970b6c9690c21a8382036d9834c0e3b2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
970b6c9690c21a8382036d9834c0e3b2_JaffaCakes118
Size 668KB
Sample240605-dewwmada48
SHA256 6c349b8c7b8df9ab2edcdd2a0233552f2dc34795cd6401f18711a5f88d1f50f6
MD5 970b6c9690c21a8382036d9834c0e3b2
SHA1 972569574d582cd390d7fc96a4fc312c7c538662
SHA512 02d1a6ed67b39b14697b3c7df3d7330df4f2c0c2d09d0749122bafb00752cc1ee7c45cce04a68da8a9972d4455514b4407997a619325afce0b3e2cb7f7bb7d58
SSDEEP 6144:gdiE4zqXVY7PfBHnzA0F3JhJx4eS5xNMTy5fkLaMiLgLWL7SqaaYo5wzPLNQOIeG:gdw7hHnzAe3oe6xZ6zEPaexL62
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
970b6c9690c21a8382036d9834c0e3b2_JaffaCakes118

File Explorer

970b6c9690c21a8382036d9834c0e3b2_JaffaCakes118

.exe 668KB

970b6c9690c21a8382036d9834c0e3b2_JaffaCakes118

IMPHASH a7cde9b3fc4c56b6874e18b10a5eba09
SHA256 6c349b8c7b8df9ab2edcdd2a0233552f2dc34795cd6401f18711a5f88d1f50f6
MD5 970b6c9690c21a8382036d9834c0e3b2
SHA1 972569574d582cd390d7fc96a4fc312c7c538662
SHA512 02d1a6ed67b39b14697b3c7df3d7330df4f2c0c2d09d0749122bafb00752cc1ee7c45cce04a68da8a9972d4455514b4407997a619325afce0b3e2cb7f7bb7d58
SSDEEP 6144:gdiE4zqXVY7PfBHnzA0F3JhJx4eS5xNMTy5fkLaMiLgLWL7SqaaYo5wzPLNQOIeG:gdw7hHnzAe3oe6xZ6zEPaexL62
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

135287

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\Users\DODO\Videos\TransparentControl_src\TransparentControl\Release\TransparentControl.pdb

kernel32

HeapFree HeapReAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery RaiseException GetCommandLineA GetProcessHeap GetStartupInfoA ExitProcess HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualFree HeapDestroy HeapCreate GetStdHandle Sleep FreeEnvironmentStringsA GetEnvironmentStrings HeapAlloc GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetACP GetStringTypeA GetStringTypeW GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA RtlUnwind GetTickCount GetFileTime GetFileAttributesA FileTimeToLocalFileTime SetErrorMode CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile FileTimeToSystemTime GetThreadLocale GetOEMCP GetCPInfo GlobalFlags TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement WritePrivateProfileStringA GetCurrentProcessId CloseHandle GetCurrentThread ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA lstrcmpA FreeResource GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom LoadLibraryA lstrcmpW GetVersionExA FreeLibrary InterlockedDecrement GetModuleFileNameW SetLastError GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MulDiv FindResourceA LoadResource LockResource SizeofResource GetModuleHandleA GetProcAddress lstrlenA CompareStringW CompareStringA GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar FreeEnvironmentStringsW InterlockedExchange

user32

RegisterClipboardFormatA PostThreadMessageA ReleaseCapture SetCapture UnregisterClassA LoadCursorA GetSysColorBrush DestroyMenu SetWindowContextHelpId MapDialogRect GetDesktopWindow CreateDialogIndirectParamA GetNextDlgTabItem EndDialog GetWindowThreadProcessId SetCursor GetMessageA TranslateMessage GetActiveWindow GetCursorPos ValidateRect PostQuitMessage ShowWindow MoveWindow SetWindowTextA IsDialogMessageA GetMenuCheckMarkDimensions ModifyMenuA EnableMenuItem CheckMenuItem RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetCapture CallNextHookEx GetClassLongA GetClassNameA GetFocus IsWindow SetFocus GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup SetActiveWindow DispatchMessageA GetDlgItem DestroyWindow GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState SetForegroundWindow UpdateWindow GetMenu PostMessageA MessageBoxA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx EqualRect PtInRect LoadBitmapA GetClientRect InvalidateRect EnableWindow CopyRect SendMessageA GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos IntersectRect SystemParametersInfoA GetWindowPlacement GetSysColor EndPaint BeginPaint GetWindowDC ClientToScreen MessageBeep GetNextDlgGroupItem InvalidateRgn GrayStringA DrawTextExA DrawTextA SetRect IsRectEmpty CopyAcceleratorTableA CharNextA SetWindowsHookExA IsWindowEnabled CharUpperA OffsetRect DrawIcon AppendMenuA GetSystemMenu IsIconic GetWindowRect GetDC ReleaseDC LoadIconA GetSystemMetrics GetParent ScreenToClient SetPropA GetPropA RemovePropA GetWindow GetWindowLongA IsWindowVisible GetTopWindow GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState UnhookWindowsHookEx TabbedTextOutA SetMenuItemBitmaps

gdi32

DeleteDC CreateBitmap GetStockObject CreateRectRgnIndirect ExtSelectClipRgn GetMapMode GetBkColor GetTextColor GetRgnBox RectVisible PtVisible ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape ExtTextOutA GetObjectA GetWindowExtEx GetViewportExtEx DeleteObject GetClipBox SetMapMode SetTextColor SetBkMode SetBkColor RestoreDC SaveDC GetDeviceCaps StretchBlt BitBlt CreateCompatibleBitmap SelectObject CreateCompatibleDC TextOutA

msimg32

TransparentBlt AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

advapi32

RegEnumKeyA RegCloseKey RegSetValueExA RegCreateKeyExA RegQueryValueA CryptAcquireContextA RegDeleteKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyA

comctl32

_TrackMouseEvent ord17

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CoRevokeClassObject CoTaskMemAlloc CoTaskMemFree OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CLSIDFromProgID

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysStringLen SysFreeString SysAllocStringByteLen VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysAllocString

Sharing

General

Malware Config

Signatures

File Explorer

970b6c9690c21a8382036d9834c0e3b2_JaffaCakes118

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

generic