9ff77b73e20b40146139509713dfad9d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

9ff77b73e20b40146139509713dfad9d_JaffaCakes118
Size

214KB
MD5

9ff77b73e20b40146139509713dfad9d
SHA1

0ff70b2fea404260472d3a821367a28c5c53c602
SHA256

1110132e9aaff3ce31993a3d3759d83028efdd8c8710c7515897d21b955853ac
SHA512

40c88db8183fcfcad585fd1097051cf978620d948eb695aa3f5cd5c777509586637278fe4e29038de899299bdb829cabf3db180d535e7df5a9984ec5fb7b6fd2
SSDEEP

3072:Kiv7hQFF7mgOwfgpwxWtgoE4Funtswz8DA7P6VVqejiV/8pjccTTnx/FN:vv9QFpmgGiOOn+wOA7gqeiV/44Uxt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ff77b73e20b40146139509713dfad9d_JaffaCakes118

Files

9ff77b73e20b40146139509713dfad9d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7b4075d27700e5508750edc6cdc78137

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileExW
RemoveDirectoryW
GetOEMCP
ConnectNamedPipe
CompareStringA
FindAtomW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetProcAddress
GetUserDefaultLangID
LoadLibraryA
EnumCalendarInfoW
GetCurrentDirectoryA
OpenProcess
SleepEx
IsValidLocale
GetEnvironmentVariableA
EnumCalendarInfoA
EnumTimeFormatsW
GetACP
GetExpandedNameA
GetCPInfo
ExpandEnvironmentStringsW
CreateNamedPipeW
GlobalFindAtomA
GetExitCodeThread
GetCurrentProcess
BeginUpdateResourceA
MoveFileW
CreateSemaphoreA
BeginUpdateResourceW
GetFullPathNameA
GetDateFormatW
CreateMailslotA
lstrcpyA
CreateNamedPipeA
GetExpandedNameW
GetTempFileNameW
ReplaceFileW
GetCurrentThread
lstrcpy
SetCurrentDirectoryW
GetSystemDirectoryW

user32

SendDlgItemMessageW
IsChild
CopyRect
EnableMenuItem
CreateDialogIndirectParamW
GetClassInfoA
CreateDesktopW
EnumWindows
GetDesktopWindow
SetWindowLongW
RemoveMenu
ShowCaret
SetMenu
LoadMenuW
DestroyWindow
CheckMenuRadioItem
CreateWindowExW
wsprintfA
ArrangeIconicWindows
EnumClipboardFormats
PostQuitMessage
IsWindowEnabled
LoadMenuIndirectA
BringWindowToTop
DefWindowProcA
GetCursorPos
PostMessageA
SetWindowTextA
CharNextW
GetAsyncKeyState
DefFrameProcW
SetDlgItemInt
GetForegroundWindow
GetDlgItem
SetTimer
LoadBitmapA
SetWindowRgn
GetKeyboardLayout
LoadCursorA
SetWindowPos
MessageBeep
GetCapture
MonitorFromWindow
GetSystemMetrics
EnumChildWindows
CreateDialogParamW
GetTopWindow
GetDlgItemInt

gdi32

GetOutlineTextMetricsW
GetPixel
SetPolyFillMode
CreateMetaFileW
SetTextCharacterExtra
RemoveFontResourceA
GetCharacterPlacementW
GetEnhMetaFileDescriptionA
GetCharWidthI
StrokeAndFillPath
PatBlt
CreateDCA
SetPixel
SetEnhMetaFileBits
GetTextCharacterExtra
PtInRegion
GetRegionData
UnrealizeObject
GetDeviceCaps
GetTextExtentExPointI
FillPath

advapi32

RegOpenKeyA
RegOpenKeyA
RegDeleteKeyW
RegSaveKeyA
RegQueryValueW
RegRestoreKeyW
RegDeleteValueA
RegQueryInfoKeyW

shlwapi

StrPBrkW
PathUndecorateW
StrChrNW
StrStrNW
StrStrA
SHRegSetPathW
AssocQueryStringW
SHCopyKeyA
StrStrNIW
PathSearchAndQualifyA
SHRegGetBoolUSValueW
GetMenuPosFromID
StrRChrA

comctl32

ImageList_Destroy
GetEffectiveClientRect
LBItemFromPt
CreateToolbar

opengl32

glTexCoord4f
glLightModeli
glClearIndex
glRasterPos4s
glArrayElement
glVertex3d
glCopyTexImage2D

setupapi

CM_Create_DevNodeW
SetupDecompressOrCopyFileA
CM_Get_First_Log_Conf_Ex
SetupQueryInfOriginalFileInformationA
CM_Get_Global_State
pSetupStringTableDestroy
CM_Request_Device_Eject_ExA
SetupDiRemoveDevice
pSetupSetGlobalFlags
CM_Add_ID_ExA

Sections

.jOpoQ
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.IUUT
Size: 5KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.JhGQ
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VyIb
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.aGbxcx
Size: 2KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QieU
Size: 4KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.f
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ADzKs
Size: 3KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b4075d27700e5508750edc6cdc78137

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

comctl32

opengl32

setupapi

Sections

.jOpoQ Size: 3KB - Virtual size: 3KB

.IUUT Size: 5KB - Virtual size: 60KB

.JhGQ Size: 84KB - Virtual size: 84KB

.VyIb Size: 13KB - Virtual size: 13KB

.aGbxcx Size: 2KB - Virtual size: 150KB

.QieU Size: 4KB - Virtual size: 37KB

.f Size: 82KB - Virtual size: 82KB

.data Size: 6KB - Virtual size: 77KB

.ADzKs Size: 3KB - Virtual size: 23KB

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 1024B - Virtual size: 1024B

.jOpoQ
Size: 3KB - Virtual size: 3KB

.IUUT
Size: 5KB - Virtual size: 60KB

.JhGQ
Size: 84KB - Virtual size: 84KB

.VyIb
Size: 13KB - Virtual size: 13KB

.aGbxcx
Size: 2KB - Virtual size: 150KB

.QieU
Size: 4KB - Virtual size: 37KB

.f
Size: 82KB - Virtual size: 82KB

.data
Size: 6KB - Virtual size: 77KB

.ADzKs
Size: 3KB - Virtual size: 23KB

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 1024B - Virtual size: 1024B