73afab743f01a3953baf24823adc3019_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
73afab743f01a3953baf24823adc3019_JaffaCakes118
Size 861KB
Sample240726-ml58bawajc
SHA256 a1919a74298a4ab2923c970aa095e975f8a6d29eb4d08bb66a2232cd82c115cb
MD5 73afab743f01a3953baf24823adc3019
SHA1 0cbe6cc4bcadc919cc70948314c65cdb21ca830e
SHA512 0f951e3861e5dfcff8c045850623e90c09d6a0e1ed729cc5d82e4d422f8db995009de20e2231bbec5efb93c5c4440c32b53a9022416a54a49188221cb844bbe1
SSDEEP 24576:kQK8z0wz/d4g+HmwsGoXYtxJ3WmQ9t5Q8M/yuVHE0AjuCU:P1aUXSzyOp5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73afab743f01a3953baf24823adc3019_JaffaCakes118

File Explorer

73afab743f01a3953baf24823adc3019_JaffaCakes118

.dll 861KB

73afab743f01a3953baf24823adc3019_JaffaCakes118

IMPHASH 8854e69f7ab239f5fda0e0bfb8ea2886
SHA256 a1919a74298a4ab2923c970aa095e975f8a6d29eb4d08bb66a2232cd82c115cb
MD5 73afab743f01a3953baf24823adc3019
SHA1 0cbe6cc4bcadc919cc70948314c65cdb21ca830e
SHA512 0f951e3861e5dfcff8c045850623e90c09d6a0e1ed729cc5d82e4d422f8db995009de20e2231bbec5efb93c5c4440c32b53a9022416a54a49188221cb844bbe1
SSDEEP 24576:kQK8z0wz/d4g+HmwsGoXYtxJ3WmQ9t5Q8M/yuVHE0AjuCU:P1aUXSzyOp5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

760844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen GetErrorInfo GetActiveObject SysFreeString SafeArrayPtrOfIndex SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopyInd VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExA RegOpenKeyExA RegCloseKey RegSetValueA RegQueryValueExA RegOpenKeyExA RegFlushKey RegCreateKeyExA RegCloseKey

user32

GetKeyboardType DestroyWindow LoadStringA MessageBoxA CharNextA CreateWindowExA keybd_event WindowFromPoint WaitMessage VkKeyScanA UpdateWindow UnregisterClassA UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoA ShowWindow ShowScrollBar ShowOwnedPopups SetWindowsHookExA SetWindowPos SetWindowPlacement SetWindowLongW SetWindowLongA SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropA SetParent SetMenuItemInfoA SetMenu SetKeyboardState SetForegroundWindow SetFocus SetCursorPos SetCursor SetClipboardData SetClassLongA SetCapture SetActiveWindow SendMessageTimeoutA SendMessageW SendMessageA ScrollWindow ScreenToClient RemovePropA RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageA RegisterClipboardFormatA RegisterClassA RedrawWindow PtInRect PostQuitMessage PostMessageA PeekMessageW PeekMessageA OpenClipboard OffsetRect OemToCharA MsgWaitForMultipleObjects MessageBoxA MapWindowPoints MapVirtualKeyA LoadStringA LoadKeyboardLayoutA LoadIconA LoadCursorA LoadBitmapA KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsRectEmpty IsIconic IsDialogMessageW IsDialogMessageA IsChild IsCharAlphaNumericA IsCharAlphaA InvalidateRect IntersectRect InsertMenuItemA InsertMenuA InflateRect GetWindowThreadProcessId GetWindowTextA GetWindowRect GetWindowPlacement GetWindowLongW GetWindowLongA GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropA GetParent GetWindow GetMessageTime GetMessagePos GetMenuStringA GetMenuState GetMenuItemInfoA GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameA GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextA GetIconInfo GetForegroundWindow GetFocus GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClipboardData GetClientRect GetClassNameA GetClassLongA GetClassInfoA GetCapture GetActiveWindow FrameRect FindWindowA FillRect EqualRect EnumWindows EnumThreadWindows EnumClipboardFormats EnumChildWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem EmptyClipboard DrawTextA DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawEdge DispatchMessageW DispatchMessageA DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcA DefMDIChildProcA DefFrameProcA CreatePopupMenu CreateMenu CreateIcon CloseClipboard ClientToScreen CheckMenuItem CallWindowProcA CallNextHookEx BeginPaint CharNextA CharLowerBuffA CharLowerA CharUpperBuffA CharToOemA AdjustWindowRectEx ActivateKeyboardLayout

kernel32

GetACP Sleep VirtualFree VirtualAlloc GetTickCount QueryPerformanceCounter GetCurrentThreadId InterlockedDecrement InterlockedIncrement VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenA lstrcpynA LoadLibraryExA GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetLastError GetCommandLineA FreeLibrary FindFirstFileA FindClose ExitProcess ExitThread CreateThread CompareStringA WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException GetStdHandle GetFileSize GetFileType CreateFileA CloseHandle TlsSetValue TlsGetValue TlsFree TlsAlloc LocalFree LocalAlloc lstrcpyA lstrcmpA WritePrivateProfileStringA WriteFile WaitForSingleObject VirtualQuery VirtualAlloc Sleep SizeofResource SetThreadLocale SetProcessWorkingSetSize SetFilePointer SetEvent SetErrorMode SetEndOfFile ResumeThread ResetEvent ReadFile RaiseException QueryPerformanceFrequency QueryPerformanceCounter MultiByteToWideChar MulDiv MoveFileA LockResource LoadResource LoadLibraryA LeaveCriticalSection InitializeCriticalSection GlobalUnlock GlobalSize GlobalLock GlobalFree GlobalFindAtomA GlobalDeleteAtom GlobalAlloc GlobalAddAtomA GetVersionExA GetVersion GetUserDefaultLCID GetTimeZoneInformation GetTickCount GetThreadLocale GetTempPathA GetSystemDirectoryA GetStdHandle GetProcAddress GetPrivateProfileIntA GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetLocalTime GetLastError GetFullPathNameA GetFileSize GetFileAttributesA GetExitCodeThread GetDiskFreeSpaceA GetDateFormatA GetCurrentThreadId GetCurrentProcessId GetComputerNameA GetCPInfo FreeResource InterlockedIncrement InterlockedExchange InterlockedDecrement FreeLibrary FormatMessageA FindResourceA FindNextFileA FindFirstFileA FindClose FileTimeToLocalFileTime FileTimeToDosDateTime EnumCalendarInfoA EnterCriticalSection DeleteFileA DeleteCriticalSection CreateThread CreateFileA CreateEventA CompareStringA CloseHandle Sleep

gdi32

UnrealizeObject StretchBlt SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetMapMode SetEnhMetaFileBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SelectPalette SelectObject SaveDC RestoreDC RectVisible RealizePalette Polyline PlayEnhMetaFile PatBlt MoveToEx MaskBlt LineTo LPtoDP IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsA GetTextExtentPoint32A GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectA GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionA GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits ExcludeClipRect DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreatePenIndirect CreatePalette CreateHalftonePalette CreateFontIndirectA CreateEnhMetaFileA CreateDIBitmap CreateDIBSection CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileA CloseEnhMetaFile BitBlt

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

ole32

CreateStreamOnHGlobal IsAccelerator OleDraw OleSetMenuDescriptor OleInitialize CoTaskMemFree ProgIDFromCLSID StringFromCLSID CoCreateInstance CoGetClassObject CoUninitialize CoInitialize IsEqualGUID

comctl32

_TrackMouseEvent ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Remove ImageList_DrawEx ImageList_Draw ImageList_GetBkColor ImageList_SetBkColor ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create InitCommonControls

wininet

InternetCheckConnectionA

Name

.text

Size

733KB

Virtual Size

733KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

27KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

77B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

73afab743f01a3953baf24823adc3019_JaffaCakes118

oleaut32

advapi32

user32

kernel32

gdi32

version

ole32

comctl32

wininet

generic