314a0c7757410478603a34c68e9ca4b2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

314a0c7757410478603a34c68e9ca4b2_JaffaCakes118
Size

349KB
MD5

314a0c7757410478603a34c68e9ca4b2
SHA1

ac9489f92b0b030076409ceadd873849ca93f7ae
SHA256

d8546c9b91ee2f8094abdf797de72cb97ab8541a5e18eb37833cacedc4a2c800
SHA512

d3866c8ff7405562fc678d3a5c17a1386cbce43cdd3f4414b4b692df4ed020d0b41988f5f258b477b8cde0c3f5687f66d1e051a5008f978dd42322806d5f08a7
SSDEEP

6144:UZ7J/AEul8uLybgvxr95S8svHghVggBbltmTOFOW3gtUM3t2Gt2:UxWJNeaR9z1ltCOFOjR3te

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
314a0c7757410478603a34c68e9ca4b2_JaffaCakes118

Files

314a0c7757410478603a34c68e9ca4b2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7df0d91cc3c4202609b6d1f97b8c684d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

input.pdb

Imports

msvcrt

strcmp
_snprintf
sprintf
memcpy
_vsnprintf
strrchr
wcsncpy
_wcsicmp
wcsstr
_except_handler3
_adjust_fdiv
malloc
memmove
_initterm
memset
free
_snwprintf

advapi32

ChangeServiceConfigW
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
RegEnumValueA
RegCloseKey
RegOpenKeyW
CloseServiceHandle
StartServiceW
ChangeServiceConfig2W
CreateServiceW
OpenServiceW
OpenSCManagerW
RegDeleteValueW
QueryServiceStatus
ControlService
RegOpenKeyExW
RegDeleteKeyW
RegOpenKeyExA
RegCreateKeyW
RegCreateKeyExW
RegSetValueExA
RegCreateKeyA
RegSetValueW
RegCreateKeyExA

gdi32

BitBlt
DeleteDC
ExtCreatePen
GetDeviceCaps
CreateDCW
AddFontResourceA
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
CreatePen
CreateSolidBrush
SelectObject
CreateFontIndirectW

kernel32

GetModuleHandleA
lstrcatW
FindResourceA
GetSystemDirectoryW
FreeLibrary
GetProcAddress
GetUserDefaultUILanguage
LoadLibraryA
GetLastError
Sleep
WaitForSingleObject
GetSystemDefaultUILanguage
LocalFree
CreateSemaphoreA
CloseHandle
LCMapStringW
InterlockedExchange
CreateEventW
ReleaseMutex
CompareStringW
EnterCriticalSection
GlobalMemoryStatusEx
GetPrivateProfileStringW
GetWindowsDirectoryW
GetThreadLocale
GetACP
GlobalFree
CreateProcessW
GetCommandLineA
ResetEvent
DeleteFileW
lstrcmpiW
lstrcmpW
MultiByteToWideChar
GetVersion
GetConsoleOutputCP
TlsAlloc
lstrcpyA
CreateThread
ReadFile
GetStdHandle
GetComputerNameW
CompareStringA
FormatMessageW
lstrcpynW
PulseEvent
DisableThreadLibraryCalls
QueryPerformanceCounter
OpenSemaphoreA
FindAtomA
GetTempPathA
GetTickCount
DeleteFileA
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
TlsFree
GetOEMCP
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsSetValue
OpenEventA
lstrlenA
AddAtomA
lstrlenW
lstrcpyW
OpenEventW
SetLastError
LocalAlloc
GetModuleHandleW
InterlockedIncrement
GetModuleFileNameW
WriteFile
HeapFree
CreateMutexA
FindResourceW
FindNextFileA
HeapAlloc
GetComputerNameExW
GetTempFileNameA
GetVersionExA
GetProcessHeap
HeapCreate
SetEvent
SetFilePointer
GetSystemDefaultLangID
FlushFileBuffers
SetFilePointerEx
SetFileAttributesA
LeaveCriticalSection
CreateFileA
WaitForSingleObjectEx
GetStartupInfoA
GlobalAlloc
ExpandEnvironmentStringsA
GetLocalTime
GetModuleFileNameA
GetAtomNameA
lstrcpynA
CreateMutexW

user32

FindWindowA
FindWindowW
CountClipboardFormats
UnregisterClassA
SetForegroundWindow
GetProcessDefaultLayout
wsprintfW
ReleaseDC
ShowWindow
UpdateWindow
SetWindowTextW
LoadIconA
SystemParametersInfoW
SendMessageA
GetInputState
MessageBoxW
LoadCursorA
LoadIconW
GetDesktopWindow
SetDlgItemTextW
GetCursor
SendDlgItemMessageW
FindWindowExA
TranslateMessage
GetSysColor
DefWindowProcA
GetDlgItem
GetCaretBlinkTime
GetFocus
SetFocus
PostQuitMessage
LoadStringW
CharNextW
DispatchMessageA
LoadMenuA
GetDoubleClickTime
GetForegroundWindow
GetMessageA
IsWindow
GetWindowLongW
SetWindowLongW
GetClipboardSequenceNumber
GetParent
GetDC
SendMessageW
GetActiveWindow

ole32

CoInitialize
CoUninitialize
CoCreateInstance

cfgmgr32

CM_Get_DevNode_Status

setupapi

SetupDefaultQueueCallbackW
SetupGetStringFieldW
SetupFindFirstLineW
SetupDiRegisterDeviceInfo
SetupCloseInfFile
SetupDiGetActualSectionToInstallW
SetupOpenInfFileW
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupDiGetSelectedDevice
SetupQueryInfVersionInformationW
SetupGetInfInformationW
SetupDiGetDriverInstallParamsW
SetupDiEnumDriverInfoW
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiClassGuidsFromNameW
SetupDiSetSelectedDevice
SetupDiOpenDeviceInterfaceRegKey
SetupDiEnumDeviceInterfaces
SetupDiSetClassInstallParamsW
SetupDiGetClassInstallParamsW
SetupDiGetWizardPage
SetupDiCallClassInstaller
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiCreateDeviceInfoW
SetupDiClassNameFromGuidW
SetupDiCreateDeviceInfoList
SetupDiRemoveDevice
SetupDiDeleteDevRegKey
SetupDiRemoveDeviceInterface
SetupDiDeleteDeviceInterfaceRegKey
SetupDiGetDeviceInterfaceDetailW
SetupFindNextLine
SetupDiCreateDeviceInterfaceRegKeyW
SetupOpenAppendInfFileW
SetupDiCreateDeviceInterfaceW
SetupTermDefaultQueueCallback
SetupDiInstallDevice
SetupInitDefaultQueueCallbackEx
SetupDiCreateDevRegKeyW
SetupDiSetDriverInstallParamsW

shell32

SHGetFolderPathW

mscms

InstallColorProfileW
AssociateColorProfileWithDeviceW

Sections

.text
Size: 99KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 213KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 621B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7df0d91cc3c4202609b6d1f97b8c684d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

advapi32

gdi32

kernel32

user32

ole32

cfgmgr32

setupapi

shell32

mscms

Sections

.text Size: 99KB - Virtual size: 96KB

.data Size: 213KB - Virtual size: 269KB

.bss Size: - Virtual size: 1KB

.tls Size: 1024B - Virtual size: 621B

.rsrc Size: 30KB - Virtual size: 30KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 99KB - Virtual size: 96KB

.data
Size: 213KB - Virtual size: 269KB

.bss
Size: - Virtual size: 1KB

.tls
Size: 1024B - Virtual size: 621B

.rsrc
Size: 30KB - Virtual size: 30KB

.reloc
Size: 4KB - Virtual size: 4KB