f6c683b24a4f89ee3324afaa27b8afb0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f6c683b24a4f89ee3324afaa27b8afb0_JaffaCakes118
Size

364KB
MD5

f6c683b24a4f89ee3324afaa27b8afb0
SHA1

4a4a44114c004c4c287c8fea0523fbe00e226868
SHA256

1254c58dfeb845ec0e17eee403f9e06dce37c16e0e8d3baacaf04b7368e55183
SHA512

da13b01f4b8d7f4d20d14507db61d275c71ad056e5dd5fffa3fa1c6d8a1a238b6d91825e0fa5d139ee8dc30beeeb09c98cce06f6300c2e81f8ccc263fe9a83a6
SSDEEP

6144:XtzQJ8U0co5R1Dc/hGm1QC1n4QZoehewKifzIrvah4W8LYPg6mQgUyeRxe2V3mmU:XtzQCUt4nA/t1Qg4SrPqwHPg6QU4q22Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Complete First Certificate.exe

Files

f6c683b24a4f89ee3324afaa27b8afb0_JaffaCakes118
.zip
Complete First Certificate.exe
.exe windows:5 windows x86 arch:x86

c932bf6f2625453f97857223b51344f0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

O:\qTDzNrZgucypv\jbWyxEmvga\tjZfurwhRbEr\JsDmkhb.pdb

Imports

msvcrt

strcpy
ungetc
clearerr
wcsncmp
_controlfp
malloc
__set_app_type
system
__p__fmode
calloc
__p__commode
strtoul
vsprintf
wcspbrk
_amsg_exit
_initterm
isalnum
fgetc
_ismbblead
bsearch
strchr
_XcptFilter
strcoll
time
localtime
wcstoul
wcscpy
putchar
fputc
wcscat
strcspn
fseek
mbstowcs
towlower
qsort
swscanf
_exit
wcstombs
_cexit
wcsncpy
isprint
__setusermatherr
vswprintf
__getmainargs

gdi32

SetDIBColorTable
SetBrushOrgEx
CombineRgn
GetBkMode
SelectPalette
CreateBrushIndirect
CreatePolygonRgn
CreateHatchBrush
GetSystemPaletteUse
CreateFontW
CreateFontIndirectW
Polyline
GetTextMetricsA
TranslateCharsetInfo
UnrealizeObject
GetDeviceCaps
GetROP2
EnumFontFamiliesExW
CreateDiscardableBitmap
SetDIBits
DeleteDC
GetViewportOrgEx
GetSystemPaletteEntries
WidenPath
GetObjectA
GetTextMetricsW
GetPixel
RemoveFontResourceW
RectVisible
GetMapMode
StretchBlt
GetNearestPaletteIndex
SetDIBitsToDevice
GetLayout
SetTextColor
CreateEllipticRgnIndirect
GetTextColor
GetTextFaceW
CreatePalette
SetPixel
SetAbortProc
ExcludeClipRect
Ellipse
ResizePalette
SelectClipRgn
Polygon
CreateHalftonePalette

shlwapi

PathFileExistsA

kernel32

FileTimeToSystemTime
OpenFile
SearchPathA
DeleteCriticalSection
GetPriorityClass
CancelWaitableTimer
lstrlenA
GetAtomNameW
SetThreadAffinityMask
GlobalAlloc
SetHandleCount
GetTempPathW
GlobalGetAtomNameW
CreateEventA
SuspendThread
GetThreadContext
lstrcmpW
IsBadReadPtr
lstrcpynW
CreateRemoteThread
GetCurrentDirectoryW
GetShortPathNameA
CreateFileA
EnumResourceNamesA
GetModuleFileNameW
RtlUnwind
LocalAlloc
WinExec
GetModuleHandleA
GetLastError
GetComputerNameA
GetThreadLocale
GetFullPathNameW
RemoveDirectoryW
MapViewOfFile
SetTimerQueueTimer
GetHandleInformation
GetFileAttributesExA
LockFile
AreFileApisANSI
FindResourceExW
FindClose
SetMailslotInfo
FreeLibrary
ReadFile
SetThreadPriority
GetTempPathA
DeviceIoControl
FileTimeToLocalFileTime
CreateWaitableTimerA
GetVersion

user32

CheckMenuRadioItem
SetForegroundWindow
GetScrollPos
MapDialogRect
ChangeMenuW
GetClassLongW
MapVirtualKeyExW
FindWindowExA
DispatchMessageA
IsCharAlphaNumericW
CreateCaret
DrawFrameControl
CloseDesktop
DialogBoxParamW
ArrangeIconicWindows
EqualRect
LoadStringA
PeekMessageA
CharUpperW
GetDoubleClickTime
IsWindowVisible
DrawTextW
DrawMenuBar
HiliteMenuItem
TileWindows
CharLowerBuffW
CreateWindowExA
SetWindowTextA
SetRectEmpty
FrameRect
GetMessageExtraInfo
SetUserObjectInformationW
DestroyAcceleratorTable
GetMenuItemCount
keybd_event
OpenIcon
SetActiveWindow
SetSysColors
LoadMenuA
CharNextW
MessageBoxA
TranslateAcceleratorW
DefFrameProcA
SystemParametersInfoA
RegisterClassW
MessageBoxExA
CharLowerW
DialogBoxParamA
GetMessageW
SetPropW
FindWindowA
IsChild
CopyAcceleratorTableW
EnableWindow
SetScrollInfo
LoadStringW
CharToOemW
GetClipCursor
SetMenuDefaultItem
InvalidateRect
LoadBitmapA
GetForegroundWindow
DrawStateW
TranslateAcceleratorA
IsWindow
SendInput
KillTimer
LoadImageA
GetKeyboardType
DrawIcon
TabbedTextOutW
GetWindow
InflateRect
MessageBoxW
SetCursor
ToUnicodeEx
IsRectEmpty
GetClassLongA
IsWindowEnabled
SwitchToThisWindow
GetDCEx
LoadCursorA
InvalidateRgn
IsWindowUnicode
OffsetRect
CheckRadioButton
RegisterWindowMessageW
RegisterHotKey
IntersectRect
OpenInputDesktop
RegisterClassA
SetWindowRgn
LoadMenuW
GetMenuCheckMarkDimensions
DefWindowProcA
AdjustWindowRectEx
AllowSetForegroundWindow
GetWindowTextLengthW
IsIconic
SetMenuItemInfoW
SetMenu
ClipCursor
LookupIconIdFromDirectory
CharUpperA
LockWindowUpdate
GetMenuStringA
MapWindowPoints
GetTopWindow
CreateDialogParamW
GetNextDlgGroupItem
PtInRect

Exports

Exports

?HidePointerOriginal@@YGFKPAIPAD<V

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
e09353

Sharing

General

Malware Config

Signatures

Files

c932bf6f2625453f97857223b51344f0

Headers

File Characteristics

PDB Paths

Imports

msvcrt

gdi32

shlwapi

kernel32

user32

Exports

Exports

Sections

.text Size: 65KB - Virtual size: 65KB

.data Size: 135KB - Virtual size: 201KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 65KB - Virtual size: 65KB

.data
Size: 135KB - Virtual size: 201KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB