a6fd0a2170aaaacaf293627d031ec5f5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a6fd0a2170aaaacaf293627d031ec5f5_JaffaCakes118
Size

288KB
MD5

a6fd0a2170aaaacaf293627d031ec5f5
SHA1

7d55f201698ebe70cdf8bb8d059c437fa58a1119
SHA256

4868c7d8da293e6a3e170aaf442b00e9ecad700956e11f59166453d669de2473
SHA512

2426f42db6cfaf6d8c4edd94464bd8c01ab184209a58fa849a46e4e6db546db99549db3f509f26504052384d490c50ade0754bd87228107eb1d59d686cd9ff89
SSDEEP

6144:/ZBKVnZcp9Fc2MdUQkskS1n2jLVfTIhdLKzaMcAv:BBKVnZcp9FcTPn2jLlkPKzaI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6fd0a2170aaaacaf293627d031ec5f5_JaffaCakes118

Files

a6fd0a2170aaaacaf293627d031ec5f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

52e9b8848be2d870e7309a28db2ac9db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

o:\projects\Wrapper\app\Release\WrapperApp.pdb

Imports

winmm

PlaySoundA
timeGetTime

shlwapi

SHDeleteKeyA

setupapi

SetupIterateCabinetA

kernel32

GetLastError
WideCharToMultiByte
GetPrivateProfileStringA
GetPrivateProfileIntA
CopyFileA
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
GetACP
GetLocaleInfoA
GetVersionExA
RaiseException
GetVolumeInformationA
GetSystemDirectoryA
CloseHandle
OpenSemaphoreA
OutputDebugStringA
SetFileAttributesA
CreateEventA
WaitForSingleObject
SetEvent
CreateThread
GetCurrentThreadId
GetExitCodeProcess
TerminateProcess
CreateProcessA
GetModuleHandleA
CreateFileA
FindClose
GetDateFormatA
SystemTimeToTzSpecificLocalTime
IsBadWritePtr
GetSystemTime
Sleep
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
EnumSystemLocalesA
GetCurrentDirectoryA
EnumResourceNamesA
InitializeCriticalSection
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetSystemInfo
VirtualProtect
VirtualQuery
GetOEMCP
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
FlushFileBuffers
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
GetCurrentProcess
SetUnhandledExceptionFilter
GetProcAddress
TlsGetValue
TlsSetValue
GetTimeZoneInformation
TlsFree
SetLastError
TlsAlloc
GetCPInfo
LCMapStringW
LCMapStringA
IsBadReadPtr
HeapAlloc
ExitProcess
HeapFree
GetCommandLineA
DeleteFileA
GetFileAttributesA
FindFirstFileA
SetFilePointer
ReadFile
WriteFile
lstrlenA
GetModuleFileNameA
SetCurrentDirectoryA
InterlockedDecrement
InterlockedIncrement
IsValidLocale
IsValidCodePage
FileTimeToSystemTime
IsBadCodePtr
SetStdHandle
GetLocaleInfoW
LoadLibraryA
DeleteCriticalSection
FileTimeToLocalFileTime
GetDriveTypeA
GetFullPathNameA
GetStartupInfoA
RtlUnwind
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
LocalFree
MultiByteToWideChar

user32

RegisterClassExA
GetWindowLongA
DefWindowProcA
CreateWindowExA
ReleaseCapture
ClientToScreen
BeginPaint
EndPaint
InvalidateRect
SetCursor
PtInRect
LoadIconA
SystemParametersInfoA
UpdateWindow
ShowWindow
SetFocus
SendMessageA
SetWindowRgn
EnumChildWindows
GetClassNameA
GetWindowRect
SetWindowPos
LoadBitmapA
GetClientRect
KillTimer
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
LoadCursorA
CopyIcon
SetSystemCursor
PostThreadMessageA
MessageBoxA
IsWindow
PostQuitMessage
PostMessageA
SetWindowLongA
LoadStringA
GetParent
FindWindowA
SetRect
MoveWindow
SetCapture

gdi32

ExtCreateRegion
CreateCompatibleDC
DeleteDC
StretchBlt
SelectObject
BitBlt
CreateRectRgn
OffsetRgn
CombineRgn
GetObjectA
DeleteObject
CreateDIBSection

advapi32

RegOpenKeyA
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

VariantInit
VariantClear
VariantChangeType
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysAllocStringLen
SysFreeString

Sections

.text
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52e9b8848be2d870e7309a28db2ac9db

Headers

File Characteristics

PDB Paths

Imports

winmm

shlwapi

setupapi

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Sections

.text Size: 200KB - Virtual size: 198KB

.rdata Size: 44KB - Virtual size: 40KB

.data Size: 8KB - Virtual size: 14KB

.rsrc Size: 31KB - Virtual size: 67KB

.text
Size: 200KB - Virtual size: 198KB

.rdata
Size: 44KB - Virtual size: 40KB

.data
Size: 8KB - Virtual size: 14KB

.rsrc
Size: 31KB - Virtual size: 67KB