78f06a1b7d32db9d93fa09ea806e7110_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

78f06a1b7d32db9d93fa09ea806e7110_JaffaCakes118
Size

1.8MB
MD5

78f06a1b7d32db9d93fa09ea806e7110
SHA1

ea91614b4532d734ea772f468a0373ca384a404a
SHA256

73cdce8bc0ab1299cfa6b49a9f856f37331aa02ad043728956b06d515eea558f
SHA512

c596eb45cb60d27e1aa181946095c1f9f3f7273cb2fe7fd79f2dde8c6690d22b89adce21b3aa400ea49fa3569a4295d026818e98d394426fa6de403a27912eaf
SSDEEP

49152:uZUhqirKz8p4tT81QkzsKSnyb5OZAYhJg:BN0dY1Q4yBg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78f06a1b7d32db9d93fa09ea806e7110_JaffaCakes118

Files

78f06a1b7d32db9d93fa09ea806e7110_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93f1d9f0bdc776aac443e75773400caf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\data\dev\sprout\Release\FeedingFrenzyTwo\Mainline\FeedingFrenzyTwo\FeedingFrenzyTwo-saf-instrument.pdb

Imports

kernel32

GetSystemInfo
QueryPerformanceFrequency
OutputDebugStringA
FormatMessageA
GetUserDefaultLangID
CreateMutexA
SetThreadPriority
SetErrorMode
LocalFree
VirtualQuery
IsBadWritePtr
MulDiv
CreateFileA
CloseHandle
WriteFile
ReadFile
GlobalSize
GlobalLock
GlobalUnlock
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
LoadLibraryA
GetProcAddress
FreeLibrary
CompareStringA
GetLocaleInfoA
GetNumberFormatA
GetTimeFormatA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetModuleHandleA
ExitProcess
GetLastError
ResumeThread
GetSystemTime
HeapReAlloc
WriteConsoleW
GetFileType
GetStdHandle
GetModuleFileNameW
RaiseException
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
GetModuleFileNameA
HeapSize
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
VirtualAlloc
LCMapStringA
LCMapStringW
LoadLibraryW
GetDateFormatA
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetTimeZoneInformation
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CompareStringW
SetEnvironmentVariableA
lstrlenA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindClose
SetEndOfFile
CreateThread
Sleep

user32

ShowWindow
GetWindowRect
MoveWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
GetWindowLongA
DefWindowProcA
GetClientRect
GetAsyncKeyState
SetFocus
OpenClipboard
GetClipboardData
CloseClipboard
CharLowerA
AdjustWindowRect
RegisterClassA
LoadIconA
LoadCursorA
DestroyWindow
SetTimer
GetDC
GetDesktopWindow
MessageBoxA
SetWindowLongA
SetWindowPos
SetMenu
IsClipboardFormatAvailable
GetSystemMetrics
EnumDisplaySettingsA
IsWindowEnabled
OpenIcon
CloseWindow
IsWindowVisible
SetCursorPos
CreateWindowExA
GetCursorPos
ClipCursor
ClientToScreen
ShowCursor
GetParent
UpdateWindow
ReleaseCapture
SetCapture
SetForegroundWindow
ScreenToClient
KillTimer
IsIconic
PostQuitMessage
LoadStringA
PeekMessageA
GetForegroundWindow
PostMessageA
RegisterWindowMessageA
ReleaseDC

shell32

ShellExecuteA

dsound

ord1

winmm

mixerGetControlDetailsA
mixerClose
mixerSetControlDetails
mixerGetLineControlsA
timeBeginPeriod
mixerGetLineInfoA
mixerOpen
mixerGetDevCapsA
timeEndPeriod

gdi32

CreateFontA
BitBlt
DeleteObject

advapi32

RegEnumValueA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA

shlwapi

PathIsRelativeA

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 126KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

93f1d9f0bdc776aac443e75773400caf

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

shell32

dsound

winmm

gdi32

advapi32

shlwapi

wininet

version

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 300KB - Virtual size: 300KB

.data Size: 100KB - Virtual size: 119KB

.rsrc Size: 126KB - Virtual size: 148KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 300KB - Virtual size: 300KB

.data
Size: 100KB - Virtual size: 119KB

.rsrc
Size: 126KB - Virtual size: 148KB