4533869b6ab943ee66d5fd308f31a867_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4533869b6ab943ee66d5fd308f31a867_JaffaCakes118
Size

226KB
MD5

4533869b6ab943ee66d5fd308f31a867
SHA1

340afa835feca9846bfe1955e7eb52e8c82448a8
SHA256

ca5427321b78dd70e3502eac37947ff7bfffe492cbe919fe4fb27436b874a4c0
SHA512

73d796d0e12c6177d9dee9f0e06e0ab80678e096fbc2a57de4fd91cb01537eb43987f057bec0800e56610cc3bda68cf33c8461852f8447d2d7b8cd687cb08792
SSDEEP

3072:9Xx7gW/qN7YDZJ/6qwgT/qVTGeA4Pn8NBRB27JAEs0y2ZFueY2IM1ygGNbGGdZF:9ZI72ZZ6qZ/qtGeAp27JA6PudZF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4533869b6ab943ee66d5fd308f31a867_JaffaCakes118

Files

4533869b6ab943ee66d5fd308f31a867_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5505839c035cf7ab5cbe4553adacc76c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_except_handler3
__set_app_type
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
wcslen
wcscpy
swscanf

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

kernel32

IsDBCSLeadByte
LocalUnlock
LocalLock
GlobalFree
GlobalUnlock
GlobalSize
GlobalLock
GlobalAlloc
LocalFree
LocalAlloc
lstrcpyW
MultiByteToWideChar
GetPrivateProfileStringW
GetPrivateProfileIntW
GetACP
WritePrivateProfileStringW
GetSystemDirectoryW
FreeLibrary
GetCurrentProcessId
GetProcAddress
LoadLibraryW
GetComputerNameW
lstrlenW
GlobalDeleteAtom
GlobalAddAtomW
GetModuleHandleW
GetLastError
GetModuleHandleA
GetStartupInfoA
WideCharToMultiByte
LoadLibraryA

gdi32

CreateCompatibleDC
DeleteDC
CreateCompatibleBitmap
SelectObject
CreatePen
TranslateCharsetInfo
GetNearestColor
DeleteObject
CreateFontIndirectW
SetBkColor
SetTextColor
LineTo
MoveToEx
BitBlt
CreateSolidBrush

user32

GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
SendMessageW
DdeAddData
DdeCreateDataHandle
CloseClipboard
GetClipboardData
OpenClipboard
DdePostAdvise
DdeClientTransaction
InvalidateRect
ReleaseDC
GetDC
FlashWindow
SetTimer
PostMessageW
DdeCreateStringHandleW
DdeFreeStringHandle
SetWindowTextW
wsprintfW
DdeQueryStringW
DdeCmpStringHandles
DdeGetData
DialogBoxParamW
EndDialog
WinHelpW
CheckDlgButton
SendDlgItemMessageW
GetSysColor
LoadStringW
GetSystemMetrics
LoadIconW
DestroyWindow
ShowWindow
SetWindowLongW
GetWindowLongW
CreateWindowExW
CallWindowProcW
CharNextW
IsIconic
SetFocus
GetMenu
CheckMenuItem
IsClipboardFormatAvailable
EnableMenuItem
SetWindowPos
GetSystemMenu
PostQuitMessage
GetWindowPlacement
DdeAbandonTransaction
MoveWindow
GetClientRect
MessageBeep
FindWindowW
AppendMenuW
UpdateWindow
SetWindowPlacement
MessageBoxW
RegisterClipboardFormatW
DdeGetLastError
DdeNameService
DdeInitializeW
LoadAcceleratorsW
EndPaint
DrawIcon
DefWindowProcW
BeginPaint
DdeKeepStringHandle
KillTimer
GetDesktopWindow
DdeDisconnect
DdeConnect
CharUpperW
RegisterClassW
LoadCursorW
DdeUninitialize

comdlg32

ChooseColorW
ChooseFontW

shell32

ShellAboutW

comctl32

CreateStatusWindowW
CreateToolbarEx
ord2

winmm

sndPlaySoundW
waveOutGetNumDevs

ntlanman

I_SystemFocusDialog

nddeapi

ord600
ord612

mpr

WNetGetUserW

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 192KB - Virtual size: 1.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5505839c035cf7ab5cbe4553adacc76c

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

gdi32

user32

comdlg32

shell32

comctl32

winmm

ntlanman

nddeapi

mpr

Sections

.text Size: 23KB - Virtual size: 22KB

.data Size: 512B - Virtual size: 6KB

.rsrc Size: 10KB - Virtual size: 9KB

.vmp0 Size: 192KB - Virtual size: 1.3MB

.text
Size: 23KB - Virtual size: 22KB

.data
Size: 512B - Virtual size: 6KB

.rsrc
Size: 10KB - Virtual size: 9KB

.vmp0
Size: 192KB - Virtual size: 1.3MB