123db4c743caeed0a51169950cb72d90_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

123db4c743caeed0a51169950cb72d90_JaffaCakes118
Size

384KB
MD5

123db4c743caeed0a51169950cb72d90
SHA1

dcbc4b54b6c29d5546634897789a313cc3773d8d
SHA256

19275e043c2e2e21271c3499e3efe0ce1349f9da207275134cf05c8288f96c3a
SHA512

7f77fb0245e660bc42c2cef028ef3e83949078afd8c73172398acecde4ebb7c1d248b78d5f271986d7377c3558880f08dd20798a85854d47e9d2e4b5e9af9353
SSDEEP

6144:vnU+wBFz0/7Fno39+mNFA0jSoT6kFhEeaFNjXW0fKjdJZZhyXmq035C:vmBB0/yXNFzPT62hEdrjXW0KXZZhyL0w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
123db4c743caeed0a51169950cb72d90_JaffaCakes118

Files

123db4c743caeed0a51169950cb72d90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd5c1b2475238409c409fd825f60f9cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreateStatusWindowW
DrawInsert
ImageList_Read
ImageList_Copy
ImageList_SetFilter
InitCommonControlsEx
ImageList_SetImageCount

user32

RegisterClassExA
FlashWindowEx
GetUserObjectInformationA
RegisterClassA
SetCapture
GetAltTabInfo
DestroyCaret
DefWindowProcW
MessageBoxA
CreateWindowExW
DestroyWindow
ShowWindow
IsWindowUnicode
InsertMenuItemW
HideCaret
DdeQueryStringW
DdeQueryStringA
LoadMenuIndirectW
CreateMenu
SetScrollRange
SetUserObjectInformationW
UnregisterHotKey
CallWindowProcA
GetClipboardViewer
SwitchToThisWindow
GetWindowLongA
DlgDirSelectExA
IsDialogMessageA
ShowScrollBar
EndDialog
DeferWindowPos
EnumDisplaySettingsA

kernel32

GetProcAddress
SetUnhandledExceptionFilter
EnumCalendarInfoExW
VirtualQuery
lstrcatA
GetConsoleOutputCP
CompareStringA
FillConsoleOutputCharacterA
EnumResourceLanguagesA
GetModuleFileNameA
lstrcat
SetEnvironmentVariableW
GetVersion
CommConfigDialogA
GetVolumeInformationW
GetCommandLineA
GetStringTypeA
GetCurrentProcessId
MoveFileA
CreateDirectoryW
GetEnvironmentStringsW
SetCriticalSectionSpinCount
TlsGetValue
GetThreadLocale
GetModuleFileNameW
LoadLibraryA
GetThreadPriority
GlobalUnlock
GetFullPathNameA
LCMapStringW
HeapReAlloc
CompareStringW
LocalLock
FreeEnvironmentStringsA
GetCompressedFileSizeW
CreateMutexA
UnhandledExceptionFilter
GetLogicalDriveStringsA
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
SetThreadPriority
LCMapStringA
QueryPerformanceCounter
GetLastError
GetModuleHandleA
GetCurrentThread
HeapAlloc
SetFilePointer
MapViewOfFileEx
FlushInstructionCache
GetCurrentProcess
WaitNamedPipeA
CreateDirectoryA
GetCalendarInfoA
GetTickCount
FreeResource
InterlockedExchangeAdd
GetEnvironmentStrings
TlsSetValue
CloseHandle
GetProfileSectionW
GlobalFix
GetFileType
DeleteFiber
FindAtomA
GetCPInfo
EnumDateFormatsExW
TlsFree
GetStartupInfoA
GetNumberFormatA
GetProcessHeaps
GetPrivateProfileStringW
InterlockedIncrement
SetThreadAffinityMask
ReadFile
FreeEnvironmentStringsW
lstrcmpiW
GetSystemTime
CreateToolhelp32Snapshot
HeapFree
GlobalLock
WriteConsoleInputW
WideCharToMultiByte
GetLocalTime
GetCurrentThreadId
UnmapViewOfFile
GetSystemTimeAdjustment
GetPrivateProfileIntA
lstrcpy
EnumSystemLocalesA
GetExitCodeThread
IsBadWritePtr
SetPriorityClass
HeapCreate
SetStdHandle
GlobalUnfix
LockResource
EnterCriticalSection
GetStdHandle
GetTempPathA
LeaveCriticalSection
GetEnvironmentStringsA
FileTimeToSystemTime
SetHandleCount
DeleteCriticalSection
WaitForDebugEvent
CopyFileA
WriteFile
VirtualFree
GetCommandLineW
FlushFileBuffers
GetProfileStringA
FileTimeToLocalFileTime
SetConsoleCursorPosition
SetEnvironmentVariableA
GetStartupInfoW
HeapDestroy
VirtualAlloc
GetFileAttributesA
InterlockedDecrement
GetComputerNameA
TerminateProcess
GetSystemTimeAsFileTime
GetStringTypeW
InitializeCriticalSection
TlsAlloc
FindFirstFileExA
SetConsoleTextAttribute
ExitProcess
MultiByteToWideChar
InterlockedExchange
RtlUnwind
GetFileSize
OpenMutexA
SetLastError

shell32

ExtractAssociatedIconW

advapi32

CryptSetProviderExW
LookupPrivilegeDisplayNameA
LookupSecurityDescriptorPartsW
RegDeleteKeyW
StartServiceW
CryptExportKey
LogonUserA
CryptVerifySignatureW
CryptGetDefaultProviderW
CryptReleaseContext
InitiateSystemShutdownW
ReportEventW
CryptGetKeyParam
LookupPrivilegeValueA
GetUserNameW
RegDeleteValueA
CryptContextAddRef
RegSetKeySecurity
RegEnumKeyA
RegReplaceKeyW
RegOpenKeyExW
RegEnumValueW
CryptAcquireContextA
RegConnectRegistryW
RegQueryValueW

wininet

HttpCheckDavCompliance
HttpSendRequestA

Sections

.text
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd5c1b2475238409c409fd825f60f9cd

Headers

File Characteristics

Imports

comctl32

user32

kernel32

shell32

advapi32

wininet

Sections

.text Size: 160KB - Virtual size: 158KB

.rdata Size: 68KB - Virtual size: 64KB

.data Size: 96KB - Virtual size: 115KB

.rsrc Size: 56KB - Virtual size: 53KB

.text
Size: 160KB - Virtual size: 158KB

.rdata
Size: 68KB - Virtual size: 64KB

.data
Size: 96KB - Virtual size: 115KB

.rsrc
Size: 56KB - Virtual size: 53KB