4a91d6952c9e040e6c17662cfc271b62_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

4a91d6952c9e040e6c17662cfc271b62_JaffaCakes118
Size

237KB
MD5

4a91d6952c9e040e6c17662cfc271b62
SHA1

09a6a44e25bd15841b97381c603fe3a16a0dd68d
SHA256

89990552456235fc80e303433ef6609ce137d9c74016bf9c14218125edbe8854
SHA512

ccd64aefbb628ae2c39cfc5ed685f5f4b8ea0d093484290c1ade7a4174b4e556791ff23db34c97f00eb21244e4990ea696402c0f72ced0292e1b9a5c20b08950
SSDEEP

3072:pXbUhF2VZhu6sfLj0+QqQ3LVXkH7PUpg5+ua0Sq6ViqxFUZ4Jf5q:pQLqbid5Qbybspq9XSqAZYT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a91d6952c9e040e6c17662cfc271b62_JaffaCakes118

Files

4a91d6952c9e040e6c17662cfc271b62_JaffaCakes118
.exe windows:5 windows x86 arch:x86

65fdb03e003ee76fdf02b185ef3b5ead

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileW
CreateDirectoryW
CreateEventW
CreateFileW
CreateMutexW
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileW
EnterCriticalSection
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindNextFileW
FreeLibrary
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceExW
GetExitCodeProcess
GetFileAttributesA
GetFileSize
GetFileTime
GetLocalTime
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNativeSystemInfo
GetNumberFormatW
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetShortPathNameW
GetStartupInfoA
GetSystemDefaultLangID
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTempPathA
GetTempPathW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserGeoID
GetVersion
GetVersionExA
GetVersionExW
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalFree
HeapFree
InitializeCriticalSection
InterlockedCompareExchange
InterlockedExchange
LeaveCriticalSection
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MoveFileExW
CopyFileW
MultiByteToWideChar
QueryPerformanceCounter
ReleaseMutex
RemoveDirectoryW
ResetEvent
RtlUnwind
SetCurrentDirectoryW
SetEvent
SetFileAttributesW
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile

user32

LoadCursorW
LoadIconW
LoadImageW
LoadStringA
LoadStringW
LockSetForegroundWindow
MapWindowPoints
MessageBoxW
MoveWindow
PeekMessageW
PostMessageW
LoadCursorFromFileA
LoadCursorFromFileW
AnyPopup
GetCapture
GetClipboardOwner
CountClipboardFormats
GetClipboardSequenceNumber
CreateMenu
KillTimer
EndMenu
GetCaretBlinkTime
CreatePopupMenu
UpdateWindow
TranslateMessage
ShowWindow
SetWindowTextW
SetWindowPos
SetWindowLongW
SetTimer
SetScrollInfo
SetForegroundWindow
SetFocus
SetCursor
SendMessageW
SendDlgItemMessageW
ScrollWindow
ScreenToClient
ReleaseDC
RegisterWindowMessageA
IsWindow
IsDlgButtonChecked
IsDialogMessageW
IsCharAlphaW
InvalidateRect
GetWindowRect
GetWindowLongW
GetSystemMetrics
GetSystemMenu
GetSysColor
GetScrollInfo
GetParent
GetMessageW
GetDlgItem
GetDesktopWindow
GetDC
GetClientRect
GetActiveWindow
FindWindowW
FindWindowExW
EndPaint
EnableWindow
EnableMenuItem
DrawTextW
DrawFocusRect
DispatchMessageW
DestroyWindow
DestroyCursor
DefWindowProcW
CreateWindowExW
CreateDialogParamW
CheckRadioButton
CharNextW
CharNextA
CallWindowProcW
CloseClipboard
BeginPaint
PostThreadMessageW
PostQuitMessage

gdi32

SetMetaRgn
GetTextAlign
PathToRegion
SaveDC
GetMapMode
GetEnhMetaFileW
GetROP2
UpdateColors
StrokePath
UnrealizeObject
WidenPath
SwapBuffers
GetSystemPaletteUse
GetTextColor
GetFontLanguageInfo
RealizePalette
GetPixelFormat
GetObjectType
GetEnhMetaFileA
GetDCPenColor
GetTextCharset
GetTextCharacterExtra
GetPolyFillMode
GetLayout
GetGraphicsMode
bInitSystemAndFontsDirectoriesW
TextOutW
SetTextColor
SetMapMode
SetBkMode
SetBkColor
SetBitmapDimensionEx
SelectPalette
SelectObject
STROBJ_dwGetCodePage
RemoveFontResourceW
PolylineTo
PatBlt
PaintRgn
OffsetWindowOrgEx
OffsetViewportOrgEx
GetTextMetricsW
GetTextFaceA
GetTextExtentExPointWPri
GetStretchBltMode
GetStockObject
GetPath
GetObjectW
GetFontUnicodeRanges
GetDeviceCaps
GetBitmapBits
GdiSetPixelFormat
GdiGetDevmodeForPage
GdiEntry10
GdiConvertBitmap
FrameRgn
ExtTextOutW
ExcludeClipRect
EnumObjects
EnumFontsA
EngFindResource
EngCreatePalette
EndPage
DrawEscape
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreatePen
CreateFontIndirectW
CreateFontA
CreateDCW
CreateCompatibleDC
CreateBrushIndirect
ColorCorrectPalette
AddFontResourceW
AddFontResourceA

advapi32

OpenSCManagerW
AddAce
RegOpenKeyW
TraceMessage
StartServiceW
SetSecurityInfo
SetNamedSecurityInfoW
SetEntriesInAclW
RegSetValueExW
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyW
RegOpenKeyExW
RegOpenKeyExA
RegEnumValueW
RegEnumKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
QueryServiceStatus
QueryServiceConfigW
OpenServiceW
AddAccessAllowedAceEx
OpenProcessToken
LookupPrivilegeValueW
LookupAccountSidW
LookupAccountNameW
InitiateSystemShutdownExW
InitializeAcl
GetTokenInformation
GetSecurityInfo
GetNamedSecurityInfoW
GetLengthSid
GetAclInformation
GetAce
FreeSid
EqualSid
EnumDependentServicesW
DeleteService
CreateServiceW
ConvertStringSidToSidW
ConvertSidToStringSidW
ControlService
CloseServiceHandle
AllocateAndInitializeSid
AdjustTokenPrivileges

shell32

SHEmptyRecycleBinA
ShellExecuteExW
ShellAboutA
SHLoadInProc
SHInvokePrinterCommandA
SHGetSpecialFolderPathA
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetPathFromIDListA
SHGetMalloc
CommandLineToArgvW
ExtractAssociatedIconExA
FindExecutableW
SHBrowseForFolderA
SHChangeNotify
SHCreateDirectoryExA
SHCreateDirectoryExW
ShellExecuteW
SHFileOperationA
SHFileOperationW
SHGetDataFromIDListA
SHGetDiskFreeSpaceExW
SHGetFolderLocation
SHGetFolderPathW
SHGetIconOverlayIndexW

shlwapi

PathAddBackslashA
PathAddBackslashW
PathFindExtensionW
PathFindFileNameW
PathGetCharTypeA
PathGetCharTypeW
SHDeleteKeyW
StrCmpNA
StrRStrIW
StrStrW

comctl32

InitCommonControlsEx

Sections

.text
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

65fdb03e003ee76fdf02b185ef3b5ead

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

comctl32

Sections

.text Size: 142KB - Virtual size: 142KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 928B

.rsrc Size: 82KB - Virtual size: 82KB

.text
Size: 142KB - Virtual size: 142KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 928B

.rsrc
Size: 82KB - Virtual size: 82KB