a07f65547e9d8e5324f99f4ac929cf91_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a07f65547e9d8e5324f99f4ac929cf91_JaffaCakes118
Size

101KB
MD5

a07f65547e9d8e5324f99f4ac929cf91
SHA1

ceab1e24fd3a6888c188a3a8bba50fcab7b856be
SHA256

f08c2e0453e993c168bc8f7749eede594024a6d580098cc2c3cc7d24236fe2ce
SHA512

11913a8da783c1d420a263a320dea1e9a4a96720bbfa2f544e23daa7c5082d2a2e3b4c2d81c7f58d0e629b763f6636535de957daf962d9bf5005d926e7031995
SSDEEP

3072:tjOLZLy2NCz26nF1j6tV2Lz6kv/QPKUWupxYk8nc:olzNCzjF0tELz6yZUWupxYz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a07f65547e9d8e5324f99f4ac929cf91_JaffaCakes118

Files

a07f65547e9d8e5324f99f4ac929cf91_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9cc8e9460ac53a92f1a9ae8909d6bfaa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreatePropertySheetPageW
PropertySheetW

user32

LoadCursorW
EndDialog
LoadImageW
GetDlgItemTextA
WinHelpW
GetDC
DialogBoxParamW
LoadBitmapW
EnableWindow
ReleaseDC
LoadStringW
InsertMenuItemW
SendMessageW
PostMessageW
SetWindowTextW
LoadIconW
RegisterClipboardFormatW
wsprintfW
SetWindowLongW
SetFocus
GetParent
SetDlgItemTextW
GetWindowLongW
MessageBoxW
SystemParametersInfoW
SetCursor
GetDlgItem
SendDlgItemMessageW

certcli

CASetCertTypeExtension
CACreateCertType
CASetCertTypeFlags
CAGetCAProperty
CAUpdateCA
CAEnumCertTypes
CACertTypeGetSecurity
CAFreeCAProperty
CAEnumCertTypesForCA
CARemoveCACertificateType
CAFindByName
CAFreeCertTypeProperty
CAGetCertTypeKeySpec
CAGetCertTypeExtensions
CACloseCA
CAEnumNextCertType
CAFreeCertTypeExtensions
CAGetCertTypeFlags
CAAddCACertificateType
CAGetCertTypeProperty
CASetCertTypeKeySpec
CACertTypeSetSecurity
CACloseCertType
CAFindCertTypeByName
CASetCertTypeProperty
CAUpdateCertType
CAGetCertTypePropertyEx

kernel32

GetStartupInfoA
lstrlenW
LocalReAlloc
GlobalAlloc
GetSystemDefaultLangID
InterlockedDecrement
OutputDebugStringW
RemoveDirectoryA
InitializeCriticalSection
CloseHandle
lstrcmpiW
lstrcpyW
GetCurrentProcess
FileTimeToLocalFileTime
LoadLibraryW
GetACP
GetTickCount
CreateFileW
LocalFree
GlobalUnlock
GetEnvironmentStringsW
SetLastError
GetModuleFileNameW
GetSystemWindowsDirectoryW
FileTimeToSystemTime
InterlockedIncrement
GetDateFormatW
GetModuleHandleA
SetUnhandledExceptionFilter
QueryPerformanceCounter
WideCharToMultiByte
GetSystemTimeAsFileTime
OutputDebugStringA
GetLastError
GetComputerNameW
FormatMessageW
GlobalFree
DeleteCriticalSection
IsBadReadPtr
GlobalLock

msvcrt

vswprintf
??2@YAPAXI@Z
wcsrchr
malloc
_initterm
wcscmp
_onexit
_purecall
_wcsupr
wcschr
wcscpy
free
__dllonexit
??3@YAXPAX@Z
_wcsicmp
mbstowcs
memmove
__RTDynamicCast
?terminate@@YAXXZ
wcslen
wcstoul
_adjust_fdiv
??1type_info@@UAE@XZ
_except_handler3
wcsstr
wcscat

advapi32

RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9cc8e9460ac53a92f1a9ae8909d6bfaa

Headers

File Characteristics

Imports

comctl32

user32

certcli

kernel32

msvcrt

advapi32

Sections

.text Size: 47KB - Virtual size: 46KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 123KB

.rsrc Size: 23KB - Virtual size: 23KB

.text
Size: 47KB - Virtual size: 46KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 123KB

.rsrc
Size: 23KB - Virtual size: 23KB