2fedd6440d6a7b769e6309ce754d32c5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
2fedd6440d6a7b769e6309ce754d32c5_JaffaCakes118
Size 2.2MB
Sample240510-th18hsdh71
SHA256 1eb42838897a13cb919a620d570a1bc4754c5ce239620ee4baaeaba602637d9d
MD5 2fedd6440d6a7b769e6309ce754d32c5
SHA1 9bc260028a68f7c886516e3de916a93c0054e3c0
SHA512 e6249bc172c35a9072eabeca5fac5b85da85f9825824c00911a9740a17b254235f6f04eb412fede04dd7b2fcd2298a505da9f8923b24cb8780d5d9857266a2e8
SSDEEP 24576:hBTI4rxliUEDFJAjOE9zaZF+7xXoKCgqKetUrEiQy4rD0c5RzMVEzgrrOlZLk:35rxA/qb+6xXlcGaNNfsrUZL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fedd6440d6a7b769e6309ce754d32c5_JaffaCakes118

File Explorer

2fedd6440d6a7b769e6309ce754d32c5_JaffaCakes118

.exe 2.2MB

2fedd6440d6a7b769e6309ce754d32c5_JaffaCakes118

IMPHASH 2876727684817f73dd4f87f9d78443e6
SHA256 1eb42838897a13cb919a620d570a1bc4754c5ce239620ee4baaeaba602637d9d
MD5 2fedd6440d6a7b769e6309ce754d32c5
SHA1 9bc260028a68f7c886516e3de916a93c0054e3c0
SHA512 e6249bc172c35a9072eabeca5fac5b85da85f9825824c00911a9740a17b254235f6f04eb412fede04dd7b2fcd2298a505da9f8923b24cb8780d5d9857266a2e8
SSDEEP 24576:hBTI4rxliUEDFJAjOE9zaZF+7xXoKCgqKetUrEiQy4rD0c5RzMVEzgrrOlZLk:35rxA/qb+6xXlcGaNNfsrUZL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1553216

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

_except_handler3 _exit _XcptFilter exit _acmdln _controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs

comctl32

ImageList_GetImageInfo ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_DrawEx ImageList_EndDrag ImageList_GetBkColor ImageList_GetDragImage ImageList_GetIconSize ImageList_GetImageCount ImageList_LoadImageW ImageList_Read ImageList_Remove ImageList_Replace ImageList_ReplaceIcon ImageList_SetBkColor ImageList_SetIconSize ImageList_SetImageCount ImageList_SetOverlayImage ImageList_Write ord17 InitializeFlatSB

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

wininet

InternetReadFile InternetOpenUrlW InternetOpenW

kernel32

MoveFileW MulDiv MultiByteToWideChar OpenProcess QueryPerformanceFrequency RaiseException ReadFile MoveFileExW ReleaseMutex ResetEvent ResumeThread SetCurrentDirectoryA SetCurrentDirectoryW SetEndOfFile SetErrorMode SetEvent SetFileAttributesW SetFilePointer SetLastError SetThreadLocale SetThreadPriority SizeofResource Sleep SuspendThread SystemTimeToFileTime SystemTimeToTzSpecificLocalTime TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualAllocEx VirtualFree VirtualFreeEx VirtualQuery VirtualQueryEx WaitForMultipleObjectsEx WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringW LoadLibraryExA GetModuleHandleA lstrlenW lstrcpyW lstrcpynW lstrcmpW lstrcmpiA LockResource LocalFree LocalAlloc LoadResource LoadLibraryW LoadLibraryExW LeaveCriticalSection IsValidLocale InterlockedExchangeAdd InterlockedCompareExchange InitializeCriticalSection GlobalUnlock GlobalSize GlobalLock GlobalHandle GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAlloc GlobalAddAtomW GetVersionExW GetTimeZoneInformation GetThreadPriority GetThreadLocale GetTempPathW GetSystemInfo GetStdHandle GetStartupInfoA GetProcAddress GetPrivateProfileStringW GetModuleHandleW GetModuleFileNameW GetLocalTime GetLocaleInfoW GetLastError GetFullPathNameW GetFileType GetFileSize GetFileAttributesW GetFileAttributesExW GetExitCodeThread GetDiskFreeSpaceW GetDateFormatW GetCurrentDirectoryW LoadLibraryA GetCPInfo GetComputerNameW GetCommandLineW GetACP FreeResource FormatMessageW FindResourceW FindNextFileW FindNextChangeNotification FindFirstFileW FindFirstChangeNotificationW FindCloseChangeNotification FindClose FileTimeToSystemTime FileTimeToLocalFileTime FileTimeToDosDateTime ExitThread EnumCalendarInfoW EnterCriticalSection DeleteFileW SetSystemPowerState ExitProcess GetCurrentProcessId GetSystemTimeAsFileTime GetCurrentThreadId GetTickCount QueryPerformanceCounter GetVersion ReadProcessMemory

user32

MapVirtualKeyW MapWindowPoints MessageBeep MessageBoxA MessageBoxIndirectW MessageBoxW MoveWindow MsgWaitForMultipleObjectsEx OffsetRect OpenClipboard PeekMessageA PeekMessageW PostMessageW PostQuitMessage PtInRect RedrawWindow RegisterClassW RegisterClipboardFormatW RegisterWindowMessageW ReleaseCapture ReleaseDC RemoveMenu RemovePropW ScreenToClient ScrollWindow SendMessageA SendMessageW SetActiveWindow SetCapture SetClassLongW SetClipboardData SetCursorPos SetFocus SetForegroundWindow SetMenuItemInfoW SetParent SetPropW SetRect SetScrollInfo SetScrollPos SetScrollRange SetTimer SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn SetWindowsHookExW SetWindowTextW ShowOwnedPopups ShowScrollBar ShowWindow SystemParametersInfoW TrackPopupMenu TranslateMDISysAccel TranslateMessage UnhookWindowsHookEx UnregisterClassW KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsRectEmpty IsIconic IsDialogMessageW IsDialogMessageA IsClipboardFormatAvailable IsChild InvalidateRect IntersectRect InsertMenuW InsertMenuItemW InflateRect GetWindowThreadProcessId GetWindowTextW GetWindowTextLengthW GetWindowRect GetWindowPlacement LoadStringW GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropW GetParent GetMessagePos GetMessageExtraInfo GetMenuStringW GetMenuState GetMenuItemRect GetMenuItemInfoW GetMenuItemID GetMenuItemCount GetKeyState GetKeyNameTextW GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetIconInfo GetForegroundWindow GetFocus GetDlgItem GetDesktopWindow GetDCEx GetCursorPos GetClientRect GetClassNameW GetClassLongW GetClassInfoW GetCapture GetActiveWindow FrameRect FindWindowW FindWindowExW FillRect EqualRect EnumWindows EnumThreadWindows EnumClipboardFormats EnumChildWindows EnableWindow EnableScrollBar EnableMenuItem EmptyClipboard DrawTextW DrawTextExW DrawMenuBar DrawIconEx DrawFrameControl DrawFocusRect DrawEdge DispatchMessageW DispatchMessageA DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcW DefMDIChildProcW LoadKeyboardLayoutW LoadIconW DefFrameProcW CreateWindowExW CreatePopupMenu CreateMenu CreateIconIndirect CreateAcceleratorTableW CountClipboardFormats CopyRect CopyImage CopyIcon CloseClipboard ClientToScreen ChildWindowFromPoint CheckMenuItem LoadCursorW GetWindowLongW LoadBitmapW GetClipboardData

gdi32

ExcludeClipRect ExtFloodFill ExtTextOutW FrameRgn GdiFlush GetBitmapBits EnumFontsW EnumFontFamiliesExW EndPage GetBitmapDimensionEx GetBrushOrgEx GetClipBox GetCurrentPositionEx GetDCOrgEx GetDeviceCaps GetDIBColorTable GetDIBits GetEnhMetaFileBits GetEnhMetaFileDescriptionW GetEnhMetaFileHeader GetEnhMetaFilePaletteEntries EndDoc GetObjectW GetPaletteEntries GetPixel GetRgnBox GetStockObject GetSystemPaletteEntries GetTextExtentPoint32W GetTextExtentPointW GetTextMetricsW GetViewportOrgEx GetWindowOrgEx GetWinMetaFileBits IntersectClipRect LineTo LPtoDP MaskBlt MoveToEx PatBlt Pie PlayEnhMetaFile PolyBezierTo Polygon Polyline RealizePalette Rectangle RectVisible ResizePalette RestoreDC RoundRect SaveDC SelectClipRgn SelectObject SelectPalette SetAbortProc SetBkColor SetBkMode SetBrushOrgEx SetDIBColorTable SetDIBits SetEnhMetaFileBits SetMapMode SetPixelV SetROP2 SetStretchBltMode SetTextColor SetViewportOrgEx SetWindowOrgEx SetWinMetaFileBits StartDocW StartPage Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRectRgn CreatePenIndirect CreatePalette CreateICW CreateHalftonePalette CreateFontIndirectW CreateDIBSection CreateDIBitmap GetNearestPaletteIndex CreateDCW

winspool.drv

DocumentPropertiesW EnumPrintersW OpenPrinterW

advapi32

RegSetValueExW RegQueryInfoKeyW RegLoadKeyW RegFlushKey RegEnumValueW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegOpenKeyExW RegQueryValueExA RegCloseKey RegUnLoadKeyW RegQueryValueExW RegReplaceKeyW RegRestoreKeyW RegSaveKeyW

shell32

ShellExecuteW Shell_NotifyIconW ShellExecuteExW SHFileOperationW

ole32

OleUninitialize CoUninitialize CoTaskMemFree CoTaskMemAlloc OleInitialize

oleaut32

VariantChangeType SysReAllocStringLen SysFreeString SysAllocStringLen VariantCopyInd VariantInit VariantClear

Name

.text

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

29.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ipc0

Size

635KB

Virtual Size

635KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

85KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2fedd6440d6a7b769e6309ce754d32c5_JaffaCakes118

msvcrt

comctl32

version

wininet

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

generic