44bc72ad57ce5e45eb35ce42c16ffc90_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

44bc72ad57ce5e45eb35ce42c16ffc90_JaffaCakes118
Size

271KB
MD5

44bc72ad57ce5e45eb35ce42c16ffc90
SHA1

bf3ee43b94a9dad6b773029604c9126d9a7399e2
SHA256

32c77bc36295b8d831729745a73e3f42f1e8fe224bacd3d41ecf9ec5a4bc25a7
SHA512

b6b648ac64faf9eb171d7bd3f121471737a99d2dbf36954845a3c319a9d7944e93114bb8fdb291a878500f6572f3eb1999149f1c2fdd1943439fae1689de4927
SSDEEP

6144:Zmrc/DZckkdTrkHWCdtCb9JHk/sRnAlkLoXdZk:Zmo/JMfFMwZnOiIjk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44bc72ad57ce5e45eb35ce42c16ffc90_JaffaCakes118

Files

44bc72ad57ce5e45eb35ce42c16ffc90_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e804c5a8859a6cafb3e04719031e2204

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MapDialogRect
GetAltTabInfoA
SetProcessWindowStation
UnregisterDeviceNotification
IsCharLowerW
SendMessageW
CreateIconFromResource
RemoveMenu
SetWindowLongA
PeekMessageA
MsgWaitForMultipleObjects
ExitWindowsEx
CallWindowProcA
CharPrevA
ShowWindow
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
CreateDialogParamA
SetWindowTextA
GetDlgItemTextA
DestroyWindow
LoadIconA
RegisterClassA
DefWindowProcA
PostQuitMessage
LoadStringA
EndDialog
GetDlgItem
MessageBoxA
PostMessageA
SendMessageA
DefFrameProcW
SetDlgItemTextA

shell32

Shell_NotifyIconW
ShellExecuteExW
ShellExecuteExA
ExtractIconExW
DragAcceptFiles
ShellExecuteA

ole32

DoDragDrop
OleSetContainedObject
CreateGenericComposite
CoRegisterClassObject
OleDoAutoConvert
OleDestroyMenuDescriptor
CoReleaseMarshalData

advapi32

AdjustTokenPrivileges
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA

opengl32

glColor4s
glIsList
glRasterPos4f
glGetMapfv
glGenLists
glNormal3iv
glFogi
glPixelZoom

comctl32

ord17

kernel32

HeapSize
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapAlloc
InitializeCriticalSectionAndSpinCount
RtlUnwind
IsValidCodePage
GetOEMCP
GetCPInfo
WriteConsoleA
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapFree
HeapCreate
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
GetLocaleInfoA
VirtualAlloc
CloseHandle
CreateThread
GlobalMemoryStatusEx
SetLocaleInfoW
GetConsoleCursorInfo
OpenSemaphoreW
GetSystemTime
CreateRemoteThread
OutputDebugStringW
CreateDirectoryA
CreateFileA
CreateProcessA
DeleteFileA
FindResourceA
FormatMessageA
GetACP
GetCommandLineA
GetCurrentProcess
GetEnvironmentVariableA
GetExitCodeProcess
GetFileAttributesA
GetFileSize
GetFullPathNameA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDefaultLCID
GetSystemInfo
GetUserDefaultLangID
GetVersionExA
GetWindowsDirectoryA
IsDBCSLeadByte
LoadLibraryA
LoadResource
LockResource
ReadFile
RemoveDirectoryA
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
SizeofResource
Sleep
VirtualFree
VirtualProtect
VirtualQuery
WriteFile
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
ExitProcess

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/version.txt
.rsrc/1076/MANIFEST/1
.xml
.rsrc/1086/MESSAGETABLE/16
.rsrc_1
.text

Sharing

General

Malware Config

Signatures

Files

e804c5a8859a6cafb3e04719031e2204

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

ole32

advapi32

opengl32

comctl32

kernel32

Sections

.text Size: 70KB - Virtual size: 70KB

.rdata Size: 56KB - Virtual size: 55KB

.data Size: 5KB - Virtual size: 104KB

.rsrc Size: 138KB - Virtual size: 137KB

.text
Size: 70KB - Virtual size: 70KB

.rdata
Size: 56KB - Virtual size: 55KB

.data
Size: 5KB - Virtual size: 104KB

.rsrc
Size: 138KB - Virtual size: 137KB