a941d44d5f916ec019febee752204b96_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a941d44d5f916ec019febee752204b96_JaffaCakes118
Size

99KB
MD5

a941d44d5f916ec019febee752204b96
SHA1

da4af4a75c7a13b8f7f0f2595fe80f1fcf1e1430
SHA256

31440d3f947b45ed679d5b2fc399b69253d268f119e87fa72042df5b83ddbe12
SHA512

149c2f19ba83929e4721cf6539a9b8d66d33a372c2800fd31be3d950c3f4e59b9b859c811f2437fa7f2e3a7d47019d8e8f6ce385a0484b8ecb1bfb78c8be536c
SSDEEP

1536:j5dokxQiuBpe+5naNxtoKeHgAWaVL+OyaVNwTYwUrgKgszFeKmBY6bK+Ep:j5dbsp0oxHFRgwwT0vgszs7BRK+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a941d44d5f916ec019febee752204b96_JaffaCakes118

Files

a941d44d5f916ec019febee752204b96_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f740ddbc564a1fad33df1f1101e253da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

certcli

CAGetCAProperty
CAUpdateCA
CAGetCertTypePropertyEx
CAFindCertTypeByName
CAFreeCertTypeProperty
CACertTypeGetSecurity
CASetCertTypeProperty
CAAddCACertificateType
CAEnumCertTypesForCA
CAGetCertTypeKeySpec
CACertTypeSetSecurity
CASetCertTypeKeySpec
CASetCertTypeExtension
CASetCertTypeFlags
CAFindByName
CAFreeCAProperty
CAEnumCertTypes
CAGetCertTypeProperty
CAEnumNextCertType
CAFreeCertTypeExtensions
CAGetCertTypeExtensions
CACloseCA
CARemoveCACertificateType
CAUpdateCertType
CACloseCertType
CAGetCertTypeFlags
CACreateCertType

msvcrt

wcscat
mbstowcs
_onexit
_except_handler3
wcsstr
free
??1type_info@@UAE@XZ
??3@YAXPAX@Z
wcsrchr
malloc
_adjust_fdiv
_wcsicmp
wcstoul
_initterm
wcscpy
??2@YAPAXI@Z
wcscmp
wcschr
wcslen
vswprintf
?terminate@@YAXXZ
__RTDynamicCast
memmove
_wcsupr
__dllonexit

kernel32

lstrlenW
GetProcAddress
GetTickCount
SetLastError
LocalFree
GetSystemTimeAsFileTime
GetModuleFileNameW
GetSystemDefaultLangID
IsBadReadPtr
InterlockedDecrement
GlobalFree
lstrcpyW
OutputDebugStringA
GetComputerNameW
InitializeCriticalSection
GetCPInfo
GetDateFormatW
CreateFileW
GetEnvironmentStringsW
QueryPerformanceCounter
GlobalUnlock
OutputDebugStringW
WideCharToMultiByte
FormatMessageW
LoadLibraryW
FileTimeToSystemTime
InterlockedIncrement
GetStartupInfoA
GlobalAlloc
GlobalLock
GetLastError
SetUnhandledExceptionFilter
GetSystemWindowsDirectoryW
lstrcmpiW
CloseHandle
GetCurrentProcess
FileTimeToLocalFileTime
GetModuleHandleA
DeleteCriticalSection
LocalReAlloc
RemoveDirectoryA

user32

wsprintfW
SetCursor
SendMessageW
GetDlgItemTextA
PostMessageW
SetWindowTextW
LoadStringW
SystemParametersInfoW
RegisterClipboardFormatW
LoadCursorW
WinHelpW
GetParent
EndDialog
MessageBoxW
SetDlgItemTextW
SetFocus
GetDlgItem
SendDlgItemMessageW
DialogBoxParamW
EnableWindow
ReleaseDC
GetWindowLongW
SetWindowLongW
LoadImageW
InsertMenuItemW
GetDC
LoadIconW
LoadBitmapW

advapi32

RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegSetValueExW
RegDeleteKeyW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW

comctl32

CreatePropertySheetPageW
PropertySheetW

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f740ddbc564a1fad33df1f1101e253da

Headers

File Characteristics

Imports

certcli

msvcrt

kernel32

user32

advapi32

comctl32

Sections

.text Size: 45KB - Virtual size: 44KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 75KB

.rsrc Size: 23KB - Virtual size: 23KB

.text
Size: 45KB - Virtual size: 44KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 75KB

.rsrc
Size: 23KB - Virtual size: 23KB