9ee3645952a1baf1c1ac877631d238e6_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

9ee3645952a1baf1c1ac877631d238e6_JaffaCakes118
Size

101KB
MD5

9ee3645952a1baf1c1ac877631d238e6
SHA1

ab329d9bd6ab0d6f67a1d10adba561ea37ee84d0
SHA256

649000a64b9dc1c0ae4c90fe618ee291a7fdcae7425a31320b532460a22272c2
SHA512

aea548b172f8d70334b7d114a4c42969dc724bc904c3ec41f856e9863fa81d01df0b8e186f1f7f96d74eb1b54e71fa1b0c2caf2c4e7e3021acdb00be06079e34
SSDEEP

1536:hnooTXLj0SMMaa7mXT1ErHWM9uOFY9Xf9R7JwZOGaPqi4Mz7Y+V:CoTXLjFMMpS6YeYllR9wZOGaPs6E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
9ee3645952a1baf1c1ac877631d238e6_JaffaCakes118

Files

9ee3645952a1baf1c1ac877631d238e6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2a2244ab6677e1ea8fb83c609c0d0153

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyW
RegDeleteKeyW
RegOpenKeyW
RegCloseKey
RegQueryValueExW
RegEnumKeyW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW
RegSetValueW

winmm

mixerGetControlDetailsW
waveInPrepareHeader
waveInGetDevCapsW
mixerClose
mixerGetID
waveInStart
waveInReset
mixerGetLineControlsW
waveInStop
CloseDriver
SendDriverMessage
waveInClose
mixerSetControlDetails
waveInAddBuffer
waveInOpen
mixerOpen
waveInUnprepareHeader
OpenDriver
mixerGetLineInfoW

kernel32

ReadFile
CreateIoCompletionPort
GetSystemDefaultLangID
WaitForSingleObject
PostQueuedCompletionStatus
IsBadReadPtr
GetThreadPriority
GlobalMemoryStatus
lstrcpyA
WideCharToMultiByte
InitializeCriticalSection
GetCurrentProcessId
GetModuleFileNameA
MulDiv
InterlockedDecrement
lstrcmpiW
GetSystemInfo
GetDiskFreeSpaceW
lstrlenA
DeleteFileW
VirtualFree
GlobalHandle
SetFilePointer
CreateSemaphoreW
GlobalUnlock
EnterCriticalSection
QueryPerformanceCounter
GetCurrentThread
ReleaseSemaphore
CloseHandle
GetLastError
GetProcAddress
LeaveCriticalSection
SetUnhandledExceptionFilter
lstrlenW
GlobalAlloc
GetStartupInfoA
MultiByteToWideChar
GlobalLock
HeapAlloc
GetSystemTimeAsFileTime
GetACP
GlobalFree
GetFileAttributesW
DeleteCriticalSection
SetEvent
WriteFile
GetPrivateProfileStringW
FreeLibrary
InterlockedExchange
IsBadCodePtr
GetProfileIntA
GetProcessHeap
lstrcpyW
GetQueuedCompletionStatus
lstrcpynW
GetEnvironmentStringsA
IsBadWritePtr
InterlockedIncrement
SetEndOfFile
GetFileSize
WaitForMultipleObjects
CreateThread
CreateEventW
HeapFree
CreateFileW
GetCurrentProcess
lstrcmpW
GetFullPathNameW
GetTickCount
LoadLibraryW
SetThreadPriority
GetVersionExW
ResetEvent

ole32

CoTaskMemAlloc
CoFreeUnusedLibraries
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoInitialize
CoUninitialize

user32

IsWindow
IsRectEmpty
ShowWindow
LoadStringW
TranslateMessage
DefWindowProcW
CheckDlgButton
MoveWindow
GetDC
DispatchMessageW
IsWindowVisible
CheckRadioButton
DestroyWindow
ReleaseDC
SetCursor
GetDesktopWindow
SetDlgItemInt
CreateDialogParamW
EnableWindow
SendMessageW
PeekMessageW
GetClientRect
GetDlgItemInt
InvalidateRect
GetAsyncKeyState
ClientToScreen
SetDlgItemTextW
GetWindowRect
GetWindowLongW
wsprintfW
SetWindowLongW
GetDlgItem
LoadCursorW

msvfw32

ICLocate
ICOpen
ICSendMessage
ICDecompress
ICClose
ICGetInfo
ICCompress

msvcrt

??3@YAXPAX@Z
_purecall
_ftol
_except_handler3
??2@YAPAXI@Z
wcslen

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

gdi32

SelectObject
GetPaletteEntries
GetStockObject
GetTextExtentPoint32W
GetObjectW
PatBlt

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a2244ab6677e1ea8fb83c609c0d0153

Headers

File Characteristics

Imports

advapi32

winmm

kernel32

ole32

user32

msvfw32

msvcrt

version

gdi32

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 17KB - Virtual size: 84KB

.rsrc Size: 23KB - Virtual size: 23KB

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 17KB - Virtual size: 84KB

.rsrc
Size: 23KB - Virtual size: 23KB