9ce282be5389ab0154ec66dcb1b4b884_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

9ce282be5389ab0154ec66dcb1b4b884_JaffaCakes118
Size

100KB
MD5

9ce282be5389ab0154ec66dcb1b4b884
SHA1

8222f80aaa432dd9b3c3d501eab218d3e5de97d7
SHA256

81d5af62cb8af6f98eac099cfba4a52acfff6ff5f9cd431f7e3785960ff589ec
SHA512

7c8bf3d692d06cb663ea81384dbb3f2ec7fc8a39e46752d9d2e4669e388589caf72b09402490e8675f9a551e60da520624d312343f035b2bc4c08a0b4951d0b0
SSDEEP

1536:0zMJ9oeX1tI90xxa33VyT+uKfVjrhrTXiTvizDhw65oxS27ICBP3uY:0MJ9oeX1u90xxa33Vm+f/rTXVl5Yusv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ce282be5389ab0154ec66dcb1b4b884_JaffaCakes118

Files

9ce282be5389ab0154ec66dcb1b4b884_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1f275869f5136476030a80566068f5a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
GetSystemWindowsDirectoryW
InterlockedIncrement
GetTickCount
LocalFree
GetStartupInfoA
GlobalUnlock
OutputDebugStringW
FileTimeToLocalFileTime
InitializeCriticalSection
GetLastError
GetModuleHandleA
GetCurrentThread
CreateFileW
SetLastError
GlobalFree
GetEnvironmentStringsW
CloseHandle
InterlockedDecrement
GetModuleFileNameW
lstrcpyW
LocalReAlloc
FileTimeToSystemTime
GetSystemDefaultLangID
OutputDebugStringA
lstrcmpiW
GetComputerNameW
DeleteCriticalSection
GetSystemTimeAsFileTime
GetDateFormatW
GlobalLock
GetCurrentProcess
WideCharToMultiByte
GetProcAddress
GlobalAlloc
LoadLibraryW
IsBadReadPtr
FormatMessageW
GetCPInfo
SetUnhandledExceptionFilter
lstrlenW

certcli

CAFreeCertTypeExtensions
CASetCertTypeFlags
CAEnumCertTypes
CACertTypeGetSecurity
CAFreeCAProperty
CAGetCAProperty
CAUpdateCertType
CAAddCACertificateType
CAGetCertTypeFlags
CACloseCA
CACertTypeSetSecurity
CAUpdateCA
CASetCertTypeProperty
CASetCertTypeKeySpec
CAEnumCertTypesForCA
CAGetCertTypeExtensions
CASetCertTypeExtension
CARemoveCACertificateType
CAFreeCertTypeProperty
CAFindCertTypeByName
CACreateCertType
CAFindByName
CACloseCertType
CAGetCertTypeProperty
CAGetCertTypeKeySpec
CAGetCertTypePropertyEx
CAEnumNextCertType

user32

DialogBoxParamW
EndDialog
SetDlgItemTextW
LoadIconW
SetFocus
SystemParametersInfoW
LoadBitmapW
MessageBoxW
LoadStringW
GetDlgItemTextA
SetCursor
ReleaseDC
SendDlgItemMessageW
GetDlgItem
SetWindowTextW
SetWindowLongW
wsprintfW
LoadCursorW
InsertMenuItemW
EnableWindow
RegisterClipboardFormatW
GetDC
GetWindowLongW
WinHelpW
GetParent
PostMessageW
LoadImageW
SendMessageW

msvcrt

_onexit
_except_handler3
wcscat
memmove
__RTDynamicCast
??1type_info@@UAE@XZ
??2@YAPAXI@Z
_adjust_fdiv
wcstoul
wcscmp
_initterm
wcsstr
_wcsupr
??3@YAXPAX@Z
vswprintf
mbstowcs
__dllonexit
malloc
_wcsicmp
?terminate@@YAXXZ
wcsrchr
wcscpy
free
wcslen
wcschr

advapi32

RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegSetValueExW
RegCloseKey
RegQueryValueExW

comctl32

PropertySheetW
CreatePropertySheetPageW

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f275869f5136476030a80566068f5a2

Headers

File Characteristics

Imports

kernel32

certcli

user32

msvcrt

advapi32

comctl32

Sections

.text Size: 45KB - Virtual size: 44KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 117KB

.rsrc Size: 24KB - Virtual size: 23KB

.text
Size: 45KB - Virtual size: 44KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 117KB

.rsrc
Size: 24KB - Virtual size: 23KB