147767252ec9680f47bef7eff4149a50_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

147767252ec9680f47bef7eff4149a50_JaffaCakes118
Size

692KB
MD5

147767252ec9680f47bef7eff4149a50
SHA1

2e833b02100a58f3037ce84847132f5d6bc29730
SHA256

23032bcf0edf8be1f7e6d2f43aa4c8cd7bfcc3dc7fa5ffefc45c201b26584898
SHA512

522dacd54c5985c0de6c40c445045fd93803cc344e2471bf823476c069bcd0977d863d88ee844c2966e379314520f4ff83da6aa78107492bedac7f8b7726ff17
SSDEEP

12288:eDgAu5rPeapid0/lEinihG/VM62QYevFhPfNDwj+GGI:6fa0mviA9MPQ39hfxm+GGI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
147767252ec9680f47bef7eff4149a50_JaffaCakes118

Files

147767252ec9680f47bef7eff4149a50_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6b065b666f45ede65a325972568bf3d9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeA
GetConsoleMode
GetConsoleCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleHandleA
ExitProcess
Sleep
HeapSize
HeapReAlloc
GetStringTypeW
HeapCreate
GetModuleFileNameA
GetStdHandle
WriteFile
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoW
VirtualQuery
GetSystemInfo
VirtualProtect
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
LCMapStringA
LCMapStringW
SetStdHandle
VirtualFree
VirtualAlloc
CloseHandle
OpenMutexW
LockResource
GetCommandLineW
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
GetCurrentProcessId
lstrlenA
lstrcpynA
lstrcmpW
SetLastError
GetModuleFileNameW
WriteConsoleA
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
CompareStringW
lstrcatW
lstrcpynW
lstrcpyW
GetVersionExW
lstrcmpiW
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
lstrlenW
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
LoadLibraryW
FreeLibrary
GetProcAddress
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException

user32

FrameRect
ModifyMenuW
GetWindowThreadProcessId
GetActiveWindow
GetMessagePos
DrawFrameControl
SetRect
DrawEdge
IsMenu
PeekMessageW
MessageBeep
GetSubMenu
UnhookWindowsHookEx
CharLowerW
RegisterWindowMessageW
CallNextHookEx
SystemParametersInfoW
SetWindowsHookExW
WindowFromPoint
IsWindowVisible
TrackPopupMenuEx
MonitorFromPoint
GetMonitorInfoW
LoadStringA
PostQuitMessage
SetMenuItemInfoW
MapWindowPoints
SetMenu
GetMenu
PostMessageW
RemoveMenu
CreatePopupMenu
GetWindowRect
TranslateAcceleratorW
LoadStringW
LoadMenuW
LoadAcceleratorsW
GetSysColorBrush
GetClassNameW
GetFocus
OffsetRect
GetCapture
ReleaseCapture
EndPaint
BeginPaint
GetCursorPos
DrawFocusRect
FillRect
DrawTextW
PtInRect
IsWindowEnabled
ScreenToClient
GetWindowTextLengthW
GetWindowTextW
CreateWindowExW
GetSystemMetrics
GetDesktopWindow
InflateRect
GetSysColor
SetFocus
ReleaseDC
GetDC
AdjustWindowRectEx
GetKeyState
SetMenuDefaultItem
CheckMenuRadioItem
EnableMenuItem
AppendMenuW
DeleteMenu
SetCursor
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
CallWindowProcW
IsWindow
GetDlgCtrlID
GetParent
SetCapture
RedrawWindow
InvalidateRect
UpdateWindow
ClientToScreen
GetClientRect
SetWindowPos
SetWindowTextW
SendMessageW
GetWindowLongW
GetClassInfoExW
LoadCursorW
LoadImageW
RegisterClassExW
DestroyWindow
SetRectEmpty
CharNextW
DefWindowProcW
DestroyMenu
ShowWindow
SetWindowLongW
wvsprintfW
GetWindowDC
UnregisterClassA

gdi32

CreateDIBSection
CreatePatternBrush
DeleteObject
GetStockObject
CreateCompatibleDC
SelectObject
SetViewportOrgEx
CreateCompatibleBitmap
Polygon
CreatePen
CreateSolidBrush
DeleteDC
SetBkMode
SetTextColor
GetObjectW
CreateFontIndirectW
MoveToEx
LineTo
BitBlt
SetBrushOrgEx
SetBkColor
CreateBitmap
PatBlt

advapi32

RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExW
RegCloseKey

shell32

ShellExecuteW

ole32

CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize

oleaut32

VarDecCmp
VarDecFromStr
VarR8FromStr
VarI4FromStr
VarDateFromStr
VarUI4FromStr

comctl32

ImageList_EndDrag
ImageList_BeginDrag
ImageList_AddMasked
ImageList_DragMove
ImageList_Create
InitCommonControlsEx
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_DragLeave
_TrackMouseEvent
CreateStatusWindowW
ImageList_GetImageCount
ImageList_Draw
ImageList_DrawIndirect
ImageList_Destroy

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 331KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b065b666f45ede65a325972568bf3d9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

Sections

.text Size: 140KB - Virtual size: 139KB

.rdata Size: 31KB - Virtual size: 30KB

.data Size: 8KB - Virtual size: 16KB

.rsrc Size: 331KB - Virtual size: 331KB

.text
Size: 140KB - Virtual size: 139KB

.rdata
Size: 31KB - Virtual size: 30KB

.data
Size: 8KB - Virtual size: 16KB

.rsrc
Size: 331KB - Virtual size: 331KB