b2710d419932c78e658d991c90fab70b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b2710d419932c78e658d991c90fab70b_JaffaCakes118
Size

99KB
MD5

b2710d419932c78e658d991c90fab70b
SHA1

f1b43ccf55c25f0a8fd5adc96aa84ab5c4e78d46
SHA256

253fc260d9838093c5193f9e95473ee64482846afc44f755ff47ef4f9b507ca3
SHA512

c3f176b72e805eebba1c89b95da579812d1bc5f486ab1c5b1922f1f75e8a5b229f49abe64d17dabf8ea9634923a25c46f27b25ef0d20b6001b059aefb9033ec9
SSDEEP

3072:EvsYpzJteBLoE2fTYhA/G+01s6uD4CJVAseYawea:EvPpdtLE2fTSA/G+UqRJkie

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2710d419932c78e658d991c90fab70b_JaffaCakes118

Files

b2710d419932c78e658d991c90fab70b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4597b5462204a420e1e2510063d58ceb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
_onexit
_purecall
mbstowcs
malloc
free
wcsrchr
?terminate@@YAXXZ
_wcsupr
wcscmp
wcstoul
wcsstr
wcslen
_wcsicmp
??2@YAPAXI@Z
wcscpy
??1type_info@@UAE@XZ
_adjust_fdiv
wcscat
??3@YAXPAX@Z
_initterm
__RTDynamicCast
vswprintf
memmove
__dllonexit
wcschr

kernel32

InitializeCriticalSection
GlobalFree
lstrcpyW
GetSystemWindowsDirectoryW
FileTimeToLocalFileTime
GetModuleFileNameW
GlobalAlloc
LoadLibraryW
GetEnvironmentStringsW
GetTickCount
LocalFree
GetSystemTimeAsFileTime
InterlockedDecrement
OutputDebugStringA
CreateFileW
OutputDebugStringW
GetACP
InterlockedIncrement
FileTimeToSystemTime
GetCurrentProcess
WideCharToMultiByte
GetModuleHandleA
GetDateFormatW
DeleteCriticalSection
LocalReAlloc
FormatMessageW
lstrcmpiW
CloseHandle
GetLastError
GetComputerNameW
lstrlenW
GetStartupInfoA
QueryPerformanceCounter
IsBadReadPtr
GlobalUnlock
SetLastError
SetUnhandledExceptionFilter
GlobalLock
RemoveDirectoryA
GetSystemDefaultLangID

certcli

CACertTypeSetSecurity
CASetCertTypeExtension
CACreateCertType
CASetCertTypeFlags
CACloseCertType
CAGetCertTypeKeySpec
CAGetCAProperty
CACloseCA
CAGetCertTypeFlags
CAGetCertTypeExtensions
CAAddCACertificateType
CAFindCertTypeByName
CARemoveCACertificateType
CAFindByName
CAGetCertTypeProperty
CAFreeCAProperty
CAUpdateCA
CAGetCertTypePropertyEx
CASetCertTypeProperty
CAFreeCertTypeExtensions
CASetCertTypeKeySpec
CAUpdateCertType
CAFreeCertTypeProperty
CAEnumNextCertType
CAEnumCertTypes
CACertTypeGetSecurity
CAEnumCertTypesForCA

user32

GetDlgItemTextA
GetParent
SetWindowTextW
SetFocus
SendMessageW
MessageBoxW
GetWindowLongW
LoadIconW
SystemParametersInfoW
InsertMenuItemW
SetWindowLongW
LoadBitmapW
EnableWindow
RegisterClipboardFormatW
SetDlgItemTextW
SendDlgItemMessageW
ReleaseDC
LoadImageW
GetDC
GetDlgItem
EndDialog
PostMessageW
SetCursor
DialogBoxParamW
LoadStringW
wsprintfW
LoadCursorW
WinHelpW

advapi32

RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyExW
RegCreateKeyExW
RegQueryValueExW

comctl32

PropertySheetW
CreatePropertySheetPageW

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4597b5462204a420e1e2510063d58ceb

Headers

File Characteristics

Imports

msvcrt

kernel32

certcli

user32

advapi32

comctl32

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 107KB

.rsrc Size: 23KB - Virtual size: 22KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 107KB

.rsrc
Size: 23KB - Virtual size: 22KB