4303b909bbe66ed0e909d92764247803_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4303b909bbe66ed0e909d92764247803_JaffaCakes118
Size

43KB
MD5

4303b909bbe66ed0e909d92764247803
SHA1

d2fc77e3c710834f8b07c36984a605baeb353a84
SHA256

da3d1926837583fb6dc1319557aaf4f2a89c48ca68a9587af54d5a88229b76f2
SHA512

312a60f546669be9f20e1212e67924778f51340fa604df9c3753c59eda260269b3019a3bc9e1f2c3ae982cc177cb49653e66685e0b24edb74a5acad27d18e50a
SSDEEP

768:ZxN20vAKtDKYR6PlSqDQiTrG5lPwShCCRwigvvhQfjJa8ksU:TN2EAKtnwJQ4S5lwsRfCQfjJg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4303b909bbe66ed0e909d92764247803_JaffaCakes118

Files

4303b909bbe66ed0e909d92764247803_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc7f33c780dd0a54269cf26f1bbeb091

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameW
VirtualProtect
FoldStringA
MoveFileWithProgressA
DnsHostnameToComputerNameA
GetBinaryType
DisableThreadLibraryCalls
HeapAlloc
WaitForSingleObject
WriteConsoleInputVDMA
SetCommConfig
CreateSemaphoreW
GetLastError
DeleteTimerQueueTimer
GetProcessHeap
FindVolumeMountPointClose
DuplicateHandle
RegisterWowExec
OpenWaitableTimerW
EnumResourceNamesA
UnlockFile
GetConsoleCursorInfo
EnumSystemLanguageGroupsA
GetShortPathNameW
FindResourceA
GetConsoleInputExeNameA
TryEnterCriticalSection
GetCurrentProcessId
FindClose
LocalCompact
SetConsoleNumberOfCommandsW
InterlockedCompareExchange
CreateWaitableTimerW
SetFilePointerEx
SleepEx
SignalObjectAndWait
DosPathToSessionPathA
LockResource
RegisterWaitForSingleObject
WriteProfileStringA
RequestWakeupLatency
ExitProcess
GetDiskFreeSpaceExW
GetConsoleTitleW

user32

GetWindowTextLengthW
DdeQueryStringA
DefMDIChildProcW
UpdatePerUserSystemParameters
SetMenuItemInfoA
MessageBoxIndirectW
GetCursor
DialogBoxParamW
InsertMenuItemA
GetMenuContextHelpId
GetCursorPos
GetClipCursor
GetParent
CopyAcceleratorTableW
TranslateAcceleratorA
MapWindowPoints
DialogBoxIndirectParamW
PrivateExtractIconsA
InitializeLpkHooks
GetClientRect
CallMsgFilterW
GetTabbedTextExtentW
SetDlgItemInt
IsDlgButtonChecked
GetMouseMovePointsEx
GetUserObjectSecurity
UnhookWinEvent
EnumDisplaySettingsExA
GetWindowTextLengthA
SwitchDesktop
ChangeMenuA
SetWindowTextW
InSendMessage
CreateIconFromResource
GetWindowTextA
GetWinStationInfo
IsChild
DefDlgProcA
CliImmSetHotKey
CharLowerW
RegisterSystemThread
DdeConnectList
DrawTextExA
InsertMenuW
ActivateKeyboardLayout
GetMessagePos

gdi32

LineTo
EngTextOut
BRUSHOBJ_ulGetBrushColor
Chord
EngLineTo
GetBrushOrgEx
GetFontLanguageInfo
SelectPalette
CreateICW
GetBkColor
Polyline
SetStretchBltMode
GetCharWidthInfo
GetMetaFileBitsEx
CreateEllipticRgnIndirect
GdiResetDCEMF
GdiGetCharDimensions
GdiCreateLocalMetaFilePict
PaintRgn
GdiGetSpoolFileHandle
GdiPlayEMF
GetEnhMetaFileBits
GdiEntry8
GdiPlayPrivatePageEMF
CreateFontA
DPtoLP
SetMiterLimit
FONTOBJ_pQueryGlyphAttrs
GetPolyFillMode

comdlg32

Ssync_ANSI_UNICODE_Struct_For_WOW
ReplaceTextA
PageSetupDlgA
CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW
ChooseFontA
ChooseColorA
PrintDlgA
GetFileTitleW
FindTextW
PrintDlgExW

psapi

GetMappedFileNameA
EnumProcessModules
GetDeviceDriverFileNameA
QueryWorkingSet
EmptyWorkingSet
GetModuleFileNameExA
GetModuleBaseNameA
EnumDeviceDrivers
GetDeviceDriverBaseNameA
GetModuleFileNameExW
GetDeviceDriverFileNameW

comctl32

ImageList_Merge
FlatSB_ShowScrollBar
ImageList_Remove
DestroyPropertySheetPage
PropertySheetW
ImageList_GetDragImage
CreateMappedBitmap
ImageList_AddIcon
GetMUILanguage
ImageList_GetImageRect
DrawStatusTextW
FlatSB_GetScrollProp
ImageList_SetFlags
FlatSB_SetScrollProp
ImageList_Create
FlatSB_SetScrollInfo
ImageList_GetImageCount

Sections

.text
Size: 4KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fc7f33c780dd0a54269cf26f1bbeb091

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

psapi

comctl32

Sections

.text Size: 4KB - Virtual size: 44KB

.data Size: 33KB - Virtual size: 36KB

.idata Size: 5KB - Virtual size: 8KB

.text
Size: 4KB - Virtual size: 44KB

.data
Size: 33KB - Virtual size: 36KB

.idata
Size: 5KB - Virtual size: 8KB