4171a934b7b57406f91346571567eb10_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4171a934b7b57406f91346571567eb10_JaffaCakes118
Size

29KB
MD5

4171a934b7b57406f91346571567eb10
SHA1

333775831360df05cc0580c36bdedf028155ac76
SHA256

5953532635b84d65f09c1f21bef41227d5cb04f8e4458f1d816bf5c2ca62c8cb
SHA512

2af113eb3fce017d0f011474633a5529eff16ec912c4889c66dc4d17fd2a8b899fe14dc8a01ea5e579607dd06ab4ac2156a0d19dc96cf0bdd18ce75cda05e5e9
SSDEEP

384:2vVbGfXrY45es0Ql72neq1wNbam9KZMI6xELvQpRGOzCT1Vw:CVbKXrpestwC8mlELvQpa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4171a934b7b57406f91346571567eb10_JaffaCakes118

Files

4171a934b7b57406f91346571567eb10_JaffaCakes118
.exe windows:5 windows x86 arch:x86

39dbc9bb8e435aa4a792b6f8d9ba63b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleA
CreateDirectoryA
GetPrivateProfileStructW
WaitForSingleObject
WriteConsoleA
GetConsoleTitleA
UpdateResourceA
GetTimeFormatA
LoadLibraryA
DeviceIoControl
GetNumberFormatW
GetCurrentDirectoryA
CloseHandle
SetFilePointer
GetTickCount
GetBinaryTypeA
SetCurrentDirectoryW
lstrcpynA
CompareStringA
GetProcAddress
CreateNamedPipeA
GetProcessHeap
GetDateFormatA
GetSystemTimeAsFileTime
GetComputerNameA
SetEnvironmentVariableW
GetCurrentProcess
GetPrivateProfileIntA
HeapValidate
GetConsoleAliasW
GetProcessId

nddeapi

NDdeShareEnumA
NDdeShareGetInfoA
NDdeShareDelA
NDdeShareSetInfoA
NDdeShareAddA

shlwapi

UrlIsOpaqueA
UrlIsNoHistoryW
UrlGetPartA
UrlIsA
PathCompactPathA
UrlGetLocationA
UrlCreateFromPathA
UrlHashA
PathCommonPrefixA
UrlCompareA
UrlEscapeA
UrlUnescapeA
PathCombineA

wtsapi32

WTSEnumerateServersA
WTSUnRegisterSessionNotification
WTSFreeMemory
WTSVirtualChannelRead
WTSWaitSystemEvent
WTSVirtualChannelOpen
WTSRegisterSessionNotification
WTSSetUserConfigW
WTSEnumerateProcessesA
WTSEnumerateSessionsW
WTSSendMessageA
WTSVirtualChannelWrite
WTSVirtualChannelPurgeInput
WTSQueryUserToken
WTSQuerySessionInformationA
WTSSetSessionInformationW
WTSVirtualChannelQuery

msimg32

DllInitialize
AlphaBlend
GradientFill
TransparentBlt
vSetDdrawflag

user32

wsprintfA
GetWindowTextA
DrawIcon
DialogBoxParamA
IsZoomed
SetCursorPos
GetMessageA
PeekMessageA
CreateWindowExA
GetPropA
GetWindowLongA
PostMessageA
IsWindow
GetCaretPos
IsCharLowerW
DispatchMessageA
CharToOemA

modemui

CountryRunOnce
InvokeControlPanel

certcli

CACloseCA
CACloseCertType
CAEnumFirstCA
CAEnumNextCA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39dbc9bb8e435aa4a792b6f8d9ba63b9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

nddeapi

shlwapi

wtsapi32

msimg32

user32

modemui

certcli

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1024B - Virtual size: 626B

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1024B - Virtual size: 626B

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 2KB - Virtual size: 2KB