5ef35f3034ebb7db9e2b13ff572e68be_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5ef35f3034ebb7db9e2b13ff572e68be_JaffaCakes118
Size

520KB
MD5

5ef35f3034ebb7db9e2b13ff572e68be
SHA1

b57d4e825408eceeec93fc6980592904bc771ad8
SHA256

aad8b1e253ac86a5192dc21221fdabb63f6c46afe764fbd8a8c1e5734f41ce37
SHA512

82f3f7a0674b5be719629385124ed978960f4e8a077db681dbff2decb5118a0c8fe6b3d5398b7aa4a8b87aaa0a9e714fa972f1ae61acd686275fe81318475b62
SSDEEP

6144:0zEQV2iI8zsXcvZtmnbz7dg5R8vtVFd111I30sj5ZJxnTFN9BayXADUZ:MEgntmnbz7dgfgVFd14hvJx5fBayb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ef35f3034ebb7db9e2b13ff572e68be_JaffaCakes118

Files

5ef35f3034ebb7db9e2b13ff572e68be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d86bdd5cec1e2874fea8b00dde58c52

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Enter\Release\distance.pdb

Imports

kernel32

FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
CreateFileA
GetCPInfo
GetOEMCP
SetErrorMode
GetFileTime
HeapFree
HeapReAlloc
VirtualProtect
GetSystemInfo
VirtualQuery
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetCommandLineA
GetStartupInfoA
ExitProcess
CreateThread
HeapSize
VirtualFree
SetEndOfFile
FindClose
GetStdHandle
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
UnlockFile
LockFile
HeapCreate
DuplicateHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
FormatMessageA
GlobalFlags
WritePrivateProfileStringA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalFree
LocalAlloc
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
MulDiv
InterlockedDecrement
GetModuleFileNameW
GetTickCount
InterlockedIncrement
GlobalUnlock
GlobalFree
FreeResource
GlobalAddAtomA
SuspendThread
ResumeThread
SetThreadPriority
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetModuleFileNameA
EnumResourceLanguagesA
GetLocaleInfoA
FindResourceA
LoadResource
LockResource
SizeofResource
GlobalLock
lstrcmpA
GlobalAlloc
FreeLibrary
ExitThread
GetComputerNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExpandEnvironmentStringsA
CreateEventA
WaitForSingleObject
GetCurrentProcess
SetEvent
CreateTimerQueue
CreateTimerQueueTimer
DeleteTimerQueue
SetLastError
GetProcessHeap
HeapAlloc
GetConsoleMode
GetCurrentProcessId
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
VirtualAlloc
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetFileAttributesA
FileTimeToLocalFileTime
GetFileType
GetFileSize
CreateFileW
GetFileSizeEx
GetCompressedFileSizeW
SetConsoleScreenBufferSize
CloseHandle
SystemTimeToFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
lstrlenA
CompareStringW
CompareStringA
GetVersion
GetLastError
RaiseException
WideCharToMultiByte
MultiByteToWideChar
HeapDestroy
InterlockedExchange

user32

SetForegroundWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSysColor
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
UnhookWindowsHookEx
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
RegisterClipboardFormatA
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
SetRect
SetWindowsHookExA
CallNextHookEx
GetMessageA
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
PostMessageA
MessageBoxA
EnableWindow
LoadIconA
GetDC
SendMessageA
OpenClipboard
EnumClipboardFormats
GetClipboardFormatNameA
GetClipboardData
CloseClipboard
GetCursorPos
CreateMenu
CreatePopupMenu
SetCapture
SetMenu
TrackPopupMenu
DestroyMenu
InvalidateRect
GetCapture
ReleaseCapture
BeginPaint
EndPaint
CharUpperA
IsRectEmpty
CopyAcceleratorTableA
CharNextA
PostThreadMessageA
DefWindowProcA
GetDesktopWindow
ReleaseDC
PostQuitMessage
GetSystemMetrics
GetClientRect
CreateWindowExA
LoadCursorFromFileA
ScreenToClient
AppendMenuW
GetWindowRect
UpdateWindow
DrawMenuBar
GetMenu
GetMenuItemInfoA
UnregisterClassA
MessageBeep
GetNextDlgGroupItem
GetSysColorBrush
TranslateMessage
InvalidateRgn
LoadCursorA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetMessagePos
MapWindowPoints
SetCursor
GetMessageTime

gdi32

CreateCompatibleDC
SetPixelFormat
ChoosePixelFormat
CreateBitmap
SaveDC
RestoreDC
SetBkColor
SetTextColor
SetMapMode
GetClipBox
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
CreateDIBSection
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreateRectRgnIndirect
GetBkColor
GetTextColor
GetRgnBox
GetMapMode
SelectObject
DeleteObject
LineTo
CreateCompatibleBitmap
GetStockObject
PatBlt
BitBlt
DeleteDC
CreatePen
GetDeviceCaps
CreatePalette
BeginPath
Escape
SetViewportOrgEx
SelectClipRgn
GetObjectA
OffsetViewportOrgEx
GetTextMetricsA

comdlg32

GetSaveFileNameA
GetFileTitleA
FindTextA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueA
GetUserNameA
RegSetValueExA
RegCreateKeyExA
SetEntriesInAclA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shlwapi

PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathFindFileNameA

oledlg

ord8

ole32

CoTaskMemAlloc
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoGetClassObject
CoTaskMemFree
CoRevokeClassObject
CoInitialize
CoCreateInstance
CoUninitialize
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromString

oleaut32

VariantTimeToSystemTime
SysAllocStringByteLen
VariantInit
VariantChangeType
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocString
VariantClear
SystemTimeToVariantTime
SafeArrayDestroy
VariantCopy
OleCreateFontIndirect

winmm

mmioStringToFOURCCA

rpcrt4

UuidCreate

secur32

QuerySecurityPackageInfoA

opengl32

glClear
glLoadIdentity
glMatrixMode
glViewport
glClearColor
glShadeModel
wglCreateContext

glu32

gluPerspective

uxtheme

GetThemeInt

authz

AuthzGetInformationFromContext
AuthzFreeResourceManager

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d86bdd5cec1e2874fea8b00dde58c52

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shlwapi

oledlg

ole32

oleaut32

winmm

rpcrt4

secur32

opengl32

glu32

uxtheme

authz

Sections

.text Size: 256KB - Virtual size: 255KB

.rdata Size: 68KB - Virtual size: 66KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 180KB - Virtual size: 176KB

.text
Size: 256KB - Virtual size: 255KB

.rdata
Size: 68KB - Virtual size: 66KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 180KB - Virtual size: 176KB