949ce896ae3559b702a261d8415d1908_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

949ce896ae3559b702a261d8415d1908_JaffaCakes118
Size

416KB
MD5

949ce896ae3559b702a261d8415d1908
SHA1

7b9b89411bcdc9bf3fa1540f80479a2ca702baba
SHA256

e5b3df4544796c167c5a4e67114c6daac78b907de75d5703d172e60ab337e1ff
SHA512

b5560496faa738111c997f646835b278a9113f612e44f17c192bc177b5f86d56e54344d255c3787ee7cce0f9de2792551af66c22b8cf91e563cb669edc0f8b14
SSDEEP

6144:0Fv+ole8NEc2zzgtH9WhFGcfqjXXDzK6gac75Z0lmE7Qo2WE:0FmoE8qTXgteqjDgac75K3e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
949ce896ae3559b702a261d8415d1908_JaffaCakes118

Files

949ce896ae3559b702a261d8415d1908_JaffaCakes118
.exe windows:6 windows x86 arch:x86

1247a234c63d626b0f8aac9440d78762

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\prescriptions\Sony?s\Syst.pdb

Imports

kernel32

SetPriorityClass
GetCurrentProcess
LocalAlloc
WriteConsoleW
SetFilePointerEx
FlushFileBuffers
HeapReAlloc
HeapSize
GetConsoleMode
GetConsoleCP
GetProcessHeap
GetStringTypeW
SetStdHandle
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetPriorityClass
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
CreateEventA
WaitForSingleObject
GetLastError
GetWindowsDirectoryA
MulDiv
lstrcatA
LoadLibraryA
GetProcAddress
CreateFileA
ReadFile
LoadLibraryW
CloseHandle
GetCurrentProcessId
FindClose
HeapAlloc
HeapFree
GetACP
GetFileType
GetFileTime
GetModuleHandleExW
ExitProcess
CreateThread
WaitForMultipleObjects
GetStdHandle
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
WriteFile
EncodePointer
SetLastError
LoadLibraryExW
CreateFileW
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterA
FillConsoleOutputAttribute
GetCommandLineW
SetConsoleCursorPosition
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetThreadLocale
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
InitializeCriticalSection
LoadLibraryExA
GetModuleHandleExA
GetEnvironmentVariableA
RtlUnwind
RaiseException

user32

GetWindow
GetWindowThreadProcessId
GetClassNameA
GetFocus
GetWindowTextA
GetSysColor
SendDlgItemMessageA
ReleaseDC
SetScrollPos
SetDlgItemTextA
WaitForInputIdle
GetTopWindow
GetSystemMenu
AppendMenuA
GetParent
SetTimer
GetCursorPos
GetWindowTextLengthA
GetSysColorBrush
OffsetRect
TrackPopupMenuEx
MapWindowPoints
SetWindowWord
GetClientRect
GetDC
GetWindowLongA
CreateWindowExA
SendMessageA
GetDlgItem
ShowWindow
GetSystemMetrics

gdi32

CreateFontA
CreateSolidBrush
SetTextJustification
GetDeviceCaps

comdlg32

ChooseColorA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
QueryServiceLockStatusA
QueryServiceObjectSecurity

shell32

Shell_NotifyIconA
DragQueryFileA
DragAcceptFiles

ole32

CoLockObjectExternal
RevokeDragDrop

avifil32

AVIStreamGetFrameOpen

winmm

mmioAscend

crypt32

CertGetNameStringA
CertEnumSystemStore

shlwapi

PathUnquoteSpacesA

pdh

PdhCollectQueryData

rpcrt4

UuidCreate
RpcStringFreeA
UuidToStringA

opengl32

wglUseFontBitmapsA
wglUseFontOutlinesA

imm32

ImmGetOpenStatus
ImmSetOpenStatus
ImmGetContext
ImmReleaseContext

winhttp

WinHttpSetCredentials
WinHttpSendRequest

snmpapi

SnmpUtilIdsToA
SnmpUtilOidToA

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.trace
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1247a234c63d626b0f8aac9440d78762

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

avifil32

winmm

crypt32

shlwapi

pdh

rpcrt4

opengl32

imm32

winhttp

snmpapi

Sections

.text Size: 108KB - Virtual size: 107KB

.text1 Size: 512B - Virtual size: 64B

.rdata Size: 85KB - Virtual size: 84KB

.data Size: 18KB - Virtual size: 22KB

.text Size: 6KB - Virtual size: 5KB

.tls Size: 512B - Virtual size: 13B

.data1 Size: 512B - Virtual size: 272B

.gfids Size: 512B - Virtual size: 268B

.trace Size: 9KB - Virtual size: 8KB

_RDATA Size: 1024B - Virtual size: 848B

.rsrc Size: 185KB - Virtual size: 185KB

.text
Size: 108KB - Virtual size: 107KB

.text1
Size: 512B - Virtual size: 64B

.rdata
Size: 85KB - Virtual size: 84KB

.data
Size: 18KB - Virtual size: 22KB

.text
Size: 6KB - Virtual size: 5KB

.tls
Size: 512B - Virtual size: 13B

.data1
Size: 512B - Virtual size: 272B

.gfids
Size: 512B - Virtual size: 268B

.trace
Size: 9KB - Virtual size: 8KB

_RDATA
Size: 1024B - Virtual size: 848B

.rsrc
Size: 185KB - Virtual size: 185KB