84f15cd1e1ff47e8ad87588ce955618f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

84f15cd1e1ff47e8ad87588ce955618f_JaffaCakes118
Size

647KB
MD5

84f15cd1e1ff47e8ad87588ce955618f
SHA1

314ba101ce78f33813e7ed4262d80ed7055a2d0e
SHA256

7e0231f034f5d8f1e742373f80f850ad2c22cfdaf1effde4a69d3bfd6c59cba8
SHA512

20beb8c116eeac4ba585a24763eb06fb42d9e1f3c764bb4ebff946101edaeecd0ecb006a8b177eb30267adc879623d92fd0d26aebdab4148d18efb305611c62e
SSDEEP

12288:0o9pcHUBfjhwHekC8k0u4FMgkSL/meZLgFl6pSKBPKvgqub1a:0o9SHUBfdwjrBjMJyuELOl6mvg7I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84f15cd1e1ff47e8ad87588ce955618f_JaffaCakes118

Files

84f15cd1e1ff47e8ad87588ce955618f_JaffaCakes118
.exe windows:6 windows x86 arch:x86

a3f7ea0be00e002fc247b04ffe999967

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
LoadLibraryA
CreateProcessA
SetCurrentDirectoryA
GetFullPathNameA
GetFullPathNameW
CreateFileA
FindFirstFileA
FindNextFileA
FindFirstChangeNotificationA
FindCloseChangeNotification
EnumSystemLanguageGroupsA
GetConsoleTitleA
SetEndOfFile
LoadLibraryW
CreateFileW
ReadConsoleW
SetStdHandle
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualFree
GetVersionExW
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
GetACP
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
WriteFile
AreFileApisANSI
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
lstrcpyA
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
WaitForSingleObjectEx
SetEvent
CreateTimerQueue
GetCPInfo
LoadLibraryExW
ExitThread
CreateSemaphoreW
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventW
FormatMessageW
GetTickCount
FileTimeToSystemTime
CloseHandle
GetFileTime
FindClose
GetFileSize
WaitForSingleObject
CreateThread
TerminateProcess
GetCurrentProcessId
LocalFree
GetProcAddress
FindResourceA
GetModuleHandleA
SizeofResource
LoadResource
Sleep
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
RaiseException
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineA
RtlUnwind
WriteConsoleW
GetModuleHandleExW
GetModuleFileNameW
GetFileType
GetStdHandle
VirtualQuery
VirtualProtect
VirtualAlloc
GetSystemInfo
IsProcessorFeaturePresent
OutputDebugStringW
IsDebuggerPresent
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
EncodePointer
GetSystemTimeAsFileTime
GetExitCodeThread
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
DuplicateHandle
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
GlobalFree
GlobalUnlock
GlobalAlloc
GlobalLock
LockResource
InterlockedExchange
DecodePointer

user32

TranslateMessage
DispatchMessageA
DefWindowProcA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateLayeredWindow
GetSystemMetrics
GetMessageA
wsprintfA
GetKeyboardLayout
PeekMessageA
ExitWindowsEx
SendMessageA
PostMessageA
WaitForInputIdle
PostQuitMessage
RegisterClassExW
GetDC
GetClientRect
CreateWindowExW
DestroyWindow
MoveWindow
DialogBoxParamA
EndDialog
GetDlgItem
GetDlgCtrlID
GetDialogBaseUnits
OemToCharBuffW
CharLowerBuffA
GetFocus
SendInput
MsgWaitForMultipleObjects
IsDialogMessageA
LoadIconA
LoadCursorA
LoadBitmapA
CheckMenuRadioItem
UnhookWindowsHookEx
GetWindowThreadProcessId
FindWindowA
GetWindowLongA
OffsetRect
FillRect
DrawFocusRect
KillTimer
GetSysColor
MapWindowPoints
GetCursorPos
MessageBoxA
GetWindowRect
GetSysColorBrush
SetWindowTextA
SetScrollPos
ScrollWindowEx
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
SetForegroundWindow
SetActiveWindow
UpdateWindow
DrawStateA
DrawTextExA
InsertMenuA
GetSubMenu
EnableMenuItem
DrawMenuBar
GetMenu
LoadMenuA
IsWindowEnabled

gdi32

DeleteObject
SelectObject
SetGraphicsMode
CreateDIBSection
DeleteDC
CreateCompatibleDC
SetBkColor
SetWindowExtEx
SetViewportExtEx
SetTextAlign
SetTextColor
StretchBlt
SetMapMode
CreateCompatibleBitmap
SelectClipRgn
GetMapMode
ExcludeClipRect
CreateSolidBrush
CreateDIBitmap
CreateDiscardableBitmap
BitBlt
GetObjectA
SetDIBColorTable

winspool.drv

DocumentPropertiesA

shell32

DragQueryFileA
SHGetDesktopFolder
ExtractIconExA
SHGetMalloc
SHGetFolderPathA
SHGetFolderLocation

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CreateStreamOnHGlobal

shlwapi

StrRetToBufA

gdiplus

GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipAlloc
GdipFree
GdiplusStartup
GdipGetImagePixelFormat
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdiplusShutdown

msimg32

GradientFill

netapi32

NetShareGetInfo

comctl32

ImageList_GetIconSize
InitCommonControlsEx
ImageList_Draw

pdh

PdhBrowseCountersA

imm32

ImmSetOpenStatus
ImmGetOpenStatus
ImmGetConversionStatus
ImmReleaseContext
ImmGetContext
ImmGetDescriptionA
ImmIsIME

wsnmp32

ord501
ord500
ord402

d2d1

ord1

dwrite

DWriteCreateFactory

Sections

.text
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 259KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a3f7ea0be00e002fc247b04ffe999967

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

shell32

ole32

shlwapi

gdiplus

msimg32

netapi32

comctl32

pdh

imm32

wsnmp32

d2d1

dwrite

Sections

.text Size: 284KB - Virtual size: 283KB

.rdata Size: 74KB - Virtual size: 74KB

.data Size: 11KB - Virtual size: 31KB

.rsrc Size: 259KB - Virtual size: 259KB

.reloc Size: 16KB - Virtual size: 16KB

.text
Size: 284KB - Virtual size: 283KB

.rdata
Size: 74KB - Virtual size: 74KB

.data
Size: 11KB - Virtual size: 31KB

.rsrc
Size: 259KB - Virtual size: 259KB

.reloc
Size: 16KB - Virtual size: 16KB