JaffaCakes118_f5f543f09a8796a3095207b7bc236f06

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_f5f543f09a8796a3095207b7bc236f06
Size

260KB
MD5

f5f543f09a8796a3095207b7bc236f06
SHA1

3708f45e7104e7ca15f245aa88a2cb5ce4ef3382
SHA256

167eccbd74bfe4e30ae5dafae1a430dbf03e32ea0777a9205f63d752c5ba5711
SHA512

978bd23a7711b860f48c02cb6fa5e8c2579fbd171979b6c6cc6f3f994cb50b8e348f82d51e867dcd6465096f235aef254c94aea4cf8d3227d6f41f1e46edd4c0
SSDEEP

6144:yAPTOCuq51JsmiQFF0kJNOlsh2IiobuUnGsf8AD:yoB7BsHQz8JmG0D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_f5f543f09a8796a3095207b7bc236f06

Files

JaffaCakes118_f5f543f09a8796a3095207b7bc236f06
.exe windows:4 windows x86 arch:x86

f982bf68faea31fb085b9351d99b9619

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42u

ord823
ord825

msvcrt

free
_beginthread

atl

ord21
ord18
ord22
ord15
ord16
ord44
ord43
ord32
ord58
ord23

kernel32

GetVersionExW
SetEvent
WaitForSingleObject
IsBadReadPtr
GetNumberFormatW
GetLocaleInfoW
GetCurrentProcess
InitializeCriticalSection
lstrlenW
GetModuleFileNameW
lstrcpyW
GetShortPathNameW
GetModuleHandleW
lstrcmpiW
GetWindowsDirectoryW
GlobalAlloc
GetModuleHandleA
GetLastError
LoadLibraryW
LoadLibraryA
ExpandEnvironmentStringsW
lstrcmpW
GetCurrentThread
lstrcatW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
SetUnhandledExceptionFilter
MultiByteToWideChar
lstrlenA
LocalFree
GetProcessHeap
CreateEventW
GetProcAddress

user32

SetWindowTextW
SetFocus
SendMessageW
SetDlgItemTextW
DialogBoxParamW
SendDlgItemMessageW
wsprintfW
MessageBeep
ShowWindow
GetDlgItemInt
EndDialog
SetDlgItemInt
LoadImageW
SetCursor
LoadCursorW
ShowCursor
IsWindow
PeekMessageW
SetWindowLongW
PostMessageW
EnableWindow
GetDlgItemTextW
LoadBitmapW
IsDlgButtonChecked
LoadIconW
MessageBoxW
WinHelpW
GetSystemMetrics

advapi32

LookupPrivilegeValueW
OpenThreadToken
AdjustTokenPrivileges
ImpersonateSelf
RegOpenKeyW
RegQueryValueExW
GetUserNameW
LookupAccountNameW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
GetTokenInformation
RegDeleteKeyW
RegCloseKey
RegCreateKeyExW

oleaut32

SafeArrayGetLBound
SafeArrayGetElement
SysAllocStringByteLen
VariantChangeType
SafeArrayGetUBound
SysStringByteLen
VariantClear
VariantInit
SysStringLen
SysAllocString
SysFreeString

ole32

CoCreateInstance
CoInitialize
StringFromCLSID

gdi32

GetTextExtentPointW
DeleteObject

shell32

ShellExecuteW

shlwapi

StrFormatByteSizeW

samlib

SamCloseHandle
SamFreeMemory
SamGetGroupsForUser
SamSetMemberAttributesOfGroup
SamiSetDSRMPasswordOWF
SamCreateGroupInDomain
SamGetAliasMembership
SamEnumerateUsersInDomain
SamGetDisplayEnumerationIndex

Sections

.text
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Fq
Size: 2KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.SBYeOU
Size: 110KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MDnc
Size: 2KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oFOQE
Size: 3KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.QHZGU
Size: 3KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kUM
Size: 107KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f982bf68faea31fb085b9351d99b9619

Headers

File Characteristics

Imports

mfc42u

msvcrt

atl

kernel32

user32

advapi32

oleaut32

ole32

gdi32

shell32

shlwapi

samlib

Sections

.text Size: 14KB - Virtual size: 16KB

.Fq Size: 2KB - Virtual size: 45KB

.SBYeOU Size: 110KB - Virtual size: 192KB

.MDnc Size: 2KB - Virtual size: 279KB

.oFOQE Size: 3KB - Virtual size: 363KB

.rdata Size: 3KB - Virtual size: 5KB

.QHZGU Size: 3KB - Virtual size: 211KB

.data Size: 5KB - Virtual size: 268KB

.kUM Size: 107KB - Virtual size: 189KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 14KB - Virtual size: 16KB

.Fq
Size: 2KB - Virtual size: 45KB

.SBYeOU
Size: 110KB - Virtual size: 192KB

.MDnc
Size: 2KB - Virtual size: 279KB

.oFOQE
Size: 3KB - Virtual size: 363KB

.rdata
Size: 3KB - Virtual size: 5KB

.QHZGU
Size: 3KB - Virtual size: 211KB

.data
Size: 5KB - Virtual size: 268KB

.kUM
Size: 107KB - Virtual size: 189KB

.rsrc
Size: 7KB - Virtual size: 7KB