40cae0b5e15d526624ac8e139bcb7c5c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

40cae0b5e15d526624ac8e139bcb7c5c_JaffaCakes118
Size

524KB
MD5

40cae0b5e15d526624ac8e139bcb7c5c
SHA1

e9e439043ed4051444a05489543134f6fe4570bd
SHA256

51c9a268f36c939f3ee7680bf406d522bd2c1b519574c790d8d72c697693fa03
SHA512

080b3bb225650a7eb1a86898fd36020b1668805e8e6297ba7e28ed05095402c5785011494da8c2748046e7155f18eaddd685738df69e08a32353c41be93c9f33
SSDEEP

12288:F9HcfOBzmmgFPJ2dErvr9TmnccMEP8vjj04k:F98a9g+Y1yWEkjj0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40cae0b5e15d526624ac8e139bcb7c5c_JaffaCakes118

Files

40cae0b5e15d526624ac8e139bcb7c5c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3c14127d9028f016dc96fa84fa6fe5b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassA
SetMenu
GetMessageTime
GetWindowTextA
IsCharAlphaA
LoadMenuIndirectA
RegisterClipboardFormatW
DdeInitializeA
SendMessageW
ChangeDisplaySettingsExW
MessageBoxA
GetMenuItemInfoW
GetActiveWindow
GetKeyboardLayoutNameA
IsWindow
SetWindowPos
GetKeyboardLayoutList
SetSystemCursor
ClientToScreen
WINNLSEnableIME
AdjustWindowRect
EqualRect
LookupIconIdFromDirectoryEx
GetWindow
PostMessageW
ChangeDisplaySettingsExA
EnumWindowStationsA
UnhookWinEvent
GetShellWindow
DdeQueryNextServer
SetWindowsHookW
EnumDisplaySettingsExA
GetMenuStringA
DdeSetUserHandle
ShowWindow
IsClipboardFormatAvailable
EnumDisplayDevicesW
SendMessageTimeoutW
DdeUninitialize
LoadCursorA
FreeDDElParam
GetParent
FindWindowExA
SetKeyboardState
SetCaretPos
IsRectEmpty
DlgDirListComboBoxA
UnpackDDElParam
ChangeClipboardChain
ShowWindowAsync
LoadStringA
GetMessageW
ModifyMenuW
CreateWindowExW
GetUserObjectInformationW
TranslateAcceleratorW
FindWindowA
TranslateMessage
CharPrevA
SendIMEMessageExW
GetDialogBaseUnits
EnumDisplaySettingsExW
EnableMenuItem
LockWindowUpdate
AttachThreadInput
GetKeyboardLayoutNameW
DlgDirSelectComboBoxExW
ToUnicode
SetMenuItemBitmaps
EnumDesktopsW
GetClipboardData
AppendMenuW
MessageBoxW
AnyPopup
ClipCursor
DdeQueryStringA
GetMonitorInfoW
DefWindowProcW
GetCaretPos
DestroyWindow
ShowCaret
RegisterClassExA
OpenClipboard
TrackPopupMenu
ToAscii
PackDDElParam
SetPropA
SetSysColors
DrawIconEx
GetWindowModuleFileNameA
GetDlgItemTextA
SetMessageQueue
DdeFreeStringHandle
MessageBeep

comdlg32

GetSaveFileNameA

gdi32

GetStockObject
GetDIBits
RoundRect
CreateDCA
GetCharWidth32W
GetDeviceCaps
DeleteObject
GetBoundsRect
GetObjectW
GetClipRgn
DeleteEnhMetaFile
CopyMetaFileW
GetTextColor
ArcTo
DeleteDC
GdiSetBatchLimit
CreateEllipticRgnIndirect
RealizePalette
EnumFontsA
CreateColorSpaceW
GetTextCharsetInfo
FixBrushOrgEx
GetTextAlign
SetColorSpace
IntersectClipRect
UpdateColors
GetGraphicsMode

advapi32

CryptEnumProvidersW
CryptAcquireContextA
LookupPrivilegeNameW
DuplicateTokenEx
CryptGetHashParam
LookupPrivilegeDisplayNameW
AbortSystemShutdownW
CryptDeriveKey
RegDeleteKeyA
CryptSetProviderW
CryptSetHashParam
CreateServiceA
AbortSystemShutdownA
RegQueryMultipleValuesW
RegReplaceKeyA
CryptSetProviderA
RegQueryValueW
StartServiceA
RegSaveKeyA
InitializeSecurityDescriptor

comctl32

ImageList_DragEnter
ImageList_SetImageCount
InitCommonControlsEx
CreateMappedBitmap
ImageList_GetBkColor
DrawStatusTextW
ImageList_Replace
ImageList_Draw
ImageList_EndDrag
InitMUILanguage
GetEffectiveClientRect
ImageList_BeginDrag
ImageList_ReplaceIcon
ImageList_SetDragCursorImage
CreateUpDownControl
ImageList_DrawEx
ImageList_SetIconSize
CreatePropertySheetPageW

wininet

HttpAddRequestHeadersA
HttpCheckDavCompliance

kernel32

GetCurrentProcess
SetConsoleCtrlHandler
TerminateProcess
SetHandleCount
GetStringTypeExW
GetModuleHandleA
CompareStringA
GetFileType
IsBadWritePtr
GetEnvironmentStringsW
ReadConsoleA
TlsGetValue
SetFileAttributesA
GetCurrentThread
lstrcmp
MoveFileA
GetStartupInfoA
LCMapStringA
GetProcessShutdownParameters
GetProcAddress
GetTimeZoneInformation
GetComputerNameW
DebugActiveProcess
IsBadReadPtr
LCMapStringW
GetAtomNameA
InterlockedExchange
DeleteAtom
TlsFree
SetThreadAffinityMask
WaitForDebugEvent
GetModuleFileNameA
GetOEMCP
TlsAlloc
ReadFile
TlsSetValue
CloseHandle
LeaveCriticalSection
EnumTimeFormatsW
GetLogicalDrives
FreeEnvironmentStringsW
GetSystemInfo
SetLastError
FreeResource
GetCommandLineW
CreateSemaphoreW
InterlockedDecrement
SetFilePointer
LoadLibraryA
DeleteCriticalSection
MultiByteToWideChar
FreeEnvironmentStringsA
EnumSystemLocalesA
GetConsoleCursorInfo
GetMailslotInfo
GetLocaleInfoW
FlushFileBuffers
GetUserDefaultLCID
SetStdHandle
lstrcmpi
GetStartupInfoW
GetDateFormatA
GetTickCount
GetProcessAffinityMask
InitializeCriticalSection
GetStringTypeW
UnhandledExceptionFilter
VirtualProtect
GetACP
HeapValidate
VirtualFree
DebugBreak
EnumDateFormatsW
OpenEventA
FindFirstFileA
SetEnvironmentVariableA
OpenMutexA
QueryPerformanceCounter
IsValidLocale
GetLocaleInfoA
WriteProfileSectionA
HeapDestroy
GetLastError
WriteConsoleOutputCharacterW
VirtualProtectEx
CompareStringW
GetStringTypeA
GetShortPathNameA
FindFirstFileW
GetPrivateProfileStructA
VirtualAlloc
GetPrivateProfileStringA
HeapAlloc
EnumResourceTypesW
GetCurrentThreadId
CreateMutexA
GetPrivateProfileSectionW
HeapFree
WaitForSingleObjectEx
HeapCreate
GetSystemTimeAsFileTime
GetCompressedFileSizeA
GetCurrentProcessId
HeapReAlloc
ExitProcess
GetTimeFormatA
MapViewOfFile
FreeLibraryAndExitThread
SetCriticalSectionSpinCount
GlobalFindAtomW
FreeLibrary
HeapSize
GetSystemTimeAdjustment
WriteFile
GetEnvironmentStrings
CommConfigDialogA
EnumSystemCodePagesW
LocalShrink
GetModuleFileNameW
LocalFree
InterlockedIncrement
UnmapViewOfFile
VirtualQuery
GetCommandLineA
WideCharToMultiByte
MoveFileExW
EnterCriticalSection
FindAtomA
SetLocaleInfoA
LocalFlags
OutputDebugStringA
GetStdHandle
GetVersionExA
RtlUnwind
GetCPInfo
IsValidCodePage

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c14127d9028f016dc96fa84fa6fe5b0

Headers

File Characteristics

Imports

user32

comdlg32

gdi32

advapi32

comctl32

wininet

kernel32

Sections

.text Size: 132KB - Virtual size: 130KB

.rdata Size: 260KB - Virtual size: 259KB

.data Size: 108KB - Virtual size: 113KB

.rsrc Size: 20KB - Virtual size: 18KB

.text
Size: 132KB - Virtual size: 130KB

.rdata
Size: 260KB - Virtual size: 259KB

.data
Size: 108KB - Virtual size: 113KB

.rsrc
Size: 20KB - Virtual size: 18KB