05ce057dde8f8e8d8c7d367fb32d49d0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

05ce057dde8f8e8d8c7d367fb32d49d0_JaffaCakes118
Size

144KB
MD5

05ce057dde8f8e8d8c7d367fb32d49d0
SHA1

506beba7b70b8886b6c81b657ad8909d723535f1
SHA256

6c5bedc99d0304f0c80138adc04f4cbfa42bc909beb5ce046fd722062b20fb92
SHA512

e77edbfdc03f2b883bc00ba644a09b61de124f2703b31cc1718a34f48990cec03d531b786b3e5141409c59da76807d33e6cfd93702c0830b7f0b6b47cac3e12b
SSDEEP

3072:vi9KvYGblGsrdk9Gdxk59DGsxTVSK8eoDzZzLzJGgJ+o2b62:vi9KvYq3rdk9X9Dbx8K8dzZzLzJfC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05ce057dde8f8e8d8c7d367fb32d49d0_JaffaCakes118

Files

05ce057dde8f8e8d8c7d367fb32d49d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef0b85630a670b026c1bafd4214cf98b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
TerminateProcess
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
TlsGetValue
SetStdHandle
TlsAlloc
TlsSetValue
GetOEMCP
GetACP
GetCPInfo
VirtualAlloc
VirtualFree
HeapCreate
GetVersion
GetCommandLineA
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapFree
HeapAlloc
HeapReAlloc
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
FindNextFileA
RemoveDirectoryA
FormatMessageA
GetTempPathA
Sleep
FindFirstFileA
FindClose
OutputDebugStringA
DebugBreak
GetSystemDirectoryA
ExitProcess
FreeLibrary
CreateThread
GetShortPathNameA
MoveFileA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
SetFileAttributesA
LocalFree
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
SetThreadLocale
ReleaseMutex
CreateMutexA
GetLastError
DeleteFileA
MoveFileExA
WriteFile
ReadFile
CloseHandle
CreateFileA
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
LoadLibraryA
lstrcpynA
GetModuleHandleA
GetProcAddress
GetVersionExA
InterlockedDecrement
InterlockedIncrement
GetSystemDefaultLangID
SetLastError
lstrlenA

user32

GetDlgItemTextA
IsDlgButtonChecked
PostQuitMessage
SetPropA
SetCursor
GetPropA
RemovePropA
GetMenu
AdjustWindowRectEx
SetWindowPos
MapWindowPoints
GetDlgCtrlID
GetParent
GetCapture
IsWindowEnabled
DrawEdge
GetWindow
CheckDlgButton
SetDlgItemTextA
LoadStringA
GetSystemMetrics
GetWindowRect
wvsprintfA
CharNextA
SendMessageTimeoutA
FindWindowA
ClientToScreen
DrawFocusRect
CreateDialogParamA
InvalidateRect
DestroyWindow
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
IsDialogMessageA
GetDlgItem
SendMessageA
FillRect
FrameRect
CreateWindowExA
CallWindowProcA
GetWindowLongA
SetWindowLongA
GetClassInfoExA
LoadCursorA
wsprintfA
RegisterClassExA
ReleaseDC
EndPaint
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
ReleaseCapture
SetCapture
PtInRect
GetDC
InflateRect
BeginPaint
ShowWindow
PostMessageA
MoveWindow
SetWindowRgn
ScreenToClient
SetRectEmpty
GetClientRect
DrawFrameControl
GetWindowTextA
DrawTextA
IsRectEmpty
CopyRect
KillTimer
LoadImageA
GetWindowDC
DrawIconEx
SetWindowTextA
GetCursorPos
SetTimer
UpdateWindow
DefWindowProcA
IsWindow
OffsetRect
SystemParametersInfoA
EnableWindow

gdi32

SetViewportExtEx
OffsetWindowOrgEx
SetMapMode
Polygon
SetPixelV
GetClipBox
DeleteObject
CreateFontIndirectA
GetObjectA
GetStockObject
DeleteDC
StretchBlt
SetStretchBltMode
ExtTextOutA
SetBkColor
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
SetTextColor
SetBkMode
FrameRgn
OffsetRgn
CreateSolidBrush
ExcludeClipRect
SetWindowOrgEx
BitBlt
EqualRgn
CombineRgn
CreateRectRgn
CreateRoundRectRgn
CreatePolygonRgn
SetWindowExtEx
GetViewportOrgEx
SetViewportOrgEx

advapi32

DeleteService
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
FreeSid
OpenServiceA
RegCloseKey
OpenSCManagerA
CloseServiceHandle

shell32

ShellExecuteA

ole32

OleUninitialize
CoInitialize
CoUninitialize
OleInitialize

oleaut32

OleTranslateColor

shlwapi

SHDeleteKeyA

comctl32

ImageList_Destroy
ImageList_AddMasked
ImageList_Create
ImageList_Draw
ImageList_SetBkColor
ImageList_GetIconSize
InitCommonControlsEx
_TrackMouseEvent
ImageList_LoadImageA

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WYCao
Size: 26KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef0b85630a670b026c1bafd4214cf98b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

Sections

.text Size: 68KB - Virtual size: 66KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 36KB - Virtual size: 40KB

.WYCao Size: 26KB - Virtual size: 44KB

.text
Size: 68KB - Virtual size: 66KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 36KB - Virtual size: 40KB

.WYCao
Size: 26KB - Virtual size: 44KB