377a0fc861f14fdb03f8a6f42e5413dc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
377a0fc861f14fdb03f8a6f42e5413dc_JaffaCakes118
Size 356KB
Sample240512-bljtjacd57
SHA256 bf359a69a596a355d496689a441cc847abf027e75971e9a0e33e29821787d14e
MD5 377a0fc861f14fdb03f8a6f42e5413dc
SHA1 0be4c6569ad81c6f5065a13b195ec573920262cb
SHA512 cf407adf626a439b8a65afac51a352bcd9cbe8eebbecd1520adae1b28da0b5f50540ad66cd3f151def9c2c7b0512085a50cd242c0d34b4a20a0f98a557f7bb1b
SSDEEP 6144:aNfE2xGhgxIc2jT7z5Pktg63IWeI5/zuhy9A1ynBE6Y:aN82xGIL2jTSIUuM9YGB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
377a0fc861f14fdb03f8a6f42e5413dc_JaffaCakes118

File Explorer

377a0fc861f14fdb03f8a6f42e5413dc_JaffaCakes118

.exe 356KB

377a0fc861f14fdb03f8a6f42e5413dc_JaffaCakes118

IMPHASH 67604d0130ea34b2604dd17a7979034e
SHA256 bf359a69a596a355d496689a441cc847abf027e75971e9a0e33e29821787d14e
MD5 377a0fc861f14fdb03f8a6f42e5413dc
SHA1 0be4c6569ad81c6f5065a13b195ec573920262cb
SHA512 cf407adf626a439b8a65afac51a352bcd9cbe8eebbecd1520adae1b28da0b5f50540ad66cd3f151def9c2c7b0512085a50cd242c0d34b4a20a0f98a557f7bb1b
SSDEEP 6144:aNfE2xGhgxIc2jT7z5Pktg63IWeI5/zuhy9A1ynBE6Y:aN82xGIL2jTSIUuM9YGB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

41067

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RaiseException HeapReAlloc HeapSize GetACP GetTimeZoneInformation HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType LCMapStringW SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr SetStdHandle CompareStringA CompareStringW SetEnvironmentVariableA TerminateProcess ExitProcess GetProfileStringA GetCommandLineA GetStartupInfoA HeapAlloc HeapFree RtlUnwind GetFileTime GetFileSize GetTickCount FileTimeToLocalFileTime FileTimeToSystemTime GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetCurrentProcess DuplicateHandle SetErrorMode FormatMessageA GetOEMCP GetCPInfo GetThreadLocale SizeofResource GetProcessVersion WritePrivateProfileStringA GlobalFlags TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalFree LocalAlloc lstrcpynA MulDiv SetLastError LoadLibraryA FreeLibrary GetVersion lstrcatA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA lstrcpyA GetModuleHandleA GetProcAddress MultiByteToWideChar WideCharToMultiByte lstrlenA InterlockedDecrement InterlockedIncrement GlobalUnlock GlobalFree LockResource FindResourceA LoadResource GetModuleFileNameA GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA lstrcmpiA GetCurrentThread GetCurrentThreadId CreateFileA GetLastError GetFileAttributesA CloseHandle LCMapStringA VirtualProtect

user32

InvalidateRect CharUpperA InflateRect RegisterClipboardFormatA PostThreadMessageA UpdateWindow SendDlgItemMessageA MapWindowPoints GetSysColor SetFocus AdjustWindowRectEx ScreenToClient CopyRect GetTopWindow IsChild GetCapture WinHelpA wsprintfA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID GetWindowTextLengthA GetWindowTextA GetDlgCtrlID DefWindowProcA CreateWindowExA GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA GetMessageTime GetMessagePos GetForegroundWindow SetWindowLongA GetSysColorBrush OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect MapDialogRect SetWindowPos GetWindow SetWindowContextHelpId EndDialog SetActiveWindow IsWindow CreateDialogIndirectParamA CharNextA GetDlgItem GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState LoadStringW MessageBoxA EnumWindows UnregisterClassA HideCaret ShowCaret ExcludeUpdateRgn DrawFocusRect CallNextHookEx ValidateRect IsWindowVisible PeekMessageA GetCursorPos SetWindowsHookExA GetParent GetLastActivePopup IsWindowEnabled GetWindowLongA SetCursor PostQuitMessage PostMessageA IsIconic GetSystemMetrics GetClientRect DrawIcon GetSystemMenu AppendMenuA MessageBeep GetNextDlgGroupItem SetRect SetForegroundWindow CopyAcceleratorTableA SendMessageA LoadIconA DefDlgProcA IsWindowUnicode EnableWindow PtInRect GetClassNameA GetDesktopWindow LoadCursorA GrayStringA DrawTextA TabbedTextOutA EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen DestroyMenu LoadStringA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA DestroyWindow RegisterWindowMessageA

gdi32

SetWindowExtEx ScaleWindowExtEx IntersectClipRect DeleteObject ScaleViewportExtEx GetDeviceCaps GetViewportExtEx GetWindowExtEx CreateSolidBrush PtVisible RectVisible TextOutA ExtTextOutA Escape GetTextColor GetBkColor DPtoLP LPtoDP GetMapMode PatBlt SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SetMapMode SetBkMode GetStockObject SelectObject RestoreDC SaveDC DeleteDC GetObjectA SetBkColor SetTextColor GetClipBox CreateDIBitmap GetTextExtentPointA BitBlt CreateCompatibleDC CreateBitmap

comdlg32

GetOpenFileNameA GetSaveFileNameA GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegSetValueExA CloseServiceHandle RegOpenKeyExA RegCreateKeyExA RegCloseKey ControlService StartServiceA DeleteService OpenSCManagerA CreateServiceA OpenServiceA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries OleInitialize CoTaskMemAlloc CoTaskMemFree CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoRegisterMessageFilter CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard OleUninitialize

olepro32

ord253

oleaut32

VariantTimeToSystemTime SysAllocStringLen SysFreeString VariantCopy VariantChangeType SysAllocString SysAllocStringByteLen SysStringLen VariantClear

Name

.text

Size

136KB

Virtual Size

133KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

68KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

64KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.drvar

Size

48KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.uidata

Size

32KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

1000B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

377a0fc861f14fdb03f8a6f42e5413dc_JaffaCakes118

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

generic