8829090e1665f7d00969ffab3c0448a9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8829090e1665f7d00969ffab3c0448a9_JaffaCakes118
Size

124KB
MD5

8829090e1665f7d00969ffab3c0448a9
SHA1

2fd99dde53967d61ad9ac138815a1fc02e223d7c
SHA256

39543728eb59cc6a3dffb880041dfc7451dc7bbaf5a05bef783781620a180d0e
SHA512

f3faf81e668ac294fd2c5ea66b0de44a30a482a20e560bb7a3ae96d36971d33383e29095fbbc62217e38b9508ef19e60345c253de4913f0da48317feafccb0ac
SSDEEP

3072:2Hk3IYCVaX/k9F11HshQO1K5Tkop8cg0JKlR12i8YI/Ix:2HkRN/0k8TkMgzCY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8829090e1665f7d00969ffab3c0448a9_JaffaCakes118

Files

8829090e1665f7d00969ffab3c0448a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

13c13d20fc242620952cd84ac5d61533

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeBeginPeriod
timeEndPeriod
timeKillEvent
timeSetEvent
waveInAddBuffer
waveInGetDevCapsA
waveInGetDevCapsW
mciSendCommandA
waveInGetNumDevs
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInUnprepareHeader
waveOutClose
waveOutGetDevCapsA
waveOutGetDevCapsW
waveOutGetNumDevs
waveOutGetPosition
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite

ole32

PropVariantClear
IsEqualGUID
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CoCreateInstance
CoInitialize

dinput

DirectInputCreateW

ws2_32

accept
socket
send
select
recv
listen
ioctlsocket
htons
WSAAsyncGetHostByName
WSACancelAsyncRequest
WSACleanup
WSAGetLastError
WSAStartup
inet_addr
bind
closesocket
connect
htonl

advapi32

SetFileSecurityW
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
OpenProcessToken
InitializeSecurityDescriptor
InitializeAcl
GetTokenInformation
GetSecurityDescriptorDacl
GetLengthSid
GetAclInformation
GetAce
EqualSid
AllocateAndInitializeSid
AddAce
AddAccessAllowedAce
SetSecurityDescriptorDacl

user32

OpenClipboard
CharLowerBuffA
CharToOemA
ClientToScreen
wsprintfA
UpdateWindow
TranslateMessage
ShowWindow
ShowCursor
SetWindowPos
SetRect
SetClipboardData
ScreenToClient
ReleaseDC
RegisterWindowMessageA
RegisterClassA
PostThreadMessageA
PeekMessageA
AdjustWindowRect
MsgWaitForMultipleObjects
MessageBoxW
LoadIconA
LoadCursorA
GetSystemMetrics
GetQueueStatus
GetForegroundWindow
GetDC
GetClipboardData
EmptyClipboard
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
CloseClipboard

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

kernel32

SetWaitableTimer
SetUnhandledExceptionFilter
SetThreadPriority
SetThreadIdealProcessor
SetThreadAffinityMask
Sleep
SetLastError
SetHandleCount
SetFileTime
SetFilePointer
SetEvent
SetEnvironmentVariableA
SetStdHandle
TerminateProcess
SetEndOfFile
TlsAlloc
RtlUnwind
ResumeThread
RemoveDirectoryW
ReleaseSemaphore
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
PeekNamedPipe
OutputDebugStringA
OpenFile
OpenEventA
MultiByteToWideChar
MulDiv
MoveFileA
LoadLibraryA
LeaveCriticalSection
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
lstrlenA
GetFullPathNameA
GetLastError
GetLocaleInfoA
SetCurrentDirectoryA
EnterCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsValidCodePage
IsDebuggerPresent
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
HeapSize
HeapReAlloc
HeapFree
HeapCreate
HeapAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
GetWindowsDirectoryA
GetVersionExA
GetUserDefaultLangID
GetUserDefaultLCID
GetTimeZoneInformation
GetTimeFormatA
GetTickCount
GetThreadPriority
GetTempPathW
GetSystemTimeAsFileTime
GetSystemInfo
GetSystemDirectoryA
GetSystemDefaultLangID
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetProcessHeap
GetOverlappedResult
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
AreFileApisANSI
CloseHandle
CompareStringA
CompareStringW
CreateDirectoryA
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileW
CreateMutexA
CreatePipe
CreateProcessA
CreateSemaphoreA
CreateThread
DeleteCriticalSection
DeleteFileA
DeviceIoControl
DuplicateHandle
GetFileType
EnumSystemLocalesA
ExitProcess
ExitThread
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDriveTypeA
GetEnvironmentStringsA
GetEnvironmentStringsW
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetLocaleInfoW

shell32

SHGetSpecialFolderPathW
ShellExecuteA
SHFileOperationW

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13c13d20fc242620952cd84ac5d61533

Headers

File Characteristics

Imports

winmm

ole32

dinput

ws2_32

advapi32

user32

version

kernel32

shell32

Sections

.text Size: 88KB - Virtual size: 87KB

.data Size: 24KB - Virtual size: 23KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 88KB - Virtual size: 87KB

.data
Size: 24KB - Virtual size: 23KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB