8b0d1a0ad0873849ef6fba03819b2703_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
8b0d1a0ad0873849ef6fba03819b2703_JaffaCakes118
Size 224KB
Sample240811-tp5jhsxall
SHA256 016d9a117bb67eb80e201e43fe28e75127bd64cb4a6c71b9b928d2f7b93451c1
MD5 8b0d1a0ad0873849ef6fba03819b2703
SHA1 07fe5c8b10a6f41b909d21d40c3890cd5141d402
SHA512 7af8369ab73ccef6beb6c01a19a4f8f3db76215be1cd4c2cec056cd093b1be9498eccc3b11a157e70fc5e38b2dccd2634510ce4d3202ee9a2fdb0e1e273045b2
SSDEEP 6144:53kgJ29FVHAR/vM+tTxHtenhJjib4O1n:2HAhU2TxNEPO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b0d1a0ad0873849ef6fba03819b2703_JaffaCakes118

File Explorer

8b0d1a0ad0873849ef6fba03819b2703_JaffaCakes118

.dll 224KB

8b0d1a0ad0873849ef6fba03819b2703_JaffaCakes118

IMPHASH 45766ff73dcf110b92156f7130e135f4
SHA256 016d9a117bb67eb80e201e43fe28e75127bd64cb4a6c71b9b928d2f7b93451c1
MD5 8b0d1a0ad0873849ef6fba03819b2703
SHA1 07fe5c8b10a6f41b909d21d40c3890cd5141d402
SHA512 7af8369ab73ccef6beb6c01a19a4f8f3db76215be1cd4c2cec056cd093b1be9498eccc3b11a157e70fc5e38b2dccd2634510ce4d3202ee9a2fdb0e1e273045b2
SSDEEP 6144:53kgJ29FVHAR/vM+tTxHtenhJjib4O1n:2HAhU2TxNEPO
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20340

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

gswag32

ord135 ord124 ord125 ord126 ord127 ord128 ord129 ord130 ord131 ord132 ord133 ord134 ord1201 ord136 ord137 ord138 ord196 ord197 ord198 ord199 ord200 ord201 ord202

user32

RegisterWindowMessageA LoadStringA SendMessageA

comdlg32

PrintDlgA CommDlgExtendedError

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

kernel32

GlobalSize GetEnvironmentStrings GetCommandLineA OpenFileMappingA OpenMutexA GetModuleFileNameA WriteFile GetStartupInfoA GetFileType GetStdHandle GlobalUnlock GlobalLock GlobalAlloc GlobalFree lstrcpyA WinExec GetCurrentProcessId GlobalHandle ReleaseMutex LocalFree LocalUnlock LeaveCriticalSection LocalLock LocalAlloc WaitForSingleObject GlobalReAlloc lstrlenA CloseHandle UnmapViewOfFile MapViewOfFile TlsGetValue GetCurrentDirectoryA GetVersion GetFullPathNameA GetLogicalDrives GetProcAddress LoadLibraryA InitializeCriticalSection DeleteCriticalSection EnterCriticalSection GetCPInfo ExitProcess VirtualFree VirtualAlloc MultiByteToWideChar TlsAlloc GetACP GetOEMCP GetLastError TlsSetValue TlsFree WideCharToMultiByte GetModuleHandleA GetCurrentThreadId

AGAmp AGAux AGClose AGClr AGCurveStyle AGDist AGFontStyle AGHot AGInfo AGInfo_ AGLabels AGLegend AGLegendStyle AGOpen AGPatt AGReset AGShow AGSym AGTitleG AGTitleX AGTitleY AGXAxisStyle AGYAxisStyle G3AreaGraph G3Arrow G3Axis G3BarGraph G3Box G3BubbleChart G3Cage G3CageStyle G3Cube G3DataLinScale G3DataLogScale G3DeleteObjects G3Gantt G3Grid G3HLC G3Label G3LabelTab G3Labeln G3Legend G3LineAbs G3LineGraph G3LogAxis G3LogGrid G3PieChart G3SetModel G3SetPerspective G3SetPerspectiveAll G3Show G3SizeView G3SurfaceGraph G3TapeGraph G3TestSpecial G3Text GSArc GSArea GSArea3D GSArrow GSAxis GSBar2D GSBar3D GSBox2D GSBox3D GSBoxWhisker GSBubbleChart GSCage3D GSCircle GSClearView GSClipRead GSClipWrite GSClosePrn GSCloseServer GSCloseView GSCloseWin GSCurveFit GSDataAmp GSDataAmpErr GSDataAux GSDataClr GSDataDim GSDataDist GSDataDistErr GSDataGetAmp GSDataGetAmpErr GSDataGetAmpErr_ GSDataGetAmp_ GSDataGetAux GSDataGetClr GSDataGetDist GSDataGetDistErr GSDataGetDistErr_ GSDataGetDist_ GSDataGetPatt GSDataGetSym GSDataGetZ GSDataGetZ_ GSDataLabels GSDataPatt GSDataRange GSDataReset GSDataScale GSDataStoreAmp GSDataStoreAmpErr GSDataStoreAux GSDataStoreClr GSDataStoreDist GSDataStoreDistErr GSDataStorePatt GSDataStoreSym GSDataStoreZ GSDataSym GSDataTrans GSDataZ GSDefPatt GSEllipse GSErrorBar GSFixPos GSGantt GSGetACos GSGetACos_ GSGetALog10 GSGetALog10_ GSGetALogE GSGetALogE_ GSGetASin GSGetASin_ GSGetATan GSGetATan_ GSGetAXExt GSGetAXExt_ GSGetAYExt GSGetAYExt_ GSGetBG GSGetCC GSGetCC_ GSGetCos GSGetCos_ GSGetCurX GSGetCurX_ GSGetCurY GSGetCurY_ GSGetCurveCoeff GSGetCurveCoeff_ GSGetE GSGetE_ GSGetLog10 GSGetLog10_ GSGetLogE GSGetLogE_ GSGetMF GSGetMax GSGetMax_ GSGetMean GSGetMean_ GSGetMin GSGetMin_ GSGetPi GSGetPi_ GSGetPrnHt GSGetPrnHt_ GSGetPrnWid GSGetPrnWid_ GSGetRTextHt GSGetRTextHt_ GSGetRTextWid GSGetRTextWid_ GSGetSD GSGetSD_ GSGetSFHt GSGetSFHt_ GSGetSFWid GSGetSFWid_ GSGetSXExt GSGetSXExt_ GSGetSYExt GSGetSYExt_ GSGetSin GSGetSin_ GSGetStatsInfo_ GSGetTan GSGetTan_ GSGetVXExt GSGetVXExt_ GSGetVYExt GSGetVYExt_ GSGetVer GSGetWXExt GSGetWXExt_ GSGetWYExt GSGetWYExt_ GSGrid GSHLC GSHotGraph GSLabelPie GSLabelX GSLabelY GSLabelnPie GSLabelnX GSLabelnY GSLegend GSLinLog GSLineAbs GSLineFit GSLineRel GSLoadRFont GSLoadVFont GSLogAxis GSLogGrid GSLogLin GSLogLog GSMClrRgn GSMGetX GSMGetX_ GSMGetY GSMGetY_ GSMMotion GSMNotify GSMPtrOff GSMPtrOn GSMPtrType GSMSetRgn GSMStatus GSMean GSMinMax GSMovePos GSOffView GSOnView GSOpenChildWin GSOpenPrn GSOpenServer GSOpenView GSOpenWin GSPicRead GSPicWrite GSPie2D GSPie3D GSPolar GSPolarAxes GSPolyFill GSPolyVec GSPrnOut GSPrnSetup GSRText GSRefresh3D GSSD GSScatter GSSelectPalette GSSetBG GSSetPal GSSetPerspective GSSetRFontFace GSSetROP GSSetVFontFace GSShade GSSizeSymbol GSStatsArr GSStatsWin GSSymbol GSTapeGraph GSTimeGraph GSTimeUpdate GSUseView GSVText GSViewClip GSWinHandle GSWinNotify GSWinPaint GSXDataScale GSXYGraph

Name

.text

Size

30KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

GDLAPI1_

Size

1024B

Virtual Size

933B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

GDLAPI2_

Size

1024B

Virtual Size

568B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

GDLAPI3_

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

GDLAPI4_

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

GDLAPI5_

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

GDLAPI6_

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

GDLAPI7_

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

GDLAPI8_

Size

1024B

Virtual Size

1005B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Shared

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

156KB

Virtual Size

156KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

8b0d1a0ad0873849ef6fba03819b2703_JaffaCakes118

gswag32

user32

comdlg32

winspool.drv

kernel32

generic