850da7570f83df665c310b1f59963401_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

850da7570f83df665c310b1f59963401_JaffaCakes118
Size

406KB
MD5

850da7570f83df665c310b1f59963401
SHA1

6f0d023cfc53f3553e4cdbf754b5a5472f32c02c
SHA256

d6784f3863d27bf1fa42397585aaf0599c09819c155e2609bb1a86d6a2d629a4
SHA512

2f38a99834a75136e76a961f39e70edefa65bfbe51788ab2b5a4596ace252fd27191aa2c37dfa0ea44efb2973e5b0733b218955b9cacdfe3f016e3163c758579
SSDEEP

12288:xd+NoABX9Tc1xTV3+GOgS0kLCbPGfNF8N:xdzAfI1j3+GdSb+bP5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
850da7570f83df665c310b1f59963401_JaffaCakes118

Files

850da7570f83df665c310b1f59963401_JaffaCakes118
.exe windows:4 windows x86 arch:x86

067c6d97c3fb9b08a7c47c28ca9fb304

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

h:\hgobdeow\xewoet\lohb\gf

Imports

gdi32

GetDeviceCaps
OffsetViewportOrgEx
GetWindowExtEx
GetBkMode
DeleteDC
CreateICA
CreateRoundRectRgn
EndPage
ExtSelectClipRgn
EnumFontFamiliesExA
IntersectClipRect
EndDoc
StartPage
GetClipRgn
RectVisible
SetROP2
DeleteObject
SetTextCharacterExtra
CreateSolidBrush
GetTextMetricsA

kernel32

GlobalUnlock
GetCurrentProcessId
SetStdHandle
GetEnvironmentStringsW
TlsFree
GetSystemTimeAsFileTime
HeapCreate
GetCPInfo
CompareStringW
GetStartupInfoW
GetLocalTime
FileTimeToSystemTime
WriteConsoleA
MulDiv
GetCommandLineA
GetFileType
IsValidCodePage
GetModuleHandleA
GetSystemTime
HeapDestroy
CompareStringA
DeviceIoControl
GlobalSize
GetStringTypeA
GetThreadLocale
VirtualProtect
MultiByteToWideChar
GlobalReAlloc
lstrcmpiA
lstrcpyA
lstrcmpA
LocalFree
ReadFile
RaiseException
GetACP
GetStdHandle
OutputDebugStringA
DebugBreak
GetLocaleInfoA
IsDebuggerPresent
SetLastError
lstrlenW
SetErrorMode
GetTimeZoneInformation
VirtualQuery
LoadResource
SetEvent
GetModuleFileNameA
QueryPerformanceCounter
LocalAlloc
TlsGetValue
VirtualAlloc
GlobalDeleteAtom
SetThreadPriority
LeaveCriticalSection
SetEnvironmentVariableA
FreeLibrary
CreateFileA
GetCurrentDirectoryA
GlobalAlloc
DeleteCriticalSection
VirtualFree
LoadLibraryA
GetProcessHeap
DuplicateHandle
LCMapStringA
TerminateProcess
SetFilePointer
GetConsoleMode
GetOEMCP
GetCurrentThreadId
GlobalLock
GetModuleHandleW
FileTimeToLocalFileTime
GetVersion
IsBadReadPtr
HeapAlloc
LocalFileTimeToFileTime
GetCommandLineW
ExitThread
HeapReAlloc
WriteConsoleW
FormatMessageA
FlushFileBuffers
GetTimeFormatA
WriteFile
GetStringTypeW
FreeEnvironmentStringsA
GetFileAttributesA
SetHandleCount
GetConsoleCP
GetStartupInfoA
OutputDebugStringW
ExitProcess
WaitForSingleObject
GetProcAddress
GetFullPathNameA
DeleteFileA
SetEndOfFile
GetDateFormatA
GetEnvironmentStrings
CloseHandle
GlobalFree
InitializeCriticalSection
FindClose
HeapValidate
TlsAlloc
GetExitCodeProcess
GetFileSize
GetTickCount
SetUnhandledExceptionFilter
InterlockedIncrement
GetLastError
CreateThread
GetCurrentProcess
InterlockedDecrement
TlsSetValue
WideCharToMultiByte
SetConsoleCtrlHandler
LoadLibraryW
RtlUnwind
GetVersionExA
LCMapStringW
UnhandledExceptionFilter
CreateProcessA
FreeEnvironmentStringsW
GetFileTime
EnterCriticalSection
GetConsoleOutputCP
LockResource
CreateMutexW
InterlockedExchange
GetModuleFileNameW
HeapFree

user32

BringWindowToTop
DestroyAcceleratorTable
DrawFocusRect
EndPaint
GetMonitorInfoW
LoadCursorW
GetScrollInfo
BeginDeferWindowPos
InsertMenuW
DrawFrameControl
LoadBitmapW
SetWindowTextW
GetClassInfoExW
LoadIconW
EmptyClipboard
EnableWindow
UpdateWindow
DeferWindowPos
DefMDIChildProcW
OffsetRect
GetCursorPos
PostQuitMessage
PostMessageW
SetWindowLongW
SetRect
GetClientRect
SetDlgItemTextW
GetAsyncKeyState
GetClipboardData
PtInRect
GetLastActivePopup
RegisterClassW
GetMenuItemCount
CopyAcceleratorTableW
ShowWindow
SetForegroundWindow
IsDlgButtonChecked
wvsprintfW
GetWindowTextLengthW
DestroyIcon
GetDlgItem
GetCapture
DrawTextW
GetDC
ScrollWindow
ReuseDDElParam
GetSystemMenu
IsWindowEnabled
BeginPaint
GetDlgItemInt
DestroyWindow
SendMessageW
RegisterClassExW
GetDlgCtrlID
ScreenToClient
GetMenuItemInfoW
SetTimer
DefWindowProcW
RedrawWindow
GetSystemMetrics
TranslateAcceleratorW
MoveWindow
GetSubMenu
GetSysColor
GetWindowLongW
IsClipboardFormatAvailable
CreateWindowExW
FillRect
RemoveMenu
CallWindowProcW
GetWindowTextW
PeekMessageW
SetFocus
EndDeferWindowPos
SetDlgItemInt
GetIconInfo
WindowFromPoint
MessageBoxW
GetSysColorBrush

shlwapi

PathAddBackslashA
PathSkipRootA
PathFindFileNameA
SHDeleteKeyA
PathIsUNCA
PathRemoveExtensionA
PathFindExtensionA
PathAppendA
PathStripToRootA

shell32

ord155
SHChangeNotify
DragFinish
DragQueryFileW
SHGetFileInfoA
SHGetMalloc
SHGetDesktopFolder
SHBrowseForFolderA
SHAppBarMessage

mfc42

ord1576

comctl32

ImageList_EndDrag
ord17
ImageList_DragMove
_TrackMouseEvent

Sections

.text
Size: 214KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

067c6d97c3fb9b08a7c47c28ca9fb304

Headers

File Characteristics

PDB Paths

Imports

gdi32

kernel32

user32

shlwapi

shell32

mfc42

comctl32

Sections

.text Size: 214KB - Virtual size: 213KB

.rdata Size: 109KB - Virtual size: 108KB

.data Size: 65KB - Virtual size: 76KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 214KB - Virtual size: 213KB

.rdata
Size: 109KB - Virtual size: 108KB

.data
Size: 65KB - Virtual size: 76KB

.rsrc
Size: 17KB - Virtual size: 16KB