f968dc89aeaa73a6e94e87184607bbb8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f968dc89aeaa73a6e94e87184607bbb8_JaffaCakes118
Size

567KB
MD5

f968dc89aeaa73a6e94e87184607bbb8
SHA1

25cfcbed48f20a748e6d6b0cc620c4afdb6b85b2
SHA256

4e5bf86f3c1c382862c3ad597925b74bfc4f48f968462e15af65ad04eb00061e
SHA512

4ff824ccda6b301545993d6a49249d12c83bbe50bf2330390dd13f600aede65f6a067310dfda1d55b5c1c786dfa602c6f7ab05a43f15ba88b2fa06e298323feb
SSDEEP

12288:WSZqYzG9vHuvhLB6MI0oQj8+2CejOkPj+bnG1:hqYkuhB6MI9LjOkPjG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f968dc89aeaa73a6e94e87184607bbb8_JaffaCakes118

Files

f968dc89aeaa73a6e94e87184607bbb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6b4a91df86de3dd08b91ed9d7cf2c8db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegConnectRegistryA
CryptGenKey
RegDeleteValueA

kernel32

CreateSemaphoreA
lstrcpynW
EnumResourceTypesW
GetCommandLineW
GlobalGetAtomNameA
LocalFlags
OutputDebugStringA
GetLocaleInfoA
WriteConsoleOutputCharacterW
SetVolumeLabelW
InterlockedCompareExchange
WriteFile
SetLastError
GetModuleFileNameW
GetEnvironmentStringsA
HeapSize
TlsAlloc
HeapFree
GetStdHandle
UnlockFile
GetCurrentProcessId
WriteConsoleOutputW
IsValidCodePage
GetOEMCP
QueryPerformanceCounter
TerminateProcess
GetVersionExA
OpenMutexA
GetStartupInfoA
VirtualAllocEx
SetVolumeLabelA
HeapAlloc
GetProcAddress
lstrcpynA
GetACP
GetModuleHandleA
GetCurrentThread
GetThreadLocale
VirtualProtect
FileTimeToLocalFileTime
GetFileType
GetTempFileNameW
FormatMessageA
TlsSetValue
SetLocalTime
SetConsoleCursorInfo
ExpandEnvironmentStringsA
DuplicateHandle
LoadLibraryA
GetCurrentProcess
GetTimeFormatW
GetLocaleInfoW
ReadFile
VirtualFree
GetNumberFormatW
VirtualQuery
HeapCreate
IsValidLocale
GetModuleFileNameA
GetEnvironmentStrings
InterlockedExchange
FlushFileBuffers
GetLogicalDriveStringsW
GetLastError
FindResourceExW
GlobalFree
AllocConsole
GetCPInfo
TlsFree
MultiByteToWideChar
LCMapStringW
ReadConsoleOutputCharacterA
GetStartupInfoW
GetCommandLineA
CreateDirectoryExA
GetCurrencyFormatW
EnterCriticalSection
FreeEnvironmentStringsW
IsBadWritePtr
lstrcmpiA
CompareStringW
InitializeCriticalSection
GetSystemDefaultLangID
FindFirstFileExA
CloseHandle
FreeEnvironmentStringsA
GetTickCount
LCMapStringA
WideCharToMultiByte
ConvertDefaultLocale
FreeLibraryAndExitThread
GetStringTypeA
HeapDestroy
GetUserDefaultLangID
GetSystemTimeAsFileTime
FindFirstFileW
SetEnvironmentVariableA
ResetEvent
CreateEventW
LoadResource
GetEnvironmentStringsW
WriteProfileStringW
GetPrivateProfileSectionA
GetTimeFormatA
GetTimeZoneInformation
GetCurrentThreadId
HeapReAlloc
GetSystemInfo
SetConsoleTitleA
SetLocaleInfoA
WriteConsoleOutputA
LeaveCriticalSection
MapViewOfFileEx
SetFilePointer
WriteConsoleA
SystemTimeToTzSpecificLocalTime
RtlUnwind
CommConfigDialogW
GetCurrencyFormatA
CreateDirectoryExW
GetStringTypeW
CompareStringA
GlobalUnfix
DeleteCriticalSection
GetUserDefaultLCID
ExitProcess
GetNamedPipeHandleStateA
SetStdHandle
UnmapViewOfFile
UnhandledExceptionFilter
GetDateFormatA
EnumSystemLocalesA
OpenSemaphoreA
CreateMutexA
VirtualAlloc
CompareFileTime
TlsGetValue
SetComputerNameW
SetHandleCount

gdi32

GetCharABCWidthsW
GetClipBox
CancelDC
EnumFontFamiliesA
GetKerningPairsW
CreateDCW
GetTextColor
FixBrushOrgEx
GetObjectA
GetDeviceCaps
DeleteDC
GetLayout
ResizePalette
CreateHatchBrush
ColorCorrectPalette
SetBkColor
SetColorAdjustment
gdiPlaySpoolStream
GetRandomRgn
GetPixelFormat
GetWindowExtEx
ScaleWindowExtEx
GetTextCharsetInfo
GetCharWidthW
FlattenPath
UpdateColors

user32

SetMenu
DestroyWindow
RegisterClassExA
MapVirtualKeyA
IsDialogMessageA
SetWindowWord
DefDlgProcA
ScreenToClient
SetRectEmpty
MapWindowPoints
EnumDisplayDevicesA
FindWindowExA
TileWindows
EnumDisplaySettingsW
ChangeDisplaySettingsExW
FindWindowExW
DdeAbandonTransaction
GetWindowTextLengthW
RegisterClipboardFormatW
UnpackDDElParam
CharLowerBuffA
LookupIconIdFromDirectoryEx
LoadKeyboardLayoutW
GetMonitorInfoA
RegisterClassA
SetCursor
GetClassInfoExW
ReleaseCapture
GetClipboardFormatNameW
GetDlgCtrlID
DrawTextA
BroadcastSystemMessage
AnyPopup
OemToCharBuffA
SetWindowRgn
UnionRect
BringWindowToTop
GetMenuItemID
CreateWindowExW
MapVirtualKeyExW
SetWindowTextW
DdeFreeDataHandle
GetClientRect
SetSystemCursor
ReplyMessage
LoadStringW
CopyImage
DispatchMessageW
SendMessageA
CreateMDIWindowW
MessageBoxA
LoadImageA
FlashWindowEx
SetCursorPos
SendNotifyMessageA
GetDlgItemInt
MonitorFromRect
SendInput
GetMenu
GetAsyncKeyState
EqualRect
GetClipCursor
EditWndProc
GetClipboardSequenceNumber
EnumPropsExA
GetDesktopWindow
SetShellWindow
ScrollWindowEx
IsWindow
UnregisterClassA
DefWindowProcA
ShowWindow
SetMenuItemBitmaps

comdlg32

PrintDlgA
FindTextA
GetFileTitleW

comctl32

ImageList_GetBkColor
GetEffectiveClientRect
ImageList_LoadImageA
CreateStatusWindowW
ImageList_SetIconSize
InitCommonControlsEx
ImageList_Create
ImageList_Add
CreatePropertySheetPageA
ImageList_LoadImage
CreateStatusWindow
ImageList_GetImageRect
ImageList_AddMasked

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 259KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b4a91df86de3dd08b91ed9d7cf2c8db

Headers

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

comdlg32

comctl32

Sections

.text Size: 172KB - Virtual size: 171KB

.rdata Size: 259KB - Virtual size: 258KB

.data Size: 112KB - Virtual size: 134KB

.rsrc Size: 23KB - Virtual size: 22KB

.text
Size: 172KB - Virtual size: 171KB

.rdata
Size: 259KB - Virtual size: 258KB

.data
Size: 112KB - Virtual size: 134KB

.rsrc
Size: 23KB - Virtual size: 22KB