ecf8b2889e4b449973689e704038b793_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
ecf8b2889e4b449973689e704038b793_JaffaCakes118
Size 628KB
Sample240411-j64nfafe33
SHA256 03bf53b91167f5eeb989d970b9ba78af685464140e5d6da0f100f1b5de86791a
MD5 ecf8b2889e4b449973689e704038b793
SHA1 87c3ffcf66c87c7a0544126c524d7aaee55b0c64
SHA512 71f7d5e8ab912d1b239e4f27a62f5a015ebf7deb415425e12bddd431c18d105f3a629730acabdc14d9555270bb757de3f683641ef17e38f2ca44ada36cf11920
SSDEEP 12288:dImxz1vULk5s9OY9oWKD6eoOLV2CH3eVgH4Ni:iwJULk29OYRKDHvp2U3e44Ni
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecf8b2889e4b449973689e704038b793_JaffaCakes118

File Explorer

ecf8b2889e4b449973689e704038b793_JaffaCakes118

.exe 628KB

ecf8b2889e4b449973689e704038b793_JaffaCakes118

IMPHASH 6d1eb0ae82f87b168237eafad920be75
SHA256 03bf53b91167f5eeb989d970b9ba78af685464140e5d6da0f100f1b5de86791a
MD5 ecf8b2889e4b449973689e704038b793
SHA1 87c3ffcf66c87c7a0544126c524d7aaee55b0c64
SHA512 71f7d5e8ab912d1b239e4f27a62f5a015ebf7deb415425e12bddd431c18d105f3a629730acabdc14d9555270bb757de3f683641ef17e38f2ca44ada36cf11920
SSDEEP 12288:dImxz1vULk5s9OY9oWKD6eoOLV2CH3eVgH4Ni:iwJULk29OYRKDHvp2U3e44Ni
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

403496

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExA RegOpenKeyExA RegCloseKey RegQueryValueExA RegOpenKeyExA RegFlushKey RegCloseKey

user32

GetKeyboardType DestroyWindow LoadStringA MessageBoxA CharNextA CreateWindowExA WindowFromPoint WaitMessage UpdateWindow UnregisterClassA UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoA ShowWindow ShowScrollBar ShowOwnedPopups SetWindowsHookExA SetWindowPos SetWindowPlacement SetWindowLongW SetWindowLongA SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropA SetParent SetMenuItemInfoA SetMenu SetForegroundWindow SetFocus SetCursor SetClassLongA SetCapture SetActiveWindow SendMessageW SendMessageA ScrollWindow ScreenToClient RemovePropA RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageA RegisterClipboardFormatA RegisterClassA RedrawWindow PtInRect PostQuitMessage PostMessageA PeekMessageW PeekMessageA OffsetRect OemToCharA MessageBoxA MapWindowPoints MapVirtualKeyA LoadStringA LoadKeyboardLayoutA LoadIconA LoadCursorA LoadBitmapA KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsRectEmpty IsIconic IsDialogMessageW IsDialogMessageA IsChild InvalidateRect IntersectRect InsertMenuItemA InsertMenuA InflateRect GetWindowThreadProcessId GetWindowTextA GetWindowRect GetWindowPlacement GetWindowLongW GetWindowLongA GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropA GetParent GetWindow GetMessagePos GetMenuStringA GetMenuState GetMenuItemInfoA GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameA GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextA GetIconInfo GetForegroundWindow GetFocus GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClipboardData GetClientRect GetClassLongA GetClassInfoA GetCapture GetActiveWindow FrameRect FindWindowA FillRect EqualRect EnumWindows EnumThreadWindows EnumChildWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem DrawTextExA DrawTextA DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DispatchMessageW DispatchMessageA DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcA DefMDIChildProcA DefFrameProcA CreatePopupMenu CreateMenu CreateIcon ClientToScreen CheckMenuItem CallWindowProcA CallNextHookEx BeginPaint CharNextA CharLowerBuffA CharLowerA CharToOemA AdjustWindowRectEx ActivateKeyboardLayout

kernel32

GetACP Sleep VirtualFree VirtualAlloc GetCurrentThreadId InterlockedDecrement InterlockedIncrement VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenA lstrcpynA LoadLibraryExA GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetCommandLineA FreeLibrary FindFirstFileA FindClose ExitProcess CompareStringA WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle TlsSetValue TlsGetValue LocalAlloc GetModuleHandleA lstrcpyA lstrcmpiA WriteFile WaitForSingleObject VirtualQuery VirtualProtect VirtualAlloc SizeofResource SetThreadLocale SetFilePointer SetEvent SetErrorMode SetEndOfFile ResetEvent ReadFile QueryDosDeviceA MulDiv LockResource LoadResource LoadLibraryA LeaveCriticalSection InitializeCriticalSection GlobalFindAtomA GlobalDeleteAtom GlobalAddAtomA GetVolumeInformationA GetVersionExA GetVersion GetTickCount GetThreadLocale GetStdHandle GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetLocalTime GetLastError GetFullPathNameA GetDriveTypeA GetDiskFreeSpaceA GetDateFormatA GetCurrentThreadId GetCurrentProcessId GetCPInfo FreeResource InterlockedExchange FreeLibrary FormatMessageA FindResourceA EnumCalendarInfoA EnterCriticalSection DeleteCriticalSection CreateThread CreateFileA CreateEventA CompareStringA CloseHandle Sleep

gdi32

UnrealizeObject StretchBlt SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetEnhMetaFileBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SetArcDirection SelectPalette SelectObject SelectClipRgn SaveDC RoundRect RestoreDC Rectangle RectVisible RealizePalette Polyline PlayEnhMetaFile Pie PatBlt MoveToEx MaskBlt LineTo IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsA GetTextExtentPoint32A GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectA GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits FrameRgn FillRgn ExcludeClipRect Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRectRgnIndirect CreateRectRgn CreatePenIndirect CreatePalette CreateHalftonePalette CreateFontIndirectA CreateEllipticRgnIndirect CreateDIBitmap CreateDIBSection CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileA CombineRgn BitBlt

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

comctl32

_TrackMouseEvent ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_GetIcon ImageList_Remove ImageList_DrawEx ImageList_Draw ImageList_GetBkColor ImageList_SetBkColor ImageList_Add ImageList_GetImageCount ImageList_Destroy ImageList_Create

Name

.....

Size

385KB

Virtual Size

384KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

......

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.....

Size

180KB

Virtual Size

179KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

....

Size

Virtual Size

13KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

......

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

....

Size

Virtual Size

52B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

......

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

......

Size

27KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.....

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ecf8b2889e4b449973689e704038b793_JaffaCakes118

oleaut32

advapi32

user32

kernel32

gdi32

version

comctl32

generic