53ac178718ec337db43ed28a97b5f1b2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

53ac178718ec337db43ed28a97b5f1b2_JaffaCakes118
Size

451KB
MD5

53ac178718ec337db43ed28a97b5f1b2
SHA1

ba4cf772523c6a5b829af36062567c772709531b
SHA256

adf186ff82f1bdd71bbe778c2874807658d7ce0692e6ebc0c395def776747a6e
SHA512

d70f5a3dd1593630d576908e0da77c9f11541ee1cfd6cb48a8f841324c217119d0e4a23c58e3e43575956bf8a86b577c122734cb67b3729d6d5472571d7ce066
SSDEEP

6144:Z+ypfcZxVanYLd0VvenBzQmKdztKRE5HsUOApvmIPb/h2mw9kQAqjjNQ9C:QypfcZxsnYLd7QNvxSIPk9Y2Q9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53ac178718ec337db43ed28a97b5f1b2_JaffaCakes118

Files

53ac178718ec337db43ed28a97b5f1b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f67d1f0614eb91002e102431d1481d99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadBitmapA
GetWindowRect
EnableWindow
EndDialog
PostMessageA
PostQuitMessage
ShowWindow
SetWindowPlacement
CreateWindowExA
DestroyWindow
GetWindowLongA
SetWindowLongA
SetFocus
InsertMenuItemA
GetClassInfoW
GetClassInfoA
DialogBoxParamW
DialogBoxParamA
GetWindowTextLengthW
GetWindowTextW
GetWindowTextLengthA
GetWindowTextA
SetWindowTextW
SetWindowTextA
CreateWindowExW
RegisterClassW
RegisterClassA
SendMessageW
LoadStringW
LoadStringA
AppendMenuW
SendMessageA
InsertMenuItemW
SetMenuItemInfoA
SetMenuItemInfoW
GetMenuItemInfoA
GetMenuItemInfoW
CharPrevA
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
CharLowerW
CharLowerA
CharUpperW
CharUpperA
CheckDlgButton
KillTimer
wsprintfA
SetDlgItemTextA
IsDlgButtonChecked
ClientToScreen
GetCursorPos
AppendMenuA
TrackPopupMenuEx
ScreenToClient
IsWindowEnabled
ChildWindowFromPointEx
WindowFromPoint
RegisterClipboardFormatA
SetWindowLongW
InvalidateRect
UpdateWindow
SetTimer
MapVirtualKeyA
CallWindowProcW
CallWindowProcA
GetParent
GetKeyState
GetSubMenu
CreatePopupMenu
RemoveMenu
CheckMenuRadioItem
CheckMenuItem
GetMenuItemCount
GetMenu
LoadMenuA
SetMenu
DrawMenuBar
DestroyMenu
GetDlgItem
MoveWindow
IsZoomed
GetClientRect
MessageBoxW
ReleaseCapture
SetCapture
GetCapture
DefWindowProcW
DefWindowProcA
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
DispatchMessageA
LoadIconA
LoadCursorA
GetWindowPlacement

oleaut32

SysStringByteLen
VariantCopy
VariantClear
SysFreeString
SysAllocString

advapi32

GetUserNameW
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA
RegSetValueExW
RegQueryValueExA
RegCreateKeyExA
RegQueryValueExW

shell32

SHChangeNotify
ShellExecuteExA
SHGetDesktopFolder
SHGetPathFromIDListA
SHBrowseForFolderA
SHFileOperationA
SHGetMalloc
SHGetFileInfoA
SHGetSpecialFolderLocation
ShellExecuteA

ole32

CoTaskMemAlloc
CoTaskMemFree
OleUninitialize
OleInitialize
RegisterDragDrop
RevokeDragDrop
DoDragDrop
CoUninitialize
CoInitialize
CoCreateInstance

comctl32

CreateStatusWindowW
ord17
InitCommonControlsEx
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
PropertySheetW
PropertySheetA
CreateToolbarEx

mpr

WNetOpenEnumA
WNetCloseEnum
WNetEnumResourceA
WNetEnumResourceW
WNetGetResourceParentA
WNetGetResourceParentW
WNetGetResourceInformationA
WNetGetResourceInformationW
WNetAddConnection2A
WNetAddConnection2W
WNetOpenEnumW

gdi32

DeleteObject

comdlg32

GetOpenFileNameA
GetOpenFileNameW

msvcrt

wcscpy
__dllonexit
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
rand
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
?terminate@@YAXXZ
__CxxFrameHandler
_CxxThrowException
memcmp
_purecall
memset
memmove
memcpy
_wcsicmp
wcslen
malloc
free
srand
_onexit

kernel32

SetEndOfFile
WriteFile
SetFilePointer
GetFileSize
CreateFileA
GetLogicalDriveStringsW
GetLogicalDriveStringsA
FindFirstChangeNotificationW
FindFirstChangeNotificationA
FindCloseChangeNotification
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindClose
GetTempFileNameW
GetTempFileNameA
GetTempPathW
GetTempPathA
GetCurrentDirectoryW
GetFullPathNameW
GetFullPathNameA
DeleteFileW
DeleteFileA
CreateDirectoryW
CreateDirectoryA
MoveFileW
RemoveDirectoryW
SetFileAttributesW
MoveFileA
RemoveDirectoryA
SetFileAttributesA
SetLastError
CreateFileW
SetFileTime
GetWindowsDirectoryW
GetWindowsDirectoryA
ReadFile
GetDiskFreeSpaceA
FormatMessageW
FormatMessageA
LocalFree
GetModuleFileNameW
GetModuleFileNameA
LoadLibraryW
GetVolumeInformationA
LoadLibraryExA
WideCharToMultiByte
MultiByteToWideChar
GetCurrentProcess
SetPriorityClass
lstrcatA
lstrlenA
GetTickCount
FileTimeToLocalFileTime
WaitForMultipleObjects
Sleep
CreateProcessA
CreateProcessW
CloseHandle
CompareFileTime
GlobalAlloc
GlobalFree
GlobalSize
GlobalLock
GlobalUnlock
GetSystemDefaultLangID
GetUserDefaultLangID
AreFileApisANSI
GetModuleHandleW
GetModuleHandleA
CopyFileA
WaitForSingleObject
FindNextChangeNotification
GetCompressedFileSizeW
GetDriveTypeA
GetCommandLineW
GetVersionExA
LoadLibraryA
FileTimeToSystemTime
HeapFree
GetProcessHeap
HeapAlloc
FileTimeToDosDateTime
SystemTimeToFileTime
GetSystemTime
GetStdHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
FreeLibrary
GetProcAddress
DeleteCriticalSection
GetLastError
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
GetVolumeInformationW
CreateEventA
VirtualAlloc
VirtualFree
SetEvent
InitializeCriticalSection
GetStartupInfoA
DeviceIoControl

Sections

.text
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mrdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f67d1f0614eb91002e102431d1481d99

Headers

File Characteristics

Imports

user32

oleaut32

advapi32

shell32

ole32

comctl32

mpr

gdi32

comdlg32

msvcrt

kernel32

Sections

.text Size: 266KB - Virtual size: 266KB

.rdata Size: 59KB - Virtual size: 59KB

.data Size: 9KB - Virtual size: 18KB

.rsrc Size: 43KB - Virtual size: 42KB

.mrdata Size: 72KB - Virtual size: 72KB

.text
Size: 266KB - Virtual size: 266KB

.rdata
Size: 59KB - Virtual size: 59KB

.data
Size: 9KB - Virtual size: 18KB

.rsrc
Size: 43KB - Virtual size: 42KB

.mrdata
Size: 72KB - Virtual size: 72KB