JaffaCakes118_93f5d57d2641843c9e28478b6cf1414d

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_93f5d57d2641843c9e28478b6cf1414d
Size

232KB
MD5

93f5d57d2641843c9e28478b6cf1414d
SHA1

383d8733d6882fa21b2474df45c70abafbec8c72
SHA256

ac993ed37a4d6178a9d69cd8e518e7187507f195745484a4aafc6aaf6c396d82
SHA512

a2527541980eed7585bfec2ef35ef67327e22bd8adda7736a49dc09ded86e55b1b32b17cc0261bad21b64d923fa33fea338e8d6f8aea7172778afc24dab137b1
SSDEEP

6144:OlLkEkPngKrHI7/JTPMfxRuqcS3DGKCTt/Iy7QeYzgr:OlLkEkfgKrHIZUxRuBS3DGTtJicr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_93f5d57d2641843c9e28478b6cf1414d

Files

JaffaCakes118_93f5d57d2641843c9e28478b6cf1414d
.exe windows:4 windows x86 arch:x86

d1d2c62db68e8b302d914355906de8ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumDateFormatsA
GetLongPathNameW
AddAtomA
GetACP
GetDateFormatW
lstrcmpiW
LoadLibraryExA
GetProcessHeap
OpenMutexW
GetTimeFormatA
BeginUpdateResourceW
GetVersion
lstrcmpA
SetCurrentDirectoryA
GetSystemDirectoryA
OpenMutexA
GetFileAttributesW
SystemTimeToFileTime
CreateNamedPipeA
RemoveDirectoryA
FindResourceA
FileTimeToLocalFileTime
SetCurrentDirectoryW
SetEvent
SetErrorMode
GetProcAddress
GetTimeFormatW
FatalAppExitW
GetLocaleInfoW
CreateMailslotA
BeginUpdateResourceA
FindResourceW
IsBadCodePtr
GetSystemTime
EnumCalendarInfoW
GetCalendarInfoW
GetCPInfo
GetAtomNameW
IsBadWritePtr
GetVersionExW
GetTempPathW

user32

MessageBoxW
LoadIconW
CharUpperW
SendDlgItemMessageW
EnumWindows
MessageBoxIndirectW
RegisterClassExW
CharNextA
InsertMenuA
LoadCursorW
GetClassInfoExA
CreateAcceleratorTableW
SetParent
CheckMenuItem
GetMenuItemRect
SetDlgItemInt
GetMenuInfo
EndMenu
EmptyClipboard
GetWindowRgn
GetDlgItemTextA

gdi32

SetMetaFileBitsEx
StretchDIBits
CreatePolygonRgn
CreatePatternBrush
CreateFontW
CreateFontA
DeleteObject
CreateScalableFontResourceA
CreateFontIndirectW
ExtCreateRegion
CreateICW
CreateICA
RemoveFontResourceExW
SetWinMetaFileBits
GetMetaFileW

shell32

ExtractIconExW
StrStrIA
StrCmpNIA
SHGetSpecialFolderLocation
StrStrIW
DuplicateIcon
StrRChrIA
SHGetDiskFreeSpaceA
StrNCmpW
StrNCmpIW

shlwapi

StrChrIA
PathIsSystemFolderA
PathBuildRootW
PathRemoveExtensionW
StrCpyW
SHRegWriteUSValueA
ColorHLSToRGB
PathFileExistsA
AssocQueryStringA
SHRegGetUSValueW
IntlStrEqWorkerA

version

GetFileVersionInfoSizeA

ws2_32

WSAAccept
WSAIoctl
select
WSADuplicateSocketA
WSACloseEvent
htonl

wininet

InternetOpenA
InternetSetDialStateW

urlmon

GetSoftwareUpdateInfo
FindMediaType
CoInternetCreateZoneManager
RevokeFormatEnumerator
UrlMkSetSessionOption
CoInternetGetSecurityUrl
CreateAsyncBindCtx
SetSoftwareUpdateAdvertisementState
IsValidURL
CopyBindInfo
URLOpenStreamA
CreateURLMoniker
DllUnregisterServer
IsJITInProgress
CoInternetParseUrl
HlinkGoForward

oledlg

OleUIPasteSpecialA

sqlunirl

_BuildCommDCB_@8
_DlgDirList_@20
_FindText_@4
_CopyFileEx_@24
__hwrite_@12
_ExtractAssociatedIcon_@12
_PolyTextOut_@12
_CreateDesktop_@24
_LookupPrivilegeDisplayName_@20
_WinHelp@16
_FreeEnvironmentStrings@4
_CreateDirectory_@8
_CreateFileMapping_@24
_GlobalAddAtom_@4
_GetClassInfoEx_@12
_ReplaceText_@4
_SetWindowsHookEx_@16
_FindExecutable_@12
_CreateScalableFontResource_@16

Sections

.VG
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WL
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hVf
Size: 2KB - Virtual size: 386KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cFFcZ
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.FF
Size: 2KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nEX
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.d
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.J
Size: 14KB - Virtual size: 327KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mBpP
Size: 2KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VXO
Size: 4KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1d2c62db68e8b302d914355906de8ce

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

shlwapi

version

ws2_32

wininet

urlmon

oledlg

sqlunirl

Sections

.VG Size: 1024B - Virtual size: 574B

.WL Size: 85KB - Virtual size: 85KB

.hVf Size: 2KB - Virtual size: 386KB

.cFFcZ Size: 13KB - Virtual size: 13KB

.FF Size: 2KB - Virtual size: 278KB

.nEX Size: 4KB - Virtual size: 10KB

.d Size: 82KB - Virtual size: 81KB

.J Size: 14KB - Virtual size: 327KB

.mBpP Size: 2KB - Virtual size: 472KB

.VXO Size: 4KB - Virtual size: 416KB

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 1024B - Virtual size: 1024B

.VG
Size: 1024B - Virtual size: 574B

.WL
Size: 85KB - Virtual size: 85KB

.hVf
Size: 2KB - Virtual size: 386KB

.cFFcZ
Size: 13KB - Virtual size: 13KB

.FF
Size: 2KB - Virtual size: 278KB

.nEX
Size: 4KB - Virtual size: 10KB

.d
Size: 82KB - Virtual size: 81KB

.J
Size: 14KB - Virtual size: 327KB

.mBpP
Size: 2KB - Virtual size: 472KB

.VXO
Size: 4KB - Virtual size: 416KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 1024B - Virtual size: 1024B