a7d495047ed2e51f466de166166e8584_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a7d495047ed2e51f466de166166e8584_JaffaCakes118
Size

102KB
MD5

a7d495047ed2e51f466de166166e8584
SHA1

d1cd3d7b64b3d8ad22ddd65fa4e091c0b1ac9295
SHA256

9c9cb0eb8a9cbd759910b48204e8363dfb351cd93557d0b5f13a21f217a23bd2
SHA512

97d9b89270155a3305823afc38a25bed97fee66272e778b8a10a879ad6440e12ad09d047752d5dbbb152d9eeadf61fbc430fb71b5c501ab5e6076364159b4541
SSDEEP

1536:EpcwmTzlnq1lPCOUlscN/7YjDKzskId4Ldpz838NmGT+:Eq52l69lPmOskA4Lbz83FZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7d495047ed2e51f466de166166e8584_JaffaCakes118

Files

a7d495047ed2e51f466de166166e8584_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dbac364ff88c2ad26b3527936fc0f517

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcstoul
malloc
mbstowcs
__RTDynamicCast
_purecall
_wcsicmp
_adjust_fdiv
??1type_info@@UAE@XZ
wcscmp
?terminate@@YAXXZ
vswprintf
??2@YAPAXI@Z
wcscat
wcsstr
memmove
_wcsupr
wcsrchr
_except_handler3
__dllonexit
free
_initterm
_onexit
wcscpy
wcschr
wcslen
??3@YAXPAX@Z

user32

GetParent
EnableWindow
ReleaseDC
SendDlgItemMessageW
GetDlgItem
LoadStringW
InsertMenuItemW
SetFocus
DialogBoxParamW
GetDC
EndDialog
GetDlgItemTextA
LoadImageW
SetWindowTextW
LoadIconW
LoadCursorW
WinHelpW
RegisterClipboardFormatW
PostMessageW
GetWindowLongW
SetDlgItemTextW
SystemParametersInfoW
SendMessageW
SetCursor
SetWindowLongW
MessageBoxW
wsprintfW
LoadBitmapW

kernel32

GetEnvironmentStringsW
GetSystemDefaultLangID
InterlockedDecrement
GetACP
lstrlenW
GlobalAlloc
LocalReAlloc
FileTimeToLocalFileTime
GetTickCount
DeleteCriticalSection
GetLastError
QueryPerformanceCounter
FileTimeToSystemTime
IsBadReadPtr
GetModuleHandleA
lstrcpyW
InitializeCriticalSection
OutputDebugStringW
LoadLibraryW
GlobalUnlock
SetLastError
GetComputerNameW
InterlockedIncrement
lstrcmpiW
WideCharToMultiByte
SetUnhandledExceptionFilter
GetCurrentProcess
RemoveDirectoryA
CreateFileW
GetModuleFileNameW
GlobalFree
CloseHandle
GlobalLock
FormatMessageW
OutputDebugStringA
GetDateFormatW
GetSystemTimeAsFileTime
GetStartupInfoA
GetSystemWindowsDirectoryW
LocalFree

certcli

CAGetCertTypeExtensions
CASetCertTypeExtension
CAEnumCertTypesForCA
CASetCertTypeKeySpec
CASetCertTypeFlags
CACreateCertType
CAFreeCertTypeProperty
CACloseCertType
CACloseCA
CAFreeCertTypeExtensions
CAGetCAProperty
CAFindCertTypeByName
CAUpdateCertType
CAGetCertTypePropertyEx
CAGetCertTypeKeySpec
CAGetCertTypeFlags
CAFreeCAProperty
CAFindByName
CAEnumCertTypes
CAAddCACertificateType
CACertTypeSetSecurity
CAGetCertTypeProperty
CARemoveCACertificateType
CAEnumNextCertType
CAUpdateCA
CASetCertTypeProperty
CACertTypeGetSecurity

advapi32

RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
RegDeleteKeyW
RegCloseKey
RegSetValueExW
RegEnumKeyExW
RegDeleteValueW

gdi32

CreateFontIndirectW
GetDeviceCaps
DeleteObject

comctl32

CreatePropertySheetPageW
PropertySheetW

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dbac364ff88c2ad26b3527936fc0f517

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

certcli

advapi32

gdi32

comctl32

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 117KB

.rsrc Size: 25KB - Virtual size: 25KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 117KB

.rsrc
Size: 25KB - Virtual size: 25KB