ba662d12b487eb429547a156557d8d09_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ba662d12b487eb429547a156557d8d09_JaffaCakes118
Size

99KB
MD5

ba662d12b487eb429547a156557d8d09
SHA1

fd129e59f29306537dad28368f483b8ef16e6dee
SHA256

610be8761a0dd7ddad74c426474e780158aa534f2e7c42ea0d822edbf451aa6d
SHA512

55c829e4ff043ec312425c03218e97820c2be3db21759f3e2bee481548003dad4e62d46463adb019543034bc13480be70265ac9365bb1c5e627d243534fde5e8
SSDEEP

3072:1QS7+h7WCRV/LtwKGxlTX+i5BUYgyJiVB7KBf:SSY5/LtUxX+i5DJiw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba662d12b487eb429547a156557d8d09_JaffaCakes118

Files

ba662d12b487eb429547a156557d8d09_JaffaCakes118
.exe windows:5 windows x86 arch:x86

692cd11e704b6763110baf69e7806e9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

certcli

CAGetCertTypePropertyEx
CAGetCertTypeProperty
CASetCertTypeFlags
CACertTypeSetSecurity
CAEnumCertTypesForCA
CAEnumNextCertType
CASetCertTypeExtension
CAGetCAProperty
CAGetCertTypeExtensions
CAFindByName
CAFreeCertTypeExtensions
CAGetCertTypeFlags
CAFreeCertTypeProperty
CARemoveCACertificateType
CACreateCertType
CACloseCA
CAEnumCertTypes
CAGetCertTypeKeySpec
CACertTypeGetSecurity
CAAddCACertificateType
CAFindCertTypeByName
CASetCertTypeKeySpec
CAFreeCAProperty
CASetCertTypeProperty
CAUpdateCertType
CAUpdateCA
CACloseCertType

msvcrt

wcscpy
_purecall
_wcsupr
_adjust_fdiv
wcscat
vswprintf
??3@YAXPAX@Z
__RTDynamicCast
??2@YAPAXI@Z
free
?terminate@@YAXXZ
malloc
wcsstr
wcschr
mbstowcs
wcsrchr
_wcsicmp
wcscmp
_onexit
_initterm
wcstoul
_except_handler3
__dllonexit
??1type_info@@UAE@XZ
memmove
wcslen

user32

WinHelpW
GetParent
SetDlgItemTextW
DialogBoxParamW
LoadIconW
wsprintfW
MessageBoxW
GetWindowLongW
LoadImageW
SetCursor
LoadStringW
RegisterClipboardFormatW
GetDC
SetWindowTextW
SendDlgItemMessageW
LoadCursorW
InsertMenuItemW
GetDlgItem
ReleaseDC
EnableWindow
SystemParametersInfoW
SetFocus
EndDialog
SetWindowLongW
LoadBitmapW
SendMessageW
PostMessageW
GetDlgItemTextA

advapi32

RegDeleteValueW
RegDeleteKeyW
RegEnumKeyExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW

kernel32

GetCurrentProcess
GetACP
LocalReAlloc
LocalFree
SetUnhandledExceptionFilter
DeleteCriticalSection
GetModuleHandleA
InterlockedIncrement
RemoveDirectoryA
OutputDebugStringW
lstrcmpiW
GetModuleFileNameW
GetSystemWindowsDirectoryW
GetTickCount
SetLastError
GetSystemDefaultLangID
GlobalUnlock
GetLastError
FileTimeToLocalFileTime
OutputDebugStringA
CreateFileW
GetEnvironmentStringsW
GlobalAlloc
GetComputerNameW
FileTimeToSystemTime
GetSystemTimeAsFileTime
IsBadReadPtr
CloseHandle
GetDateFormatW
lstrcpyW
QueryPerformanceCounter
LoadLibraryW
GetStartupInfoA
GlobalLock
lstrlenW
FormatMessageW
InterlockedDecrement
InitializeCriticalSection
WideCharToMultiByte
GlobalFree

gdi32

DeleteObject
GetDeviceCaps
CreateFontIndirectW

comctl32

PropertySheetW
CreatePropertySheetPageW

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

692cd11e704b6763110baf69e7806e9f

Headers

File Characteristics

Imports

certcli

msvcrt

user32

advapi32

kernel32

gdi32

comctl32

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 78KB

.rsrc Size: 24KB - Virtual size: 23KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 78KB

.rsrc
Size: 24KB - Virtual size: 23KB