5d5faf722aa744e5a31f700a4a1364af_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5d5faf722aa744e5a31f700a4a1364af_JaffaCakes118
Size

335KB
MD5

5d5faf722aa744e5a31f700a4a1364af
SHA1

f8d528f9d56f815b207b86e96f4737ee593e99a4
SHA256

1445f63a7de4c72c91a314683245623ad2e0c1ffa00d2482fa43d453da3b4d0f
SHA512

910eee4958652a1f06f0fe98ddc7aa4bba9e13634016a095f0d033f85c2a82cc620bf024166157d1c58d6bf39339d1471c5155290abe393a4680cf5acc7bd092
SSDEEP

6144:H7C/Mw00jafr8dfoxLSmcQQpD4taqCO/hS2X+:bOj0r8CxL4HsNhS2X+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d5faf722aa744e5a31f700a4a1364af_JaffaCakes118

Files

5d5faf722aa744e5a31f700a4a1364af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4ad6c8c24801d40f4890f08b9ad86cbb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

shlwapi

SHDeleteKeyW
PathFileExistsW

ws2_32

WSAStartup
WSACleanup

imm32

ImmGetCompositionStringW
ImmGetVirtualKey
ImmNotifyIME
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionFontW
ImmSetCompositionWindow
ImmGetContext

msvfw32

ICCompressorFree
ICCompressorChoose

wininet

HttpAddRequestHeadersW
InternetErrorDlg

winmm

waveOutReset
waveOutPrepareHeader
waveOutOpen
waveOutUnprepareHeader
waveOutClose
timeSetEvent
timeKillEvent
waveOutWrite
waveOutGetDevCapsW
mmioAscend
mmioClose
mmioCreateChunk
mmioDescend
mmioOpenA
mmioOpenW
mmioRead
mmioWrite
timeBeginPeriod
timeGetTime
timeGetDevCaps
timeEndPeriod

kernel32

LocalAlloc
LocalFileTimeToFileTime
LocalFree
LockResource
MapUserPhysicalPages
MapViewOfFile
MoveFileW
MulDiv
MultiByteToWideChar
OpenEventW
OpenProcess
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryW
ResetEvent
ResumeThread
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetLastError
SetThreadPriority
SizeofResource
SystemTimeToFileTime
TerminateProcess
TlsGetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
WideCharToMultiByte
HeapAlloc
_llseek
_lread
lstrcmpW
lstrcmpiW
lstrcpynW
lstrlenW
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalFree
GetVersionExW
GetVersionExA
GetVersion
GetTimeFormatW
GetTickCount
GetThreadPriority
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDirectoryA
GetSystemDefaultLangID
LoadResource
GetStartupInfoW
GetProcessHeap
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetMailslotInfo
GetLogicalDrives
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameA
GetFileTime
GetFileSize
GetFileInformationByHandle
GetFileAttributesW
GetFileAttributesExW
GetExitCodeProcess
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetComputerNameExA
GetACP
FreeLibrary
FormatMessageW
FormatMessageA
FlushFileBuffers
FindResourceW
FindNextFileW
FindFirstFileW
FindFirstFileExW
FindFirstFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
FatalAppExitA
ExitThread
ExitProcess
EnterCriticalSection
DuplicateHandle
DosDateTimeToFileTime
DeleteFileW
DeleteFileA
DeleteCriticalSection
DebugBreak
CreateThread
CreateSemaphoreW
CreateProcessW
CreateMutexA
CreateMailslotA
CreateFileW
CreateFileMappingW
CreateFileA
CreateDirectoryW
CopyFileW
CompareStringW
CompareFileTime
CloseHandle
HeapFree
LoadLibraryA
LeaveCriticalSection
IsDBCSLeadByte
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
GetStdHandle
InitializeCriticalSection
LoadLibraryW
WriteFile

gdi32

SetTextColor
SetTextAlign
SetStretchBltMode
SetRectRgn
SetPolyFillMode
SetPixelV
SetPixel
SetMapMode
SetDIBitsToDevice
SetDIBits
PlayEnhMetaFileRecord
PatBlt
PaintRgn
OffsetRgn
MoveToEx
ModifyWorldTransform
MaskBlt
LineTo
LPtoDP
SetBrushOrgEx
SetBkMode
SetBkColor
SetBitmapBits
SelectPalette
SelectObject
SelectClipRgn
SelectClipPath
SaveDC
RoundRect
RestoreDC
Rectangle
RectVisible
RealizePalette
PtVisible
PolylineTo
Polyline
Polygon
UnrealizeObject
TranslateCharsetInfo
TextOutW
StrokePath
StretchDIBits
StretchBlt
StartPage
StartDocW
SetWinMetaFileBits
IntersectClipRect
GetWorldTransform
GetWindowOrgEx
GetWindowExtEx
GetViewportOrgEx
GetViewportExtEx
GetTextMetricsW
GetTextExtentPoint32W
GetTextExtentExPointW
GetTextColor
GetTextCharset
GetTextAlign
GetSystemPaletteEntries
GetStockObject
GetPolyFillMode
GetPixel
GetPath
GetPaletteEntries
GetOutlineTextMetricsW
GetObjectW
GetNearestPaletteIndex
GetNearestColor
GetMetaFileBitsEx
GetMapMode
GetKerningPairsW
GetGlyphOutlineW
GetFontData
GetEnhMetaFileW
GetEnhMetaFileHeader
GetDeviceCaps
GetDIBits
GetCurrentObject
GetClipRgn
GetClipBox
GetCharWidthW
GetBkMode
GetBkColor
GetBitmapBits
GdiFlush
FrameRgn
FillRgn
FillPath
ExtTextOutW
ExtCreatePen
Escape
EnumFontFamiliesW
EnumFontFamiliesExW
EnumEnhMetaFile
EndPath
EndPage
EndDoc
Ellipse
DeleteObject
DeleteMetaFile
DeleteEnhMetaFile
DeleteDC
DPtoLP
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePolygonRgn
CreatePen
CreatePatternBrush
CreatePalette
CreateMetaFileW
CreateHatchBrush
CreateFontIndirectW
CreateEnhMetaFileW
CreateDIBitmap
CreateDIBSection
CreateDIBPatternBrushPt
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmapIndirect
CreateBitmap
CombineRgn
CloseMetaFile
CloseFigure
CloseEnhMetaFile
BitBlt
BeginPath
PolyPolygon
PolyBezierTo

ole32

CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
OleDraw
ReleaseStgMedium
StgCreateDocfile
StgIsStorageFile
StgOpenStorage
CoFreeUnusedLibraries

oleaut32

SysFreeString
SysAllocString
VariantClear

shell32

DragQueryFileW
DragFinish
SHChangeNotify
DragAcceptFiles
SHGetDesktopFolder
SHGetFolderPathW
SHGetMalloc
SHGetSpecialFolderPathA
CommandLineToArgvW
SHCreateDirectoryExW
SHBrowseForFolderW
ShellExecuteA
ShellExecuteW

comdlg32

CommDlgExtendedError
ChooseColorW
GetFileTitleW
GetOpenFileNameW
GetSaveFileNameW
PrintDlgW

Sections

.text
Size: 229KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ad6c8c24801d40f4890f08b9ad86cbb

Headers

File Characteristics

Imports

version

shlwapi

ws2_32

imm32

msvfw32

wininet

winmm

kernel32

gdi32

ole32

oleaut32

shell32

comdlg32

Sections

.text Size: 229KB - Virtual size: 232KB

.rdata Size: 57KB - Virtual size: 60KB

.data Size: 13KB - Virtual size: 64KB

.idata Size: 9KB - Virtual size: 12KB

.rsrc Size: 25KB - Virtual size: 28KB

.text
Size: 229KB - Virtual size: 232KB

.rdata
Size: 57KB - Virtual size: 60KB

.data
Size: 13KB - Virtual size: 64KB

.idata
Size: 9KB - Virtual size: 12KB

.rsrc
Size: 25KB - Virtual size: 28KB