5645a5321164781b0650e774d59b9e29_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5645a5321164781b0650e774d59b9e29_JaffaCakes118
Size

858KB
MD5

5645a5321164781b0650e774d59b9e29
SHA1

10975227ea187031eb8249cfe720192483252f5f
SHA256

7c059cc6f0344e6f066dac8db17c6d1e2202448c865cc98d9046e50314e5d0b9
SHA512

80d490e8c4c263803121836a9b220a9d3bed5d4ee9c50a2002283a2d13afdb2f4ae1bb19cef97d74354c1c72f882f014b4101e6a20807f034b7f0fba17a58321
SSDEEP

12288:T0OZhtesZ5Z3c7DEgfD9wer+GLFlIK/BwlTpH900Frt6k+eE5crJ+:T/ttZ3c7DEgfDGer+GLwlTpuEscd+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5645a5321164781b0650e774d59b9e29_JaffaCakes118

Files

5645a5321164781b0650e774d59b9e29_JaffaCakes118
.exe windows:5 windows x86 arch:x86

409a652abf4120d24a56be9ed8d0bd56

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
SetEndOfFile
ReadConsoleW
SetStdHandle
GetTimeZoneInformation
SetFilePointer
HeapReAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryW
LoadLibraryExW
OutputDebugStringW
GetCurrentThreadId
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
IsDebuggerPresent
GetProcessHeap
HeapSize
WriteFile
EnumSystemLocalesW
GetUserDefaultLCID
GetLocaleInfoW
LCMapStringW
CompareStringW
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
GetConsoleTitleA
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleScreenBufferSize
GetConsoleCursorInfo
EnumSystemLanguageGroupsA
MapUserPhysicalPages
GetVersionExA
GetComputerNameA
VirtualUnlock
CreateNamedPipeA
CopyFileA
FindFirstFileA
GetCompressedFileSizeW
CreateFileW
GetFullPathNameW
FindResourceA
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
lstrcpyW
FormatMessageW
GetTickCount
CloseHandle
GetStdHandle
LoadResource
WaitForSingleObject
GetLastError
CreateThread
GetCurrentProcessId
VirtualQuery
VirtualAlloc
IsProcessorFeaturePresent
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
LocalFree
GlobalAlloc
GetProcAddress
GetCurrentProcess
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
InitializeCriticalSectionAndSpinCount
GetCommandLineA
GetSystemTimeAsFileTime
HeapAlloc
AreFileApisANSI
ExitProcess
RtlUnwind
RaiseException
WriteConsoleW
GetModuleHandleExW
GetModuleFileNameW
GetFileType
HeapFree
GetStringTypeW
MultiByteToWideChar
DecodePointer
DeleteFileW
EncodePointer
Sleep
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
LockResource
IsValidLocale
FreeResource

user32

GetCursorPos
SetCursor
MessageBoxA
GetWindowRect
GetClientRect
GetWindowTextA
SetWindowTextA
SetScrollRange
GetScrollPos
SetScrollPos
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
SetActiveWindow
LoadStringA
DrawTextA
AppendMenuA
EnableMenuItem
GetSystemMenu
GetSystemMetrics
SetFocus
CharNextA
DispatchMessageA
TranslateMessage
GetMessageA
LoadIconA
ShowWindow
SetWindowPos
AdjustWindowRect
ClientToScreen
MsgWaitForMultipleObjects
GetClassInfoA
MapWindowPoints
GetParent
ReleaseCapture
SetCapture
GetSubMenu
MapVirtualKeyA
GetKeyState
ChildWindowFromPoint
ScreenToClient
GetDesktopWindow
SetCursorPos
PeekMessageA
ChangeDisplaySettingsA
EnumDisplaySettingsA
TrackPopupMenu
CreatePopupMenu
DestroyMenu
RemoveMenu
ModifyMenuA
WindowFromPoint
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SendDlgItemMessageA
GetDlgItem
MoveWindow
DestroyWindow
CreateWindowExA
wsprintfA
SendMessageA
PostMessageA
DefWindowProcA
PostQuitMessage
DefMDIChildProcA
FillRect
OffsetRect
IsRectEmpty
KillTimer
PtInRect
RegisterClassA
LoadCursorA
SetTimer
GetIconInfo
UpdateWindow

gdi32

RealizePalette
ChoosePixelFormat
TextOutA
StartPage
CreateDIBSection
GetTextMetricsA
SetTextColor
SetMapMode
SetBkMode
SelectPalette
SelectObject
SelectClipRgn
SetPixelFormat
GetStockObject
GetMapMode
GetDIBits
GetDeviceCaps
GetClipBox
DeleteObject
CreateSolidBrush
CreatePalette
CreateFontA
CreateCompatibleDC
BitBlt
SwapBuffers
UnrealizeObject
GdiFlush
DescribePixelFormat
GetSystemPaletteEntries
GetPixelFormat
SetPaletteEntries

comdlg32

GetSaveFileNameA

advapi32

LsaFreeMemory
CryptGenKey
CryptGenRandom
SetEntriesInAclA
GetNamedSecurityInfoA
LsaQueryInformationPolicy
LsaOpenPolicy
SetNamedSecurityInfoA
CryptAcquireContextA

shell32

SHGetSpecialFolderPathA
SHCreateShellItem
CommandLineToArgvW
ord103

ole32

CreateStreamOnHGlobal

netapi32

NetUserEnum

userenv

RsopAccessCheckByType

comctl32

ord412
CreateToolbarEx

pdh

PdhAddCounterW

rpcrt4

RpcServerRegisterIfEx
RpcServerUseProtseqEpA

opengl32

glVertex3dv
glVertex3d
glTranslated
glScaled
glRotated
glPushMatrix
glPopMatrix
glOrtho
glColor4fv
glColor3d
glClearColor
glVertex2f
glShadeModel
glPolygonMode
glMatrixMode
glMateriali
glMaterialfv
glLightfv
glFlush
glEnd
glEnable
glDisable
glColorMaterial
glColor3f
glClear
glBegin
wglDeleteContext
wglCreateLayerContext
glGetString
glGetError
glNormal3f
glVertex3f
glPushAttrib
glPopAttrib
glVertex3fv
glLoadIdentity
glViewport
glNormal3fv
glDrawBuffer
glReadBuffer
wglGetCurrentContext
wglGetCurrentDC
glFinish
wglCreateContext
wglMakeCurrent
wglGetProcAddress
glTranslatef

glu32

gluSphere
gluQuadricNormals
gluQuadricDrawStyle
gluNewQuadric
gluCylinder
gluErrorString
gluLookAt
gluPerspective

winmm

joyGetPosEx
joyReleaseCapture
joySetThreshold
joySetCapture

Sections

.text
Size: 398KB - Virtual size: 398KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

409a652abf4120d24a56be9ed8d0bd56

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

netapi32

userenv

comctl32

pdh

rpcrt4

opengl32

glu32

winmm

Sections

.text Size: 398KB - Virtual size: 398KB

.rdata Size: 204KB - Virtual size: 203KB

.data Size: 11KB - Virtual size: 21KB

.rsrc Size: 243KB - Virtual size: 243KB

.text
Size: 398KB - Virtual size: 398KB

.rdata
Size: 204KB - Virtual size: 203KB

.data
Size: 11KB - Virtual size: 21KB

.rsrc
Size: 243KB - Virtual size: 243KB