167528d6814601d5d54f36a995d6f01c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

167528d6814601d5d54f36a995d6f01c_JaffaCakes118
Size

368KB
MD5

167528d6814601d5d54f36a995d6f01c
SHA1

00bda93f6e54eae9e8108852a056d1a06733c5a3
SHA256

0a48b34427e758bf74a9336c79550fd714d7577926437911365b51648ef3313f
SHA512

f5855d1d3ae30171511f956424d7558a268884ba60cd750a231783a4cc21e26182c82b305be83ddb2aca2ab648cd04d303c82e16c50651fa2a05bf6a6963f0b7
SSDEEP

6144:c81nHd2ban6OrZLwcF0VekGBGQA1GTh47EGs+72Z/bnq3BrhHs+/Lmp6FlUy:c81wWnXZMwTJDAkbGsLZjnq3BrhHfapE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
167528d6814601d5d54f36a995d6f01c_JaffaCakes118

Files

167528d6814601d5d54f36a995d6f01c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c9b78de2e463cefc2d69dd1fb6426727

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_vsnwprintf
free
_initterm
malloc
wcscmp
_except_handler3
_adjust_fdiv

gdi32

GetObjectW
SelectObject
CreateCompatibleDC
LineTo
MoveToEx
SetStretchBltMode
SetBrushOrgEx
RealizePalette
SelectPalette
CreateHalftonePalette
GetDeviceCaps
StretchBlt
CreateFontIndirectW
GetTextExtentPoint32W
SetLayout
SetTextColor
SetBkMode
CreateDIBSection
CreateSolidBrush
CreateCompatibleBitmap
BitBlt
CreatePen
Rectangle
Arc
Ellipse
CreatePenIndirect
SetBkColor
SetROP2
GetStockObject
DeleteDC
DeleteObject

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GlobalAlloc
GlobalUnlock
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
FreeLibraryAndExitThread
GetCurrentThreadId
Sleep
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
WaitForSingleObject
DuplicateHandle
ResetEvent
GetModuleFileNameW
GetWindowsDirectoryW
CreateMutexW
OpenFileMappingW
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
ReleaseMutex
CompareStringW
lstrcmpW
MoveFileW
CopyFileW
DeleteFileW
lstrcpynW
MulDiv
LoadLibraryW
GetProcAddress
FreeLibrary
GetTickCount
QueryPerformanceCounter
CreateEventW
CloseHandle
CreateThread
SetEvent
IsBadWritePtr
MultiByteToWideChar
lstrcpyW
lstrlenW
GetLastError
GetModuleHandleW
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
GlobalLock
LocalFree
LocalAlloc
ExitThread

ole32

CoUnmarshalInterface
CLSIDFromString
ReleaseStgMedium
CoCreateInstance
CoTaskMemFree
FreePropVariantArray
CoTaskMemAlloc
PropVariantClear
CoAllowSetForegroundWindow
CoUninitialize
CreateStreamOnHGlobal
CoInitialize

oleaut32

SysFreeString
SysAllocString
SysAllocStringLen

shell32

SHGetFileInfoW
DragQueryFileW

shlwapi

StrFormatByteSizeW
wnsprintfA

user32

CharNextW
MessageBeep
SetWindowsHookExW
LoadAcceleratorsW
CopyAcceleratorTableW
CreateAcceleratorTableW
KillTimer
DestroyAcceleratorTable
UnhookWindowsHookEx
MessageBoxW
PostThreadMessageW
CallNextHookEx
IsChild
TranslateAcceleratorW
LoadIconW
GetKeyState
OffsetRect
IntersectRect
CopyRect
MoveWindow
IsRectEmpty
IsWindowVisible
PostMessageW
RegisterWindowMessageW
FrameRect
GetWindowTextLengthW
GetWindowTextW
DrawFocusRect
GetCursorPos
GetCapture
ReleaseCapture
SetCapture
PtInRect
SendNotifyMessageW
SetTimer
MapWindowPoints
GetParent
SetDlgItemInt
ShowWindow
SetWindowTextW
GetFocus
SetFocus
GetSystemMetrics
LoadImageW
SetDlgItemTextW
SendDlgItemMessageW
CharUpperBuffW
EnableWindow
LoadCursorW
SetCursor
GetDlgItem
SendMessageW
EndDialog
GetWindowRect
GetDC
ReleaseDC
CopyIcon
RegisterClassW
GetWindowLongW
SetWindowLongW
DefWindowProcW
IsWindowEnabled
InvalidateRect
UpdateWindow
BeginPaint
GetClientRect
GetSysColorBrush
FillRect
EndPaint
DestroyIcon
LoadStringW
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
MapDialogRect
PostQuitMessage
DestroyWindow
EnableMenuItem
GetSystemMenu
SetForegroundWindow
DispatchMessageW
CharUpperW
TranslateMessage
IsDialogMessageW
GetMessageW
DialogBoxParamW
GetDlgItemInt
RegisterClipboardFormatW
PeekMessageW
MsgWaitForMultipleObjects
wsprintfW
GetIconInfo
FindWindowExW
SetWindowPos
GetMonitorInfoW
MonitorFromRect
GetDesktopWindow
IsWindow
DrawTextExW
InflateRect
DrawIconEx
GetSysColor
MonitorFromWindow
GetClassNameW
DrawTextW
WinHelpW
GetLastActivePopup
CreateWindowExW
CreateDialogParamW
RegisterClassExW

winmm

PlaySoundW

gdiplus

GdipCloneImage
GdipDrawImageRectRectI
GdipGetImageGraphicsContext
GdipSetImageAttributesThreshold
GdipSetImageAttributesColorMatrix
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageDecoders
GdipGetImageDecodersSize
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipAlloc
GdipFree

msimg32

AlphaBlend

advapi32

RegEnumKeyExW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey

Sections

.text
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.AAAA
Size: 337KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9b78de2e463cefc2d69dd1fb6426727

Headers

File Characteristics

Imports

msvcrt

gdi32

kernel32

ole32

oleaut32

shell32

shlwapi

user32

winmm

gdiplus

msimg32

advapi32

Sections

.text Size: 15KB - Virtual size: 16KB

.rdata Size: 7KB - Virtual size: 8KB

.data Size: 2KB - Virtual size: 4KB

.AAAA Size: 337KB - Virtual size: 400KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 15KB - Virtual size: 16KB

.rdata
Size: 7KB - Virtual size: 8KB

.data
Size: 2KB - Virtual size: 4KB

.AAAA
Size: 337KB - Virtual size: 400KB

.rsrc
Size: 4KB - Virtual size: 3KB