37ba09c9f7c3769963cc2dc0621280f3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

37ba09c9f7c3769963cc2dc0621280f3_JaffaCakes118
Size

324KB
MD5

37ba09c9f7c3769963cc2dc0621280f3
SHA1

7a27d6357d4cbf38bf7d18a7d4c41350a8feb047
SHA256

3bd6cfb5bfec78ff419e82b2711cc6375e1289a9562d733ad956a29fc5a8e2a9
SHA512

88ee9d0de661f78bb6bdcd6a954699c97e64db0932be097d633a1773009eb3c55638e722c5b6049f8056d4aa2daf236d506881387d7ab6d52882f8407d572838
SSDEEP

6144:kWUY2r2YUqsNCrI6+rz++IKEu9kCqhBq7Higy+prJzrx:klH6Aksx7uepS4+ptrx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37ba09c9f7c3769963cc2dc0621280f3_JaffaCakes118

Files

37ba09c9f7c3769963cc2dc0621280f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ad7735ce79562fb3492c17d2aa09cb4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\gvteldhksh.pdb

Imports

comctl32

ImageList_AddMasked
ImageList_DragEnter
ImageList_SetDragCursorImage
DrawStatusTextA
InitCommonControlsEx
ImageList_Write
ImageList_EndDrag
GetEffectiveClientRect
ImageList_DragMove
ImageList_GetImageCount
ImageList_GetFlags

wininet

FtpSetCurrentDirectoryA
InternetOpenUrlW
InternetReadFileExW
InternetWriteFile

user32

DefWindowProcW
GetFocus
TranslateMDISysAccel
GetScrollInfo
DdeInitializeA
SendMessageW
SendIMEMessageExW
RegisterClassExA
DestroyWindow
CreateIconFromResourceEx
SetWinEventHook
CharPrevExA
CreateWindowExW
PostThreadMessageA
ShowWindow
SetClipboardViewer
CharLowerBuffA
WINNLSGetIMEHotkey
DdeQueryStringW
CharUpperBuffA
SwitchToThisWindow
MessageBoxA
SystemParametersInfoA
GetAncestor
SetLastErrorEx
PostThreadMessageW
UnregisterDeviceNotification
SetCaretBlinkTime
RegisterClassA
EnumPropsW

gdi32

CheckColorsInGamut
PolyPolyline
SetICMProfileW
GetNearestPaletteIndex
SetAbortProc
EnumFontFamiliesA
GetTextCharset
FillPath
GetPolyFillMode
DrawEscape
GetColorSpace
SetTextCharacterExtra
CreateDIBPatternBrushPt
GdiPlayJournal
PlgBlt
EnumEnhMetaFile
GetSystemPaletteUse
CreateMetaFileW
ExtSelectClipRgn
CreateDCW
GetBitmapBits
GetColorAdjustment

shell32

ExtractAssociatedIconExW
RealShellExecuteA
SHQueryRecycleBinA
SheGetDirA

kernel32

FlushFileBuffers
GetCommandLineA
GetCurrentProcess
GetModuleHandleA
HeapFree
GetLocalTime
TerminateProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetFilePointer
SetLastError
GetStringTypeA
HeapDestroy
InterlockedDecrement
HeapAlloc
InterlockedIncrement
SetConsoleScreenBufferSize
UnhandledExceptionFilter
GetModuleFileNameA
GetFileType
LoadLibraryA
LCMapStringA
GetSystemTime
LCMapStringW
GetStartupInfoA
InterlockedExchange
TlsSetValue
HeapCreate
GetEnvironmentStrings
HeapReAlloc
GetStdHandle
SetHandleCount
MultiByteToWideChar
VirtualAlloc
GetTimeZoneInformation
GetProcAddress
VirtualQuery
GetConsoleTitleA
WriteFile
CloseHandle
GetOEMCP
GetVersion
GetCPInfo
RtlUnwind
SetEnvironmentVariableA
FreeEnvironmentStringsA
ExitProcess
EnterCriticalSection
GetCurrentProcessId
VirtualFree
TlsFree
GetSystemTimeAsFileTime
TlsAlloc
CompareStringW
GetStringTypeW
GetCurrentThread
TlsGetValue
OpenMutexA
WideCharToMultiByte
SetStdHandle
IsBadWritePtr
InitializeCriticalSection
QueryPerformanceCounter
GetTickCount
ReadFile
DeleteCriticalSection
LeaveCriticalSection
GetACP
CompareStringA
GetCurrentThreadId
GetLastError
CreateMutexA

comdlg32

FindTextA
GetSaveFileNameW

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad7735ce79562fb3492c17d2aa09cb4b

Headers

File Characteristics

PDB Paths

Imports

comctl32

wininet

user32

gdi32

shell32

kernel32

comdlg32

Sections

.text Size: 122KB - Virtual size: 122KB

.rdata Size: 76KB - Virtual size: 108KB

.data Size: 95KB - Virtual size: 95KB

.rsrc Size: 29KB - Virtual size: 28KB

.text
Size: 122KB - Virtual size: 122KB

.rdata
Size: 76KB - Virtual size: 108KB

.data
Size: 95KB - Virtual size: 95KB

.rsrc
Size: 29KB - Virtual size: 28KB