42110a5d1b089a73f5bf062f343dff2f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

42110a5d1b089a73f5bf062f343dff2f_JaffaCakes118
Size

102KB
MD5

42110a5d1b089a73f5bf062f343dff2f
SHA1

aa1cb04d7f7f5df671352c7f8825debdaeb4b4f3
SHA256

96fa6b528e9547d91a0e29ed35e5b9e1a34af1addc5951f708ad7958d4c3fbaf
SHA512

24fc435191f01ac2ec3294a4de4e261d053f9719a59770b88ac7b04664a1c169bdd732f9b21c8fa8c20cdc990feeb065c1425198c03a34219d8722049230ad92
SSDEEP

3072:IzSoQvRPTuj8VpviZf/hyoDlEKt7HqXQL:IzSXRqSioKY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42110a5d1b089a73f5bf062f343dff2f_JaffaCakes118

Files

42110a5d1b089a73f5bf062f343dff2f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

76d6e95f3b948ef6b01bf9db7f98a22a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventW
FreeLibrary
WriteFile
MultiByteToWideChar
EnterCriticalSection
CreateFileW
CreateIoCompletionPort
InterlockedExchange
LeaveCriticalSection
InterlockedIncrement
GetThreadPriority
SetEvent
GetCurrentProcessId
HeapAlloc
GetFileSize
GetDiskFreeSpaceW
IsBadCodePtr
HeapFree
ReadFile
CreateSemaphoreW
DeleteCriticalSection
SetEndOfFile
GetStartupInfoA
IsBadWritePtr
IsBadReadPtr
PostQueuedCompletionStatus
DeleteFileW
InitializeCriticalSection
ResetEvent
CreateThread
GetProfileIntA
GetSystemDefaultLangID
OutputDebugStringA
ReleaseSemaphore
lstrcmpiW
MulDiv
GlobalMemoryStatus
GlobalHandle
InterlockedDecrement
GetProcessHeap
lstrcpynW
GlobalAlloc
GetVersionExW
lstrcmpW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
WaitForSingleObject
SetUnhandledExceptionFilter
LoadLibraryW
GetLastError
lstrlenW
GetPrivateProfileStringW
GetTickCount
GetCurrentProcess
lstrlenA
WideCharToMultiByte
GetCPInfo
SetFilePointer
QueryPerformanceCounter
lstrcpyA
WaitForMultipleObjects
GetQueuedCompletionStatus
GetSystemInfo
GetFullPathNameW
CloseHandle
GetFileAttributesW
GetModuleFileNameA
GlobalLock
GetCurrentThread
SetThreadPriority
lstrcpyW
IsBadHugeReadPtr
GlobalFree
VirtualFree
GlobalUnlock

user32

ReleaseDC
EnableWindow
GetWindowRect
GetClientRect
GetDlgItem
TranslateMessage
IsWindowVisible
GetDesktopWindow
DefWindowProcW
SetWindowLongW
IsRectEmpty
SendMessageW
CheckRadioButton
wsprintfW
IsWindow
SetDlgItemTextW
DestroyWindow
CheckDlgButton
PeekMessageW
GetWindowLongW
LoadCursorW
SetCursor
ShowWindow
GetDlgItemInt
MoveWindow
DispatchMessageW
InvalidateRect
LoadStringW
CreateDialogParamW
GetAsyncKeyState
ClientToScreen
GetDC
SetDlgItemInt

winmm

mixerClose
OpenDriver
SendDriverMessage
waveInOpen
mixerGetID
waveInStart
waveInStop
waveInPrepareHeader
mixerGetLineControlsW
waveInReset
mixerSetControlDetails
waveInUnprepareHeader
mixerGetLineInfoW
waveInGetDevCapsW
waveInAddBuffer
mixerGetControlDetailsW
waveInClose
mixerOpen
CloseDriver

advapi32

RegOpenKeyW
RegCloseKey
RegOpenKeyExW
RegCreateKeyW
RegDeleteKeyW
RegEnumKeyExW
RegQueryValueExW
RegSetValueExW
RegSetValueW
RegEnumKeyW

gdi32

PatBlt
GetObjectW
GetStockObject
SelectObject
GetTextExtentPoint32W
GetPaletteEntries

ole32

CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
CoFreeUnusedLibraries

msvfw32

ICGetInfo
ICSendMessage
ICCompress
ICDecompress
ICClose
ICOpen
ICLocate

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

msvcrt

??2@YAPAXI@Z
_except_handler3
_purecall
wcslen
_ftol
??3@YAXPAX@Z

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

76d6e95f3b948ef6b01bf9db7f98a22a

Headers

File Characteristics

Imports

kernel32

user32

winmm

advapi32

gdi32

ole32

msvfw32

version

msvcrt

Sections

.text Size: 47KB - Virtual size: 47KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 17KB - Virtual size: 103KB

.rsrc Size: 23KB - Virtual size: 23KB

.text
Size: 47KB - Virtual size: 47KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 17KB - Virtual size: 103KB

.rsrc
Size: 23KB - Virtual size: 23KB