44326a3df27f91342a724229b82490d1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

44326a3df27f91342a724229b82490d1_JaffaCakes118
Size

190KB
MD5

44326a3df27f91342a724229b82490d1
SHA1

2a28fae03304b3103c016c313dfcebac28ea3a41
SHA256

1543a74cac22bcb08d2ceddf1aead6cef4c528cfbb905f183bc92d0af7820761
SHA512

96320a52ce3889f609087d785487d3e6cdc42556488cc38389e02fca8e187f8881395d92b6687e6f4cb77de8b5f6815ffae3650a4950341ce4fc429d8df81d50
SSDEEP

3072:hX3x7o5dsRIEBNHUgyM5vOBTD4yXJJ/ft/udNWX/5o0MqqDLy/pFP:hXhU5KRIEjBxo1nJJ/9j/6qqDLuf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44326a3df27f91342a724229b82490d1_JaffaCakes118

Files

44326a3df27f91342a724229b82490d1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

44aafa8853b73e1c60a74e49aed37673

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapFree
GetEnvironmentStringsW
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleFileNameA
ExitProcess
GetVersion
RtlUnwind
WriteFile
IsBadReadPtr
IsBadWritePtr
RemoveDirectoryW
IsBadCodePtr
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
_lclose
_lread
OpenFile
WideCharToMultiByte
_llseek
_lopen
GetModuleFileNameW
DeleteFileW
GetComputerNameW
InterlockedExchange
InterlockedCompareExchange
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CloseHandle
GetCurrentThread
SetFileAttributesW
WritePrivateProfileStringW
GetDriveTypeW
GetVolumePathNameW
GetFileAttributesW
CreateFileW
LoadLibraryW
lstrlenW
CompareFileTime
GetModuleHandleW
GetStringTypeW
SystemTimeToFileTime
GetLocalTime
CopyFileW
lstrcpyW
lstrcmpW
CompareStringA
GetProcAddress
GetModuleHandleA
Sleep
GetTickCount
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrcpyA
lstrlenA
lstrcmpA
lstrcpynA
LocalAlloc
LocalFree
GetVersionExA
GetCommandLineA
VirtualFree
VirtualProtect

user32

EndDialog
SetWindowLongW
SetFocus
DialogBoxParamW
MessageBoxW
SendMessageW
SetWindowTextW
PostMessageW
LoadStringW
GetActiveWindow
PostMessageA
PostThreadMessageA
RedrawWindow
ChangeDisplaySettingsA
ChangeDisplaySettingsExA
SetCursorPos
GetSystemMetrics
GetParent
GetWindowLongA
SetKeyboardState
GetKeyboardState
PtInRect
wsprintfA
SetTimer
SetWindowLongA
CreateWindowExA
DestroyWindow
KillTimer
DefWindowProcA
DestroyIcon
SystemParametersInfoA
GetPropA
SetWindowTextA
GetWindowTextW
ReleaseDC
GetDC
SendDlgItemMessageA
DrawTextA
SendMessageA
DrawIconEx
InflateRect
GetSysColor
SetCursor
LoadCursorA
GetFocus
GetDlgItem
EnumWindows
IsWindowVisible
CheckDlgButton
SetDlgItemTextA
InsertMenuItemA
EnableMenuItem
GetSystemMenu
UpdateWindow
InvalidateRect
CopyImage
GetClassLongA
SendMessageTimeoutA
GetWindowTextA
SetRectEmpty
SetWindowPos
SetForegroundWindow
IsIconic
ShowWindow
IsDlgButtonChecked
RegisterClassExA
GetMenuItemInfoA
LoadMenuA
EnableWindow
SendDlgItemMessageW
LoadCursorW
FindWindowW
GetWindowLongW
LoadStringA
GetDoubleClickTime
ReleaseCapture
SetCapture
MapWindowPoints
DrawFrameControl
OffsetRect
SetScrollInfo
ScreenToClient
ClientToScreen
ScrollWindowEx
SetScrollPos
BeginPaint
EndPaint
AdjustWindowRectEx
GetSubMenu
ModifyMenuA
GetMenuItemCount
DeleteMenu
GetClientRect
InvalidateRgn
ShowOwnedPopups
GetWindowRgn
GetWindowRect
IsWindowEnabled
GetLastActivePopup
IsWindow
GetForegroundWindow
CreateCursor
GetCursorPos
WindowFromPoint
GetCursor
DestroyCursor
CreateDialogParamA
CheckMenuItem
GetDesktopWindow

advapi32

RegSetValueExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
CryptSignHashW
RegDeleteValueW
CryptSetKeyParam
CryptCreateHash
CryptHashData
CryptDestroyHash
RegSetValueExW
CryptGetProvParam
CryptGetUserKey
CryptDestroyKey
CryptAcquireContextW
ImpersonateSelf
RegOpenKeyExW
RegQueryValueExW
CryptReleaseContext
OpenThreadToken
RegOpenKeyA

gdi32

CreateSolidBrush
CreateDIBSection
RealizePalette
SelectPalette
CreateCompatibleBitmap
OffsetRgn
SetRectRgn
CombineRgn
CreateRectRgn
GetRgnBox
GetRegionData
CreatePalette
CreateBitmap
SetDIBColorTable
FillRgn
SetBrushOrgEx
SelectClipRgn
SetBkMode
CreatePatternBrush
SetDIBits
CreateBrushIndirect
SetBitmapBits
CreatePen
SetROP2
SetArcDirection
Rectangle
Ellipse
Arc
PolyBezier
RoundRect
LineTo
MoveToEx
ExtTextOutA
TextOutA
GetCharWidthA
GetCharABCWidthsA
CreateFontA
GetStockObject
SetBkColor
SetTextColor
CreateCompatibleDC
BitBlt
DeleteDC
SelectObject
DeleteObject
CreateHatchBrush
StretchDIBits
GetTextMetricsA
GetObjectW
CreateDIBitmap
GetDeviceCaps
GetDIBits

rpcrt4

RpcBindingFromStringBindingW
RpcStringFreeW
RpcBindingFree
NdrClientCall2
RpcBindingSetAuthInfoW
RpcStringBindingComposeW

Sections

.text
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

44aafa8853b73e1c60a74e49aed37673

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

rpcrt4

Sections

.text Size: 150KB - Virtual size: 149KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 24KB - Virtual size: 67KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 150KB - Virtual size: 149KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 24KB - Virtual size: 67KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB