JaffaCakes118_7ae853870e9dfabce5d790211afff20b

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_7ae853870e9dfabce5d790211afff20b
Size

385KB
MD5

7ae853870e9dfabce5d790211afff20b
SHA1

7d852dd2bbc5ab2ae6e1e10ec4bb9ff1c4991ef1
SHA256

81844d9d6da7b86705104743627150f077a0b81df6c22c96d2920dfb1a70f287
SHA512

a7f81aaa2dcb57ca63baee70dcaaf966bb5e1ecd9c1c8cc51be5e40362577e49112890ae329d074baa51495bff352cb2f5783c49b341a6367bffc8d139bbd026
SSDEEP

12288:g+y0rA14xnSavDmNJ1xx2hogJxMxHF+uj:Hy0rA14xSkmNJCvx2l+uj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_7ae853870e9dfabce5d790211afff20b

Files

JaffaCakes118_7ae853870e9dfabce5d790211afff20b
.exe windows:5 windows x86 arch:x86

f8f42d6ceeb5628c5dd52e6e4cbfcbbd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
CloseHandle
GetStringTypeW
ReadFile
FlushFileBuffers
GetConsoleMode
Sleep
WriteFile
ExitProcess
HeapCreate
TerminateProcess
GetLocaleInfoW
HeapReAlloc
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
LoadLibraryW
WriteConsoleW
GetLastError
GetProcessHeap
GetSystemPowerStatus
HeapAlloc
GetProcAddress
GetVersionExA
SetFilePointer
GetSystemDirectoryA
GetCurrentProcess
EnumDateFormatsA
AllocConsole
GetStdHandle
GetConsoleScreenBufferInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetHandleCount
GetCurrentThreadId
SetConsoleScreenBufferSize
LoadLibraryA
GetConsoleCP
SetLastError
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
HeapFree
RaiseException
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
IsProcessorFeaturePresent
CreateFileW

user32

RedrawWindow
DestroyWindow
GetDesktopWindow
GetWindowRect
CreateDialogParamW
DefDlgProcA
CopyRect
GetWindowDC
ReleaseDC
SetRect
PostQuitMessage
SetWindowLongA
CreateWindowExA
BeginPaint
GetWindowLongA
GetClientRect
DrawTextA
EndPaint
DefWindowProcA
MessageBoxA
GetDlgItem
SetWindowTextA
SetFocus
GetWindowTextA
EndDialog
ReleaseCapture
SendMessageA
LoadBitmapA
SendDlgItemMessageA
GetDC
GetForegroundWindow

gdi32

CreateCompatibleDC
SelectObject
BitBlt
GetDIBits
DeleteDC
DeleteObject
SaveDC
SetMapMode
SetWindowExtEx
GetDeviceCaps
SetViewportExtEx
DPtoLP
MoveToEx
LineTo
RestoreDC
CreateCompatibleBitmap

comdlg32

ReplaceTextA
FindTextA

advapi32

ReportEventA
RegisterEventSourceA
RegCloseKey
RegisterEventSourceW

shell32

DragQueryFileA
DragFinish

shlwapi

StrChrA
AssocCreate

comctl32

ImageList_Add
ImageList_Create
ord17

secur32

AcquireCredentialsHandleA

dbghelp

SymInitialize
SymSetOptions
SymGetOptions
EnumerateLoadedModules

dxva2

SetMonitorColorTemperature

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.relacs
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f8f42d6ceeb5628c5dd52e6e4cbfcbbd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

shlwapi

comctl32

secur32

dbghelp

dxva2

Sections

.text Size: 108KB - Virtual size: 108KB

.rdata Size: 31KB - Virtual size: 30KB

.data Size: 6KB - Virtual size: 15KB

.relacs Size: 215KB - Virtual size: 215KB

.rsrc Size: 13KB - Virtual size: 12KB

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 108KB - Virtual size: 108KB

.rdata
Size: 31KB - Virtual size: 30KB

.data
Size: 6KB - Virtual size: 15KB

.relacs
Size: 215KB - Virtual size: 215KB

.rsrc
Size: 13KB - Virtual size: 12KB

.reloc
Size: 10KB - Virtual size: 10KB