609fa24d40472c55fca741b40e01582e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

609fa24d40472c55fca741b40e01582e_JaffaCakes118
Size

104KB
MD5

609fa24d40472c55fca741b40e01582e
SHA1

8c3ba3cc6a95e684d57bc54c3e85bc92c643cd08
SHA256

5876e80fc963391900de48d179f0f26cd840c248de96f04fbc4d556ecfd1232f
SHA512

aa995f8abccbb66a1d1ad1c0683f71a44fdb333ece89387ad621621c77efa932fe93f1eeefbd8683cf1720ed105ea58b61bc8a9385fd8498de118acf3ddea585
SSDEEP

1536:jwr76NA+BJOFttFjfJ1t7rz3l3soIo318bHwuEEW5RZZjzXHyqS3zVZ:O6NEFH3raoF318bQBTfXXyqS3zV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
609fa24d40472c55fca741b40e01582e_JaffaCakes118

Files

609fa24d40472c55fca741b40e01582e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f16fca4c07519a0ffb370ccdb572440d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

certcli

CAGetCertTypePropertyEx
CAUpdateCertType
CARemoveCACertificateType
CACertTypeGetSecurity
CACreateCertType
CASetCertTypeFlags
CAGetCAProperty
CASetCertTypeKeySpec
CAGetCertTypeExtensions
CAGetCertTypeFlags
CAGetCertTypeKeySpec
CAGetCertTypeProperty
CAFreeCertTypeProperty
CACloseCA
CAFindByName
CAUpdateCA
CASetCertTypeExtension
CACloseCertType
CACertTypeSetSecurity
CASetCertTypeProperty
CAFindCertTypeByName
CAEnumNextCertType
CAFreeCAProperty
CAEnumCertTypes
CAEnumCertTypesForCA
CAAddCACertificateType
CAFreeCertTypeExtensions

kernel32

CloseHandle
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
OutputDebugStringA
GetSystemDefaultLangID
QueryPerformanceCounter
FileTimeToLocalFileTime
LocalReAlloc
FileTimeToSystemTime
InterlockedDecrement
InitializeCriticalSection
GetModuleHandleA
lstrlenW
DeleteCriticalSection
lstrcpyW
lstrcmpiW
SetLastError
InterlockedIncrement
GetCurrentProcess
GetEnvironmentStringsW
GlobalAlloc
OutputDebugStringW
GetTickCount
GetACP
LoadLibraryW
GetLastError
GlobalLock
GlobalUnlock
LocalFree
FormatMessageW
GlobalFree
GetComputerNameW
WideCharToMultiByte
GetModuleFileNameW
GetDateFormatW
GetStartupInfoA
GetSystemWindowsDirectoryW
RemoveDirectoryA
CreateFileW
IsBadReadPtr

user32

InsertMenuItemW
GetParent
LoadImageW
GetWindowLongW
GetDlgItemTextA
DialogBoxParamW
SendMessageW
LoadCursorW
GetDlgItem
GetDC
LoadBitmapW
SetDlgItemTextW
LoadIconW
SetWindowTextW
RegisterClipboardFormatW
WinHelpW
SendDlgItemMessageW
ReleaseDC
LoadStringW
SetCursor
SetFocus
SystemParametersInfoW
EnableWindow
PostMessageW
SetWindowLongW
wsprintfW
MessageBoxW
EndDialog

msvcrt

_except_handler3
_adjust_fdiv
malloc
__RTDynamicCast
__dllonexit
wcscat
vswprintf
wcscpy
??1type_info@@UAE@XZ
wcstoul
wcsrchr
_purecall
_onexit
_wcsupr
?terminate@@YAXXZ
wcsstr
memmove
wcscmp
??2@YAPAXI@Z
_initterm
free
mbstowcs
_wcsicmp
??3@YAXPAX@Z
wcslen
wcschr

advapi32

RegCreateKeyExW
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegDeleteKeyW
RegEnumKeyExW

comctl32

CreatePropertySheetPageW
PropertySheetW

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f16fca4c07519a0ffb370ccdb572440d

Headers

File Characteristics

Imports

certcli

kernel32

user32

msvcrt

advapi32

comctl32

Sections

.text Size: 48KB - Virtual size: 48KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 120KB

.rsrc Size: 24KB - Virtual size: 24KB

.text
Size: 48KB - Virtual size: 48KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 120KB

.rsrc
Size: 24KB - Virtual size: 24KB