55c0a6b340180d04d42967f9620756e7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

55c0a6b340180d04d42967f9620756e7_JaffaCakes118
Size

504KB
MD5

55c0a6b340180d04d42967f9620756e7
SHA1

a6da9a2f7b6f314555050d86f8fdd76fee339fba
SHA256

51f19013cf95f58f57591eb358694cf8550acfcb018744f5f2bdabb4acffe2ae
SHA512

2657cb2636ca219d9478935adbe18b22d2a2e9c77d4ca8350a519a9088326b219e8cce441d59988fbb24524a19a33a818795de117e2ba3a0998d3400407ba49d
SSDEEP

6144:r+znUMfRz1ua6NO7P6D0L90NB2OgKj3569ouQ0rpMK+syLdsQ3GT2TFBQghQD089:rRm7m0ZOgwJK6gZQTTFX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55c0a6b340180d04d42967f9620756e7_JaffaCakes118

Files

55c0a6b340180d04d42967f9620756e7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f64884c89c20eb2822f0cf3cdd51fed3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
DispatchMessageA
GetClientRect
CopyRect
IsWindow
MessageBoxA
ShowWindow
GetDlgItem
EnableWindow
FindWindowExA
wvsprintfA
CharToOemBuffA
LoadStringA
SetWindowPos
GetWindowTextA
GetWindow
GetSystemMetrics
OemToCharBuffA
DestroyWindow
KillTimer
EndDialog
PostMessageA
SendMessageA
SetTimer
MessageBoxW
SetWindowTextA
LoadStringW
DialogBoxParamW
DialogBoxParamA
SetWindowLongA
GetWindowLongA
CharUpperW
CharUpperA
GetWindowRect
SystemParametersInfoA
CheckDlgButton
IsDialogMessageA
BeginPaint
EndPaint
InvalidateRect
SetFocus
LoadCursorA
LoadIconA
RegisterClassA
SetCursor
GetMessageA
PeekMessageA
DrawTextA
GetWindowDC
ReleaseDC
FillRect
OffsetRect
wsprintfA
PostQuitMessage
CreateWindowExA
MoveWindow
DefWindowProcA
GetAltTabInfoA
SetWindowTextW

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHFileOperationA

advapi32

RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
RegEnumValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA

gdi32

CreateFontA
CreateSolidBrush
DeleteDC
DeleteObject
GetObjectA
CreatePalette

kernel32

GetStdHandle
CreateFileW
GetFileType
GetLastError
DosDateTimeToFileTime
FormatMessageA
GlobalAddAtomA
GlobalDeleteAtom
RtlUnwind
VirtualAlloc
VirtualFree
WinExec
_lcreat
_lopen
_lread
SetLastError
GetFileAttributesW
GlobalFlags
TerminateProcess
CloseHandle
SetFileTime
GetFileAttributesA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
HeapSize
SetFileAttributesW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
InitializeCriticalSection
LCMapStringW
LCMapStringA
HeapReAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
DeleteCriticalSection
GetACP
GetOEMCP
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
RaiseException
WideCharToMultiByte
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetCurrentDirectoryA
GetCPInfo
IsDBCSLeadByte
InterlockedIncrement
InterlockedDecrement
GetSystemTimeAsFileTime
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
EnterCriticalSection
GetLocaleInfoW
LeaveCriticalSection
GetEnvironmentStringsW
SetHandleCount
lstrcmpiA
GetFullPathNameA
MoveFileA
lstrcatA
SetCurrentDirectoryA
CreateDirectoryA
GetCurrentProcessId
QueryPerformanceCounter
HeapCreate
SetFileAttributesA
GetCommandLineA
WriteFile
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
ReadFile
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
lstrlenA
lstrcpyA
SetEndOfFile
CreateFileA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
ExitProcess
CopyFileA
GetCurrentProcess
GetTickCount
GetModuleFileNameA
Sleep
HeapDestroy

Sections

.text
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 389KB - Virtual size: 524KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f64884c89c20eb2822f0cf3cdd51fed3

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

advapi32

gdi32

kernel32

Sections

.text Size: 87KB - Virtual size: 87KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 389KB - Virtual size: 524KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 87KB - Virtual size: 87KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 389KB - Virtual size: 524KB

.rsrc
Size: 2KB - Virtual size: 2KB