481bf42096cb7ebbec0f4641ac987e5a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

481bf42096cb7ebbec0f4641ac987e5a_JaffaCakes118
Size

217KB
MD5

481bf42096cb7ebbec0f4641ac987e5a
SHA1

58981d9aed93047cc46d8d2fc4d26f5d6a2978cb
SHA256

17a507f36d9457b9bb7962cdd98370fe44bb8166b4829e4692192440ede615a1
SHA512

2bdb7c8ffd7dde7a3bb0aef7320f3cc18bf2b7f689c3623b6ae2d7dfea6c71c1473453843afaf243468364f832f227ae88f273fb90c58ead28fffaed5242e591
SSDEEP

3072:Yq+D7x4664jPTS2actDp2CEgjZDERZqh7NRa0Y/Vwj6F9I0Ojh:O7xN64jPTvac3Eg9qYrR9Ydwn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
481bf42096cb7ebbec0f4641ac987e5a_JaffaCakes118

Files

481bf42096cb7ebbec0f4641ac987e5a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8dffc9aad2b60b32caaab9176a9f4c07

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

T:\Divide\breakout\catastrophe\Val.pdb

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
HeapFree
HeapAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
LoadLibraryW
GetLastError
WriteFile
GetStdHandle
GetModuleFileNameW
IsProcessorFeaturePresent
LCMapStringW
GetStringTypeW
SetHandleCount
GetFileType
SetFilePointer
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetConsoleCP
GetConsoleMode
HeapSize
RtlUnwind
SetStdHandle
WriteConsoleW
HeapReAlloc
FlushFileBuffers
CreateFileW
LocalFree
FileTimeToLocalFileTime
GlobalUnlock
SetConsoleTitleA
GetSystemDirectoryA
FileTimeToSystemTime
GetExitCodeProcess
HeapCreate
GetFileAttributesA
SizeofResource
Sleep
GlobalAlloc
GetComputerNameA
ExpandEnvironmentStringsA
GetTickCount
GlobalLock
LoadResource
FreeLibrary
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetCurrentProcess
TerminateProcess
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetSystemTimeAsFileTime
DecodePointer
GetCurrentThreadId
GetModuleHandleA
CreateEventW
LockResource
LocalAlloc
LoadLibraryA
ExitProcess
GetPrivateProfileStringA
GetModuleHandleW
MultiByteToWideChar
FindResourceA
GetProcAddress
CloseHandle

user32

InflateRect
EnumThreadWindows
GetWindow
GetWindowThreadProcessId
CopyRect
DrawFrameControl
GetDlgItemTextA
LoadCursorA
EndPaint
GetMessageA
GetWindowRect
UpdateWindow
PostQuitMessage
GetWindowDC
DrawTextA
GetParent
AttachThreadInput
LoadIconA
DlgDirSelectExA
wsprintfA
WindowFromPoint
GetClientRect
SendMessageA
BeginPaint
GetDC
DrawFocusRect
TranslateMessage
RegisterClassExA
GetWindowWord
GetCursorInfo
MessageBoxA
InvalidateRect
GetWindowLongA
CreateWindowExA
PeekMessageA
DefWindowProcA
GetSysColor
SetWindowPos
GetCursorPos
ShowWindow
IsDlgButtonChecked
DispatchMessageA
GetCursor
MessageBoxW
SystemParametersInfoA
GetSystemMetrics

gdi32

SaveDC
MoveToEx
BitBlt
SetDIBitsToDevice
GetTextExtentPoint32A
LineTo
SetWindowExtEx
SetTextColor
DeleteDC
CreateFontA
GetDeviceCaps
StretchBlt
CreateFontIndirectA
GetDIBits
GetCurrentObject
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
SetMapMode
CreateCompatibleBitmap
Rectangle
RestoreDC
SetDCPenColor
SetStretchBltMode
Polyline
CreatePen
SetViewportExtEx
GetObjectA
GetStockObject
TextOutA

comdlg32

PageSetupDlgA

advapi32

CloseEventLog
RegCloseKey
LogonUserA
QueryServiceConfig2A
RegOpenKeyA
OpenSCManagerA
SetServiceStatus
LsaClose
ChangeServiceConfigA
RegQueryValueExA
RegisterServiceCtrlHandlerA
OpenEventLogW
CloseServiceHandle
OpenServiceA
CreateProcessAsUserA
QueryServiceConfigA

shell32

ShellExecuteExW
SHGetPathFromIDListA

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree

oleaut32

VariantInit

netapi32

NetLocalGroupAddMember
NetUserAdd

msvfw32

ICSendMessage
ICGetInfo

avifil32

AVIFileOpenW
AVIStreamRelease
AVIFileCreateStreamW
AVIFileRelease
AVIStreamWrite
AVIStreamSetFormat

msacm32

acmStreamOpen

shlwapi

StrRetToStrA

activeds

ord3

rpcrt4

RpcServerListen

gdiplus

GdipDrawImageRectI
GdipCreateFromHDC
GdipDeleteGraphics

setupapi

SetupDiOpenDeviceInfoW
SetupDiGetDeviceInstallParamsA
SetupDiBuildDriverInfoList
SetupDiSetDeviceInstallParamsA
SetupDiCreateDeviceInfoList
SetupDiGetSelectedDriverA
SetupDiSetSelectedDevice
SetupDiCallClassInstaller
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList

Exports

Exports

Go

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8dffc9aad2b60b32caaab9176a9f4c07

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

netapi32

msvfw32

avifil32

msacm32

shlwapi

activeds

rpcrt4

gdiplus

setupapi

Exports

Exports

Sections

.text Size: 87KB - Virtual size: 86KB

.rdata Size: 56KB - Virtual size: 55KB

.data Size: 13KB - Virtual size: 21KB

.rsrc Size: 59KB - Virtual size: 59KB

.text
Size: 87KB - Virtual size: 86KB

.rdata
Size: 56KB - Virtual size: 55KB

.data
Size: 13KB - Virtual size: 21KB

.rsrc
Size: 59KB - Virtual size: 59KB