a9ced5695cf9b06c396185d20d311c58_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a9ced5695cf9b06c396185d20d311c58_JaffaCakes118
Size

217KB
MD5

a9ced5695cf9b06c396185d20d311c58
SHA1

6f9a9f5cdf9005646144d8672832e65d4ac85e68
SHA256

a2c2fac49800f32848204f522cb61878cc01362bd9ba713cafed2959cba7e3ef
SHA512

c038c0625c40df8a06d7ce30bd53b32c9f0be93f662e713f6d9252b2e65e4476e93831227932eaf8d5334fbecd2436b8b7c402da9bf586f83787d1e213beca6a
SSDEEP

3072:6ZAKmD7Jjx8sZzmK/vWV7uLC6xDkVq/EDTrrOD6lzwZ+XE+vzEcgXh6su0:AEkO6/V65/KTeD6lzwZ+XjvAcgx6su0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9ced5695cf9b06c396185d20d311c58_JaffaCakes118

Files

a9ced5695cf9b06c396185d20d311c58_JaffaCakes118
.exe windows:1 windows x86 arch:x86

43ea8dcd11d8fe3f3fbb1824be89e8b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW
GetMenuState
GetMessageW
GetCapture
GetSystemMetrics
DefWindowProcW
InvalidateRect
MessageBeep
LoadIconW
DialogBoxParamW
SetWindowLongW
CheckMenuItem
SetWindowPlacement
GetMenu
GetLastActivePopup
CharNextW
TranslateMessage
PostMessageW
GetDlgCtrlID
GetSysColor
DispatchMessageW
RegisterClassExW
SetWinEventHook
GetSystemMenu
UpdateWindow
GetWindowPlacement
CreateDialogParamW
SystemParametersInfoA
wsprintfW
GetWindowTextW
LoadCursorW
BringWindowToTop
GetDlgItemTextW
SetScrollPos
SetCursor
CharUpperW
PostQuitMessage
CharLowerW
GetDesktopWindow
GetParent
GetWindowLongW
ChildWindowFromPoint
IsDialogMessageW
ScreenToClient
IsClipboardFormatAvailable
IsIconic
GetSubMenu
SetWindowTextW
ShowWindow
EnableMenuItem
EndDialog
RegisterWindowMessageW
EndPaint
LoadImageW
UnhookWindowsHookEx
OpenClipboard
SendMessageW
TranslateAcceleratorW
MapWindowPoints
IsRectEmpty
GetClientRect
DrawTextExW
DestroyWindow
ReleaseCapture
CloseClipboard
GetFocus
CreateWindowExW
GetDlgItem
PeekMessageW
MoveWindow
SetCapture
SetDlgItemTextW
EnableWindow
PostMessageA
GetDC
LoadAcceleratorsW
LoadStringW
GetWindowRect
ReleaseDC
SetActiveWindow
GetKeyboardLayout
SetFocus
GetPropA
GetCursorPos
EqualRect
WinHelpW
SendDlgItemMessageW
GetForegroundWindow
UnhookWinEvent

kernel32

lstrcatW
HeapCreate
GetDiskFreeSpaceA
LocalFree
GetCurrentDirectoryA
WideCharToMultiByte
FoldStringW
GetSystemTimeAsFileTime
ReleaseMutex
LocalUnlock
UnmapViewOfFile
GetEnvironmentStringsW
GetFileAttributesW
IsDebuggerPresent
SetEvent
WriteFile
GetTickCount
LocalSize
GlobalLock
ExitProcess
VirtualProtect
CreateProcessA
IsValidCodePage
TerminateProcess
GetCurrentThreadId
GetLastError
OpenMutexA
lstrcpyW
GetLocaleInfoW
WaitForMultipleObjects
SetUnhandledExceptionFilter
FindClose
CloseHandle
GetConsoleOutputCP
CompareStringW
RaiseException
GetProcAddress
GetFileInformationByHandle
GlobalHandle
GetUserDefaultLCID
GlobalFree
HeapAlloc
InitializeCriticalSection
LCMapStringA
VirtualAlloc
FindFirstFileW
GetCommandLineW
SetErrorMode
LeaveCriticalSection
GetCurrentProcessId
LocalLock
LocalAlloc
GlobalUnlock
DeleteCriticalSection
GetCPInfo
GetLocalTime
CreateEventW
MultiByteToWideChar
GetPrivateProfileStringA
ReadFile
WaitForSingleObject
QueryPerformanceCounter
InterlockedCompareExchange
MapViewOfFile
GetCurrentProcess
GetStartupInfoA
lstrcpynW
GetSystemDefaultLangID
GetACP
GetThreadLocale
UnhandledExceptionFilter
LocalReAlloc
LoadLibraryA
CreateThread
GetModuleHandleA
LockResource
GetFileSize
MulDiv
lstrlenW
GetUserDefaultUILanguage
TlsFree
GetCommandLineA
SystemTimeToFileTime
SetLastError
DeleteFileW
lstrcmpiW
FormatMessageW
CreateFileW
GetTimeFormatW
SetEndOfFile
GetDateFormatW
VirtualFree
TlsSetValue
GetFileType
GetComputerNameW
GetShortPathNameW
GetModuleFileNameA
CreateFileMappingW
InterlockedIncrement
lstrcmpW

gdi32

SetAbortProc
SetWindowExtEx
SetBkMode
TextOutW
CreateDCW
SetViewportExtEx
EndDoc
StartPage
SelectObject
EndPage
StartDocW
GetTextMetricsW
DeleteDC
DeleteObject
EnumFontsW
GetDeviceCaps
SetMapMode
AbortDoc
GetStockObject
GetTextFaceW
GetObjectW
CreateFontIndirectW
LPtoDP
GetTextExtentPoint32W

advapi32

RegOpenKeyExA
RegSetValueExW
RegQueryValueExW
RegQueryValueExA
RegCreateKeyW
RegCloseKey
IsTextUnicode

comdlg32

CommDlgExtendedError
GetFileTitleW
ChooseFontW
GetSaveFileNameW
PrintDlgExW
PageSetupDlgW
ReplaceTextW
FindTextW
GetOpenFileNameW

msvcrt

time
??2@YAPAXI@Z
__set_app_type
_wtol
_cexit
localtime
_controlfp
_CxxThrowException
wcschr
_c_exit
wcsncpy
malloc
_wcsnicmp
_XcptFilter
__getmainargs
_amsg_exit
?terminate@@YAXXZ
_snwprintf
iswctype
__setusermatherr
_acmdln
wcsncmp
_exit
_initterm
?what@exception@@UBEPBDXZ
__p__commode
exit
__p__fmode
_wcsicmp
_adjust_fdiv

comctl32

CreateStatusWindowW

shell32

DragAcceptFiles
ShellAboutW
DragQueryFileW
DragFinish

winspool.drv

OpenPrinterW
GetPrinterDriverW
ClosePrinter

Sections

.text
Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43ea8dcd11d8fe3f3fbb1824be89e8b5

Headers

File Characteristics

Imports

user32

kernel32

gdi32

advapi32

comdlg32

msvcrt

comctl32

shell32

winspool.drv

Sections

.text Size: 1024B - Virtual size: 966B

.rdata Size: 174KB - Virtual size: 174KB

.data Size: 34KB - Virtual size: 1.0MB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 1024B - Virtual size: 966B

.rdata
Size: 174KB - Virtual size: 174KB

.data
Size: 34KB - Virtual size: 1.0MB

.rsrc
Size: 6KB - Virtual size: 5KB