69d01c8cc88c24dc97edc6f6db99b0c6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

69d01c8cc88c24dc97edc6f6db99b0c6_JaffaCakes118
Size

853KB
MD5

69d01c8cc88c24dc97edc6f6db99b0c6
SHA1

7efb9e1253537bfaa0b8e0a4585f979d09683a8e
SHA256

e8f28c5e094a2b5b1723727993b5b3f75ed32b085bb4b5083b3b842f4c9dced9
SHA512

86110f604866944872bad491b12140f94b9f00117aecb64fc85112e3eef0307447b52d44b5d4acebf8b647dcdc90b72ff4930545e2961a72061afa7808c7495a
SSDEEP

24576:UpFXzmqyGFsTCSulRLQa3UZZjn2DqFnemt569:UHXSty8qUZZs+emt5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69d01c8cc88c24dc97edc6f6db99b0c6_JaffaCakes118

Files

69d01c8cc88c24dc97edc6f6db99b0c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dd09a41b497f4964de4a4a88848b031b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA

gdi32

Arc
BitBlt
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontA
CreatePalette
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
EqualRgn
ExtCreatePen
GdiFlush
GetCharWidthA
GetDeviceCaps
GetRgnBox
GetStockObject
GetTextMetricsA
LineTo
MoveToEx
Pie
PolyPolygon
Polygon
Polyline
RealizePalette
RectInRegion
RestoreDC
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetDIBitsToDevice
SetPixel
SetTextAlign
SetTextColor
TextOutA
UpdateColors

kernel32

AddAtomA
AllocConsole
CallNamedPipeA
CloseHandle
ConnectNamedPipe
CreateDirectoryA
CreateFileA
CreateMutexA
CreateNamedPipeA
CreateProcessA
DeleteFileA
DisconnectNamedPipe
EnterCriticalSection
ExitProcess
FindAtomA
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FreeLibrary
GetAtomNameA
GetCommandLineA
GetComputerNameA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetDriveTypeA
GetEnvironmentVariableA
GetExitCodeProcess
GetFileAttributesA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStdHandle
GetTempPathA
GetVersion
GetVersionExA
GetVolumeInformationA
GlobalAlloc
GlobalLock
GlobalUnlock
InitializeCriticalSection
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LoadResource
MoveFileExA
ReadConsoleA
ReadFile
ReleaseMutex
SetConsoleMode
SetCurrentDirectoryA
SetLastError
SetUnhandledExceptionFilter
SizeofResource
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WriteConsoleA
WriteFile
lstrcpyA

msvcrt

_fdopen
_fileno
_isatty
_strdup
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_beginthread
_cexit
_ctype
_endthread
_errno
_fileno
_iob
_isctype
_onexit
_pctype
_putenv
_setmode
_strdup
_stricmp
_vsnprintf
abort
atexit
atoi
ceil
cos
exit
fclose
fflush
floor
fopen
fprintf
fread
free
frexp
fseek
ftell
fwrite
getc
getenv
ldexp
localeconv
log
malloc
memchr
memcpy
memmove
memset
printf
puts
realloc
setlocale
setvbuf
signal
sin
sprintf
sqrt
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strftime
strlen
strncpy
strrchr
strtod
strtol
strtoul
strxfrm
tolower
toupper
ungetc

ole32

DoDragDrop
OleInitialize
OleUninitialize
RegisterDragDrop
ReleaseStgMedium

setupapi

SetupIterateCabinetA

shell32

DragQueryFileA
ShellExecuteA

user32

AdjustWindowRectEx
BringWindowToTop
ClientToScreen
CloseClipboard
CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageA
EmptyClipboard
EnumWindows
ExitWindowsEx
FillRect
GetAsyncKeyState
GetClipboardData
GetClipboardOwner
GetCursorPos
GetDC
GetForegroundWindow
GetKeyState
GetParent
GetSysColor
GetSystemMetrics
GetUpdateRgn
GetWindowLongA
GetWindowThreadProcessId
InvalidateRect
InvalidateRgn
IsIconic
KillTimer
LoadCursorA
LoadIconA
MessageBoxA
MsgWaitForMultipleObjects
OpenClipboard
OpenIcon
PeekMessageA
PostMessageA
PostQuitMessage
PostThreadMessageA
RegisterClassExA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
SetCapture
SetClipboardData
SetCursor
SetForegroundWindow
SetTimer
SetWindowPos
SetWindowTextA
ShowWindow
SystemParametersInfoA
TranslateMessage
ValidateRgn
WindowFromPoint

wininet

FtpGetFileSize
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile

wsock32

__WSAFDIsSet
select

Exports

Exports

_Z10testStringP7JNIEnv_P8_jobjectP8_jstring@12
_Z15jnm_exitWindowsP7JNIEnv_P8_jobjectl@12
_Z16jnm_getdriveinfoP7JNIEnv_P8_jobjectS2_@12
_Z16jnm_shellexecuteP7JNIEnv_P8_jobjectP8_jstringS4_S4_S4_l@28
_Z21jnm_getExecutableNameP7JNIEnv_P8_jobject@8
_Z21jnm_getExecutablePathP7JNIEnv_P8_jobject@8
_Z22jnm_deleteFileOnRebootP7JNIEnv_P8_jobjectP8_jstring@12

Sections

.text
Size: 537KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 31KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 479B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 267KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dd09a41b497f4964de4a4a88848b031b

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

msvcrt

ole32

setupapi

shell32

user32

wininet

wsock32

Exports

Exports

Sections

.text Size: 537KB - Virtual size: 537KB

.data Size: 14KB - Virtual size: 14KB

.rdata Size: 5KB - Virtual size: 5KB

.bss Size: - Virtual size: 31KB

.edata Size: 512B - Virtual size: 479B

.idata Size: 8KB - Virtual size: 7KB

.rsrc Size: 267KB - Virtual size: 268KB

.reloc Size: 18KB - Virtual size: 18KB

.text
Size: 537KB - Virtual size: 537KB

.data
Size: 14KB - Virtual size: 14KB

.rdata
Size: 5KB - Virtual size: 5KB

.bss
Size: - Virtual size: 31KB

.edata
Size: 512B - Virtual size: 479B

.idata
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 267KB - Virtual size: 268KB

.reloc
Size: 18KB - Virtual size: 18KB