0a57e50ddba3e56233bfe04853f70164_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
0a57e50ddba3e56233bfe04853f70164_JaffaCakes118
Size 404KB
Sample240621-jst7vasbjd
SHA256 5f47791bcb8ab473edbdc66fcae1eabab13d091ba83be1fb3653de30f6f159e9
MD5 0a57e50ddba3e56233bfe04853f70164
SHA1 156d0e1e723b07c42bbbd9e3c056a6de3c6f5daa
SHA512 e242459180fbffe25037b1cb594dda2531bef07afb025762b80503b8843703bc7c8eab7eb84fad1cf26bf5917f4a1739533219c8d57c22ec2f8ead13cce9ad45
SSDEEP 6144:mPUEfBxW0mCx0/ml8F1lP6D1bUJV6RhxNQBDOi5uHStL6XZW85:mXpoCx0/ml8FIkIRqwHStLEIY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a57e50ddba3e56233bfe04853f70164_JaffaCakes118

File Explorer

0a57e50ddba3e56233bfe04853f70164_JaffaCakes118

.dll 404KB

0a57e50ddba3e56233bfe04853f70164_JaffaCakes118

IMPHASH b833fa66e2a4b6643fa5630623250fbd
SHA256 5f47791bcb8ab473edbdc66fcae1eabab13d091ba83be1fb3653de30f6f159e9
MD5 0a57e50ddba3e56233bfe04853f70164
SHA1 156d0e1e723b07c42bbbd9e3c056a6de3c6f5daa
SHA512 e242459180fbffe25037b1cb594dda2531bef07afb025762b80503b8843703bc7c8eab7eb84fad1cf26bf5917f4a1739533219c8d57c22ec2f8ead13cce9ad45
SSDEEP 6144:mPUEfBxW0mCx0/ml8F1lP6D1bUJV6RhxNQBDOi5uHStL6XZW85:mXpoCx0/ml8FIkIRqwHStLEIY
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

266240

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

winmm

timeBeginPeriod timeEndPeriod timeSetEvent timeGetTime

d3d9

Direct3DCreate9

gdi32

ExtTextOutW CreateCompatibleDC SetBkColor SelectObject GetTextMetricsW GetGlyphOutlineW DeleteObject DeleteDC FillRgn CreateSolidBrush CombineRgn CreateRectRgn CreateRectRgnIndirect CreateFontW

kernel32

CloseHandle LoadResource SetThreadPriority CreateSemaphoreW FindResourceExW WideCharToMultiByte InterlockedCompareExchange InitializeCriticalSection MultiByteToWideChar DeleteCriticalSection SetEvent WaitForSingleObject LeaveCriticalSection EnterCriticalSection WaitForMultipleObjects FlushFileBuffers CreateFileA ReadFile LCMapStringA GetConsoleMode GetConsoleCP SetFilePointer LoadLibraryA RtlUnwind IsValidCodePage GetOEMCP GetCPInfo GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount Sleep SetLastError TlsFree TlsSetValue TlsAlloc TlsGetValue LockResource WriteFile ExitProcess GetModuleHandleA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess HeapCreate GetCommandLineA GetThreadLocale GetLocaleInfoA GetACP GetProcessHeap HeapSize HeapReAlloc HeapFree HeapAlloc HeapDestroy lstrcmpiA GetModuleHandleW InterlockedExchange GetModuleFileNameA GetVersionExW DisableThreadLibraryCalls GetLastError VirtualFree ResetEvent CreateThread SizeofResource CreateEventW InterlockedDecrement ReleaseSemaphore FindResourceW InterlockedIncrement LCMapStringW GetStringTypeA WriteConsoleW GetConsoleOutputCP WriteConsoleA DuplicateHandle SetStdHandle GetCurrentThreadId VirtualAlloc lstrlenW lstrcmpW GetSystemInfo lstrcpynW GetCurrentProcess LoadLibraryW GetProcAddress FreeLibrary GetTickCount OutputDebugStringA lstrlenA GetVersionExA RaiseException GetStringTypeW GetStdHandle

user32

UnregisterClassA GetDesktopWindow LoadStringW MoveWindow CreateDialogParamW InvalidateRect SendMessageTimeoutW GetClassLongW GetParent UnionRect SetWindowPos SetRectEmpty SetDlgItemTextA PostQuitMessage SendDlgItemMessageA PostMessageW SetCursor SetWindowsHookExW EnumDisplayDevicesA GetMonitorInfoW CallNextHookEx GetWindowRect GetKeyState GetWindowLongW SendMessageW SetWindowLongW ShowWindow RegisterClassW KillTimer LoadCursorW SetTimer DestroyWindow AttachThreadInput SetParent GetWindowThreadProcessId MsgWaitForMultipleObjects ReleaseDC SetWindowTextW DispatchMessageW IntersectRect GetWindowPlacement PeekMessageW ScreenToClient GetDC IsWindowVisible GetClientRect CreateWindowExW GetWindowTextW DefWindowProcW GetDlgItem EnableWindow ValidateRect InflateRect UnhookWindowsHookEx

advapi32

RegSetValueW CryptReleaseContext RegCreateKeyExW RegEnumKeyExW RegDeleteKeyW RegCreateKeyW CryptGenRandom RegCloseKey RegQueryValueExW RegSetValueExW RegOpenKeyExW CryptAcquireContextW

ole32

StringFromGUID2 CoInitializeEx CoTaskMemAlloc CoTaskMemFree CoCreateInstance CoInitialize CoUninitialize CoFreeUnusedLibraries

oleaut32

SysFreeString VariantChangeType SafeArrayAccessData SafeArrayGetDim SafeArrayGetLBound SafeArrayGetUBound SysAllocStringLen VariantClear VariantInit SafeArrayUnaccessData SysAllocString

Name

.text

Size

174KB

Virtual Size

174KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

163KB

Virtual Size

164KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

0a57e50ddba3e56233bfe04853f70164_JaffaCakes118

winmm

d3d9

gdi32

kernel32

user32

advapi32

ole32

oleaut32

generic