34de62ebb6c48d793c511fc02fddd8a4_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

34de62ebb6c48d793c511fc02fddd8a4_JaffaCakes118
Size

385KB
MD5

34de62ebb6c48d793c511fc02fddd8a4
SHA1

914e71eec69d4032f194995d0d03215d91607e37
SHA256

cac899f6112aeba7cfc8e73bfda1dc05b862439872edf5963eb973e642ce25a8
SHA512

49fefb666f5276be12209282ab1c87cedc432c2c36e362e308a2e98a41d0ca15cb952faa4c0367be67d5f7b4eb4ae7538fe415cd6bc715e112317fbef0795c42
SSDEEP

12288:pg7vQJSDn/u6iqnv03CFRaI6SvzIOvF6tf:pgEk72onD6S7PvFq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34de62ebb6c48d793c511fc02fddd8a4_JaffaCakes118

Files

34de62ebb6c48d793c511fc02fddd8a4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4dc89a3e34eddbf68477d4297193e4c3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcscpy
wcsncpy
wcspbrk
realloc
wcscmp
_wtol
wcscat
wcslen
_onexit
__dllonexit
_adjust_fdiv
_initterm
wcscspn
wcsspn
wcsncmp
_purecall
malloc
??2@YAPAXI@Z
??3@YAXPAX@Z
free
__CxxFrameHandler
_wcsupr
wcstoul
wcschr
wcstol
wcsncat
_ftol
_wcsicoll
_wtoi
wcsstr
_wcsicmp
_snwprintf
_ltow
swprintf

atl

ord11
ord10
ord21
ord16
ord15
ord23
ord22
ord18
ord32

advapi32

GetUserNameW
RegDeleteValueW
OpenThreadToken
RegEnumKeyExW
MapGenericMask
MakeSelfRelativeSD
GetSecurityDescriptorControl
GetSidLengthRequired
InitializeSid
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
LookupAccountSidW
GetSecurityDescriptorLength
GetAclInformation
AddAce
GetSecurityDescriptorDacl
InitializeAcl
GetAce
AddAccessAllowedAce
SetSecurityDescriptorSacl
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
LookupAccountNameW
OpenProcessToken
GetTokenInformation
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
GetLengthSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetValueExW
RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW

gdi32

SetStretchBltMode
GetObjectW
GetTextExtentPointW
SetBkMode
BitBlt
GetPixel
CreateBitmap
CreateCompatibleDC
StretchBlt
GetBkColor
ExtTextOutW
SelectObject
GetTextMetricsW
PatBlt
CreateFontIndirectW
DeleteObject
DeleteDC
GetDeviceCaps
SetBkColor
SetTextColor

kernel32

LoadResource
FindResourceW
MulDiv
TerminateThread
ResetEvent
DuplicateHandle
GlobalFree
GlobalSize
lstrcmpW
LocalFree
LocalAlloc
GetLocaleInfoW
IsBadReadPtr
PulseEvent
lstrcpyW
MultiByteToWideChar
lstrlenA
lstrlenW
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
GetLastError
CloseHandle
GetCurrentProcess
FlushInstructionCache
HeapAlloc
GetProcessHeap
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentThread
GetModuleHandleW
InitializeCriticalSection
DeleteCriticalSection
HeapFree
CreateThread
OutputDebugStringW
SetEvent
WaitForSingleObject
IsBadWritePtr
IsBadStringPtrW
CreateEventW
GetLocalTime
Sleep
TryEnterCriticalSection
GetTickCount
GetWindowsDirectoryW
DisableThreadLibraryCalls
LockResource

ole32

CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
StringFromIID
CoCreateInstance
StringFromGUID2
CoUninitialize
CoInitializeEx

oleaut32

VariantInit
VarBstrFromDate
SystemTimeToVariantTime
SysReAllocString
OleCreatePropertyFrame
SysAllocString
VariantTimeToSystemTime
VariantClear
SysStringLen
SysAllocStringLen
SysFreeString

shell32

ShellExecuteW

user32

CreateDialogParamW
SendDlgItemMessageW
SetScrollInfo
FindWindowExW
InflateRect
SetDlgItemTextW
WinHelpW
CheckDlgButton
CheckRadioButton
IsDlgButtonChecked
IsWindowEnabled
ValidateRect
UpdateWindow
SetRectEmpty
MessageBoxW
GetDialogBaseUnits
IsDialogMessageW
MoveWindow
LoadIconW
DefDlgProcW
GetMenuItemCount
GetScrollInfo
GetMenuItemID
GetWindowLongW
SetWindowPos
SetWindowLongW
GetWindowTextW
GetWindowTextLengthW
GetParent
RegisterClassExW
wsprintfW
LoadCursorW
GetClassInfoExW
CreateWindowExW
DefWindowProcW
EndDialog
CallWindowProcW
OffsetRect
EndPaint
GetClientRect
BeginPaint
GetDlgItem
SendMessageW
MapWindowPoints
GetWindowRect
SetFocus
DestroyWindow
IsWindow
InvalidateRect
LoadStringW
ShowWindow
GetActiveWindow
EnableWindow
SetCursor
DialogBoxParamW
SetWindowTextW
PostThreadMessageW
DispatchMessageW
TranslateMessage
PeekMessageW
MsgWaitForMultipleObjects
PostMessageW
RedrawWindow
ClientToScreen
DestroyMenu
TrackPopupMenu
CheckMenuItem
EnableMenuItem
GetCursorPos
GetSubMenu
LoadMenuW
SetClassLongW
GetClassLongW
LoadBitmapW
GetSysColorBrush
SetParent
ScreenToClient
GetDC
ReleaseDC
SetTimer
KillTimer
DrawTextW
GetSysColor
PtInRect

aclui

ord1

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.av1
Size: 349KB - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4dc89a3e34eddbf68477d4297193e4c3

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

atl

advapi32

gdi32

kernel32

ole32

oleaut32

shell32

user32

aclui

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 2KB - Virtual size: 1KB

.tls Size: 512B - Virtual size: 21B

.av1 Size: 349KB - Virtual size: 349KB

.CRT Size: 512B - Virtual size: 8B

.rsrc Size: 16KB - Virtual size: 15KB

.reloc Size: 512B - Virtual size: 136B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 2KB - Virtual size: 1KB

.tls
Size: 512B - Virtual size: 21B

.av1
Size: 349KB - Virtual size: 349KB

.CRT
Size: 512B - Virtual size: 8B

.rsrc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 512B - Virtual size: 136B