a2240b2c595d0088fde66cc954cc6300_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a2240b2c595d0088fde66cc954cc6300_JaffaCakes118
Size

101KB
MD5

a2240b2c595d0088fde66cc954cc6300
SHA1

86c846911ee7711b59ad1381f544ce4f779d70f1
SHA256

c1fcbb8023d91457416b2d94790e95cc8e0c5effe887f11f0327195ed20b142a
SHA512

abd757bbb940162eb63a7c3348d42959044561665ad30f5e28292c6fe589397f693139821d831c16210647966335136b36f981fe9e448cf7a0a3b619535ec709
SSDEEP

1536:w0SE462pEMDdlIkwcgK5wj03Pw1ekuRw4wpZh3xuC7mJximYnJlpH:Xq6eEwxwcgK5w4fwywpZ9ki9nJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2240b2c595d0088fde66cc954cc6300_JaffaCakes118

Files

a2240b2c595d0088fde66cc954cc6300_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1ee101b08f2734787f2defb5de2be5a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegCloseKey
RegQueryValueExW
RegEnumKeyExW
RegDeleteKeyW
RegSetValueExW

msvcrt

_onexit
_wcsupr
_initterm
wcscmp
vswprintf
mbstowcs
wcscat
wcslen
??1type_info@@UAE@XZ
__dllonexit
_adjust_fdiv
_except_handler3
?terminate@@YAXXZ
wcsrchr
memmove
malloc
??2@YAPAXI@Z
wcstoul
free
wcsstr
_wcsicmp
__RTDynamicCast
??3@YAXPAX@Z
wcschr
wcscpy

kernel32

GetSystemWindowsDirectoryW
GlobalLock
InitializeCriticalSection
CreateFileW
lstrcpyW
GetModuleHandleA
LoadLibraryW
lstrlenW
GetDateFormatW
GetSystemTimeAsFileTime
CloseHandle
LocalReAlloc
InterlockedIncrement
GetCurrentProcess
GlobalUnlock
FileTimeToSystemTime
InterlockedDecrement
WideCharToMultiByte
GlobalFree
GetLastError
GetComputerNameW
GetSystemDefaultLangID
SetLastError
RemoveDirectoryA
DeleteCriticalSection
FormatMessageW
OutputDebugStringW
GetModuleFileNameW
OutputDebugStringA
FileTimeToLocalFileTime
GetEnvironmentStringsW
GetStartupInfoA
IsBadReadPtr
GetProcAddress
GetTickCount
lstrcmpiW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCPInfo
GlobalAlloc
LocalFree

certcli

CARemoveCACertificateType
CASetCertTypeExtension
CACloseCertType
CAEnumNextCertType
CAFindByName
CAAddCACertificateType
CASetCertTypeFlags
CAGetCertTypeFlags
CASetCertTypeProperty
CAGetCAProperty
CAFreeCertTypeExtensions
CACreateCertType
CAFindCertTypeByName
CACloseCA
CAGetCertTypeKeySpec
CAEnumCertTypesForCA
CAUpdateCertType
CACertTypeGetSecurity
CAFreeCertTypeProperty
CASetCertTypeKeySpec
CAEnumCertTypes
CAGetCertTypeProperty
CAFreeCAProperty
CAGetCertTypeExtensions
CAGetCertTypePropertyEx
CACertTypeSetSecurity
CAUpdateCA

user32

SendMessageW
wsprintfW
SetWindowTextW
MessageBoxW
WinHelpW
LoadImageW
EndDialog
LoadBitmapW
RegisterClipboardFormatW
SendDlgItemMessageW
SetWindowLongW
PostMessageW
InsertMenuItemW
DialogBoxParamW
LoadIconW
LoadStringW
SystemParametersInfoW
SetFocus
SetDlgItemTextW
GetDlgItemTextA
EnableWindow
GetParent
LoadCursorW
GetDlgItem
GetDC
GetWindowLongW
SetCursor
ReleaseDC

comctl32

PropertySheetW
CreatePropertySheetPageW

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ee101b08f2734787f2defb5de2be5a7

Headers

File Characteristics

Imports

advapi32

msvcrt

kernel32

certcli

user32

comctl32

Sections

.text Size: 46KB - Virtual size: 45KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 70KB

.rsrc Size: 24KB - Virtual size: 23KB

.text
Size: 46KB - Virtual size: 45KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 70KB

.rsrc
Size: 24KB - Virtual size: 23KB