ad4cd1db2789663a3eaae15ed6445890_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ad4cd1db2789663a3eaae15ed6445890_JaffaCakes118
Size

110KB
MD5

ad4cd1db2789663a3eaae15ed6445890
SHA1

fc28a4d5ecf43bbc018a2ef250f80a9280eb55aa
SHA256

e57f2caa1f378ba6a02a9e02cf8256135dc0055eca686dfb10c46a925e5ba88c
SHA512

d9977e62938e92ad9a3ac5e23c4409bbfa8e4fb7c236050af89bbdd3046e983e9bd666d6b036cec19ab2ef2d2c73dc875ba7bbb98d21c30d5414eb67fcd05701
SSDEEP

3072:j967wf7M4KoQukcRXTaH8TNv0kZKTB0XjPARdR5:j9COYLoQuxV0ka0m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad4cd1db2789663a3eaae15ed6445890_JaffaCakes118

Files

ad4cd1db2789663a3eaae15ed6445890_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e8e930bcc42ad31093ede91e2ea96a99

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CreateFileA
GetWindowsDirectoryA
LoadLibraryW
SetCommConfig
WriteConsoleA
LoadLibraryA
WaitForDebugEvent
LockFile
DeleteTimerQueue
GlobalFlags
WritePrivateProfileStringA
GetCompressedFileSizeW
GetFileAttributesExA
SearchPathW
SetMailslotInfo
FillConsoleOutputAttribute
TransactNamedPipe
DeleteFileA
Process32NextW
DeleteVolumeMountPointW
lstrlenA
GetPrivateProfileIntW
SetConsoleOutputCP
GetHandleInformation
HeapCompact
GetProcAddress
AreFileApisANSI
FlushViewOfFile
SetCalendarInfoA
GetNumberOfConsoleMouseButtons
ConvertThreadToFiber
GetConsoleWindow
FlushFileBuffers
SearchPathA
ReadConsoleOutputCharacterA
WriteConsoleInputW
LocalReAlloc
SuspendThread
HeapValidate
ReadConsoleOutputAttribute
GetStringTypeA
GetSystemDefaultLangID
WriteProfileStringW
QueryInformationJobObject
SetCommBreak
GetCurrentDirectoryW
GetLastError
GetShortPathNameW
BackupRead
AddAtomA
GetCPInfoExW
HeapWalk
GetThreadSelectorEntry
GetLogicalDriveStringsA
MoveFileW
OpenSemaphoreW
LocalLock
GetCommState
FindResourceExA
IsBadStringPtrW
GetStartupInfoA
VerSetConditionMask
GetPriorityClass
SetProcessPriorityBoost
OutputDebugStringA
Module32NextW
FindFirstFileExA
HeapUnlock
GetPrivateProfileStructA
GetConsoleAliasA
GetCPInfoExA
GetCurrentProcessId
GetSystemDirectoryW
ExitProcess
InterlockedDecrement
UnregisterWaitEx
GetTickCount
GetEnvironmentStringsA
GetEnvironmentVariableA
LCMapStringW
LockFileEx
CreateFileMappingA
CreateNamedPipeA
PurgeComm
GetEnvironmentStrings
FreeLibrary
OpenFileMappingW
GetEnvironmentStringsW
FillConsoleOutputCharacterW
GetPrivateProfileStringW
GetLongPathNameW
EndUpdateResourceA
GetPrivateProfileIntA
EnumDateFormatsA
QueueUserAPC
FlushInstructionCache
BeginUpdateResourceA
WriteConsoleOutputCharacterA
lstrcmpiA
DeleteTimerQueueEx
GetCPInfo
HeapSize
SwitchToFiber
SetConsoleCP
_lopen
DefineDosDeviceA
GetProfileIntW
GetProfileSectionA
OpenProcess
CreateMutexW
GetLocaleInfoA
ReadFileScatter
Module32First
GetBinaryTypeA
GetOverlappedResult
AllocateUserPhysicalPages
GetCurrentConsoleFont
SetVolumeMountPointW
SetConsoleCtrlHandler
FindFirstVolumeMountPointA
ProcessIdToSessionId
WideCharToMultiByte
GlobalFindAtomA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
lstrcpynW
GetCurrentDirectoryA
RequestWakeupLatency
ReadConsoleOutputA
lstrcpyA
IsBadReadPtr
SetFileTime
OpenWaitableTimerA
WriteConsoleOutputCharacterW
GetUserDefaultLangID
OpenMutexA
CreateProcessA
FreeResource
FindNextChangeNotification

user32

CharLowerW
LoadCursorA
DrawStateA
TileChildWindows
ShowScrollBar
IsCharLowerA
IMPGetIMEA
GetKeyNameTextA
MoveWindow
GetKeyNameTextW
LoadBitmapA
DefWindowProcW
EnumDisplaySettingsExW
SetWindowWord
MenuItemFromPoint
DrawCaption
EnableWindow
SetWindowContextHelpId
IsCharLowerW
LockSetForegroundWindow
CreateWindowStationW
GetDlgCtrlID
RegisterClipboardFormatW
ChangeMenuA
GetKBCodePage
TranslateMessage
SendIMEMessageExW
GetUserObjectInformationA
GetMenuDefaultItem
DlgDirListComboBoxW
SetSystemCursor
DdeQueryConvInfo
FindWindowW
TranslateMDISysAccel
GetNextDlgGroupItem
LoadImageA
SetPropW
LoadBitmapW
ReuseDDElParam
DrawTextExW
InsertMenuW
AnimateWindow
UnhookWindowsHookEx
HideCaret
GetIconInfo
UnhookWinEvent
SetMenuDefaultItem
IsChild
MessageBoxA
SwapMouseButton
OpenWindowStationA
GetMenuItemID
EditWndProc
UnionRect
FlashWindow
RealGetWindowClassW
TranslateAccelerator
FreeDDElParam
SetWindowTextW
EmptyClipboard
IsDlgButtonChecked
SetTimer
PostMessageW
GetClassInfoExW
GetTabbedTextExtentW
CallWindowProcW
RegisterClassW
ValidateRect
ShowWindow
SendMessageTimeoutW
CascadeChildWindows
BroadcastSystemMessage
CreateWindowStationA
GetDC
DdeSetQualityOfService
CharToOemBuffW
WINNLSGetEnableStatus
WinHelpA
CreateDialogParamA
DdeCreateStringHandleW
GetClassInfoW
ClipCursor
BroadcastSystemMessageW
SetWindowsHookW
GetSysColorBrush
SetCursorPos
PackDDElParam
GetCapture
DdeKeepStringHandle
SetMenuContextHelpId
ChangeDisplaySettingsExA
GetScrollBarInfo
InvalidateRgn
PostThreadMessageA
GetInputDesktop
DlgDirSelectComboBoxExW
CheckRadioButton
PeekMessageA
MonitorFromPoint
DlgDirListW
DefMDIChildProcA
DefFrameProcW
LookupIconIdFromDirectoryEx
AdjustWindowRectEx
CallNextHookEx
IsCharAlphaA
ChangeDisplaySettingsW
OffsetRect
SetWindowsHookExW
GetClientRect
LoadCursorW
EndDialog
SetUserObjectSecurity
EnableScrollBar
CloseClipboard
ScrollDC
EnumWindows
GetGUIThreadInfo
GetClassLongA
SetMessageExtraInfo
SetProcessDefaultLayout
MapVirtualKeyExW
RegisterWindowMessageW
GetParent
CallMsgFilterA
DdeGetLastError
WindowFromDC
GetWindowModuleFileNameW
CharToOemA
MessageBoxExW
wvsprintfW

msvcrt

memcpy

advapi32

RegOpenKeyExW

ole32

HkOleRegisterObject
OleGetClipboard
CoInitialize
HACCEL_UserUnmarshal
ReadStringStream
CoGetMalloc
WriteFmtUserTypeStg
OleInitializeWOW
CreateDataAdviseHolder
HWND_UserSize
IIDFromString
OleSetContainedObject
CoTestCancel
GetHookInterface
CoEnableCallCancellation
FmtIdToPropStgName
CoBuildVersion
GetClassFile
OleQueryCreateFromData
StgCreatePropStg
SetConvertStg
CoDeactivateObject
HBRUSH_UserMarshal
StgOpenStorageEx
HMETAFILE_UserFree
CoGetPSClsid
OleCreateFromData
OleCreateFromFileEx
CoRegisterMallocSpy
OpenOrCreateStream
HMETAFILEPICT_UserUnmarshal
UtGetDvtd16Info
GetHGlobalFromILockBytes
HGLOBAL_UserUnmarshal
OleSetMenuDescriptor
CoQueryAuthenticationServices
HPALETTE_UserMarshal
OleFlushClipboard
CoFileTimeNow
CoInitializeWOW
StgCreateDocfile
UpdateDCOMSettings
HMENU_UserSize
CoGetInterfaceAndReleaseStream
HGLOBAL_UserMarshal
CoGetStandardMarshal
OleNoteObjectVisible
CoGetClassVersion
HENHMETAFILE_UserSize
OleLockRunning
CoCancelCall
CLSIDFromProgID
CreateOleAdviseHolder
BindMoniker
GetHGlobalFromStream
WriteStringStream
CoSetCancelObject
CoIsOle1Class
WriteClassStm
HACCEL_UserSize
OleCreateLinkEx
StringFromGUID2
OleConvertOLESTREAMToIStorage
RevokeDragDrop
CoInitializeSecurity
OleSetAutoConvert
SNB_UserFree
DcomChannelSetHResult
CoCreateInstance
OleSetClipboard
PropStgNameToFmtId
StgConvertPropertyToVariant
CoSuspendClassObjects
HMENU_UserUnmarshal
CoQueryReleaseObject
WriteClassStg
CoQueryClientBlanket
CoDisableCallCancellation
CoGetApartmentID
CoMarshalInterface
CoFreeUnusedLibraries
ReadClassStg
CoGetCancelObject
HBITMAP_UserUnmarshal
CoRegisterSurrogateEx
HDC_UserFree
WdtpInterfacePointer_UserMarshal
CoTreatAsClass
StgCreateStorageEx
DoDragDrop
StringFromCLSID
CoIsHandlerConnected
CreateBindCtx
SetDocumentBitStg
CoGetCallerTID
StgOpenStorageOnILockBytes
StgGetIFillLockBytesOnFile
CoImpersonateClient
CoQueryProxyBlanket
CoReleaseServerProcess
CLSIDFromString
OleCreateEx
StgOpenPropStg
EnableHookObject
CoResumeClassObjects
UtGetDvtd32Info
HICON_UserSize
GetRunningObjectTable
CoReleaseMarshalData
RegisterDragDrop
CoRevokeClassObject
CreateClassMoniker
CreateDataCache

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e8e930bcc42ad31093ede91e2ea96a99

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

advapi32

ole32

Sections

.text Size: 91KB - Virtual size: 90KB

.text2 Size: 2KB - Virtual size: 1KB

.data Size: 11KB - Virtual size: 11KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 91KB - Virtual size: 90KB

.text2
Size: 2KB - Virtual size: 1KB

.data
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB