21a9641db3cc4146a79f8cd07b8f3c64_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

21a9641db3cc4146a79f8cd07b8f3c64_JaffaCakes118
Size

836KB
MD5

21a9641db3cc4146a79f8cd07b8f3c64
SHA1

88d7220709a1969fa3b56d17cf0a2215fcbaac5b
SHA256

06cbf177ed401e42aa66141b0454f0ef9b4cad2b37f2be8aeae263bb2a234ae9
SHA512

e9bbcd5eb8c2ac456c3cc5cfe8425d99805e77407307562de25916198b6acb02aa14b02034c832c66028fb2a1d6266c34c1130af07a7b20eec1f900bf2d2b935
SSDEEP

12288:T6OhL0zSQvO7ExdzqfBknD4MCAFZjRLWU6BRBq8BZhrnkNUNTQd3w:Lh0UExtQEDNrRKU6BRBLtrnkNUpQd3w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21a9641db3cc4146a79f8cd07b8f3c64_JaffaCakes118

Files

21a9641db3cc4146a79f8cd07b8f3c64_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0938aa1264e4281eee2a50b932744003

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
GetVolumeInformationA
GetFileAttributesA
GetFileAttributesW
ReadFile
GetSystemDirectoryA
CreateFileW
lstrlenW
WritePrivateProfileStringW
SetFileAttributesA
FindNextFileW
LocalFree
SetFileAttributesW
ExitProcess
MapViewOfFile
UnmapViewOfFile
GetCurrentProcess
SetEvent
GetSystemDirectoryW
TerminateProcess
GetTempFileNameA
FindClose
GetLocalTime
Process32FirstW
WritePrivateProfileStringA
CreateFileMappingW
CreateEventW
GetModuleFileNameA
Process32NextW
CreateToolhelp32Snapshot
CreateMutexW
SetUnhandledExceptionFilter
GetModuleFileNameW
SetCurrentDirectoryW
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleW
LoadLibraryW
GetTempPathW
GetProcAddress
MoveFileW
DeleteFileW
InterlockedIncrement
DosDateTimeToFileTime
SystemTimeToFileTime
GetCurrentDirectoryW
GetFileType
OutputDebugStringW
GetComputerNameW
FindFirstFileW
GetFileSize
GetModuleHandleA
lstrlenA
WriteConsoleW
SetStdHandle
LoadLibraryExW
LCMapStringW
CompareStringW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
MoveFileExW
FlushFileBuffers
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
RtlUnwind
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
UnhandledExceptionFilter
GetStdHandle
GetModuleHandleExW
SetLastError
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetCommandLineW
GetEnvironmentVariableW
MultiByteToWideChar
WideCharToMultiByte
CreateThread
DeleteFileA
GetTempPathA
CloseHandle
WaitForMultipleObjects
CreateDirectoryA
CreateProcessA
Sleep
InitializeCriticalSection
WriteFile
GetTickCount
WaitForSingleObject
InterlockedDecrement
SetEndOfFile
SetFilePointer
CreateFileA
DeleteCriticalSection
DecodePointer
EnterCriticalSection
HeapSize
GetLastError
HeapReAlloc
InterlockedExchange
RaiseException
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapFree
AreFileApisANSI
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
ResumeThread
ExitThread
EncodePointer
VirtualQuery
VirtualProtect
VirtualAlloc
GetSystemInfo
IsDebuggerPresent
HeapAlloc
SetEnvironmentVariableA

user32

GetDesktopWindow
SetWindowPos
SetWindowLongW
EnableMenuItem
ReleaseDC
GetWindowTextW
GetWindowLongW
LoadMenuW
GetCursorPos
RegisterClassExW
TranslateMessage
GetDC
BeginPaint
SetRectEmpty
CharNextA
LoadCursorW
GetSubMenu
DrawTextA
KillTimer
FillRect
TrackPopupMenu
PostQuitMessage
GetMessageW
ShowWindow
IsWindow
CreateWindowExW
GetSystemMetrics
IsWindowVisible
SetWindowTextA
SendMessageW
UpdateWindow
DefWindowProcW
SetTimer
GetSystemMenu
SetCursor
EndPaint
SetRect
PtInRect
MessageBoxW
SetForegroundWindow
EnableWindow
DestroyWindow
CopyRect
DispatchMessageW
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxA
LoadIconW

gdi32

GetTextExtentPoint32A
EnumFontsW
SetTextColor
FrameRgn
SetBkMode
CreateFontW
GetDIBColorTable
CreateRoundRectRgn
CreateSolidBrush
TextOutA
BitBlt
DeleteDC
CreateDIBSection
SetDIBColorTable
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectW
StretchBlt

advapi32

RegCloseKey
RegisterEventSourceA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
ConvertSidToStringSidW
RegOpenKeyExW
LookupAccountNameW
RegQueryValueExW
RegQueryValueExA
DeregisterEventSource
ReportEventA

shell32

ord165
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
Shell_NotifyIconW
SHGetSpecialFolderPathA
ShellExecuteA
SHGetPathFromIDListA

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CreateStreamOnHGlobal
CLSIDFromString

oleaut32

GetErrorInfo
SysFreeString
SysAllocString
VariantClear
VariantInit

ws2_32

send
getaddrinfo
connect
closesocket
freeaddrinfo
socket
recv
gethostbyname
__WSAFDIsSet
shutdown
WSAGetLastError
select
inet_addr
WSAStartup
ioctlsocket
getpeername
sendto
recvfrom
setsockopt
htons

shlwapi

PathFileExistsW
PathAppendW
PathRemoveFileSpecW
StrStrIA
PathFileExistsA
StrStrIW
PathIsDirectoryW

gdiplus

GdipGetImageHeight
GdipFree
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipDrawImageI
GdipGetImagePalette
GdipDisposeImage
GdipGetImagePaletteSize
GdipBitmapLockBits
GdipCloneImage
GdipGetImageWidth
GdiplusStartup
GdipCreateBitmapFromStream
GdipDeleteGraphics
GdipAlloc
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdiplusShutdown

msimg32

TransparentBlt
AlphaBlend

setupapi

SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyA
SetupIterateCabinetW
SetupDiDestroyDeviceInfoList

d3d9

Direct3DCreate9

iphlpapi

GetAdaptersInfo

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

urlmon

URLDownloadToFileW

dbghelp

MiniDumpWriteDump

Sections

.text
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 276KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0938aa1264e4281eee2a50b932744003

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

ws2_32

shlwapi

gdiplus

msimg32

setupapi

d3d9

iphlpapi

version

urlmon

dbghelp

Sections

.text Size: 364KB - Virtual size: 363KB

.rdata Size: 132KB - Virtual size: 131KB

.data Size: 276KB - Virtual size: 292KB

.rsrc Size: 24KB - Virtual size: 24KB

.reloc Size: 21KB - Virtual size: 21KB

.text
Size: 364KB - Virtual size: 363KB

.rdata
Size: 132KB - Virtual size: 131KB

.data
Size: 276KB - Virtual size: 292KB

.rsrc
Size: 24KB - Virtual size: 24KB

.reloc
Size: 21KB - Virtual size: 21KB