806942feeec8dce32e66ec7cfaf6afda_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

806942feeec8dce32e66ec7cfaf6afda_JaffaCakes118
Size

370KB
MD5

806942feeec8dce32e66ec7cfaf6afda
SHA1

677dcb1a31de1321afc58529f6f4b7bee0ad28b9
SHA256

5752529317e9cd84264d25ce1e30db01ab72afc542c8b0e567488cc543be8041
SHA512

ec5825ee92ab99e0edcfd582fc40ea4e415df879d2d94c049ce3810c27028cbadde844caf62b64bab7efc784c038fdf9ec637663fcd811534b906143748fe5aa
SSDEEP

6144:ut4o7sw5IkJyloTlYXlyiTBDirnvLYPsKiyWPh/:utnDIu5WVyiFinvLYPpWPp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
806942feeec8dce32e66ec7cfaf6afda_JaffaCakes118

Files

806942feeec8dce32e66ec7cfaf6afda_JaffaCakes118
.exe windows:6 windows x86 arch:x86

0a1bce981e4607af5b58d8ef6016aaa1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
TlsGetValue
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetStartupInfoW
DeleteCriticalSection
GetFileType
GetOEMCP
TlsSetValue
TlsFree
GetModuleHandleW
HeapSize
LoadLibraryExW
OutputDebugStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetStringTypeW
GetEnvironmentStringsW
GetACP
IsValidCodePage
GetCurrentThreadId
SetLastError
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcessHeap
GetModuleFileNameW
WriteFile
GetStdHandle
LCMapStringW
HeapReAlloc
FlushFileBuffers
SetStdHandle
WriteConsoleW
CloseHandle
GetTickCount
GlobalAlloc
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetProcAddress
GetLastError
HeapAlloc
HeapCreate
GetCPInfo
GetModuleHandleExW
ExitProcess
VirtualQuery
LeaveCriticalSection
EnterCriticalSection
DecodePointer
EncodePointer
GetCommandLineA
RaiseException
HeapFree
RtlUnwind
LoadLibraryA
GetThreadLocale
FormatMessageA
CreateFileW

user32

GetCursorPos
CreatePopupMenu
SendMessageA
EndPaint
BeginPaint
CallWindowProcA
RemovePropA
DefWindowProcA
HideCaret
DrawIcon
OpenClipboard
EmptyClipboard
SetClipboardData
GetPropA
SetPropA
PostQuitMessage
CreateWindowExA
GetForegroundWindow
GetAsyncKeyState
SetScrollInfo
GetWindowRect
DialogBoxIndirectParamA
EnumWindowStationsW
InvalidateRect
GetWindowTextA
GetWindowTextLengthA
LoadBitmapA
GetDlgItem
GetWindow
GetParent
GetDesktopWindow
IsWindow
SetWindowLongA
GetDlgCtrlID
GetWindowLongA
GetClientRect
MessageBoxA
GetDialogBaseUnits
SetFocus
ReleaseDC
GetSysColor
GetDC
DrawFrameControl
SetScrollPos
BeginDeferWindowPos
CloseClipboard

gdi32

ExcludeClipRect
StretchDIBits
Polyline
CreateFontIndirectA
Rectangle
CreatePen
CreateDIBSection
CreateCompatibleDC
SetBkColor
SetTextColor
SetBkMode
SelectObject
GetStockObject
DeleteObject
FillRgn
CreateSolidBrush

shell32

ord245
ord239

ole32

OleCreateStaticFromData
OleDuplicateData
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop

oleaut32

CreateErrorInfo

avifil32

AVIStreamRelease
AVIStreamOpenFromFileA
AVIStreamInfoA
AVIStreamWrite
AVIStreamSetFormat
AVIFileExit
AVIFileRelease
AVIFileInit
AVIStreamGetFrameClose
AVIFileCreateStreamA
AVIFileOpenA
AVIStreamGetFrame
AVIStreamGetFrameOpen

msvfw32

DrawDibClose

shlwapi

StrToIntExA

comctl32

ImageList_GetImageCount
ImageList_Create
ImageList_AddMasked

pdh

PdhBrowseCountersA

secur32

AcquireCredentialsHandleW
InitializeSecurityContextW
AcceptSecurityContext

opengl32

glLoadIdentity
glMatrixMode
glViewport

winhttp

WinHttpSetTimeouts
WinHttpReadData
WinHttpReceiveResponse
WinHttpSetOption
WinHttpSendRequest
WinHttpSetCredentials

dxva2

GetNumberOfPhysicalMonitorsFromHMONITOR

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trace
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 176KB - Virtual size: 951KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a1bce981e4607af5b58d8ef6016aaa1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

avifil32

msvfw32

shlwapi

comctl32

pdh

secur32

opengl32

winhttp

dxva2

Sections

.text Size: 118KB - Virtual size: 118KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 5KB - Virtual size: 13KB

.data1 Size: 1024B - Virtual size: 832B

.trace Size: 4KB - Virtual size: 4KB

.rsrc Size: 176KB - Virtual size: 951KB

.text
Size: 118KB - Virtual size: 118KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 5KB - Virtual size: 13KB

.data1
Size: 1024B - Virtual size: 832B

.trace
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 176KB - Virtual size: 951KB