17f90ba055ee29b4148145f0ff1da04a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

17f90ba055ee29b4148145f0ff1da04a_JaffaCakes118
Size

99KB
MD5

17f90ba055ee29b4148145f0ff1da04a
SHA1

cba9ebfdfb50b9bdb9f9716fafba1ceca5b70282
SHA256

aba18fc4ed9a99def652baf7a1cc7cbb1185ac8951ca0366308a7be66cdd8803
SHA512

92d6b11c99c44fd6aa8b156c9789ec36469e964e1b48a7668e530e29cbbd6fcadb8c03951e60953a295a560480c02dd3e6e98b596b54a7ba3595b64c3e6ae6cc
SSDEEP

1536:ymWFAqr8PcV/NssuAVmQbJfjSZ0b7eUu2MDj+7G5NiyGoXnDp0vFN:yn+PAM6fU0b33GXiyGsDp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17f90ba055ee29b4148145f0ff1da04a_JaffaCakes118

Files

17f90ba055ee29b4148145f0ff1da04a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6cc6df78232a088e035cc99ee41fdb3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mixerGetLineControlsW
mixerGetID
mixerGetLineInfoW
waveInPrepareHeader
mixerOpen
mixerClose
waveInClose
waveInStop
waveInUnprepareHeader
waveInOpen
mixerGetControlDetailsW
OpenDriver
waveInAddBuffer
waveInGetDevCapsW
waveInStart
CloseDriver
mixerSetControlDetails
waveInReset
SendDriverMessage

kernel32

lstrcmpiW
IsBadHugeReadPtr
LeaveCriticalSection
GetQueuedCompletionStatus
CreateIoCompletionPort
GlobalHandle
CloseHandle
InterlockedExchange
GetEnvironmentStringsW
GetVersionExW
GlobalFree
GetLastError
CreateFileW
GlobalUnlock
OutputDebugStringA
GetDiskFreeSpaceW
EnterCriticalSection
InterlockedDecrement
CreateSemaphoreW
GlobalMemoryStatus
GetThreadPriority
lstrcmpW
MulDiv
GetCPInfo
GetStartupInfoA
CreateEventW
SetEvent
SetEndOfFile
GetProcessHeap
lstrlenA
GetFileSize
GetProfileIntA
GetModuleFileNameA
InterlockedIncrement
ResetEvent
WaitForMultipleObjects
HeapAlloc
PostQueuedCompletionStatus
GlobalLock
GetSystemDefaultLangID
QueryPerformanceCounter
SetThreadPriority
SetUnhandledExceptionFilter
lstrlenW
WriteFile
DeleteFileW
HeapFree
ReadFile
GlobalAlloc
DeleteCriticalSection
GetFileAttributesW
MultiByteToWideChar
GetSystemInfo
FreeLibrary
IsBadReadPtr
ReleaseSemaphore
GetSystemTimeAsFileTime
CreateThread
GetPrivateProfileStringW
InitializeCriticalSection
WaitForSingleObject
GetCurrentThread
SetFilePointer
GetCurrentProcessId
VirtualFree
lstrcpyA
IsBadCodePtr
WideCharToMultiByte
LoadLibraryW
GetTickCount
lstrcpyW
GetCurrentProcess
IsBadWritePtr
GetFullPathNameW
lstrcpynW

advapi32

RegQueryValueExW
RegDeleteKeyW
RegEnumKeyExW
RegCreateKeyW
RegCloseKey
RegEnumKeyW
RegSetValueW
RegOpenKeyExW
RegOpenKeyW
RegSetValueExW

msvcrt

??2@YAPAXI@Z
??3@YAXPAX@Z
wcslen
_except_handler3
_ftol
_purecall

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

user32

GetWindowLongW
TranslateMessage
SetWindowLongW
ReleaseDC
EnableWindow
GetDlgItemInt
IsRectEmpty
ShowWindow
SetDlgItemInt
SendMessageW
CreateDialogParamW
DispatchMessageW
CheckDlgButton
GetAsyncKeyState
CheckRadioButton
LoadCursorW
MoveWindow
GetDC
GetDlgItem
LoadStringW
ClientToScreen
GetClientRect
SetCursor
GetDesktopWindow
InvalidateRect
IsWindow
DefWindowProcW
IsWindowVisible
GetWindowRect
wsprintfW
DestroyWindow
PeekMessageW
SetDlgItemTextW

ole32

CoTaskMemFree
CoTaskMemAlloc
CoFreeUnusedLibraries
StringFromGUID2
CoCreateInstance
CoInitialize
CoUninitialize

msvfw32

ICOpen
ICSendMessage
ICCompress
ICClose
ICLocate
ICGetInfo
ICDecompress

gdi32

GetPaletteEntries
GetTextExtentPoint32W
GetStockObject
GetObjectW
PatBlt
SelectObject

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6cc6df78232a088e035cc99ee41fdb3a

Headers

File Characteristics

Imports

winmm

kernel32

advapi32

msvcrt

version

user32

ole32

msvfw32

gdi32

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 17KB - Virtual size: 107KB

.rsrc Size: 23KB - Virtual size: 23KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 17KB - Virtual size: 107KB

.rsrc
Size: 23KB - Virtual size: 23KB