6930245af1e4c4250da28ea1f81270ba_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6930245af1e4c4250da28ea1f81270ba_JaffaCakes118
Size

264KB
MD5

6930245af1e4c4250da28ea1f81270ba
SHA1

22e27eef1a7582b54cc06647d5766f2bdcc8af93
SHA256

b14460f501e974c88f5e154011a02f7a7e2f4f13c1c60b24625c63e98aa1dbc6
SHA512

3796140b536ee31be3bb3bb1c1405133cfe2538f3a013729ce03ffdef4a36d23700a11cd58c23b66a54176c325af467fe95c3a1fa7f62e191a5977a7f176e2ab
SSDEEP

6144:2zpIT9mZ7acEGhFpwTMhxYlNqqogDkbO/SkF/a/0uFR/6q79:Wwc7a4hooxDAkbOaMa/0o/z9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6930245af1e4c4250da28ea1f81270ba_JaffaCakes118

Files

6930245af1e4c4250da28ea1f81270ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5493ecdcd746b846d41ba4697387c0be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsA
GetSystemDefaultLCID
GetLongPathNameW
OpenMutexA
SetComputerNameW
MoveFileA
EnumDateFormatsW
IsValidLocale
SetCurrentDirectoryW
GlobalAlloc
GetHandleInformation
CreateDirectoryW
AddAtomA
GetExitCodeThread
GetExitCodeProcess
ReadDirectoryChangesW
CreateDirectoryA
CreateMailslotW
DuplicateHandle
SetCalendarInfoW
GetWindowsDirectoryA
GetSystemDirectoryA
GetProcAddress
SearchPathA
GetSystemInfo
GetModuleHandleA
ReplaceFileA
SetErrorMode
GetModuleHandleA
FreeLibrary
ReplaceFileW
GetAtomNameW
SetLocaleInfoA
SetEvent
GetModuleFileNameW
WaitForSingleObject
lstrlenW
TlsAlloc
MoveFileW
lstrcmpiA
OpenWaitableTimerA
IsBadCodePtr
EnumCalendarInfoW
GlobalFindAtomW
GetMailslotInfo
GetVolumeInformationW
lstrcmpA
GetExpandedNameW
FindAtomW
lstrcpy
GetStartupInfoW
AddAtomW
lstrcpyW
GetEnvironmentVariableA
OpenSemaphoreW
lstrcatW
LoadResource
EnumDateFormatsA
GetLogicalDriveStringsA
CompareFileTime
FindResourceA
OpenEventW
Beep
lstrcpyn
GetVersion
GetCPInfo
GetModuleHandleW
FindResourceW
GetShortPathNameW
GetTempPathA
CreateSemaphoreW
GetLogicalDrives
GetTimeFormatA
GetCurrentThreadId

user32

MessageBoxIndirectA
LoadCursorA
OpenClipboard
RemoveMenu
MonitorFromPoint
keybd_event
GetCaretPos
CreateDialogParamA
MonitorFromWindow
GetKeyboardLayout
IsMenu
CreateDesktopW
GetMessageW
GetMenuItemInfoW
GetClassInfoA
CreateWindowExW
TrackPopupMenuEx
GetClassInfoW
DefWindowProcW
MessageBoxA
DialogBoxParamA
SetCursor
ShowCursor
GetSystemMetrics
LoadCursorW
CopyIcon
LoadImageA
GetCapture
CreateDesktopA
IsIconic
LoadMenuA
CreateDialogParamW
GetMenuItemCount
GetDlgItemInt
CreateDialogIndirectParamA
CharPrevA
SetWindowTextW
AdjustWindowRect
SendMessageW
mouse_event
GetActiveWindow
ShowWindow
GetSysColor
GetScrollPos
GetForegroundWindow
GetKeyboardType
InsertMenuItemW
RegisterWindowMessageA
LoadBitmapA
PostQuitMessage
DialogBoxParamW
GetDlgItemTextA
SetWindowPos
SetWindowTextA
wsprintfA
DialogBoxIndirectParamW
CharNextW
WaitMessage
CreatePopupMenu
MonitorFromRect
AppendMenuW
wvsprintfW
CharPrevW
SetTimer
DestroyIcon
RegisterWindowMessageW
SetFocus
SetActiveWindow
GetCursorPos
CheckMenuItem
GetFocus
ShowCaret
EndMenu
InvalidateRect
SendDlgItemMessageW
CreateAcceleratorTableA
SetWindowLongW
UnregisterClassA
GetSubMenu
EmptyClipboard

gdi32

GetRasterizerCaps
GetStockObject
UpdateICMRegKeyW
SetMetaFileBitsEx
RemoveFontResourceW
CreateDIBPatternBrushPt
CreateScalableFontResourceW
GetTextExtentPointW
CreateColorSpaceA
CreateFontIndirectW
CreateFontW
CreatePatternBrush
CreatePolygonRgn
CreateFontIndirectA
GetTextExtentPointA
GetMetaFileW
SelectBrushLocal
CreateBitmap
CreateDIBSection
UpdateICMRegKeyA
CreateCompatibleDC
GdiGetBatchLimit
CreateEllipticRgn
ExtCreateRegion
TranslateCharsetInfo
CreateICW
AddFontResourceA
CreateBitmapIndirect
CreateRoundRectRgn
CreateScalableFontResourceA
RemoveFontResourceExW
DeleteObject
CreateMetaFileA
CreateColorSpaceW
GetMetaFileA
CreateFontA
CreateICA

advapi32

OpenEventLogA
IdentifyCodeAuthzLevelW
SetSecurityDescriptorDacl
LsaICLookupSids

version

VerFindFileW
VerInstallFileW
VerInstallFileA
VerLanguageNameW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerFindFileA
VerQueryValueA

mprapi

MprAdminMIBEntryCreate
MprAdminInterfaceTransportAdd
MprAdminTransportGetInfo
MprInfoDuplicate
MprDomainQueryRasServer
MprConfigServerConnect
MprInfoBlockAdd
MprConfigBufferFree
MprAdminConnectionClearStats
MprAdminTransportSetInfo
MprDomainRegisterRasServer
MprAdminGetErrorString
MprConfigTransportEnum
MprAdminRegisterConnectionNotification
RasPrivilegeAndCallBackNumber
MprConfigInterfaceTransportEnum
MprAdminInterfaceGetHandle
MprConfigTransportGetHandle
MprAdminInterfaceGetCredentialsEx
MprConfigInterfaceTransportAdd
MprAdminMIBServerConnect
MprConfigServerInstall
MprInfoBlockAdd

crypt32

CryptGetDefaultOIDDllList
I_CertUpdateStore
I_CryptFindLruEntry
CertSerializeCRLStoreElement
CryptMsgCountersign
CertVerifyCertificateChainPolicy

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.C
Size: 111KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 5KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.srgyuO
Size: 112KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5493ecdcd746b846d41ba4697387c0be

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

version

mprapi

crypt32

Sections

.text Size: 12KB - Virtual size: 12KB

.C Size: 111KB - Virtual size: 164KB

.edata Size: 5KB - Virtual size: 276KB

.rdata Size: 6KB - Virtual size: 22KB

.data Size: 5KB - Virtual size: 93KB

.srgyuO Size: 112KB - Virtual size: 189KB

.edata Size: 4KB - Virtual size: 120KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 12KB - Virtual size: 12KB

.C
Size: 111KB - Virtual size: 164KB

.edata
Size: 5KB - Virtual size: 276KB

.rdata
Size: 6KB - Virtual size: 22KB

.data
Size: 5KB - Virtual size: 93KB

.srgyuO
Size: 112KB - Virtual size: 189KB

.edata
Size: 4KB - Virtual size: 120KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 1KB - Virtual size: 4KB