a9dd3fee4565f79f3caf488c416df786_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a9dd3fee4565f79f3caf488c416df786_JaffaCakes118
Size

98KB
MD5

a9dd3fee4565f79f3caf488c416df786
SHA1

f9590b727fd59ef426409e7ed8025fb5f5e88682
SHA256

6916f573619ec565429bff00557b02f20aa4eed0f4d73b392e221a60be526937
SHA512

1015cb05f17f8d2f93c64857a8b398dc2448b0d002dac10a75755531e2943ec2840e2c2e294db0015eb1f6242a491a28ed515696721b66ab292c0cc7d3752b8b
SSDEEP

1536:PCsEIU4OyUVjbhbznprieKRtyDs5gbhyresGG8o+R24:LEOOnVftznd0ub+esGvNRX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9dd3fee4565f79f3caf488c416df786_JaffaCakes118

Files

a9dd3fee4565f79f3caf488c416df786_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8e2579fc48a8b8414588dbabc376ca93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalLock
LocalAlloc
OpenEventW
OutputDebugStringW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WideCharToMultiByte
SetFileAttributesW
DeleteFileW
lstrcpyW
lstrlenW
WinExec
OpenMutexW
OpenFileMappingW
VirtualQuery
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
ResetEvent
FindResourceW
LoadResource
LockResource
CreateThread
LocalUnlock
LocalFree
GetLocalTime
CreateFileW
WaitForMultipleObjects
WriteFile
SetFilePointer
GetSystemTimeAsFileTime
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateMutexW
WaitForSingleObject
ReleaseMutex
lstrlenA
CloseHandle
CreateEventW
SetLastError
GetCurrentThreadId
GetModuleHandleW
FreeLibrary
FindFirstFileW
FindClose
FindNextFileW
GetModuleHandleA
VirtualAlloc

user32

IsWindow
GetMessagePos
ScreenToClient
PostMessageW
GetSystemMetrics
InflateRect
GetWindowRect
GetClientRect
InvalidateRect
LoadImageW
ReleaseDC
GetWindowDC
GetDlgItem
SetWindowLongW
GetWindowLongW
FillRect
SetCursor
LoadCursorW
GetCursorPos
GetDC
GetCursor
PtInRect
MapDialogRect
SetLayeredWindowAttributes
DrawTextW
GetSysColor
PeekMessageW
MsgWaitForMultipleObjectsEx
FrameRect
CopyRect
ClientToScreen
SetWindowPos
GetWindowPlacement
GetParent
RemovePropW
DefWindowProcW
GetClassInfoW
SetWindowRgn
RedrawWindow
WindowFromPoint
DestroyWindow
RegisterWindowMessageW
GetSysColorBrush
CreateWindowExW
GetKeyState
SetFocus
GetWindowTextW
IntersectRect
OffsetRect
DrawFocusRect
SetRect
MessageBeep
GetFocus
BringWindowToTop
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
UpdateWindow
CreateIconIndirect
CopyImage
SetPropW
GetAncestor
SystemParametersInfoW
IsWindowVisible
FindWindowW
GetDesktopWindow
DestroyIcon
LoadIconW
KillTimer
SetTimer
EnableWindow
LoadBitmapW
GetPropW
CallWindowProcW
SendMessageW
GetIconInfo

gdi32

CreateRoundRectRgn
CreatePolygonRgn
LineTo
CreateRectRgn
CombineRgn
FrameRgn
FillRgn
GetTextFaceW
GetTextMetricsW
GetDeviceCaps
StretchBlt
CreateCompatibleBitmap
SetBkColor
TextOutW
SetPixel
CreateFontIndirectW
GetStockObject
GetPixel
CreateCompatibleDC
BitBlt
ExcludeClipRect
DeleteDC
CreateSolidBrush
SetBkMode
SelectObject
CreatePen
Polygon
GetTextExtentPoint32W
DeleteObject
GetObjectW
SetTextColor
MoveToEx
SetStretchBltMode
CreateDIBSection
GetDIBits
SetTextJustification

msimg32

GradientFill
AlphaBlend

advapi32

CryptReleaseContext
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
GetUserNameW
ConvertSidToStringSidW
LookupAccountNameW
CryptGenRandom
CryptAcquireContextW
FreeSid
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
AllocateAndInitializeSid
RegQueryValueW
RegCloseKey

shell32

SHCreateDirectoryExW
ShellExecuteW
SHGetFolderPathW

comctl32

ImageList_GetIconSize
ImageList_DrawEx
_TrackMouseEvent
ord17

shlwapi

PathFindFileNameW

ole32

CoUninitialize
CoInitializeEx
CoCreateInstance

oleaut32

SysAllocString
SysFreeString

olecli32

OleCreate
ErrClose
OleRelease
GenGetData
DocWndProc
DibEnumFormat
OleDelete
OleQueryCreateFromClip
PbCreate
OleCreateLinkFromClip
OleDraw
OleIsDcMeta
OleRevertClientDoc
OleSavedClientDoc
OleLockServer
ErrGetUpdateOptions
GenEqual
LeQueryOpen
MfCopy
OleQueryProtocol
DibRelease
ErrCopyFromLink
OleGetLinkUpdateOptions
DefCreateFromTemplate

panmap

DllGetClassObject

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.mK
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WIbJmg
Size: 512B - Virtual size: 291B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.LnDr
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qEwx
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Ls
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PS
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 44KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sUnIlK
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.s
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qwWFXT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.e
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e2579fc48a8b8414588dbabc376ca93

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

olecli32

panmap

Sections

.text Size: 18KB - Virtual size: 18KB

.mK Size: 1024B - Virtual size: 1KB

.WIbJmg Size: 512B - Virtual size: 291B

.LnDr Size: 512B - Virtual size: 194B

.qEwx Size: 1024B - Virtual size: 1KB

.rdata Size: 6KB - Virtual size: 5KB

.Ls Size: 2KB - Virtual size: 3KB

.PS Size: 1KB - Virtual size: 2KB

.data Size: 44KB - Virtual size: 116KB

.sUnIlK Size: 1KB - Virtual size: 1KB

.s Size: 512B - Virtual size: 278B

.qwWFXT Size: 1KB - Virtual size: 1KB

.e Size: 1024B - Virtual size: 992B

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 18KB - Virtual size: 18KB

.mK
Size: 1024B - Virtual size: 1KB

.WIbJmg
Size: 512B - Virtual size: 291B

.LnDr
Size: 512B - Virtual size: 194B

.qEwx
Size: 1024B - Virtual size: 1KB

.rdata
Size: 6KB - Virtual size: 5KB

.Ls
Size: 2KB - Virtual size: 3KB

.PS
Size: 1KB - Virtual size: 2KB

.data
Size: 44KB - Virtual size: 116KB

.sUnIlK
Size: 1KB - Virtual size: 1KB

.s
Size: 512B - Virtual size: 278B

.qwWFXT
Size: 1KB - Virtual size: 1KB

.e
Size: 1024B - Virtual size: 992B

.rsrc
Size: 17KB - Virtual size: 16KB