f0cb7b1c7ccfbd893a85a08441d048c8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f0cb7b1c7ccfbd893a85a08441d048c8_JaffaCakes118
Size

837KB
MD5

f0cb7b1c7ccfbd893a85a08441d048c8
SHA1

071a7b5c0c8361c89f148630962335f4fc8060c8
SHA256

d7489e1de26540ed6f8e0e55e3a432d2705d1992d1982c861e302fc3c360b4cb
SHA512

2fac790ee808526f2f9fb71c173708423816e1a4c72c06aab39c1994d0b624a746b320fe15f6d98ce26154b515d93033a611938baad3178d4a219030425eef9d
SSDEEP

12288:2HZ6RBGszAmVdU8EJJ7wn9XLOVkx94YtUfaTb3+YvofiUAR/u9CoMHCqIcK:2HZy3zndU1GXv31vofiUApQ9MiqX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0cb7b1c7ccfbd893a85a08441d048c8_JaffaCakes118

Files

f0cb7b1c7ccfbd893a85a08441d048c8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

803a77cc61e748aa56ba201513c33752

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentDirectoryA
VirtualProtect
GetConsoleOutputCP

user32

GetMessagePos
GrayStringW
GetNextDlgTabItem
InvalidateRgn
GetDlgItem
IsDialogMessageW
SendMessageW
GetCursorPos
GetMessageTime
SetWindowTextW
AppendMenuW
CreateWindowExW
GetWindowThreadProcessId
UnhookWindowsHookEx
InvalidateRect
AllowSetForegroundWindow
GetWindowInfo
PostThreadMessageW
SetActiveWindow
InflateRect
SetWindowPlacement
GetFocus
CharUpperW
GetClassNameW
UpdateWindow
GetForegroundWindow
BeginPaint
SetFocus
SetCursorPos
GetMessageW
RegisterClipboardFormatW
GetClassLongW
MessageBoxW
TrackPopupMenu
MapWindowPoints
DefWindowProcW
EndPaint
CheckMenuItem
RedrawWindow
GetSysColor
GetClassInfoW
GetSubMenu
IsChild
GetActiveWindow
GetNextDlgGroupItem
OffsetRect
EndDialog
GetClassInfoExW
MapDialogRect
PeekMessageW
KillTimer
GetMenu

gdi32

CreateFontIndirectW
GetTextColor
SaveDC
MoveToEx
GetTextExtentPoint32W
PtVisible
GetMapMode
SetMapMode
SetPixel
Escape
GetDeviceCaps
DeleteObject
CreatePen
CreateRectRgnIndirect
CreateSolidBrush
RestoreDC
ScaleViewportExtEx
SetViewportOrgEx
DPtoLP
GetBkColor
ExtSelectClipRgn
RectVisible
PatBlt
SetBkMode
CreateBitmap
Polyline
BitBlt
CreateBitmapIndirect
TextOutW
CreateCompatibleBitmap
ExcludeClipRect
GetRgnBox
GetClipBox
GetViewportExtEx
StretchDIBits
SelectPalette
GetWindowExtEx
SetBkColor
ScaleWindowExtEx
LineTo
SetStretchBltMode
SetWindowExtEx
SelectObject
GetPixel
OffsetViewportOrgEx
GetStockObject
ExtTextOutW
CreateCompatibleDC
SetViewportExtEx
StretchBlt
GetObjectW
SetTextColor
DeleteDC

comdlg32

GetFileTitleW

advapi32

RegDeleteValueW
RegQueryValueW
RegEnumKeyW
StartServiceW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
LookupPrivilegeValueW
RegEnumKeyExW
AdjustTokenPrivileges
OpenProcessToken
RegNotifyChangeKeyValue
CloseServiceHandle
OpenServiceW
RegCreateKeyW
OpenSCManagerW
RegDeleteKeyW

shell32

Shell_NotifyIconW
ShellExecuteW
SHGetFolderPathW

ole32

CoTaskMemAlloc
OleIsCurrentClipboard
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleUninitialize
CoUninitialize
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromProgID
CoInitialize
OleInitialize
CoTaskMemFree
CoFreeUnusedLibraries
CLSIDFromString
CoRevokeClassObject
OleFlushClipboard
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoCreateInstance
PropVariantClear

shlwapi

PathFindFileNameW
PathIsUNCW
PathFindExtensionW
PathStripToRootW

winmm

PlaySoundW
waveInStart
waveInClose
waveInGetNumDevs
waveInStop
waveInReset
waveInAddBuffer
waveInUnprepareHeader
waveInPrepareHeader
waveInOpen
waveInGetDevCapsW

rpcrt4

UuidCreate

setupapi

SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList

gdiplus

GdipDrawImageRectRect
GdipFlush
GdipMeasureString
GdipCloneBrush
GdipCreateFontFamilyFromName
GdipFillRectangleI
GdipDrawString
GdipCreateBitmapFromScan0
GdipDisposeImage
GdipAlloc
GdipDrawImagePointRectI
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromStream
GdipCreateHBITMAPFromBitmap
GdipDrawImageRect
GdipDeleteFont
GdiplusStartup
GdipDeleteBrush
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipCreateSolidFill
GdipCreateFont
GdipCloneImage
GdipSetTextRenderingHint
GdipCreateBitmapFromGraphics
GdipCreateFromHDC
GdipFree
GdipImageRotateFlip
GdipGetImageHeight
GdipGetImageGraphicsContext
GdipGetGenericFontFamilySansSerif
GdipGetFontSize
GdipGetImageWidth
GdipGetImageBounds
GdipCreateBitmapFromResource
GdipFillRectangle

msvcrt

exit

oleacc

ObjectFromLresult

esent

JetMove
JetTerm

Sections

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.55
Size: - Virtual size: 202KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aa
Size: 302KB - Virtual size: 301KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bb
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cc
Size: 512B - Virtual size: 39B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.a46
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asshole
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

803a77cc61e748aa56ba201513c33752

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

shlwapi

winmm

rpcrt4

setupapi

gdiplus

msvcrt

oleacc

esent

Sections

.text Size: 164KB - Virtual size: 164KB

.55 Size: - Virtual size: 202KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 828B

.aa Size: 302KB - Virtual size: 301KB

.bb Size: 159KB - Virtual size: 159KB

.cc Size: 512B - Virtual size: 39B

.a46 Size: 1KB - Virtual size: 1KB

.asshole Size: 196KB - Virtual size: 195KB

.rsrc Size: 1024B - Virtual size: 720B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 164KB - Virtual size: 164KB

.55
Size: - Virtual size: 202KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 828B

.aa
Size: 302KB - Virtual size: 301KB

.bb
Size: 159KB - Virtual size: 159KB

.cc
Size: 512B - Virtual size: 39B

.a46
Size: 1KB - Virtual size: 1KB

.asshole
Size: 196KB - Virtual size: 195KB

.rsrc
Size: 1024B - Virtual size: 720B

.reloc
Size: 4KB - Virtual size: 3KB