b1a1435210438ba818654c0c8f61e50d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b1a1435210438ba818654c0c8f61e50d_JaffaCakes118
Size

308KB
MD5

b1a1435210438ba818654c0c8f61e50d
SHA1

7680f895df7535a09f4c0cdf6fd909d85276b0a1
SHA256

2e519230ea2c3bda566b6625169f89f30fb5bf8c3ef3ef6aec0606b93751bf9c
SHA512

b15935c979bfbe94607b4bced91c5a36a70ee7a16d7b84ee095f27fdeb46d8b3c7584d30cd5fdafe2922e8775cd398f7edc63a47f54cd23bba582c6e45cfb821
SSDEEP

6144:8PRZzX3kSeK2eM74BmQL+PRwX/ottoTBJbJLJ:aZzXg4BJzvottoTrf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1a1435210438ba818654c0c8f61e50d_JaffaCakes118

Files

b1a1435210438ba818654c0c8f61e50d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

026ab475e3bbb457bc8db336b68f65ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\MyWork\WorkProjects\NetNucleosProjects\WhereSphere_Rebranding\gabpath\GabPath_full_code\code\projets\contextuel_popper\exe\src\surf_accuracy\Release_GabPath\GabPath.pdb

Imports

shlwapi

PathFindExtensionA
SHSetValueA
PathFindFileNameA

advapi32

RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA

kernel32

SetLastError
ReadFile
LocalFree
FormatMessageA
TerminateProcess
SetFilePointer
LocalAlloc
RaiseException
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
FlushFileBuffers
SetEndOfFile
GetCommandLineA
GlobalGetAtomNameA
GlobalDeleteAtom
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GlobalAddAtomA
InterlockedIncrement
InterlockedDecrement
lstrcmpW
GlobalFindAtomA
GetModuleFileNameW
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
GlobalFlags
WritePrivateProfileStringA
GetCPInfo
GetOEMCP
RtlUnwind
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
VirtualAlloc
HeapReAlloc
ExitProcess
GetFileType
GetProcessHeap
GetStartupInfoA
HeapSize
SetStdHandle
GetACP
HeapDestroy
HeapCreate
VirtualFree
GetConsoleCP
GetConsoleMode
GetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FreeLibrary
GetModuleHandleA
GetVersionExA
Sleep
WriteFile
LoadLibraryA
GetProcAddress
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
SetUnhandledExceptionFilter
lstrlenA
GetVersion
InterlockedExchange
CreateFileA
CloseHandle
GetModuleFileNameA
MultiByteToWideChar
lstrcmpA
CompareStringA
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LoadResource
LockResource
SizeofResource
FindResourceA
WideCharToMultiByte
GetLastError
GetSystemTime
GetTimeZoneInformation
GetThreadLocale

user32

LoadIconA
ShowWindow
DestroyMenu
GetSysColorBrush
ReleaseDC
GetDC
LoadCursorA
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
UnregisterClassA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
WinHelpA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
DestroyWindow
IsWindow
GetDlgItem
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
SendMessageA
GetKeyState
PeekMessageA
ValidateRect
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
MessageBoxA
SetForegroundWindow
GetMenu
IsWindowVisible
GetSystemMetrics
GetForegroundWindow
GetClientRect
SetWindowTextA
GetWindowThreadProcessId
EnableWindow
PostMessageA
GetWindowTextA
GetCursorPos
GetClassNameA
GetParent
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
RegisterWindowMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
GetWindow

gdi32

SetMapMode
RestoreDC
SaveDC
ExtTextOutA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
RectVisible
GetDeviceCaps
TextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
DeleteObject
PtVisible

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

oleaut32

VariantInit
VariantChangeType
VariantClear

Sections

.text
Size: 204KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

026ab475e3bbb457bc8db336b68f65ad

Headers

File Characteristics

PDB Paths

Imports

shlwapi

advapi32

kernel32

user32

gdi32

winspool.drv

oleaut32

Sections

.text Size: 204KB - Virtual size: 201KB

.rdata Size: 72KB - Virtual size: 71KB

.data Size: 12KB - Virtual size: 129KB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 204KB - Virtual size: 201KB

.rdata
Size: 72KB - Virtual size: 71KB

.data
Size: 12KB - Virtual size: 129KB

.rsrc
Size: 16KB - Virtual size: 15KB