuA
InvalidateRect
IsClipboardFormatAvailable
IsDlgButtonChecked
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
LoadAcceleratorsA
LoadCursorA
LoadStringA
LoadStringW
MessageBoxA
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
RegisterClassA
RegisterClipboardFormatA
ReleaseCapture
ReleaseDC
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendMessageA
SetCapture
SetClipboardData
SetCursor
SetDlgItemTextA
SetFocus
SetRect
SetRectEmpty
SetScrollPos
SetWindowPos
SetWindowTextA
ShowWindow
SystemParametersInfoA
TranslateAcceleratorA
TranslateMessage
UpdateWindow
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetMessageA
GetMenu
GetKeyState
GetDlgItemTextA
GetDC
GetClipboardData
GetClientRect
FillRect
EnumThreadWindows
EndPaint
EndDialog
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextA
DrawIcon
DrawFocusRect
DispatchMessageA
DialogBoxParamA
DestroyWindow
DestroyMenu
DestroyIcon
DeleteMenu
DefWindowProcA
CreateWindowExA
CreatePopupMenu
CloseClipboard
CheckRadioButton
CheckDlgButton
CharUpperBuffA
CharNextA
CharLowerA
BringWindowToTop
BeginPaint
LoadIconW
LoadIconA
GetDlgItem

gdi32

SetTextColor
TextOutA
SetWindowOrgEx
SetWindowExtEx
SetTextAlign
SetLayout
SetBkMode
SetBkColor
SelectObject
PatBlt
TranslateCharsetInfo
GetEnhMetaFileA
GetStockObject
GetLayout
GetDeviceCaps
DeleteObject
CreateMetaFileA
CreateFontIndirectA
CopyMetaFileA
CloseMetaFile
GetTextExtentPoint32A

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegQueryValueA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegSetValueA

shell32

ShellAboutA
ExtractAssociatedIconA
DragQueryFileA
DragFinish
DragAcceptFiles
ShellExecuteExA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

shlwapi

PathFindExtensionW

msvcrt

_adjust_fdiv
strchr
memmove
exit
_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_vsnprintf

Sections

.text
Size: 823KB - Virtual size: 823KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

471ab8c8275d693b60f2af0025577c15

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

shlwapi

msvcrt

Sections

.text Size: 823KB - Virtual size: 823KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 15KB - Virtual size: 15KB

.rsrc Size: 12KB - Virtual size: 11KB

.text
Size: 823KB - Virtual size: 823KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 15KB - Virtual size: 15KB

.rsrc
Size: 12KB - Virtual size: 11KB