74f0624a86b6be1536a4d8fefe29717c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

74f0624a86b6be1536a4d8fefe29717c_JaffaCakes118
Size

3.4MB
MD5

74f0624a86b6be1536a4d8fefe29717c
SHA1

936cc4d318506dfab359c5397e565219972d7ef9
SHA256

5c203885a791bfb05c0f54cb3a5cc1754aeb8a3c90e960334d164f2db9701333
SHA512

7d16d9064d551554a548e3ef1e336a7f7df058b3d5f8df9eaca5fd9f98b5f77d0e86568b7f92f285c9da1c47220e3c456c8a849e57af7f962222c5dac7d0efaf
SSDEEP

98304:q+ywmVwUgEI+hKi3XPrvQoSCVvKgydKt6:qiVEIgfzrvKgyL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74f0624a86b6be1536a4d8fefe29717c_JaffaCakes118

Files

74f0624a86b6be1536a4d8fefe29717c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b531ff373f482856b48133fc9ccd799

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mmioOpenW
mmioDescend
mmioStringToFOURCCW
mmioSeek
mmioRead

comctl32

ord17

kernel32

LoadLibraryA
CompareStringA
GetFullPathNameW
QueryPerformanceCounter
GetFileAttributesW
CompareStringW
QueryPerformanceFrequency
GetTempPathW
OutputDebugStringA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
DeleteFileA
CloseHandle
ReadFile
CreateFileA
GetTempFileNameA
GetTempPathA
GetVersionExA
GetModuleHandleA
MapViewOfFile
GetFileSize
CreateFileMappingA
CreateFileW
UnmapViewOfFile
FindResourceA
GetSystemInfo
IsProcessorFeaturePresent
InterlockedExchange
InterlockedCompareExchange
GetFullPathNameA
FreeResource
DeleteFileW
SetFilePointer
VirtualFree
VirtualAlloc
lstrcmpiA
MoveFileA
MoveFileW
GetTempFileNameW
IsBadWritePtr
GlobalMemoryStatus
SetEndOfFile
ExpandEnvironmentStringsA
GetUserDefaultLCID
lstrlenW
GetCurrentProcessId
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentDirectoryA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
HeapCreate
HeapDestroy
GetModuleFileNameA
GetStdHandle
HeapSize
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetCPInfo
LCMapStringW
LCMapStringA
RaiseException
ExitProcess
RtlUnwind
GetStartupInfoA
GetCommandLineA
FindFirstFileW
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
GetLocaleInfoA
HeapReAlloc
GetTimeZoneInformation
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
VirtualQuery
GetFileAttributesA
GetLocaleInfoW
GetProcessHeap
HeapFree
HeapAlloc
DeleteCriticalSection
EnterCriticalSection
GetProcAddress
GetLastError
MultiByteToWideChar
LeaveCriticalSection
GetVersionExW
GetSystemDirectoryW
InitializeCriticalSection
GetModuleHandleW
FreeLibrary
GetCommandLineW
WriteFile
LockResource
SizeofResource
LoadResource
FindResourceW
LoadLibraryW
GetModuleFileNameW
Sleep
lstrcpyW
CreateProcessW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetDriveTypeA
SetEnvironmentVariableA

user32

SetCapture
PtInRect
ReleaseDC
OffsetRect
GetKeyboardLayout
GetDC
GetIconInfo
ReleaseCapture
GetKeyboardLayoutList
DestroyWindow
SetCursor
ScreenToClient
IsIconic
UnregisterClassW
GetParent
CallNextHookEx
GetClientRect
GetClassLongW
GetMenu
GetWindowPlacement
GetAsyncKeyState
GetWindowLongW
GetWindowTextW
SystemParametersInfoW
MonitorFromWindow
SetWindowLongW
GetCursorPos
SetMenu
ClipCursor
SetWindowsHookExW
RegisterClassW
AdjustWindowRect
DestroyMenu
GetMonitorInfoW
EnumDisplaySettingsW
SetRect
GetWindowRect
InvalidateRect
GetWindow
LoadCursorW
RegisterClassExW
TranslateMessage
PeekMessageW
SetWindowPos
CreateWindowExW
GetSystemMetrics
DispatchMessageW
EndPaint
PostQuitMessage
BeginPaint
LoadStringW
ShowWindow
CreateDialogParamW
MessageBoxW
SendMessageW
DefWindowProcW

gdi32

GetObjectA
DeleteDC
GetDIBits
DeleteObject
SelectObject
CreateCompatibleDC
GetObjectW
GetStockObject
GetTextMetricsA
SetBkMode
GetTextMetricsW
GetFontLanguageInfo
CreateFontIndirectA
CreateFontIndirectW
SetTextAlign
SetMapMode
ExtTextOutA
MoveToEx
ExtTextOutW
GetGlyphOutlineA
CreateDIBSection
GetCharacterPlacementA
GetCharacterPlacementW
SetBkColor
SetTextColor

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyA

shell32

ExtractIconW

ole32

CoInitialize
CoCreateGuid
CLSIDFromString
StringFromGUID2
CoCreateInstance

oleaut32

SysAllocString
SysFreeString

shlwapi

PathRemoveExtensionW
PathFindFileNameW
PathFileExistsW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 280KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b531ff373f482856b48133fc9ccd799

Headers

File Characteristics

Imports

winmm

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 280KB - Virtual size: 277KB

.data Size: 72KB - Virtual size: 123KB

.rsrc Size: 1.5MB - Virtual size: 1.5MB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 280KB - Virtual size: 277KB

.data
Size: 72KB - Virtual size: 123KB

.rsrc
Size: 1.5MB - Virtual size: 1.5MB