2a5c223df7be6e6ee959f9bb7b8367b7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2a5c223df7be6e6ee959f9bb7b8367b7_JaffaCakes118
Size

543KB
MD5

2a5c223df7be6e6ee959f9bb7b8367b7
SHA1

cd54c570e5e898bdd2d57c2d2dac823e909745a0
SHA256

9d9056a14c60471d8eb37c16e6135ed42d2b5ffc3576c16d18aa6a63ae0ae6f1
SHA512

40a1a6d120a5f4b72397552c6857e6c21b4287ba43f2b6f76da1dd0dee81b0d21d5e0991ecb79fe0e60a8cb973d80394405c86ee170b2e7d6ffc2608a396e3f2
SSDEEP

12288:oar3cGlWSQpfKS9R02EwQhvg98rZMDjBnOcZUjLvw:/3cJSQplRBE/hvSgYjB1mvw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a5c223df7be6e6ee959f9bb7b8367b7_JaffaCakes118

Files

2a5c223df7be6e6ee959f9bb7b8367b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef7ae5e56f03af89c67ce3b1c1d8f2f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\cpes.pdb

Imports

wininet

UnlockUrlCacheEntryFileW

comctl32

ImageList_LoadImageA
ImageList_DragMove
ImageList_SetIconSize
ImageList_Merge
CreateToolbarEx
InitCommonControlsEx
ImageList_Remove
ImageList_Duplicate
ImageList_Destroy
CreateToolbar
ImageList_SetFlags
ImageList_Create

gdi32

LineTo
SetArcDirection
GetTextMetricsW
FloodFill
CreateFontA
CreateDiscardableBitmap
DeleteDC
CreateDCW
GetObjectA
CombineTransform
SetMetaFileBitsEx
GetTextColor
DeleteObject
PatBlt
GetDeviceCaps
Polygon
PolyPolyline
ExcludeClipRect
PaintRgn
EnumFontFamiliesW
SelectObject
SetRectRgn
EnumFontFamiliesExW
LPtoDP
CreateRectRgn

kernel32

GetTimeFormatA
SetHandleCount
TryEnterCriticalSection
CompareStringA
GetStartupInfoW
GetWindowsDirectoryW
GetVersionExA
InitializeCriticalSection
EnumSystemLocalesA
GetCurrentProcess
VirtualQuery
CreateSemaphoreA
SetEnvironmentVariableA
TlsAlloc
CompareStringW
GetProcAddress
IsBadWritePtr
GetLocaleInfoW
InterlockedIncrement
LoadLibraryA
GetTimeZoneInformation
TlsSetValue
MultiByteToWideChar
VirtualFree
ExitProcess
VirtualAlloc
GetCurrentThread
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetCPInfo
GetModuleFileNameA
ReadConsoleOutputCharacterW
GetFileType
GetLocaleInfoA
GetTickCount
LCMapStringA
IsValidCodePage
HeapReAlloc
DebugBreak
GetPrivateProfileStringW
QueryPerformanceCounter
WideCharToMultiByte
LeaveCriticalSection
TerminateProcess
FreeEnvironmentStringsW
GetDateFormatA
TlsFree
DeleteCriticalSection
HeapCreate
GetSystemTimeAsFileTime
SetLastError
GetOEMCP
GetEnvironmentStrings
HeapAlloc
EnterCriticalSection
FlushFileBuffers
OpenMutexA
GetModuleHandleA
ReadFile
GetLastError
GetACP
GetSystemInfo
UnhandledExceptionFilter
VirtualProtect
GetConsoleTitleA
GetModuleFileNameW
HeapDestroy
GetUserDefaultLCID
SetStdHandle
CloseHandle
HeapSize
CreateMutexA
GetEnvironmentStringsW
GetCommandLineW
IsValidLocale
TlsGetValue
WriteFile
HeapFree
FreeEnvironmentStringsA
GetStringTypeW
LCMapStringW
GetStringTypeA
lstrlenW
GetStartupInfoA
RtlUnwind
InterlockedExchange
SetFilePointer
GetStdHandle

user32

DispatchMessageA
DefWindowProcW
wvsprintfW
CharLowerBuffA
LoadCursorFromFileA
UpdateWindow
ChildWindowFromPointEx
LockWindowUpdate
DdeCreateStringHandleA
InflateRect
MonitorFromRect
SystemParametersInfoW
CreateWindowExA
ChangeDisplaySettingsExW
DefWindowProcA
UnloadKeyboardLayout
CascadeChildWindows
GetProcessWindowStation
ToAsciiEx
RegisterHotKey
IsDlgButtonChecked
DdeGetLastError
ExcludeUpdateRgn
RegisterClassExA
RegisterClipboardFormatA
SetWindowWord
CharPrevExA
SetDoubleClickTime
ToAscii
GetSysColor
CharLowerBuffW
GetKBCodePage
FlashWindowEx
ShowCaret
GetWindowLongA
GetSystemMetrics
SetPropA
EnumDisplayDevicesW
InvertRect
DdeClientTransaction
GetMenuItemRect
GetDialogBaseUnits
DialogBoxIndirectParamW
SetClipboardViewer
CreateWindowStationW
ActivateKeyboardLayout
GetClassLongW
AppendMenuW
DrawTextA
SetRect
InsertMenuItemW
SetMenuInfo
WinHelpA
PeekMessageW
EnumThreadWindows
RegisterClassA
MessageBoxA
BroadcastSystemMessageW
GetDlgItemTextW
FlashWindow
IsDialogMessage
ShowWindow
SendMessageA
GetWindowModuleFileNameW
DrawTextExA
GetDlgItemInt
LoadMenuW
ClientToScreen
AnimateWindow
EndDialog
SetMenuItemInfoW
TabbedTextOutW
MoveWindow
EditWndProc
EnumDisplayDevicesA
DrawFocusRect
DestroyWindow
GetKeyboardLayoutNameA
WINNLSEnableIME
GetCursorInfo
DdeAddData
OpenDesktopW
SendNotifyMessageW
GetUserObjectSecurity
TranslateMDISysAccel
GetLastActivePopup
SetWindowContextHelpId
GetKeyNameTextA
LoadAcceleratorsA
UnhookWinEvent
SetActiveWindow
InsertMenuW
KillTimer
GetAncestor
GetMenuState
GetWindow
RegisterClipboardFormatW
RedrawWindow
CreateDialogIndirectParamA
wsprintfW
OemKeyScan

Sections

.text
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 247KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef7ae5e56f03af89c67ce3b1c1d8f2f8

Headers

File Characteristics

PDB Paths

Imports

wininet

comctl32

gdi32

kernel32

user32

Sections

.text Size: 169KB - Virtual size: 169KB

.rdata Size: 247KB - Virtual size: 246KB

.data Size: 112KB - Virtual size: 118KB

.rsrc Size: 13KB - Virtual size: 13KB

.text
Size: 169KB - Virtual size: 169KB

.rdata
Size: 247KB - Virtual size: 246KB

.data
Size: 112KB - Virtual size: 118KB

.rsrc
Size: 13KB - Virtual size: 13KB