2d2393e28f352e2245d349b7bdb412e1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2d2393e28f352e2245d349b7bdb412e1_JaffaCakes118
Size

948KB
MD5

2d2393e28f352e2245d349b7bdb412e1
SHA1

e5d4823383dd5f7c30b8630e7e38635d0d5d6a7c
SHA256

f3ae395caec509c0d7d65c3002129a7daac9bf12db73260954e64ecc1a7d30e1
SHA512

df0ffe4893c05539be42ba9de64b9ea7eb8b29e31076322674c18d270e398b039eece545b77d1a8789fdb7c402902764d8515bbcce9b293576b522573f750674
SSDEEP

24576:3f1lLY+UKbQXNrWHxwssGPAYRQ4SiOmXW+U314Ltz:3f1G+UKkKpjPAkwkaEz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d2393e28f352e2245d349b7bdb412e1_JaffaCakes118

Files

2d2393e28f352e2245d349b7bdb412e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

97b181fe8d26f2f0713057294ec60bbc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetFileAttributesExA
Beep
GetConsoleCursorInfo
LocalSize
SwitchToFiber
ReleaseMutex
SetSystemTime
GetLongPathNameA
GetBinaryTypeW
ClearCommBreak
CopyFileExW
GetConsoleMode
TlsGetValue
WritePrivateProfileStructA
GlobalFlags
IsBadWritePtr
ExpandEnvironmentStringsW
GlobalAddAtomW
CreateDirectoryA
GetTapeStatus
VirtualQueryEx
SetConsoleCursorPosition
GetBinaryTypeA
CreateMutexA
GlobalFindAtomW
ExitProcess
GlobalGetAtomNameW
SetEnvironmentVariableA
SetThreadLocale
lstrcmpA
FindFirstFileExW
IsBadReadPtr
GlobalFindAtomA
FormatMessageW
FindFirstFileA
FindCloseChangeNotification
RemoveDirectoryW
SetEndOfFile
CreateWaitableTimerA
GetSystemDirectoryW
GetDriveTypeW
ReleaseSemaphore
GetUserDefaultLCID
FreeLibraryAndExitThread
SearchPathW
GetCurrentDirectoryW
OutputDebugStringA
GetFileType
LocalReAlloc
WaitNamedPipeA
GetProcessHeap
VirtualLock
TryEnterCriticalSection
IsProcessorFeaturePresent
DeleteFiber
GetNumberFormatW
GetThreadPriority
GetDriveTypeA
EnumResourceNamesA
VirtualAllocEx
GetFileAttributesA
OpenMutexA
SetMailslotInfo
GetLocaleInfoW
PeekConsoleInputW
FreeResource

user32

SystemParametersInfoW
SetWindowsHookExW
LoadBitmapW
SwitchToThisWindow
LoadMenuW
SetProcessWindowStation
EnumWindowStationsA
GetClassNameA
EndPaint
EnableMenuItem
SetProcessDefaultLayout
IsMenu
GetDlgItemTextA
CreateMDIWindowW
UnregisterDeviceNotification
GetWindowTextLengthW
MapWindowPoints
InsertMenuItemW
GetScrollInfo
SendNotifyMessageW
DispatchMessageA
CreateCaret
SetClipboardData
GetWindowTextA
SetPropW
SwitchDesktop
CallNextHookEx
SendMessageTimeoutW
SendMessageA
CountClipboardFormats
keybd_event
IsCharLowerW
PtInRect
CheckMenuItem
ShowCursor
CallWindowProcW
GetWindowPlacement
EnableWindow
SetRectEmpty
HiliteMenuItem
SetWinEventHook
CharToOemBuffA
CreatePopupMenu
SetWindowTextA
LoadIconA
GetClientRect
GetPropA
GetActiveWindow
CheckDlgButton
GetSystemMetrics
GetCursorPos
TranslateAcceleratorW
DispatchMessageW
CreateDesktopA
CharUpperA
MessageBoxIndirectW
GetWindowInfo
GetGuiResources
BeginDeferWindowPos
MonitorFromRect
CreateDialogIndirectParamA
CopyAcceleratorTableW
GetTabbedTextExtentW
GetTopWindow
GetKeyboardLayoutNameA
PeekMessageW

gdi32

GetEnhMetaFilePaletteEntries
RectInRegion
SetBkMode
CopyMetaFileW
Rectangle
SetRectRgn
Polygon
RealizePalette
GetStretchBltMode
CreateFontIndirectW
SetPolyFillMode
ExtEscape
ChoosePixelFormat
ExtTextOutW
CloseFigure
ExtCreateRegion

advapi32

RegLoadKeyA
RegisterServiceCtrlHandlerW
RegDeleteValueA
ImpersonateNamedPipeClient
CryptVerifySignatureA
RegQueryValueW
RevertToSelf
BuildTrusteeWithNameW
SetTokenInformation
RegSetValueA
CopySid
RegOpenKeyW
RegOpenKeyExA
AbortSystemShutdownA
GetFileSecurityA
AdjustTokenPrivileges
RegDeleteValueW
CryptHashData
CryptDecrypt
LookupPrivilegeValueA
EnumDependentServicesW
RegCreateKeyExW
CryptReleaseContext

shell32

SHGetSpecialFolderLocation
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
Shell_NotifyIconA
SHLoadInProc
FindExecutableW

ole32

OleCreate
CoInitializeEx
ReadClassStm
OleGetIconOfClass
CoMarshalInterThreadInterfaceInStream
OleCreateFromData
OleBuildVersion

oleaut32

SafeArrayRedim
SafeArrayGetElement
SafeArrayCreate
SysStringLen

comctl32

ImageList_BeginDrag
_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathAppendW
SHStrDupW
PathCanonicalizeW
ChrCmpIW
PathRelativePathToW
PathCanonicalizeA
SHRegCloseUSKey
PathIsURLW
PathFindFileNameW
SHRegGetUSValueW
StrToIntExW
PathAppendA
StrFormatByteSize64A
StrStrIA
UrlCombineW
PathStripToRootA
PathAddBackslashA
StrStrW
AssocQueryStringW

Sections

.text
Size: 11KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 611KB - Virtual size: 611KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97b181fe8d26f2f0713057294ec60bbc

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

Sections

.text Size: 11KB - Virtual size: 228KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 611KB - Virtual size: 611KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 11KB - Virtual size: 228KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 611KB - Virtual size: 611KB

.rsrc
Size: 17KB - Virtual size: 16KB