269678e6d4bab424d3830f837e583f9a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

269678e6d4bab424d3830f837e583f9a_JaffaCakes118
Size

740KB
MD5

269678e6d4bab424d3830f837e583f9a
SHA1

f289d965eee9bad53afd0ae57970bc5977704815
SHA256

45368b38056004dfafd33f0ad6b4223767ae487a521d314ebd36da2704cf4475
SHA512

a4626e14ef0e3db6c3108c78aff14cd3b714939356c480e8c2ef684cbe599a9f581de947cdd213ed21ba4218fc4916fffda562c0226b342451c0bfab9eefeb40
SSDEEP

12288:rmTqz5w+jF3mxCKc4hC1PI2XNrWoNU9ZM612gzYODlAUOeudBAv/WDZoIB:rOcwwIAU81PI2ZWou9Zd8gMOyUlunOWp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
269678e6d4bab424d3830f837e583f9a_JaffaCakes118

Files

269678e6d4bab424d3830f837e583f9a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

804435904005092170ce99cc7afaeef2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

PageSetupDlgW
GetOpenFileNameW
GetSaveFileNameW

gdi32

OffsetWindowOrgEx
GetOutlineTextMetricsW
ResetDCA
CreateMetaFileW
GetArcDirection
TranslateCharsetInfo
StartDocA
FillRgn
SetArcDirection
GetEnhMetaFileA
CopyEnhMetaFileW
EndDoc
GetAspectRatioFilterEx

kernel32

VirtualQuery
GetCPInfo
GetCurrentProcess
FreeEnvironmentStringsW
GetVersionExA
SetUnhandledExceptionFilter
MultiByteToWideChar
WriteFile
GetEnvironmentStrings
LCMapStringW
GetModuleHandleA
GetConsoleCP
CompareStringA
ReadFile
InterlockedIncrement
GetConsoleOutputCP
CreateFileA
GetLocaleInfoW
HeapCreate
OpenMutexA
GetLocaleInfoA
FlushFileBuffers
UnlockFile
EnterCriticalSection
LCMapStringA
GetProcessHeap
EnumCalendarInfoExA
GetStdHandle
HeapReAlloc
IsValidCodePage
WriteConsoleW
SetStdHandle
CloseHandle
LoadLibraryA
FreeLibrary
QueryPerformanceCounter
GetStringTypeA
GetCommandLineA
LeaveCriticalSection
UnhandledExceptionFilter
TlsSetValue
GetStartupInfoA
GetPrivateProfileSectionW
TlsAlloc
GetTimeZoneInformation
GetProcAddress
GetLastError
InitializeCriticalSection
ExitProcess
GetModuleFileNameA
DeleteCriticalSection
HeapSize
GetTimeFormatA
GetOEMCP
GetStringTypeW
GetTickCount
EnumSystemLocalesA
TransmitCommChar
VirtualFree
GetCurrentProcessId
GetCommandLineW
HeapDestroy
SetHandleCount
VirtualAlloc
RtlUnwind
WriteConsoleA
GetDateFormatA
SetLastError
GetSystemTimeAsFileTime
GetConsoleMode
GetCurrentThread
FreeEnvironmentStringsA
GetCurrentThreadId
SetFilePointer
GetModuleFileNameW
SetThreadPriority
GetFileType
IsDebuggerPresent
InterlockedExchange
WaitForSingleObjectEx
InterlockedDecrement
WideCharToMultiByte
OpenFile
HeapFree
IsValidLocale
TlsGetValue
SetEnvironmentVariableA
CompareStringW
GetACP
CreateMutexA
GetUserDefaultLCID
SetConsoleCtrlHandler
TerminateProcess
GetStartupInfoW
GetTimeFormatW
GetEnvironmentStringsW
GetPrivateProfileSectionNamesA
HeapAlloc
TlsFree
Sleep

user32

RegisterClassExA
GetKeyNameTextA
GetKeyboardLayoutNameW
LoadImageA
RegisterClassA
VkKeyScanW
CreateWindowExW
DrawMenuBar
GetDlgItem
RegisterWindowMessageW
CloseWindow
DestroyMenu
SendDlgItemMessageW
MsgWaitForMultipleObjectsEx
DefDlgProcA
TrackMouseEvent
LoadMenuIndirectW
DestroyWindow
MessageBoxA
LoadMenuW
SetTimer
ShowWindow
CharLowerW
WaitMessage
SetWindowPos
VkKeyScanExA
MessageBoxW
MsgWaitForMultipleObjects
CharToOemA
SetDlgItemTextW
GetDlgItemInt
EnableWindow
DefWindowProcA
CopyAcceleratorTableW
PaintDesktop
GetUserObjectInformationA
LoadMenuA
SetMenuDefaultItem
DdeClientTransaction
GetMenuStringA
TabbedTextOutA
SetClassLongA
SetMenuItemInfoW
SetScrollInfo

comctl32

DestroyPropertySheetPage
InitCommonControlsEx
ImageList_SetImageCount
ImageList_GetDragImage
ImageList_SetOverlayImage
DrawStatusTextA
ImageList_GetIconSize
CreateUpDownControl
ImageList_DrawIndirect
ImageList_Duplicate
CreatePropertySheetPageW
ImageList_EndDrag
ImageList_Destroy
CreateMappedBitmap
ImageList_DragEnter
CreatePropertySheetPage
ImageList_LoadImageA
ImageList_SetDragCursorImage
ImageList_GetImageInfo
_TrackMouseEvent
ImageList_GetIcon
ImageList_SetBkColor

advapi32

RegQueryValueExW
RegQueryValueA
CryptDecrypt
LookupSecurityDescriptorPartsW
StartServiceA
RegCloseKey
RegOpenKeyExA
CryptHashSessionKey
LogonUserA
LogonUserW
InitializeSecurityDescriptor
RegEnumValueA
AbortSystemShutdownW
CryptDuplicateKey
CryptSetHashParam
RegLoadKeyA
ReportEventW
CryptGetDefaultProviderA
CryptSetProviderExA
ReportEventA
CryptSignHashW
RegQueryValueW
CryptReleaseContext

Sections

.text
Size: 180KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 400KB - Virtual size: 398KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

804435904005092170ce99cc7afaeef2

Headers

File Characteristics

Imports

comdlg32

gdi32

kernel32

user32

comctl32

advapi32

Sections

.text Size: 180KB - Virtual size: 176KB

.rdata Size: 400KB - Virtual size: 398KB

.data Size: 132KB - Virtual size: 144KB

.rsrc Size: 24KB - Virtual size: 20KB

.text
Size: 180KB - Virtual size: 176KB

.rdata
Size: 400KB - Virtual size: 398KB

.data
Size: 132KB - Virtual size: 144KB

.rsrc
Size: 24KB - Virtual size: 20KB