5ebcaf4f7de49c5041723f01edc9c27f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5ebcaf4f7de49c5041723f01edc9c27f_JaffaCakes118
Size

526KB
MD5

5ebcaf4f7de49c5041723f01edc9c27f
SHA1

ddc1f772c532ccb1ad05d0e956f00e88b67805fb
SHA256

0210edfbd699eb8740136084527af38cd829c116afd88df102db6946685e3483
SHA512

8d7b6e708ab463099296a4c230d654a7fc106e6f268cd098f2bf12f4a780d4e5187b3083581a01edf8fcd70111e292c69065441f0b0a6606347d317f5c671c9d
SSDEEP

12288:OVmnn0cQE8aM0zU20sBPaISobJp5I3cTmwTd7MMeQ5naWGn0ptIEBtdqHQvkQtr2:Znh4/UmDCYCf76a8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ebcaf4f7de49c5041723f01edc9c27f_JaffaCakes118

Files

5ebcaf4f7de49c5041723f01edc9c27f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

aaa1aa9415c129e5890acadfe1468a3a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
IsDebuggerPresent
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapReAlloc
RtlUnwind
SetStdHandle
GetFileType
HeapSize
GetConsoleCP
GetConsoleMode
HeapCreate
VirtualFree
GetACP
IsValidCodePage
GetFileSizeEx
SetUnhandledExceptionFilter
GetStringTypeW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetExitCodeProcess
CompareStringW
SetEnvironmentVariableA
LocalFileTimeToFileTime
UnhandledExceptionFilter
GetModuleHandleW
GetStringTypeA
SetErrorMode
GetFileAttributesExA
FileTimeToLocalFileTime
GetCurrentDirectoryA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
SystemTimeToFileTime
FileTimeToSystemTime
GlobalFlags
GlobalFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetShortPathNameA
GetVolumeInformationA
FindFirstFileA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetThreadLocale
GetStringTypeExA
DeleteFileA
MoveFileA
lstrcmpiA
MulDiv
LocalAlloc
LocalLock
LocalUnlock
LocalFree
GetDiskFreeSpaceA
GetFullPathNameA
GetFileTime
SetFileTime
GetFileAttributesA
InterlockedDecrement
GetModuleFileNameW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GlobalAlloc
FreeResource
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
FreeLibrary
lstrcmpW
GetVersionExA
GlobalLock
GlobalUnlock
GetCurrentProcessId
GetModuleHandleA
GlobalGetAtomNameA
GlobalAddAtomA
SetLastError
MultiByteToWideChar
lstrlenA
GetTempPathA
GetTempFileNameA
ExpandEnvironmentStringsW
CloseHandle
FindNextFileW
CreatePipe
GetConsoleScreenBufferInfo
LoadLibraryA
FindClose
EnumSystemCodePagesW
VirtualAlloc
GetProcAddress
GetLastError
FindResourceA
GetStdHandle
CreateFileW
ReadFile
CreateProcessA
SetConsoleCursorPosition
CreateEventA
LoadLibraryW
GetEnvironmentStrings
WriteFile
GetProcessHeap
WaitForSingleObject
HeapFree
HeapAlloc
FindFirstFileW
GetFileSize
CreateFileA
LockResource
RaiseException
SizeofResource
WideCharToMultiByte
LoadResource
InitializeCriticalSectionAndSpinCount

user32

RegisterClassA
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
DefWindowProcA
CallWindowProcA
PtInRect
SystemParametersInfoA
GetWindowPlacement
GetSystemMetrics
GetClassNameA
GetSysColor
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
WinHelpA
SetWindowPos
SetFocus
GetActiveWindow
IsWindowEnabled
EqualRect
GetKeyState
LoadIconA
SetCursor
PeekMessageA
GetCapture
ReleaseCapture
LoadAcceleratorsA
SetActiveWindow
IsWindowVisible
IsIconic
InsertMenuItemA
GetSubMenu
GetMenuItemID
CreatePopupMenu
GetClassInfoA
IntersectRect
OffsetRect
SetRectEmpty
CopyRect
GetLastActivePopup
BringWindowToTop
GetClassInfoExA
GetDesktopWindow
ShowWindow
RemovePropA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
MessageBeep
EnableWindow
CloseClipboard
GetWindowRect
PostQuitMessage
SendDlgItemMessageA
GetWindowDC
FillRect
LoadBitmapA
IsClipboardFormatAvailable
GetParent
DefFrameProcA
MessageBoxA
SetForegroundWindow
wsprintfA
GetClientRect
GetWindowTextLengthA
SendMessageA
GetForegroundWindow
GetMenu
CheckMenuRadioItem
SetWindowLongA
InvalidateRect
GetWindowLongA
GetClipboardData
CreateWindowExA
GetDlgItem
GetCursorPos
GetMenuItemInfoA
EnumChildWindows
TrackPopupMenu
MapWindowPoints
GetMessagePos
IsDlgButtonChecked
DrawMenuBar
GetMenuItemCount
IsWindow
OpenClipboard
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
DispatchMessageA
PostMessageA
GetWindowTextA
UnregisterClassA
DestroyIcon
SetWindowTextA
UpdateWindow
SetMenuItemInfoA
GetDlgCtrlID
GetPropA
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
IsChild
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
TranslateAcceleratorA
GetWindowThreadProcessId
DeleteMenu
GetMenuStringA
InsertMenuA
LoadCursorA
GetSysColorBrush
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
InflateRect
CharUpperA
GetDC
ReleaseDC
GetTabbedTextExtentA
SetRect
GetMessageA
TranslateMessage
ValidateRect
ShowOwnedPopups
IsDialogMessageA
SetDlgItemTextA
SetMenu
RegisterWindowMessageA
GetWindow

gdi32

SaveDC
RestoreDC
SetBkMode
SetMapMode
IntersectClipRect
BitBlt
GetPixel
StartDocA
PtVisible
RectVisible
TextOutA
Escape
SetViewportOrgEx
CreatePatternBrush
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreateDCA
GetTextExtentPoint32A
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
ExtTextOutA
GetStockObject
CreateFontIndirectA
GetCharWidthA
GetTextMetricsA
DPtoLP
GetDeviceCaps
SetBkColor
SetTextColor
GetClipBox
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
DeleteObject
SelectObject
CreateBrushIndirect
GetObjectA
SwapBuffers
OffsetViewportOrgEx
CreateSolidBrush

msimg32

GradientFill

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
GetJobA
EnumPrintersA
ClosePrinter
DocumentPropertiesA

advapi32

GetFileSecurityA
RegCloseKey
RegSetValueExW
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegSetValueA
RegOpenKeyA
SetFileSecurityA
RegQueryValueA
RegOpenKeyExW

shell32

SHBrowseForFolderA
DragFinish
DragQueryFileA
ExtractIconA
SHGetFileInfoA

comctl32

ImageList_Add
InitCommonControlsEx
ImageList_Create
ord17

shlwapi

PathSearchAndQualifyA
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathSkipRootA
PathRemoveFileSpecW

ole32

CoInitializeEx
CoTaskMemFree
CreateStreamOnHGlobal
CoUninitialize
CoCreateInstance

oleaut32

VariantInit
VariantChangeType
VariantClear

urlmon

CreateFormatEnumerator

userenv

CreateEnvironmentBlock

winscard

SCardEstablishContext

winmm

waveOutOpen
waveOutWrite
waveOutClose
waveOutPrepareHeader

crypt32

CryptQueryObject
CryptProtectData

pdh

PdhAddCounterW

opengl32

glClear
glEnd
glVertex2d
glBegin
wglGetCurrentDC
glMatrixMode
glViewport
glLineWidth
glFlush
glColor3f
glLoadIdentity
glOrtho

imm32

ImmIsUIMessageA
ImmRegisterWordA
ImmNotifyIME

oleacc

CreateStdAccessibleObject
LresultFromObject

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA

snmpapi

SnmpUtilMemAlloc
SnmpUtilMemFree

Sections

.text
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aaa1aa9415c129e5890acadfe1468a3a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

urlmon

userenv

winscard

winmm

crypt32

pdh

opengl32

imm32

oleacc

setupapi

snmpapi

Sections

.text Size: 296KB - Virtual size: 296KB

.rdata Size: 77KB - Virtual size: 76KB

.data Size: 10KB - Virtual size: 25KB

.rsrc Size: 141KB - Virtual size: 141KB

.text
Size: 296KB - Virtual size: 296KB

.rdata
Size: 77KB - Virtual size: 76KB

.data
Size: 10KB - Virtual size: 25KB

.rsrc
Size: 141KB - Virtual size: 141KB