35418f2bea43f5da3c620acc18790b42_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

35418f2bea43f5da3c620acc18790b42_JaffaCakes118
Size

658KB
MD5

35418f2bea43f5da3c620acc18790b42
SHA1

6e1580a31c35ea05c52f01143c04f7c7dcaf05d0
SHA256

d032650acc4419b680de85267b6c276c1d59b3ea18b8dc766f9ea90b54d41646
SHA512

27398bcc56bde04e5aab4d8cba0626b0ad361c8663fb6d6a6cc1b89661cd57cd78d1bb17beebbbef9c9632061eca89b5bb00a773d1e0a3184e3bd49b5dd4eada
SSDEEP

12288:rS7hsR6sOE4CTC8t0qn0tTVJBRYW27XSo6pAryyy1LSL3G:rSFM63PTVJBE7Xz66ALSDG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35418f2bea43f5da3c620acc18790b42_JaffaCakes118

Files

35418f2bea43f5da3c620acc18790b42_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d8ab4f979d1fd807d3811be10ca0b5c3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

WSAStartup
WSACleanup
setsockopt
socket
recv
__WSAFDIsSet
send
WSAGetLastError
getsockname
getpeername
select
accept
listen
ioctlsocket
gethostbyname
connect
inet_ntoa
htons
htonl
bind
shutdown
closesocket
inet_addr

kernel32

GetStdHandle
OutputDebugStringA
GetCurrentProcessId
UnmapViewOfFile
CreateDirectoryA
SetFileTime
FindClose
FindNextFileA
FindFirstFileA
SetErrorMode
GetLogicalDriveStringsA
GetComputerNameA
GetCurrentThreadId
ReadFile
SystemTimeToFileTime
GetSystemTime
GlobalAddAtomA
GlobalDeleteAtom
GetVersionExA
GlobalUnlock
GlobalLock
GlobalAlloc
LockResource
LoadResource
SizeofResource
FindResourceA
SetProcessShutdownParameters
GetACP
GetCPInfo
HeapSize
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
GetModuleFileNameA
HeapCreate
HeapReAlloc
VirtualAlloc
VirtualFree
WriteConsoleA
ExitThread
GetStartupInfoA
GetCommandLineA
ExitProcess
GetModuleHandleW
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
Sleep
TlsGetValue
ResumeThread
TlsAlloc
GetCurrentProcess
GetCurrentThread
DuplicateHandle
TlsSetValue
SetThreadPriority
CreateSemaphoreA
ReleaseSemaphore
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
IsValidCodePage
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetModuleHandleA
InterlockedExchange
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
WriteFile
GetOEMCP
CloseHandle
DeleteFileA
MoveFileA
CreateFileA
SetFilePointer
SetEndOfFile
AllocConsole
FreeLibrary
LoadLibraryA
GetLastError
GetProcAddress
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
GetConsoleOutputCP
WriteConsoleW
CreateThread

user32

SetRect
GetMessageA
TranslateMessage
OpenInputDesktop
SetThreadDesktop
GetProcessWindowStation
GetUserObjectInformationA
ExitWindowsEx
MessageBeep
LoadIconA
VkKeyScanA
MapVirtualKeyA
GetAsyncKeyState
RegisterWindowMessageA
GetForegroundWindow
SetTimer
PostQuitMessage
GetClipboardOwner
GetClipboardData
EnumWindows
GetPropA
IsWindowVisible
SetPropA
RemovePropA
EmptyClipboard
SetClipboardData
CloseClipboard
DrawIconEx
GetIconInfo
RegisterClassExA
CreateWindowExA
SetClipboardViewer
FindWindowA
OpenDesktopA
EnumDesktopWindows
CloseDesktop
SystemParametersInfoA
KillTimer
ChangeClipboardChain
DestroyWindow
PostMessageA
PeekMessageA
WaitMessage
DispatchMessageA
GetCursorPos
GetThreadDesktop
IntersectRect
mouse_event
GetKeyboardState
keybd_event
EnumDisplaySettingsA
GetDC
GetClassNameA
ReleaseDC
LoadCursorA
WindowFromPoint
DefWindowProcA
GetSystemMetrics
SendMessageA
GetDesktopWindow
GetWindowRect
EqualRect
IsRectEmpty
GetWindowLongA
SetWindowLongA
OpenClipboard

gdi32

GetDeviceCaps
CreateCompatibleDC
RealizePalette
SelectPalette
CreatePalette
GetStockObject
CreateDIBSection
CreateCompatibleBitmap
SelectObject
GdiFlush
CombineRgn
CreateRectRgnIndirect
GetRegionData
GetBitmapBits
GetObjectA
GetDIBits
CreateDCA
ExtEscape
DeleteObject
CreateRectRgn
BitBlt
DeleteDC
GetSystemPaletteEntries

advapi32

ImpersonateLoggedOnUser
RevertToSelf
GetUserNameA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

vnchooks

SetKeyboardPriorityHook
SetMousePriorityHook
SetKeyboardPriorityLLHook
SetMousePriorityLLHook
UnSetHook
SetHook
SetKeyboardFilterHook
SetMouseFilterHook

Sections

.text
Size: 369KB - Virtual size: 369KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d8ab4f979d1fd807d3811be10ca0b5c3

Headers

DLL Characteristics

File Characteristics

Imports

wsock32

kernel32

user32

gdi32

advapi32

ole32

vnchooks

Sections

.text Size: 369KB - Virtual size: 369KB

.rdata Size: 60KB - Virtual size: 59KB

.data Size: 10KB - Virtual size: 21KB

.rsrc Size: 217KB - Virtual size: 217KB

.text
Size: 369KB - Virtual size: 369KB

.rdata
Size: 60KB - Virtual size: 59KB

.data
Size: 10KB - Virtual size: 21KB

.rsrc
Size: 217KB - Virtual size: 217KB