28d75969afe340c3312ea2c945284975_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

28d75969afe340c3312ea2c945284975_JaffaCakes118
Size

102KB
MD5

28d75969afe340c3312ea2c945284975
SHA1

35a7087d144d95814954dbd6ea75d62fd918081a
SHA256

d2d312cd166aa25150aa9fdf02931c1a898053c7c7082c3468f5ce46882cd515
SHA512

85fdcf11efaef0de12317ef6441940dcbbb44bf55f58a3d5fdd4bf0e44757f1e542423d3546368ad2baa43875e80053a9ecb372237f2442d106f7bdb2d6dbd83
SSDEEP

1536:apP99G52FhPOqwItnq8XjLyBKyEzl7Av3bZTxv0WMmjUO8T3vUOToygdC5rr:aJ9I0Hlw8vHDZAT1SVPTfUtyI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28d75969afe340c3312ea2c945284975_JaffaCakes118

Files

28d75969afe340c3312ea2c945284975_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5cce369feb2a9846490849bd1548f491

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetParent
GetWindowLongW
SetFocus
SetDlgItemTextW
EndDialog
SendMessageW
GetDlgItem
WinHelpW
SendDlgItemMessageW
LoadImageW
GetDlgItemTextA
ReleaseDC
InsertMenuItemW
RegisterClipboardFormatW
GetDC
wsprintfW
SystemParametersInfoW
SetWindowLongW
LoadStringW
MessageBoxW
LoadBitmapW
SetWindowTextW
LoadIconW
SetCursor
PostMessageW
EnableWindow
DialogBoxParamW
LoadCursorW

kernel32

GetCurrentProcess
GetModuleFileNameW
GlobalLock
GetCPInfo
FileTimeToLocalFileTime
GetLastError
LoadLibraryW
GetComputerNameW
FileTimeToSystemTime
LocalFree
GetEnvironmentStringsW
CloseHandle
GlobalAlloc
FormatMessageW
SetUnhandledExceptionFilter
GetDateFormatW
OutputDebugStringW
WideCharToMultiByte
QueryPerformanceCounter
GetSystemWindowsDirectoryW
lstrcmpiW
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
LocalReAlloc
GetSystemDefaultLangID
GlobalUnlock
SetLastError
GetModuleHandleA
GlobalFree
OutputDebugStringA
lstrlenW
RemoveDirectoryA
IsBadReadPtr
GetSystemTimeAsFileTime
CreateFileW
GetProcAddress
DeleteCriticalSection
GetStartupInfoA
GetTickCount
lstrcpyW

advapi32

RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteKeyW

comctl32

PropertySheetW
CreatePropertySheetPageW

msvcrt

?terminate@@YAXXZ
_onexit
malloc
vswprintf
_initterm
_wcsupr
memmove
wcscpy
??2@YAPAXI@Z
wcscat
_except_handler3
free
_wcsicmp
wcsrchr
_adjust_fdiv
__dllonexit
wcslen
__RTDynamicCast
wcsstr
wcscmp
??3@YAXPAX@Z
??1type_info@@UAE@XZ
wcstoul
mbstowcs
wcschr

certcli

CACloseCA
CAGetCertTypeFlags
CAFindCertTypeByName
CASetCertTypeKeySpec
CAEnumNextCertType
CAEnumCertTypesForCA
CAGetCertTypeExtensions
CACertTypeGetSecurity
CARemoveCACertificateType
CAGetCertTypePropertyEx
CAAddCACertificateType
CAFreeCertTypeProperty
CASetCertTypeProperty
CASetCertTypeFlags
CAUpdateCertType
CACloseCertType
CAGetCertTypeProperty
CAFreeCAProperty
CAFreeCertTypeExtensions
CAGetCAProperty
CAEnumCertTypes
CACreateCertType
CAFindByName
CASetCertTypeExtension
CAGetCertTypeKeySpec
CACertTypeSetSecurity
CAUpdateCA

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5cce369feb2a9846490849bd1548f491

Headers

File Characteristics

Imports

user32

kernel32

advapi32

comctl32

msvcrt

certcli

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 104KB

.rsrc Size: 25KB - Virtual size: 24KB

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 104KB

.rsrc
Size: 25KB - Virtual size: 24KB