88a18fd9bfdbbec928abafd5a1d49bc4_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

88a18fd9bfdbbec928abafd5a1d49bc4_JaffaCakes118
Size

250KB
MD5

88a18fd9bfdbbec928abafd5a1d49bc4
SHA1

aa61206050fdda9d29251c523962a79dce7468bd
SHA256

6ae6ffd52e4e97c0b3d4af52d1c3fa0209401397234335b24bde48e4a6ade5ed
SHA512

6feae5c24333c81b3002990fd43d3c0a55644d943ec26ca13a3276acee8e0ce6d644797189e5a7d762e0d9b339427b1d949e8bfdfdd24a14fa270c1d2acd84f7
SSDEEP

6144:KX6R9B4TOmFil7uxDGt7rE/kvl5UOQliAzLSMIZGyk3R:FX4T4t7SG5UOKkMINc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88a18fd9bfdbbec928abafd5a1d49bc4_JaffaCakes118

Files

88a18fd9bfdbbec928abafd5a1d49bc4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e09eabf6da7ba43725c5a67c4d341f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TrackPopupMenu
GetPropW
SendMessageW
GetDC
GetParent
SetWindowLongW
SetClipboardData
GetWindowTextW
SetCursor
SetDlgItemTextW
MessageBoxW
MoveWindow
GetSubMenu
GetAsyncKeyState
GetCapture
PostMessageW
ScreenToClient
DestroyMenu
EnableMenuItem
LoadStringW
EndDialog
RemovePropW
ReleaseDC
SendDlgItemMessageW
LoadMenuW
GetClientRect
GetDlgItem
ShowWindow
GetSysColor
CallWindowProcW
SetWindowTextW
LoadIconW
GetCursorPos
GetWindowLongW
EmptyClipboard
CloseClipboard
SetPropW
InvalidateRect
MapDialogRect
ClientToScreen
LoadCursorW
PtInRect
GetSystemMetrics
OpenClipboard
ExitWindowsEx
ReleaseCapture
GetWindowTextLengthW
DialogBoxParamW
GetWindowRect
SetCapture
SetWindowsHookExW

oleaut32

SysFreeString
VariantInit
SysAllocString
VariantClear

kernel32

SetFileTime
RemoveDirectoryW
GlobalAlloc
GetDriveTypeW
MapViewOfFile
GetDateFormatW
FindNextFileW
GetWindowsDirectoryW
GetDiskFreeSpaceExW
SetThreadPriority
WritePrivateProfileStringW
SetEndOfFile
GetCurrentDirectoryW
SetLastError
OpenProcess
VirtualProtectEx
GetPrivateProfileStringW
VirtualAlloc
CreateFileMappingW
GetTimeFormatW
GetFileSize
ReadFile
GetModuleHandleW
GetVolumeInformationW
SetPriorityClass
GetFileTime
GetCurrentThreadId
FormatMessageW
LoadLibraryExW
LoadResource
GetPriorityClass
SetUnhandledExceptionFilter
MoveFileW
IsDebuggerPresent
WriteFile
ResumeThread
LocalFree
FindResourceW
CopyFileW
FreeLibrary
GlobalUnlock
DeleteCriticalSection
EnterCriticalSection
SizeofResource
CloseHandle
ReadProcessMemory
WideCharToMultiByte
CreateThread
FileTimeToSystemTime
CreateProcessW
GetSystemDirectoryW
FreeResource
FlushFileBuffers
UnhandledExceptionFilter
GetFullPathNameW
SetFileAttributesW
GetSystemInfo
WriteProcessMemory
FindClose
SetThreadLocale
LockResource
DeleteFileW
GlobalFree
DisableThreadLibraryCalls
GetDiskFreeSpaceW
GlobalMemoryStatus
GetComputerNameW
LocalAlloc
FindResourceExW
GetSystemTimeAsFileTime
VirtualFree
GetLocalTime
UnmapViewOfFile
GetCommandLineW
CreateSemaphoreW
GetThreadLocale
GlobalLock
LeaveCriticalSection
MoveFileExW
QueryDosDeviceW
VirtualQueryEx
WaitForSingleObject
RaiseException
GetTempFileNameW
GetLogicalDrives
FindFirstFileW
MulDiv
FreeEnvironmentStringsW
CreateFileW
SetFilePointer
VirtualAllocEx

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
GetUserNameW
AllocateAndInitializeSid
RegSetValueExW
RegDeleteKeyW
SetNamedSecurityInfoW
RegCreateKeyExW
RegUnLoadKeyW
RegOpenKeyExW
RegLoadKeyW
RegCloseKey
RegEnumValueW
RegDeleteValueW
LookupAccountSidW
FreeSid
RegQueryValueExW

mscms

CreateProfileFromLogColorSpaceA
UnregisterCMMW
SelectCMM
GetColorDirectoryA
CheckBitmapBits
SetColorProfileElementReference
GetPS2ColorRenderingIntent
UninstallColorProfileA

atl

AtlIPersistPropertyBag_Load
AtlAxGetHost
AtlCreateTargetDC

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.a
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.VLAwlW
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.HIZQ
Size: 512B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zDtH
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QIRb
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xZDH
Size: 512B - Virtual size: 633B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.epxLT
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.YHaSXt
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NQ
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 211KB - Virtual size: 506KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.KD
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.miDHAp
Size: 1024B - Virtual size: 953B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Vvqe
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e09eabf6da7ba43725c5a67c4d341f2

Headers

DLL Characteristics

File Characteristics

Imports

user32

oleaut32

kernel32

advapi32

mscms

atl

Sections

.text Size: 16KB - Virtual size: 16KB

.a Size: 1KB - Virtual size: 1KB

.VLAwlW Size: 1KB - Virtual size: 1KB

.HIZQ Size: 512B - Virtual size: 592B

.zDtH Size: 2KB - Virtual size: 2KB

.QIRb Size: 1024B - Virtual size: 1KB

.rdata Size: 5KB - Virtual size: 4KB

.xZDH Size: 512B - Virtual size: 633B

.epxLT Size: 1KB - Virtual size: 2KB

.YHaSXt Size: 2KB - Virtual size: 3KB

.NQ Size: 1KB - Virtual size: 1KB

.data Size: 211KB - Virtual size: 506KB

.KD Size: 2KB - Virtual size: 2KB

.miDHAp Size: 1024B - Virtual size: 953B

.Vvqe Size: 1024B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 476B

.text
Size: 16KB - Virtual size: 16KB

.a
Size: 1KB - Virtual size: 1KB

.VLAwlW
Size: 1KB - Virtual size: 1KB

.HIZQ
Size: 512B - Virtual size: 592B

.zDtH
Size: 2KB - Virtual size: 2KB

.QIRb
Size: 1024B - Virtual size: 1KB

.rdata
Size: 5KB - Virtual size: 4KB

.xZDH
Size: 512B - Virtual size: 633B

.epxLT
Size: 1KB - Virtual size: 2KB

.YHaSXt
Size: 2KB - Virtual size: 3KB

.NQ
Size: 1KB - Virtual size: 1KB

.data
Size: 211KB - Virtual size: 506KB

.KD
Size: 2KB - Virtual size: 2KB

.miDHAp
Size: 1024B - Virtual size: 953B

.Vvqe
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 476B