11b8bb51907c0d3360c528e04de01a8d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
11b8bb51907c0d3360c528e04de01a8d_JaffaCakes118
Size 1.1MB
Sample240626-mq3mzstdnj
SHA256 f27d313a8aa3d76afad6c695a7f4097f38b3c418439f4b560e8359bf97aedfb7
MD5 11b8bb51907c0d3360c528e04de01a8d
SHA1 ae2fcd1019e29729d58834723516016fae1aa3fb
SHA512 fd04eb1b03ff569214fff88171cd211abdb76716279ea6be8699337878a7caec26f8d8374e4b0097aa1037c99220090e88ccf511d6d9c83aac5fd105d03aa149
SSDEEP 12288:ET+kPAQjQEVwYu7Hm4x5gEFelnJ0sqsKHmrbmJz:lkdVwYu7HmMelnJ0sqsgmOx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11b8bb51907c0d3360c528e04de01a8d_JaffaCakes118

File Explorer

11b8bb51907c0d3360c528e04de01a8d_JaffaCakes118

.exe 1.1MB

11b8bb51907c0d3360c528e04de01a8d_JaffaCakes118

IMPHASH cc8d466e91ad25f2757249b0b820f99d
SHA256 f27d313a8aa3d76afad6c695a7f4097f38b3c418439f4b560e8359bf97aedfb7
MD5 11b8bb51907c0d3360c528e04de01a8d
SHA1 ae2fcd1019e29729d58834723516016fae1aa3fb
SHA512 fd04eb1b03ff569214fff88171cd211abdb76716279ea6be8699337878a7caec26f8d8374e4b0097aa1037c99220090e88ccf511d6d9c83aac5fd105d03aa149
SSDEEP 12288:ET+kPAQjQEVwYu7Hm4x5gEFelnJ0sqsKHmrbmJz:lkdVwYu7HmMelnJ0sqsgmOx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

245829

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\googleclient\picasa37-stable\build\cdautorun\PicasaRestore.pdb

kernel32

LCMapStringW GetUserDefaultLCID WideCharToMultiByte Sleep FindClose GetCurrentThreadId EnterCriticalSection LeaveCriticalSection GetModuleFileNameA GetLocaleInfoA FileTimeToLocalFileTime FileTimeToSystemTime GetTimeZoneInformation CompareFileTime GetNumberFormatA SystemTimeToFileTime LocalFileTimeToFileTime InitializeCriticalSection DeleteCriticalSection InterlockedExchange ResetEvent SetEvent TerminateThread GetCurrentThread CloseHandle SetThreadPriority CreateEventA GetCurrentProcess WaitForSingleObject GetTickCount GetTempPathW GetLongPathNameW GetDriveTypeA GetTempPathA GetLongPathNameA FindResourceA SizeofResource LoadResource SetFileTime LockResource FreeLibrary GetProcAddress GetShortPathNameW CreateFileW GetModuleHandleA SetErrorMode GetFileSize SetFilePointer SetEndOfFile FlushFileBuffers UnmapViewOfFile ReadFile WriteFile VirtualFree VirtualAlloc GlobalAlloc GlobalLock GlobalFree GetVersion GetVersionExA LoadLibraryExA FormatMessageA LocalFree GetModuleFileNameW GetModuleHandleW LoadLibraryW LoadLibraryA GetDateFormatA LoadLibraryExW GetFileAttributesW CreateDirectoryW GetTimeFormatA GetFileAttributesA CreateDirectoryExW SetFileAttributesA RemoveDirectoryA DeleteFileW DeleteFileA GetFileAttributesExA FindFirstFileW GetShortPathNameA FindFirstFileA CreateProcessA CreateFileA FindFirstFileExW FindFirstFileExA SetFileAttributesW GetFileAttributesExW FindNextFileW FindNextFileA CreateDirectoryA GetDateFormatW CopyFileW GetTimeFormatW CreateDirectoryExA MoveFileW RemoveDirectoryW MoveFileExW CopyFileA MoveFileA CreateProcessW FindFirstChangeNotificationW MoveFileExA FindFirstChangeNotificationA CopyFileExW MoveFileWithProgressW CompareStringW CopyFileExA CompareStringA MoveFileWithProgressA QueryPerformanceCounter QueryPerformanceFrequency GetSystemInfo HeapFree HeapAlloc GetCommandLineA GetProcessHeap GetStartupInfoA HeapReAlloc GetSystemTimeAsFileTime ExitThread CreateThread SetStdHandle GetFileType ExitProcess HeapDestroy HeapCreate TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStdHandle TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage SetHandleCount HeapSize GetConsoleCP GetConsoleMode FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCurrentProcessId LCMapStringA RtlUnwind GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA ReleaseMutex GetLastError CreateMutexA MultiByteToWideChar InterlockedIncrement InterlockedDecrement

user32

SetActiveWindow IsWindow GetAsyncKeyState DefWindowProcA CreateWindowExW SetMenuItemInfoW GetMenuItemInfoW InsertMenuItemW AppendMenuW MessageBoxW CreateWindowExA SetWindowLongW CallWindowProcA GetWindowLongW RegisterClassA CallWindowProcW RegisterClassW UnregisterClassA UnregisterClassW SetMenuItemInfoA GetMenuItemInfoA GetClassInfoA SetClassLongW SetClassLongA SetWindowTextW InsertMenuItemA DialogBoxParamW SetWindowTextA AppendMenuA SendMessageW SetDlgItemTextW DefWindowProcW DialogBoxParamA CreateDialogParamW SetDlgItemTextA GetDC ReleaseDC SetFocus GetActiveWindow MessageBeep PostQuitMessage MoveWindow GetParent GetDesktopWindow GetWindowTextA GetWindowTextW GetWindowTextLengthA GetWindowTextLengthW GetSystemMetrics SystemParametersInfoA EnumThreadWindows SetWindowsHookExA CallNextHookEx MessageBoxA SetWindowLongA BeginPaint GetSysColor GetClassInfoExA EndPaint IsWindowVisible MapWindowPoints SetTimer SetForegroundWindow UnhookWindowsHookEx GetWindow FlashWindowEx SetCursor LoadImageA SendMessageA UpdateWindow GetWindowLongA GetDlgItem RegisterWindowMessageA GetClientRect EnumWindows GetWindowRect FindWindowA GetClassNameA SetWindowPos CheckDlgButton EnableWindow PostMessageA LoadCursorA EndDialog ShowWindow CreateDialogParamA DialogBoxIndirectParamW IsIconic DestroyWindow LoadIconA

gdi32

CreateCompatibleDC SelectObject DeleteDC BitBlt GetTextExtentPoint32W ExtTextOutW TextOutW CreateFontIndirectA DeleteObject Rectangle CreatePen GetStockObject CreateDIBSection GetTextExtentPoint32A ExtTextOutA TextOutA

comctl32

InitCommonControlsEx PropertySheetA CreatePropertySheetPageA PropertySheetW CreatePropertySheetPageW

comdlg32

GetOpenFileNameW GetSaveFileNameA GetOpenFileNameA GetSaveFileNameW

advapi32

RegEnumKeyExA RegQueryValueExW RegSetValueExW RegEnumKeyExW RegEnumValueW RegCreateKeyExA RegOpenKeyExW RegCreateKeyExW RegEnumValueA RegCloseKey RegSetValueExA RegQueryValueExA RegOpenKeyExA

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetPathFromIDListW SHGetMalloc ShellExecuteExA DragQueryFileA SHBrowseForFolderW SHGetFileInfoW SHGetSpecialFolderPathW ShellExecuteW ShellExecuteExW SHFileOperationA SHGetFileInfoA SHGetSpecialFolderPathA DragQueryFileW SHFileOperationW ShellExecuteA

ole32

CoTaskMemFree

oleaut32

SystemTimeToVariantTime SysFreeString VarBstrFromDate

Sharing

General

Malware Config

Signatures

File Explorer

11b8bb51907c0d3360c528e04de01a8d_JaffaCakes118

kernel32

user32

gdi32

comctl32

comdlg32

advapi32

shell32

ole32

oleaut32

generic