452857455b870bcd4af2ed611816a37c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

452857455b870bcd4af2ed611816a37c_JaffaCakes118
Size

1.2MB
MD5

452857455b870bcd4af2ed611816a37c
SHA1

9dcbe368fe8a555f17f680d81f4f99f2008cd06f
SHA256

ada304723de1f3ce66eb8a4bacf0af0855b72a80d80fa0c1a86baab2909ac07d
SHA512

eaa573a9bd25074ca535735ddf275c75ed60a46ecd631a1fd97289b98386ff0e4be15611f5024aa7b4f0a6b1f5b5bf620c7390a6910b0975e78fe60612907f61
SSDEEP

24576:yxw/2jLlkPsaH/xYj5s/4YeH39YE7ZA6PTGWpZQBaiBCa/xNuCHk4c:QRL+safxk8+9YEHPTGpBaiBCI7uCHk4c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
452857455b870bcd4af2ed611816a37c_JaffaCakes118

Files

452857455b870bcd4af2ed611816a37c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

52e9b8848be2d870e7309a28db2ac9db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

o:\projects\Wrapper\app\Release\WrapperApp.pdb

Imports

winmm

PlaySoundA
timeGetTime

shlwapi

SHDeleteKeyA

setupapi

SetupIterateCabinetA

kernel32

GetLastError
WideCharToMultiByte
GetPrivateProfileStringA
GetPrivateProfileIntA
CopyFileA
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
GetACP
GetLocaleInfoA
GetVersionExA
RaiseException
GetVolumeInformationA
GetSystemDirectoryA
CloseHandle
OpenSemaphoreA
OutputDebugStringA
SetFileAttributesA
CreateEventA
WaitForSingleObject
SetEvent
CreateThread
GetCurrentThreadId
GetExitCodeProcess
TerminateProcess
CreateProcessA
GetModuleHandleA
CreateFileA
FindClose
GetDateFormatA
SystemTimeToTzSpecificLocalTime
IsBadWritePtr
GetSystemTime
Sleep
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
EnumSystemLocalesA
GetCurrentDirectoryA
EnumResourceNamesA
InitializeCriticalSection
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetSystemInfo
VirtualProtect
VirtualQuery
GetOEMCP
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
FlushFileBuffers
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
GetCurrentProcess
SetUnhandledExceptionFilter
GetProcAddress
TlsGetValue
TlsSetValue
GetTimeZoneInformation
TlsFree
SetLastError
TlsAlloc
GetCPInfo
LCMapStringW
LCMapStringA
IsBadReadPtr
HeapAlloc
ExitProcess
HeapFree
GetCommandLineA
DeleteFileA
GetFileAttributesA
FindFirstFileA
SetFilePointer
ReadFile
WriteFile
lstrlenA
GetModuleFileNameA
SetCurrentDirectoryA
InterlockedDecrement
InterlockedIncrement
IsValidLocale
IsValidCodePage
FileTimeToSystemTime
IsBadCodePtr
SetStdHandle
GetLocaleInfoW
LoadLibraryA
DeleteCriticalSection
FileTimeToLocalFileTime
GetDriveTypeA
GetFullPathNameA
GetStartupInfoA
RtlUnwind
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
LocalFree
MultiByteToWideChar

user32

RegisterClassExA
GetWindowLongA
DefWindowProcA
CreateWindowExA
ReleaseCapture
ClientToScreen
BeginPaint
EndPaint
InvalidateRect
SetCursor
PtInRect
LoadIconA
SystemParametersInfoA
UpdateWindow
ShowWindow
SetFocus
SendMessageA
SetWindowRgn
EnumChildWindows
GetClassNameA
GetWindowRect
SetWindowPos
LoadBitmapA
GetClientRect
KillTimer
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
LoadCursorA
CopyIcon
SetSystemCursor
PostThreadMessageA
MessageBoxA
IsWindow
PostQuitMessage
PostMessageA
SetWindowLongA
LoadStringA
GetParent
FindWindowA
SetRect
MoveWindow
SetCapture

gdi32

ExtCreateRegion
CreateCompatibleDC
DeleteDC
StretchBlt
SelectObject
BitBlt
CreateRectRgn
OffsetRgn
CombineRgn
GetObjectA
DeleteObject
CreateDIBSection

advapi32

RegOpenKeyA
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

VariantInit
VariantClear
VariantChangeType
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysAllocStringLen
SysFreeString

Sections

.text
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52e9b8848be2d870e7309a28db2ac9db

Headers

File Characteristics

PDB Paths

Imports

winmm

shlwapi

setupapi

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Sections

.text Size: 200KB - Virtual size: 198KB

.rdata Size: 44KB - Virtual size: 40KB

.data Size: 8KB - Virtual size: 14KB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 200KB - Virtual size: 198KB

.rdata
Size: 44KB - Virtual size: 40KB

.data
Size: 8KB - Virtual size: 14KB

.rsrc
Size: 32KB - Virtual size: 31KB