4d5bb3b5a0a3cbd8258c52ae285cbffe_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4d5bb3b5a0a3cbd8258c52ae285cbffe_JaffaCakes118
Size

264KB
MD5

4d5bb3b5a0a3cbd8258c52ae285cbffe
SHA1

dc471f9d2c5a467772b5e2a02c620ba013366fb3
SHA256

d17229ded70546ac23904ffefec186e4556ec329777060f6d6f9bbfd72df506e
SHA512

3db1c06254123ed03435d90d433549584c23f288bcf323fd3a587d54512d4f92a527a368420e09095406c466a2adfcb6f729e79600902792c651f541750fbace
SSDEEP

6144:GDokY+aPagcF/PocuZPDBI+Sy0qZ+PaFSyf:xL+aPhq3uZP9I0xS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d5bb3b5a0a3cbd8258c52ae285cbffe_JaffaCakes118

Files

4d5bb3b5a0a3cbd8258c52ae285cbffe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

652367b2d35634435795c2a306ad13a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pdh

PdhEnumObjectsA
PdhEnumObjectItemsA

kernel32

GetPrivateProfileIntA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
FlushFileBuffers
GetVersionExA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
SetStdHandle
LoadLibraryA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetFilePointer
IsBadCodePtr
IsBadReadPtr
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetPrivateProfileStringA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
InterlockedIncrement
SetUnhandledExceptionFilter
GetOEMCP
GetACP
GetCPInfo
HeapSize
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetCurrentThread
TlsGetValue
SetLastError
TlsFree
TlsAlloc
GetVersion
GetCommandLineA
GetStartupInfoA
HeapAlloc
ExitThread
TlsSetValue
GetCurrentThreadId
CreateThread
SetCurrentDirectoryA
GetCurrentDirectoryA
RaiseException
HeapFree
TerminateProcess
ExitProcess
RtlUnwind
WritePrivateProfileStringA
LoadResource
FindResourceA
LockResource
GlobalFree
GlobalUnlock
lstrcpyA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcatA
FreeLibrary
MulDiv
CreateSemaphoreA
ReleaseSemaphore
LocalAlloc
GlobalHandle
GlobalReAlloc
LocalReAlloc
lstrcpynA
GlobalFlags
GetProcessVersion
SetErrorMode
ReadFile
InterlockedExchange
WaitForMultipleObjects
ReadDirectoryChangesW
WaitForMultipleObjectsEx
InterlockedDecrement
WaitForSingleObjectEx
SetThreadPriority
GetLocalTime
GetEnvironmentVariableA
FindFirstFileA
FindClose
GetModuleHandleA
GetProcAddress
CreateFileA
FormatMessageA
LocalFree
SetEvent
GetDriveTypeA
OutputDebugStringA
lstrlenA
GetLastError
CloseHandle
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcess
SetPriorityClass
Sleep
CreateEventA
WaitForSingleObject
ResetEvent
GetSystemTime
WideCharToMultiByte

user32

PtInRect
GetClassNameA
LoadCursorA
WindowFromPoint
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetSysColorBrush
ReleaseDC
MessageBoxA
PostQuitMessage
PeekMessageA
EnableWindow
LoadIconA
UnregisterClassA
GetDC
ClientToScreen
DestroyMenu
LoadStringA
ShowWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
ScreenToClient
CopyRect
GetTopWindow
GetCapture
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
wsprintfA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
LoadMenuA
GetSubMenu
SetMenuDefaultItem
GetCursorPos
SetForegroundWindow
TrackPopupMenu
GetMenuItemID
WinHelpA
RegisterWindowMessageA
SetFocus
KillTimer
PostMessageA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
SetTimer

gdi32

ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
GetStockObject
SelectObject
RestoreDC
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
DeleteObject
SaveDC

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
RegSaveKeyA

shell32

Shell_NotifyIconA

comctl32

ord17

ole32

CoUninitialize
CoInitializeEx
CoCreateInstance
CoSetProxyBlanket

oleaut32

SysFreeString
SysAllocString
VariantClear

Sections

.text
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

652367b2d35634435795c2a306ad13a4

Headers

File Characteristics

Imports

pdh

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

Sections

.text Size: 184KB - Virtual size: 182KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 16KB - Virtual size: 27KB

.rsrc Size: 20KB - Virtual size: 17KB

.text
Size: 184KB - Virtual size: 182KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 16KB - Virtual size: 27KB

.rsrc
Size: 20KB - Virtual size: 17KB