5a9c5bbeaa24aa2cbdb184bfa3e83947_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5a9c5bbeaa24aa2cbdb184bfa3e83947_JaffaCakes118
Size

1.1MB
MD5

5a9c5bbeaa24aa2cbdb184bfa3e83947
SHA1

2d3bfc4f88443ce06f246f82dd64a649cef31ea0
SHA256

d567025c4ae3878f4eb565527085ed23073a26601c6e0ef958d1c13c5b08844c
SHA512

c389bc1c5c2769da94f3043d78f307b2916ea445c68dccde4675b82a35ae8a35530ad978ebca06571bb06bdccf0bd3f6769cb7e29e015750607264514b693394
SSDEEP

12288:/vSeQ3MehiVQvgyYA8e/nK7Gng+qLOMPBCOlW5tJM3c3D3X5kVYrx:nShYVQ4y2WnK7qgzRMOqJMMTn4Yrx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a9c5bbeaa24aa2cbdb184bfa3e83947_JaffaCakes118

Files

5a9c5bbeaa24aa2cbdb184bfa3e83947_JaffaCakes118
.exe windows:4 windows x86 arch:x86

49e5aa623a07420bf64577493ecc6eaf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
SetFileTime
LeaveCriticalSection
EnterCriticalSection
SetErrorMode
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GlobalHandle
GetOEMCP
WritePrivateProfileStringA
FileTimeToSystemTime
RtlUnwind
HeapFree
HeapAlloc
RaiseException
TerminateProcess
HeapSize
HeapReAlloc
GetACP
GetTimeZoneInformation
LocalFileTimeToFileTime
HeapDestroy
VirtualFree
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTempPathA
FindResourceA
SizeofResource
LoadResource
LockResource
GetTempFileNameA
_lcreat
_lwrite
_lclose
SetFileAttributesA
DeleteFileA
GlobalSize
GlobalLock
GlobalAlloc
GetCurrentThread
GetVolumeInformationA
GetFullPathNameA
lstrcpynA
UnlockFile
MoveFileA
SetEndOfFile
GetCurrentProcess
LockFile
FlushFileBuffers
GetVersion
DuplicateHandle
GetLastError
lstrcmpiA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
WideCharToMultiByte
lstrcmpA
MultiByteToWideChar
InterlockedIncrement
lstrlenA
InterlockedDecrement
GetStartupInfoA
SetLastError
GetCommandLineA
Sleep
ExitProcess
GetModuleHandleA
VirtualAlloc
CreateThread
GlobalUnlock
UnhandledExceptionFilter
GetWindowsDirectoryA
WaitForSingleObject
CreateMutexA
SetThreadPriority
LoadLibraryA
ReleaseMutex
TerminateThread
GetTickCount
GetProcAddress
FreeLibrary
GetFileSize
GetModuleFileNameA
GetUserDefaultLangID
lstrcpyA
lstrcatA
_lread
MulDiv
GlobalReAlloc
_llseek
OpenFile
LocalFree
LocalAlloc
SystemTimeToFileTime
FileTimeToLocalFileTime
GetFileAttributesA
CloseHandle
GetVersionExA
ReadFile
SetFilePointer
WriteFile
GetDiskFreeSpaceA
CreateFileA
FindClose
FindFirstFileA
IsBadWritePtr
GlobalFree
FreeEnvironmentStringsA
HeapCreate

user32

GetClassNameA
AdjustWindowRectEx
SetFocus
GetFocus
GetSysColor
MapWindowPoints
IsWindowEnabled
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
CharUpperA
LoadStringA
ValidateRect
GetSysColorBrush
DestroyMenu
GetTopWindow
GetCapture
WinHelpA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
DestroyWindow
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetActiveWindow
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
IsWindowVisible
IsIconic
GetWindowPlacement
GetSystemMetrics
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
CharNextA
DialogBoxParamA
LoadIconA
FindWindowA
SetForegroundWindow
RegisterWindowMessageA
RegisterClassA
CreateWindowExA
GetMessageA
PostQuitMessage
GetParent
IsWindow
GetForegroundWindow
CopyIcon
MessageBeep
GetDlgItem
EndDialog
ScreenToClient
SetTimer
LoadBitmapA
KillTimer
GetDialogBaseUnits
UnionRect
SetWindowPos
InvalidateRect
InflateRect
DrawTextA
MessageBoxA
IsRectEmpty
ClientToScreen
GetClassInfoA
DefWindowProcA
LoadCursorA
GetDesktopWindow
FrameRect
GetWindowRect
wsprintfA
FillRect
PeekMessageA
TranslateMessage
DispatchMessageA
GetDC
ReleaseDC
CopyRect
EnableWindow
GetCursorPos
GetClientRect
GetWindowLongA
UnhookWindowsHookEx
GetWindow
ShowWindow
MoveWindow
PostMessageA
CallWindowProcA
UpdateWindow
SetRectEmpty
SetCursor
PtInRect
OffsetRect
SetWindowLongA
SendMessageA
IntersectRect
GetWindowTextA
SetWindowTextA
SystemParametersInfoA

gdi32

SetBkColor
SelectObject
CreateCompatibleDC
BitBlt
CreateCompatibleBitmap
CreateBitmap
CreatePatternBrush
GetDeviceCaps
RealizePalette
GetObjectA
GetPaletteEntries
StretchDIBits
SelectPalette
SetDIBitsToDevice
SetStretchBltMode
CreateDCA
GetStockObject
GetSystemPaletteEntries
GetDIBits
ResizePalette
SetSystemPaletteUse
SetPaletteEntries
Rectangle
CreatePen
RectVisible
PatBlt
CreateFontIndirectA
CreateFontA
SaveDC
RestoreDC
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
MoveToEx
LineTo
SetBkMode
DeleteDC
CreateSolidBrush
PtVisible
TextOutA
Escape
ExtTextOutA
DeleteObject
CreatePalette
GetClipBox
SetTextColor

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
SetFileSecurityA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
GetFileSecurityA

shell32

ShellExecuteA

comctl32

ord17

msvfw32

MCIWndCreateA

winmm

mciSendCommandA
PlaySoundA
waveOutReset
waveOutOpen
waveOutClose
waveOutUnprepareHeader

Sections

.text
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49e5aa623a07420bf64577493ecc6eaf

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

msvfw32

winmm

Sections

.text Size: 272KB - Virtual size: 271KB

.rdata Size: 36KB - Virtual size: 32KB

.data Size: 24KB - Virtual size: 49KB

.rsrc Size: 40KB - Virtual size: 38KB

.text
Size: 272KB - Virtual size: 271KB

.rdata
Size: 36KB - Virtual size: 32KB

.data
Size: 24KB - Virtual size: 49KB

.rsrc
Size: 40KB - Virtual size: 38KB