65db70d3bde8cab4ee6fc955548fb933_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

65db70d3bde8cab4ee6fc955548fb933_JaffaCakes118
Size

1.4MB
MD5

65db70d3bde8cab4ee6fc955548fb933
SHA1

f4b2810261631e7895489d9c097f788fa35c5930
SHA256

95975470125c1bca6801434105518e932b2bf0aca14ad626f2814e29f3b8c01f
SHA512

ac4cbfda3d7f6236f7e3c160d3b042930fd7d9e646abea49f3f57c53191773c66ae926b998fdb40d23c1a2c6415edc07ff019a148aa6884c11e655f360a2c0a9
SSDEEP

24576:ZhsROjFH2anRtRdYtJeIqybrF9xBhWU0B9FCXqB0ZEOMq+hbXfo5ax6qtOP3BcmT:ZtR28RdYtJJqybB9tWU0B9gg0ZEOMq+K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65db70d3bde8cab4ee6fc955548fb933_JaffaCakes118

Files

65db70d3bde8cab4ee6fc955548fb933_JaffaCakes118
.exe windows:4 windows x86 arch:x86

769b4857cac8ff4fd6bfd0fc5290f907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
SetFileTime
TlsFree
LocalAlloc
InterlockedDecrement
GetWindowsDirectoryA
FormatMessageW
FoldStringW
TlsSetValue
GetTimeFormatW
CreateFileMappingW
CreateFileA
GetUserDefaultUILanguage
GetSystemTimeAsFileTime
GetCommandLineA
lstrcpyW
lstrcmpiW
SetConsoleCtrlHandler
SetEndOfFile
HeapReAlloc
UnhandledExceptionFilter
Sleep
GetFileSize
GetFileInformationByHandle
GetConsoleCP
lstrcpynW
SetHandleCount
SizeofResource
CloseHandle
GetCommandLineW
TlsAlloc
WriteFile
GetStartupInfoA
WriteConsoleA
LocalUnlock
GetModuleHandleA
LeaveCriticalSection
GetVersionExA
VirtualProtect
TerminateProcess
GetCurrentThread
GetLocaleInfoW
OpenMutexA
LoadLibraryW
GetCurrentThreadId
GetLastError
GetCurrentProcessId
FindResourceA
GetThreadLocale
GetFileType
ReadFile
DeleteFileW
GetShortPathNameA
GetModuleFileNameA
WaitForMultipleObjects
LocalLock
GetWindowsDirectoryW
MapViewOfFile
GetProcessHeap
CompareStringW
GetModuleFileNameW
EnterCriticalSection
QueryPerformanceCounter
HeapDestroy
MulDiv
ExitProcess
RaiseException
ReleaseSemaphore
GetStringTypeA
DeleteCriticalSection
GetModuleHandleW
MultiByteToWideChar
GetSystemInfo
GlobalLock
FindFirstFileW
WriteConsoleW
GlobalFree
FindClose
GetStdHandle
InterlockedExchange
InterlockedCompareExchange
GlobalUnlock
GetLocaleInfoA
LockResource
GetTempPathW
GetProcAddress
CreateFileW
GetFileAttributesW
GetACP
UnmapViewOfFile
lstrlenW
LocalSize
VirtualAlloc
lstrlenA
lstrcmpiA
lstrcatW
SetLastError
GetTickCount
SetEvent
GetLocalTime
SetUnhandledExceptionFilter
LocalFree
LCMapStringA
GetDateFormatW
LoadLibraryA
GetCurrentProcess
TlsGetValue
LocalReAlloc
lstrcmpW
lstrcmpA
GetEnvironmentStrings
GetUserDefaultLCID
WideCharToMultiByte
GetVersionExW
GetConsoleMode

gdi32

SetViewportExtEx
EndDoc
SetMapMode
DeleteDC
StartDocW
SetAbortProc
CreateDCW
EnumFontsW
SelectObject
SetBkMode
GetTextExtentPoint32W
EndPage
LPtoDP
TextOutW
StartPage
GetObjectW
GetTextFaceW
GetDeviceCaps
SetWindowExtEx
AbortDoc
CreateFontIndirectW
GetTextMetricsW
DeleteObject
GetStockObject

user32

DispatchMessageA
GetDlgItemTextW
DestroyIcon
PeekMessageW
SetWindowPlacement
GetMenuState
SetActiveWindow
CharUpperW
GetDlgItem
LoadStringW
SetScrollPos
EndDialog
DeleteMenu
LoadImageW
TranslateAcceleratorW
RegisterWindowMessageW
UnhookWinEvent
RegisterClassExW
RegisterClassW
GetWindowPlacement
InvalidateRect
SetCursor
CheckMenuItem
CopyRect
ScreenToClient
SetWinEventHook
SetScrollInfo
MoveWindow
GetForegroundWindow
IsClipboardFormatAvailable
OpenClipboard
GetDesktopWindow
SendMessageW
DrawTextW
SetWindowLongW
GetMessagePos
SetWindowTextW
GetMessageTime
GetWindowTextW
SetFocus
MessageBoxW
RegisterWindowMessageA
ChildWindowFromPoint
PtInRect
GetSubMenu
ReleaseDC
wsprintfW
UpdateWindow
IsWindowVisible
LoadIconW
DestroyMenu
GetSystemMenu
GetMenu
GetSystemMetrics
DrawIconEx
DialogBoxParamW
MessageBeep
CharLowerW
DispatchMessageW
GetActiveWindow
CloseClipboard
PostQuitMessage
SendDlgItemMessageW
LoadCursorW
PostMessageW
LoadAcceleratorsW
GetWindowLongW
GetSysColor
GetWindowRect
GetDC
IsDialogMessageW
InflateRect
GetParent
EnableWindow
GetCursorPos
CreateWindowExW
DestroyWindow
EnableMenuItem
GetMessageW
DefWindowProcW
IsIconic
GetDlgCtrlID
DrawTextExW
GetIconInfo
GetClientRect
GetKeyboardLayout
GetLastActivePopup
SystemParametersInfoW
SetDlgItemTextW
GetFocus
WinHelpW
CharNextW
CreateDialogParamW
TranslateMessage
ShowWindow

comdlg32

GetFileTitleW
PrintDlgExW
ChooseFontW
FindTextW
GetOpenFileNameW
ReplaceTextW
PageSetupDlgW
CommDlgExtendedError
GetSaveFileNameW

msvcrt

exit
_wcsnicmp
localtime
__p__commode
_cexit
wcsncpy
_initterm
__getmainargs
_c_exit
_amsg_exit
memmove
iswctype
time
_adjust_fdiv
_exit
_controlfp
_vsnprintf
fflush
wcsncmp
malloc
_vsnwprintf
strchr
_snwprintf
__setusermatherr
??_V@YAXPAX@Z
__set_app_type
__p__fmode
wcstol
_wtol
_acmdln
_XcptFilter

advapi32

RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegSetValueExW
RegCloseKey
IsTextUnicode
RegCreateKeyW

winspool.drv

GetPrinterDriverW
OpenPrinterW
ClosePrinter

shell32

DragQueryFileW
DragFinish
DragAcceptFiles
ShellAboutW

comctl32

CreateStatusWindowW

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 7.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

769b4857cac8ff4fd6bfd0fc5290f907

Headers

File Characteristics

Imports

kernel32

gdi32

user32

comdlg32

msvcrt

advapi32

winspool.drv

shell32

comctl32

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 228KB - Virtual size: 227KB

.data Size: 1.1MB - Virtual size: 7.6MB

.rsrc Size: 15KB - Virtual size: 14KB

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 228KB - Virtual size: 227KB

.data
Size: 1.1MB - Virtual size: 7.6MB

.rsrc
Size: 15KB - Virtual size: 14KB