0a61c5fb176de207a22d734ec15a59d3_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0a61c5fb176de207a22d734ec15a59d3_JaffaCakes118
Size

99KB
MD5

0a61c5fb176de207a22d734ec15a59d3
SHA1

38079148cf8a259e707fe7163aa00d8abf3d2d40
SHA256

08dfaefe1d2b5b620d5922a0971b8a70ef0555fa8d020fdebadfe1c5d17f4c82
SHA512

3a9c77841fa37127af8ada412d7abb7d443964aa23544af46918c988e1d6a5c46d607d2e66211a1dd7323a56a49b4b108829a9b05ce1acce81cc203f3f4cdcfa
SSDEEP

3072:vGEthLRYK9GWPM5Ep4HEV3ndmrvCvZ81EbK:OEthNYK95o/S3nkrvcZ8Wb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a61c5fb176de207a22d734ec15a59d3_JaffaCakes118

Files

0a61c5fb176de207a22d734ec15a59d3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a17532c4d1775d97d517c05cecdb9a24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

certcli

CAFindByName
CASetCertTypeProperty
CAFreeCAProperty
CAFindCertTypeByName
CAGetCertTypeExtensions
CAEnumCertTypesForCA
CAGetCertTypeProperty
CAEnumCertTypes
CAUpdateCA
CACertTypeSetSecurity
CASetCertTypeFlags
CASetCertTypeKeySpec
CARemoveCACertificateType
CAGetCAProperty
CAEnumNextCertType
CACreateCertType
CACloseCA
CAUpdateCertType
CAGetCertTypeKeySpec
CAGetCertTypeFlags
CAFreeCertTypeProperty
CASetCertTypeExtension
CAGetCertTypePropertyEx
CAAddCACertificateType
CACertTypeGetSecurity
CAFreeCertTypeExtensions
CACloseCertType

user32

LoadStringW
RegisterClipboardFormatW
EndDialog
InsertMenuItemW
GetDlgItemTextA
wsprintfW
GetParent
DialogBoxParamW
WinHelpW
PostMessageW
GetDlgItem
SetCursor
SendDlgItemMessageW
LoadIconW
GetWindowLongW
LoadImageW
SendMessageW
GetDC
SetDlgItemTextW
MessageBoxW
EnableWindow
SetWindowTextW
LoadBitmapW
SetFocus
LoadCursorW
SystemParametersInfoW
ReleaseDC
SetWindowLongW

advapi32

RegDeleteKeyW
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW

kernel32

GetSystemDefaultLangID
GlobalLock
SetUnhandledExceptionFilter
QueryPerformanceCounter
GlobalAlloc
GetSystemTimeAsFileTime
LocalReAlloc
InitializeCriticalSection
GlobalFree
FileTimeToSystemTime
GetSystemWindowsDirectoryW
GetTickCount
lstrcmpiW
GetComputerNameW
OutputDebugStringA
LoadLibraryW
InterlockedIncrement
OutputDebugStringW
GetACP
WideCharToMultiByte
DeleteCriticalSection
GetModuleHandleA
IsBadReadPtr
lstrcpyW
FileTimeToLocalFileTime
lstrlenW
GetDateFormatW
RemoveDirectoryA
GetLastError
InterlockedDecrement
FormatMessageW
GetCurrentProcess
GlobalUnlock
CreateFileW
GetStartupInfoA
GetEnvironmentStringsW
CloseHandle
GetModuleFileNameW
LocalFree
SetLastError

msvcrt

??2@YAPAXI@Z
wcsrchr
_onexit
__RTDynamicCast
mbstowcs
wcscpy
free
wcsstr
wcstoul
??3@YAXPAX@Z
??1type_info@@UAE@XZ
malloc
_purecall
memmove
wcslen
_adjust_fdiv
wcschr
vswprintf
?terminate@@YAXXZ
wcscat
wcscmp
_wcsicmp
_initterm
_except_handler3
__dllonexit
_wcsupr

comctl32

PropertySheetW
CreatePropertySheetPageW

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a17532c4d1775d97d517c05cecdb9a24

Headers

File Characteristics

Imports

certcli

user32

advapi32

kernel32

msvcrt

comctl32

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 111KB

.rsrc Size: 23KB - Virtual size: 22KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 111KB

.rsrc
Size: 23KB - Virtual size: 22KB