9a2bcbc7736d5e730d5b3ee04de272d1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

9a2bcbc7736d5e730d5b3ee04de272d1_JaffaCakes118
Size

531KB
MD5

9a2bcbc7736d5e730d5b3ee04de272d1
SHA1

07b058d118c550264f746897bf423b481c2cad1f
SHA256

daf8b457cedefb99791cd50fb0365b3408447b6f87728f56bd6dee8bc55d5f9d
SHA512

a8c0d18b343431585bdd002077de30c568ccee23beeec4b217453b6d7828e47f8b84cfc421303383ae9d303fe7f29ee5bf2ae6fba9601f278a6f9d92540bad69
SSDEEP

12288:5iVMVuw7JYEJ6eFfAjKl5z0t9JgIP7LxHz8ybt:UVEJ3ijKlyRgIjLxAWt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a2bcbc7736d5e730d5b3ee04de272d1_JaffaCakes118

Files

9a2bcbc7736d5e730d5b3ee04de272d1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

67afee97a7cca5f51134d36e37770439

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateFileW
SetEnvironmentVariableA
CompareStringW
GetStringTypeW
LCMapStringW
CreateFileA
LoadLibraryW
HeapReAlloc
SetStdHandle
SetFilePointer
WriteConsoleW
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
FreeEnvironmentStringsW
HeapCreate
GetModuleFileNameW
ReadFile
Sleep
GetFileType
SetHandleCount
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
GetConsoleMode
LoadLibraryA
SetEndOfFile
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetStdHandle
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterA
FillConsoleOutputAttribute
SetConsoleCursorPosition
lstrcpyA
FormatMessageA
ExitProcess
GetConsoleWindow
GetCurrentProcessId
HeapAlloc
GetVolumeInformationA
CreateToolhelp32Snapshot
Process32Next
CloseHandle
InterlockedDecrement
EnumResourceLanguagesA
GetUserDefaultUILanguage
GetDateFormatA
GetProcAddress
lstrlenA
GetModuleFileNameA
LoadLibraryExA
BeginUpdateResourceA
GetConsoleCP
WriteFile
GetFileAttributesA
GetCurrentProcess
TerminateProcess
RtlUnwind
RaiseException
LocalFree
WideCharToMultiByte
MultiByteToWideChar
HeapSetInformation
GetStartupInfoW
GetModuleHandleA
GetEnvironmentStringsW
HeapFree
EncodePointer
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId
SetLastError
GetModuleHandleW
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsProcessorFeaturePresent
GetCommandLineA

user32

wsprintfA
TranslateMessage
GetMessageW
SetWindowLongA
SendMessageA
DispatchMessageW
CheckRadioButton
GetWindowLongA
EnableMenuItem
ShowScrollBar
GetDlgItem
LoadBitmapA
GetWindowRect
GetSystemMetrics
SetWindowPos
DefWindowProcA
LoadIconA
LoadCursorA
CreateWindowExA
ShowWindow
SetForegroundWindow
SetFocus
SystemParametersInfoA
GetClassNameW
GetSystemMenu
SendDlgItemMessageA
EndDialog
UpdateWindow
DestroyWindow
InvalidateRect
BeginPaint
DrawTextW
EndPaint
PostQuitMessage
MessageBoxW
GetWindowTextLengthA
GetWindowTextA
GetDC
EnableWindow
SetWindowTextA
ReleaseDC
GetWindowThreadProcessId
CopyImage
DrawTextA
GetClassLongA
SetClassLongA
GetClientRect

gdi32

RestoreDC
TextOutA
SelectObject
CreateCompatibleDC
GetPixel
CreateRectRgn
CombineRgn
DeleteObject
CreateCompatibleBitmap
BitBlt
GetObjectA
CreateBitmap
SetPixel
DeleteDC
CreateDIBSection
MaskBlt
GetMapMode
SetMapMode
DPtoLP
CreateFontIndirectA
SetTextColor
CreateFontW
CreatePatternBrush
SetBrushOrgEx
PatBlt
CreateSolidBrush
CreateFontA
SaveDC
GetDeviceCaps
GetTextExtentPoint32A

comdlg32

PrintDlgA

shell32

SHCreateShellItem
SHParseDisplayName

ole32

OleInitialize
CoGetClassObject

oleaut32

VariantClear

netapi32

NetShareGetInfo
NetWkstaUserGetInfo
NetGetDCName
NetApiBufferFree

shlwapi

PathCompactPathA

gdiplus

GdiplusStartup
GdipDisposeImage
GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP

secur32

EnumerateSecurityPackagesA

opengl32

glColor3f
glClear
glRectf

imm32

ImmAssociateContext

urlmon

CoInternetGetSession

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ipdata
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloz
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdat
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ldata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

67afee97a7cca5f51134d36e37770439

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

ole32

oleaut32

netapi32

shlwapi

gdiplus

secur32

opengl32

imm32

urlmon

Sections

.text Size: 85KB - Virtual size: 85KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 5KB - Virtual size: 12KB

.ipdata Size: 232KB - Virtual size: 231KB

.reloz Size: 105KB - Virtual size: 105KB

.rdat Size: 2KB - Virtual size: 2KB

.ldata Size: 3KB - Virtual size: 2KB

.rsrc Size: 68KB - Virtual size: 68KB

.text
Size: 85KB - Virtual size: 85KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 5KB - Virtual size: 12KB

.ipdata
Size: 232KB - Virtual size: 231KB

.reloz
Size: 105KB - Virtual size: 105KB

.rdat
Size: 2KB - Virtual size: 2KB

.ldata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 68KB - Virtual size: 68KB