54daa19fc37f426693dc921333d76a32_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

54daa19fc37f426693dc921333d76a32_JaffaCakes118
Size

277KB
MD5

54daa19fc37f426693dc921333d76a32
SHA1

65d491be5392c04fe4e0f87de86cfdc20884fae8
SHA256

aa3216d06d5542011e8aa0cf921a2aac10d48d7e2b9db7254f23aeafca2cea3c
SHA512

8e1f5f4847753eb37e910a32150618ae3937597b428310861374b393c4bf44e7b4c28cadae88ec0e46bc216e7183ec18a0354d6254ddceb35fd2f736ec3078ed
SSDEEP

6144:Q7F4IQjKAVeX2TAQxysWEDPqYtOJbEaYB:QJQHVeX2TAQwSDPqY8JbEaY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54daa19fc37f426693dc921333d76a32_JaffaCakes118

Files

54daa19fc37f426693dc921333d76a32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bfbe06bc2b5774c2713f2001f28f077d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
GetModuleFileNameA
GetTempFileNameA
CopyFileA
CreateDirectoryA
DeleteFileA
GlobalAlloc
WinExec
WritePrivateProfileStringA
GetPrivateProfileStringA
GlobalDeleteAtom
GetTickCount
GlobalLock
GlobalUnlock
CloseHandle
MultiByteToWideChar
OpenFileMappingA
MapViewOfFile
CreateFileMappingA
GetLastError
UnmapViewOfFile
LocalLock
LocalAlloc
LocalUnlock
LocalFree
SizeofResource
GlobalReAlloc
LockResource
FindResourceA
LoadResource
GetProfileStringA
FreeResource
lstrcatA
GetStartupInfoA
GlobalAddAtomA
GetFileAttributesA
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WideCharToMultiByte
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
WriteFile
GetOEMCP
GetACP
GetCPInfo
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
CreateFileA
FlushFileBuffers
ReadFile
VirtualFree
HeapCreate
GlobalFree
HeapDestroy
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetModuleHandleA
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
GetProcAddress
LoadLibraryA
SetEndOfFile
HeapSize
VirtualAlloc

user32

UnpackDDElParam
FreeDDElParam
ShowWindow
SetWindowPos
MessageBoxA
LoadStringA
wsprintfA
IntersectRect
GetCursorPos
GetWindowRect
SetRect
IsWindow
GetDC
ReleaseDC
SendMessageA
DialogBoxParamA
MoveWindow
GetClientRect
EndDialog
DestroyCursor
SetTimer
KillTimer
InvalidateRect
SetCursor
PtInRect
LoadCursorA
GetAsyncKeyState
EndPaint
BeginPaint
SetDlgItemTextA
GetDlgItemTextA
CopyRect
GetWindow
GetClassNameA
GetTopWindow
GetDesktopWindow
IsWindowVisible
GetWindowLongA
SetWindowLongA
EnumWindows
GetUpdateRect
IsRectEmpty
UpdateWindow
PostMessageA
SetRectEmpty
UnionRect
LoadIconA
GetMessageA
FindWindowA
PostQuitMessage
SetClassWord
SetWindowTextA
DefWindowProcA
SetForegroundWindow
TrackPopupMenu
DestroyWindow
DestroyMenu
CreateWindowExA
LoadMenuA
GetSubMenu
RegisterClassA
CheckMenuItem
OffsetRect
FillRect
DispatchMessageA
TranslateMessage
EqualRect

gdi32

RealizePalette
GetObjectA
DeleteDC
DeleteObject
BitBlt
SetMapMode
SetBkColor
CreateCompatibleBitmap
CreateBitmap
GetMapMode
SelectObject
CreateCompatibleDC
GetPixel
GetStockObject
SetBkMode
GetDeviceCaps
CreateDIBitmap
CreatePalette
CreateSolidBrush
SelectClipRgn
CreateRectRgnIndirect
SetRectRgn
SelectPalette

comdlg32

GetOpenFileNameA

advapi32

RegQueryValueA
RegCloseKey
RegSetValueExA
RegCreateKeyA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

winmm

mciSendCommandA

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bfbe06bc2b5774c2713f2001f28f077d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

winmm

Sections

.text Size: 90KB - Virtual size: 90KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 21KB - Virtual size: 36KB

.idata Size: 5KB - Virtual size: 4KB

.rsrc Size: 155KB - Virtual size: 154KB

.text
Size: 90KB - Virtual size: 90KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 21KB - Virtual size: 36KB

.idata
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 155KB - Virtual size: 154KB