0ee59325267d087ebd3d8740269a15bd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0ee59325267d087ebd3d8740269a15bd_JaffaCakes118
Size

974KB
MD5

0ee59325267d087ebd3d8740269a15bd
SHA1

528c03dffb23a91813eb221ae1044afedc886b8e
SHA256

6e82b5dc40bdbd6d2a6ca21d1c1a25fbb546fb6b6086c2d3a01fde3b106c70b7
SHA512

e113435f296904daf8b4a47c55796a009a053297b1e8907f0a6feb9e8e36711cb02ecb050f516e2e845e68decc0cb1d02cb7d95e642e880d65a3b7ef838977c5
SSDEEP

12288:EO97vKyf8dzUgE/Y6ZfEtumjJkpu++NoMXIo9TH76lysmglpiv:fBpqyY6ZfEQmjJLoO9TbvJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ee59325267d087ebd3d8740269a15bd_JaffaCakes118

Files

0ee59325267d087ebd3d8740269a15bd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

18f1ec2e026d9a26f888cb55c083a5f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
TerminateThread
WaitForSingleObject
SetThreadPriority
GetCurrentDirectoryA
CopyFileA
GlobalMemoryStatus
GetSystemInfo
GetSystemDirectoryA
SetEvent
ResetEvent
WaitForMultipleObjects
CreateThread
SetCurrentDirectoryA
FindFirstFileA
GetProcessHeap
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
IsValidCodePage
GetOEMCP
GetCPInfo
GetCurrentProcessId
QueryPerformanceCounter
HeapCreate
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
SetStdHandle
ExitProcess
HeapSize
WideCharToMultiByte
HeapAlloc
SetHandleCount
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
HeapFree
GetStartupInfoA
GetCommandLineA
ExitThread
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
RtlUnwind
GetThreadPriority
MulDiv
CreateSemaphoreA
ReleaseSemaphore
CreateEventA
InterlockedDecrement
InterlockedIncrement
GetFileType
GetFileSize
CreateFileA
LeaveCriticalSection
EnterCriticalSection
GetDiskFreeSpaceA
GetLocaleInfoA
FindNextFileA
FindClose
CreateDirectoryA
SetLastError
SetFileAttributesA
GetFileAttributesA
lstrcatA
lstrlenA
VirtualFree
GetProcAddress
FreeLibrary
CreateMutexA
GetLastError
lstrcmpA
WriteFile
SetFilePointer
SetEndOfFile
VirtualAlloc
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
MultiByteToWideChar
lstrcmpiA
GetStdHandle
ReadFile
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCurrentThread
GetCurrentProcess
GetVersionExA
LoadLibraryA
GetModuleHandleA
GetCurrentThreadId
HeapReAlloc
GetDriveTypeA
GetACP
GetModuleFileNameA
lstrcpynA
lstrcpyA
GetTickCount
Sleep
GetLocalTime
ReleaseMutex
WriteConsoleW
CloseHandle

user32

LoadMenuA
RegisterClassExA
UnregisterClassA
EndPaint
BeginPaint
MessageBeep
PostMessageA
MoveWindow
ChangeDisplaySettingsA
EnumDisplaySettingsA
FillRect
LoadCursorA
MessageBoxA
GetMenuState
RegisterWindowMessageA
MsgWaitForMultipleObjects
GetQueueStatus
PostThreadMessageA
DestroyWindow
ReleaseCapture
SetCapture
CallWindowProcA
CheckRadioButton
GetMenuStringA
GetMenuItemCount
DrawMenuBar
EnableMenuItem
SetMenu
SetWindowTextA
PostQuitMessage
ShowWindow
GetWindowRect
UnregisterHotKey
SetFocus
SetDlgItemTextA
DialogBoxParamA
CreateDialogParamA
IsDialogMessageA
LoadIconA
EndDialog
GetDlgItem
IsWindow
ClientToScreen
GetWindowTextA
EnableWindow
SetRect
AdjustWindowRect
SetWindowLongA
PeekMessageA
TranslateMessage
DispatchMessageA
EmptyClipboard
SetClipboardData
GetDesktopWindow
OpenClipboard
CloseClipboard
GetParent
CreateWindowExA
SendMessageA
GetClientRect
GetCursorPos
SetCursorPos
GetSystemMetrics
GetDC
ReleaseDC
GetWindowLongA
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SystemParametersInfoA
SetForegroundWindow
wsprintfA
ValidateRect
GetAsyncKeyState
DefWindowProcA
SetWindowPos
RegisterHotKey
UpdateWindow
DestroyMenu

gdi32

GetDIBColorTable
SetDIBColorTable
BeginPath
EndPath
StrokePath
SetBkMode
SetTextColor
TextOutA
CreateSolidBrush
CreatePen
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
CreateFontA
EnumFontFamiliesExA
BitBlt
GetStockObject
GetDeviceCaps
DeleteObject
SetPixel
GetPixel
SetDIBits

advapi32

RegOpenKeyExA
RegCloseKey
RegEnumKeyExA
RegQueryInfoKeyA
RegQueryValueExA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

CoInitialize
CoUninitialize
CoTaskMemAlloc
CoFreeUnusedLibraries
CoTaskMemFree
CoCreateInstance

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

winmm

timeGetTime
timeEndPeriod
timeBeginPeriod
timeGetDevCaps
timeKillEvent
timeSetEvent

comctl32

PropertySheetA
ord17
CreatePropertySheetPageA

Sections

.text
Size: 472KB - Virtual size: 471KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 247KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

18f1ec2e026d9a26f888cb55c083a5f2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

version

winmm

comctl32

Sections

.text Size: 472KB - Virtual size: 471KB

.rdata Size: 148KB - Virtual size: 148KB

.data Size: 70KB - Virtual size: 160KB

.rsrc Size: 247KB - Virtual size: 246KB

.reloc Size: 36KB - Virtual size: 35KB

.text
Size: 472KB - Virtual size: 471KB

.rdata
Size: 148KB - Virtual size: 148KB

.data
Size: 70KB - Virtual size: 160KB

.rsrc
Size: 247KB - Virtual size: 246KB

.reloc
Size: 36KB - Virtual size: 35KB