837f343af31a84fdbe98dae61a69b7e9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

837f343af31a84fdbe98dae61a69b7e9_JaffaCakes118
Size

324KB
MD5

837f343af31a84fdbe98dae61a69b7e9
SHA1

8bed97c12854de898df2348105a3868486a6411e
SHA256

60aca7495e44347bfd35ee11c73ca60737aaf6bbfb7afa80276c11839e1be792
SHA512

904697ce79ca4d7a99b48687d163305897256b437438c5d67dd97321e91798baef032398b8f39f2dbcfbc8bb11f0aa2e4c4c9e216a08b67b0bad6e5df61b148e
SSDEEP

6144:DzOOpE/1/J4yekRjC8mJagG+Bdnb4y4eUjGGWkgFTEyDZjqL6fM30+TBaV5mwfs2:DzOOpE/1/JR7RjhgG+Bdnb4y4eUCGJgs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
837f343af31a84fdbe98dae61a69b7e9_JaffaCakes118

Files

837f343af31a84fdbe98dae61a69b7e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3936e5b3923db4540530f8a019abab58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

wsock32

connect
htons
WSAStartup
WSACleanup
bind
listen
accept
WSAAsyncSelect
inet_ntoa
getpeername
WSAGetLastError
send
recv
shutdown
closesocket
setsockopt
socket
ioctlsocket
gethostbyname

comctl32

CreateToolbarEx
ord17

kernel32

CreateFileA
WriteFile
SetFileTime
GetVersionExA
WriteConsoleA
GetStdHandle
OutputDebugStringA
AllocConsole
SetEndOfFile
SetFilePointer
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateSemaphoreA
WaitForSingleObject
TlsGetValue
SetThreadPriority
TlsSetValue
GetCurrentThreadId
DuplicateHandle
GetCurrentThread
GetCurrentProcess
TlsAlloc
ResumeThread
GetProcAddress
LoadLibraryA
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
VirtualQuery
ReadFile
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentDirectoryA
GetDriveTypeA
HeapSize
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
TlsFree
SetLastError
SetUnhandledExceptionFilter
CreateThread
ExitThread
GetCommandLineA
GetStartupInfoA
GetFullPathNameA
GetFileAttributesA
TerminateProcess
GetModuleHandleA
ExitProcess
HeapAlloc
HeapFree
RtlUnwind
RaiseException
GetLogicalDriveStringsA
SetErrorMode
FindFirstFileA
FindClose
FindNextFileA
CloseHandle
DeleteFileA
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
GlobalAlloc
MultiByteToWideChar
VirtualProtect
GetSystemInfo
GetStringTypeA
GlobalLock
GlobalUnlock
Beep
FormatMessageA
LocalFree
GetCPInfo
Sleep
GetLastError
GetStringTypeW
GetLocaleInfoA
LCMapStringA
LCMapStringW
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedExchange

user32

GetClassNameA
FindWindowA
CloseDesktop
EnumDesktopWindows
OpenDesktopA
CreateAcceleratorTableA
TranslateAcceleratorA
DestroyAcceleratorTable
GetKeyState
ToAscii
GetKeyboardState
SetDlgItemInt
GetDlgItemInt
GetDlgCtrlID
SetClassLongA
MapWindowPoints
GetMessageA
IsDialogMessageA
LoadKeyboardLayoutA
EnableWindow
GetDlgItem
PeekMessageA
TranslateMessage
DispatchMessageA
RegisterClassExA
DestroyMenu
LoadImageA
GetWindowTextA
GetSystemMetrics
SetCursorPos
EmptyClipboard
CreateDialogParamA
GetClipboardOwner
OpenClipboard
GetClipboardData
CloseClipboard
LoadIconA
GetSysColorBrush
RegisterClassA
CreateWindowExA
WINNLSEnableIME
AppendMenuA
DrawMenuBar
GetForegroundWindow
GetFocus
LoadCursorA
SetCursor
SetCapture
GetAsyncKeyState
ReleaseCapture
WindowFromPoint
ScreenToClient
SetTimer
SetFocus
DestroyWindow
ChangeClipboardChain
KillTimer
PostQuitMessage
GetSubMenu
GetMenuItemID
SetMenuDefaultItem
GetCursorPos
TrackPopupMenu
PostMessageA
SetClipboardData
DestroyIcon
SystemParametersInfoA
AdjustWindowRectEx
GetWindowPlacement
SetWindowPlacement
SetForegroundWindow
GetMenuState
SetWindowPos
ShowWindow
ShowScrollBar
IsIconic
ScrollWindowEx
UpdateWindow
LoadMenuA
GetWindowRect
GetClientRect
SetWindowRgn
GetKeyboardLayoutNameA
MessageBoxA
SetScrollInfo
BeginPaint
EndPaint
DefWindowProcA
SetRect
DrawTextA
InvalidateRect
SetClipboardViewer
CheckMenuItem
GetSystemMenu
EnableMenuItem
SendMessageA
ReleaseDC
GetDC
GetWindowLongA
GetDlgItemTextA
SetWindowLongA
LoadStringA
SetDlgItemTextA
SetWindowTextA
DialogBoxParamA
EndDialog
GetWindow

gdi32

OffsetRgn
CreateRectRgnIndirect
DeleteDC
CreateRectRgn
CreatePalette
GetDeviceCaps
CreateCompatibleDC
SetStretchBltMode
SetRectRgn
UpdateColors
CombineRgn
SetPixelV
GdiFlush
SetBkMode
Rectangle
GetClipBox
CreateFontIndirectA
SetBrushOrgEx
StretchBlt
BitBlt
DeleteObject
CreateCompatibleBitmap
SetTextColor
SelectPalette
RealizePalette
SelectObject
GetStockObject
ExtTextOutA
SetBkColor

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

advapi32

RegEnumValueA
RegDeleteValueA
RegOpenKeyA
RegSetValueExA
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

Shell_NotifyIconA

Sections

.text
Size: 216KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3936e5b3923db4540530f8a019abab58

Headers

File Characteristics

Imports

winmm

wsock32

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

Sections

.text Size: 216KB - Virtual size: 213KB

.rdata Size: 48KB - Virtual size: 46KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 48KB - Virtual size: 47KB

.text
Size: 216KB - Virtual size: 213KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 48KB - Virtual size: 47KB