a6c9ff4cced527d3cd2faf5fc947f2ed_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a6c9ff4cced527d3cd2faf5fc947f2ed_JaffaCakes118
Size

256KB
MD5

a6c9ff4cced527d3cd2faf5fc947f2ed
SHA1

c056b813949a4782b801c6bbc3cb7eb5d0edd897
SHA256

ec8c9d1ccb0c7f2c6c16b22d1f2112d6c46b8986a9116f09d16f1b8f9e724c53
SHA512

4045a8675c7e52f681d17fda068958463aefa3911dc8d253dff726c9d4a9c56432f50c8a92b2a7825927955ae5e3f6bc70b931492b5d8b48a380d08e92b7a0b9
SSDEEP

6144:hGF2sWE6wqhQdIpfa2295libnlbUS4/UANy4:/s3E0I42c74VUSkUAP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6c9ff4cced527d3cd2faf5fc947f2ed_JaffaCakes118

Files

a6c9ff4cced527d3cd2faf5fc947f2ed_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2d0e823f9fa521b82ee32a1ea5719b26

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
TerminateThread
WaitForSingleObject
CreateThread
GetFileAttributesExA
ExpandEnvironmentStringsA
lstrlenA
lstrcatA
lstrcpyA
GetLastError
CreateMutexA
WriteFile
MoveFileA
RemoveDirectoryA
FlushFileBuffers
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
GetStringTypeA
GetStringTypeW
DeleteFileA
CreateDirectoryA
GetTempPathA
GetCommandLineA
GetModuleFileNameA
Sleep
GetLocalTime
GetTickCount
ReadFile
GetProcessHeap
SetEndOfFile
LoadLibraryA
GetLocaleInfoA
VirtualFree
HeapFree
HeapCreate
HeapDestroy
SetHandleCount
GetEnvironmentStringsW
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetStartupInfoA
HeapValidate
IsBadReadPtr
GetProcAddress
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
MultiByteToWideChar
LCMapStringA
LCMapStringW
DebugBreak
GetStdHandle
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
ExitProcess
LoadLibraryW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW

user32

GetClassLongA
wsprintfA

advapi32

RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

ole32

CoInitialize

shell32

ShellExecuteA

shlwapi

PathFileExistsA
PathRemoveBlanksA
PathGetArgsA
PathFindFileNameA
PathIsDirectoryA

gdi32

AddFontResourceW
SetWindowExtEx
GetEnhMetaFileA
GetGlyphIndicesW
FrameRgn
SetGraphicsMode
CreateColorSpaceW
Pie
CreateMetaFileA
CreatePolyPolygonRgn
CreateFontIndirectExW
GdiFlush
OffsetWindowOrgEx
ExtEscape
SaveDC
GetICMProfileA
AbortPath
GetEnhMetaFileW
SetICMProfileA
RestoreDC
GetKerningPairsA
ExtCreatePen
PolyPolygon
GetPixelFormat
GetFontUnicodeRanges
SetWindowOrgEx
CreateScalableFontResourceW
GetSystemPaletteUse
CreateEllipticRgn
GetTextExtentPoint32A
PathToRegion
CreateRoundRectRgn
GetClipBox
GetObjectA
GetSystemPaletteEntries
GetLayout
LineDDA
SelectClipPath
UnrealizeObject
GetViewportExtEx
GetTextExtentExPointW
RemoveFontResourceExW
SetArcDirection
Chord
SetROP2
EnumEnhMetaFile
Polyline
FixBrushOrgEx
CombineRgn
SetViewportExtEx
GetCharABCWidthsW
CreateDiscardableBitmap
EnumICMProfilesW
GetTextExtentPointI
GetCharWidthFloatA
ExtCreateRegion
ScaleWindowExtEx
GetStockObject
GetDCPenColor
GetTextMetricsW
GetPolyFillMode
GetObjectW
FlattenPath
SetBitmapDimensionEx
GetOutlineTextMetricsA
GetColorSpace
GetPixel
GetLogColorSpaceA
ModifyWorldTransform
FloodFill
GetArcDirection
EnumFontFamiliesExW
SetColorAdjustment
CreatePolygonRgn
PolyBezierTo
SetDIBitsToDevice
ColorMatchToTarget
PlayMetaFile
SetTextColor
GetNearestPaletteIndex
EnumFontsW
SelectPalette
GetEnhMetaFileHeader
PlgBlt
SetPixelFormat
GdiSetBatchLimit
PtInRegion
GdiComment
GetBitmapBits
SetBoundsRect
ExtFloodFill
GetViewportOrgEx
RemoveFontResourceW
AddFontMemResourceEx
GetRgnBox
StartDocW
SetAbortProc
DPtoLP
CreatePalette
GetTextCharsetInfo
CopyMetaFileA
GetLogColorSpaceW
GetBkColor
GetTextExtentExPointA
AddFontResourceExW

ws2_32

select
connect
ioctlsocket
__WSAFDIsSet
socket
gethostbyname
WSAStartup
closesocket
htons
recv
send

netapi32

Netbios

comdlg32

ReplaceTextW
GetSaveFileNameW
GetSaveFileNameA
CommDlgExtendedError
ChooseColorA
FindTextW
GetOpenFileNameA
PageSetupDlgW

crypt32

CertSetCertificateContextPropertiesFromCTLEntry
CertCompareCertificateName
CertAddStoreToCollection
CertRemoveEnhancedKeyUsageIdentifier

imm32

ImmGetRegisterWordStyleW
ImmInstallIMEA
ImmSimulateHotKey
ImmGetRegisterWordStyleA
ImmGetConversionListW
ImmIsUIMessageA
ImmAssociateContext
ImmSetCompositionWindow
ImmGetOpenStatus
ImmGetGuideLineA
ImmGetCandidateListCountA
ImmConfigureIMEW
ImmGetProperty
ImmEnumInputContext
ImmRegisterWordA
ImmSetCandidateWindow
ImmSetCompositionStringA
ImmEscapeW
ImmUnregisterWordW
ImmGetVirtualKey
ImmGetCompositionWindow
ImmRegisterWordW
ImmGetCandidateWindow
ImmGetIMEFileNameA
ImmGetCompositionFontW
ImmEscapeA
ImmGetCandidateListA
ImmDisableTextFrameService
ImmCreateContext
ImmGetDefaultIMEWnd
ImmIsUIMessageW

iphlpapi

DeleteIPAddress
GetIfEntry
GetExtendedTcpTable
GetUdpStatisticsEx
GetUniDirectionalAdapterInfo
CreateIpForwardEntry
GetAdapterOrderMap
SetIfEntry
GetPerAdapterInfo
SetTcpEntry
DeleteIpForwardEntry
NotifyRouteChange
GetUdpTable
GetBestInterfaceEx
GetRTTAndHopCount
GetFriendlyIfIndex
GetIpStatisticsEx
IpRenewAddress
SetIpNetEntry
IpReleaseAddress
GetIpErrorString
FlushIpNetTable
CreateProxyArpEntry
CancelIPChangeNotify
GetOwnerModuleFromUdpEntry
SetIpTTL
AddIPAddress
GetInterfaceInfo

msimg32

TransparentBlt

mswsock

WSARecvEx
TransmitFile
GetAcceptExSockaddrs

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d0e823f9fa521b82ee32a1ea5719b26

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

shell32

shlwapi

gdi32

ws2_32

netapi32

comdlg32

crypt32

imm32

iphlpapi

msimg32

mswsock

Sections

.text Size: 168KB - Virtual size: 167KB

.rdata Size: 65KB - Virtual size: 64KB

.data Size: 4KB - Virtual size: 21KB

.reloc Size: 17KB - Virtual size: 17KB

.text
Size: 168KB - Virtual size: 167KB

.rdata
Size: 65KB - Virtual size: 64KB

.data
Size: 4KB - Virtual size: 21KB

.reloc
Size: 17KB - Virtual size: 17KB