028e2956dc735b3bc2f15f0fc7b3e83d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

028e2956dc735b3bc2f15f0fc7b3e83d_JaffaCakes118
Size

564KB
MD5

028e2956dc735b3bc2f15f0fc7b3e83d
SHA1

f9dc6c942ff9f9cf7ae5f1d6243d0274afbc8ab8
SHA256

fff9a9ee2d6c29b1b41d3e2b017a0f7e360c59223d1f1fb8b3356ea0b103e352
SHA512

1af4efe4bc5d67fd367d2b498f88c382ed460ef473359bcdba1833b005e97cdbe6c9ac5234a4ec027e4edc35bb2cae2b95f8ee21d8d91b42d5eadfdf89dfd9d1
SSDEEP

6144:m6ONvUY4l9pgKcPaMRbNM5Ft3M5FMRfE96/j8kZ9FdrnLQJvxOzbIm5CbbXrrEgn:mDWY4l9pKaMxena+mcTZNsxqvGXxN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
028e2956dc735b3bc2f15f0fc7b3e83d_JaffaCakes118

Files

028e2956dc735b3bc2f15f0fc7b3e83d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2951e4a8b12d95502b443ddf68d751b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_SYSTEM

PDB Paths

J:\if\push\Identity\connectionless.pdb

Imports

kernel32

WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetLastError
GetModuleHandleW
TlsFree
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
MultiByteToWideChar
LCMapStringW
OutputDebugStringA
InitializeCriticalSectionAndSpinCount
IsBadReadPtr
HeapValidate
IsProcessorFeaturePresent
GetTimeZoneInformation
WideCharToMultiByte
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
DecodePointer
EncodePointer
RaiseException
GetModuleFileNameW
GetStartupInfoW
HeapSetInformation
GetCommandLineA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
WriteConsoleW
OutputDebugStringW
LoadLibraryW
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
RtlUnwind
GetStringTypeW
SetStdHandle
ReadFile
FlushFileBuffers
CreateFileW
CloseHandle
CompareStringW
SetEnvironmentVariableA
ExitProcess
lstrcpyA
GetSystemTime
GetModuleHandleA
EnumDateFormatsA
LoadLibraryA
GetProcAddress
GetLastError
GlobalUnlock
MulDiv
GetFileAttributesW
HeapCreate
GetProcessHandleCount
CreateEventA
Sleep
InterlockedIncrement
GetVolumeInformationA
GlobalAlloc
GetCurrentThread
WaitForSingleObject
GlobalLock
GetCurrentProcess
FreeLibrary
SetErrorMode
lstrlenA
lstrcmpA

user32

GetScrollPos
DestroyIcon
GetDlgItemTextA
IsRectEmpty
LoadCursorA
FindWindowA
DestroyMenu
SetClipboardData
EnableWindow
UpdateWindow
LoadImageA
SetWindowTextA
IsWindowVisible
GetDlgCtrlID
EndPaint
DestroyWindow
SetCursor
GetMessageA
CloseClipboard
GetDlgItemInt
SetTimer
ScreenToClient
PostQuitMessage
SendDlgItemMessageA
TrackPopupMenu
FillRect
SetCapture
DrawTextW
KillTimer
DrawTextA
LoadBitmapA
GetParent
LoadIconA
wsprintfA
GetClientRect
SendMessageA
BeginPaint
PtInRect
SetScrollRange
GetMonitorInfoA
GetDC
SetDlgItemInt
RegisterClassExW
SetRect
SetWindowLongA
MessageBoxA
InvalidateRect
GetWindowLongA
GetClipboardData
CreateWindowExA
SetScrollPos
ReleaseDC
EmptyClipboard
MonitorFromWindow
GetDlgItem
EndDialog
DefWindowProcA
GetDesktopWindow
SetWindowPos
GetCursorPos
CheckDlgButton
ShowWindow
CreatePopupMenu
IsDlgButtonChecked
CreateDialogParamW
AppendMenuA
CreateWindowExW
DispatchMessageA
CheckRadioButton
OpenClipboard
MessageBoxW
ReleaseCapture
GetSystemMetrics

gdi32

CreateEllipticRgn
MoveToEx
BitBlt
FrameRgn
GetTextExtentPoint32A
SetViewportOrgEx
LineTo
SetWindowExtEx
SetTextColor
CreateFontA
GetDeviceCaps
StretchBlt
CreateFontIndirectA
GetRegionData
DeleteObject
SelectObject
SelectClipRgn
CreateCompatibleDC
CombineRgn
SetMapMode
Rectangle
SaveDC
CreateFontW
CreateRectRgn
Polyline
CreatePen
SetViewportExtEx
GetTextMetricsA
SetTextAlign
GetObjectA
TextOutW
GetStockObject
RestoreDC
CreateSolidBrush
TextOutA
DeleteDC

advapi32

OpenProcessToken
GetTokenInformation
OpenThreadToken

shell32

DragQueryFileA
SHGetFileInfoA
ShellExecuteA

oleaut32

OleLoadPicture

psapi

GetModuleBaseNameA

userenv

GetProfilesDirectoryA

comctl32

ImageList_DragLeave
ImageList_BeginDrag
ImageList_DragMove
ImageList_DragEnter
ImageList_ReplaceIcon
ImageList_Create
CreateStatusWindowW
ImageList_Draw
ImageList_EndDrag
ImageList_Destroy

dbghelp

EnumerateLoadedModules

uxtheme

OpenThemeData
SetWindowTheme
DrawThemeBackground
CloseThemeData

msi

ord8
ord103
ord121
ord124
ord17
ord64

Sections

.text
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2951e4a8b12d95502b443ddf68d751b9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

oleaut32

psapi

userenv

comctl32

dbghelp

uxtheme

msi

Sections

.text Size: 202KB - Virtual size: 201KB

.rdata Size: 46KB - Virtual size: 46KB

.data Size: 89KB - Virtual size: 97KB

idata Size: 42KB - Virtual size: 41KB

.vata Size: 54KB - Virtual size: 53KB

.rsrc Size: 113KB - Virtual size: 113KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 202KB - Virtual size: 201KB

.rdata
Size: 46KB - Virtual size: 46KB

.data
Size: 89KB - Virtual size: 97KB

idata
Size: 42KB - Virtual size: 41KB

.vata
Size: 54KB - Virtual size: 53KB

.rsrc
Size: 113KB - Virtual size: 113KB

.reloc
Size: 16KB - Virtual size: 15KB