b2086f80e858bae60d058dbcb21d80e3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b2086f80e858bae60d058dbcb21d80e3_JaffaCakes118
Size

332KB
MD5

b2086f80e858bae60d058dbcb21d80e3
SHA1

088cb73e175f5ac4bd1423cbd832dc01e3ae3760
SHA256

1635330d926362b6375f48dfb497ef06c059d253b37cc1338d35689ba6b4170e
SHA512

761bc85a49637f926fdd341fade983b9ed779eacfdc3b4039cc81341d94ca79f4920ef18e6b68a2696d86723645f1677664c18a3c9d47d8d918f659f94865550
SSDEEP

6144:CITNmY4v2IGmAtKCkUv4fop9JSpE80eSz9zkzWgfTm:r9y5QmopvSC80xxkzhm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2086f80e858bae60d058dbcb21d80e3_JaffaCakes118

Files

b2086f80e858bae60d058dbcb21d80e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a61626fd06ddccd88fcdcd7ca7739059

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
LocalAlloc
GetDriveTypeA
GetTempPathA
LocalLock
LocalUnlock
lstrlenA
RemoveDirectoryA
DeleteFileA
Sleep
GlobalAlloc
GetFileAttributesA
GlobalFree
GlobalLock
GlobalUnlock
LockResource
FindResourceA
LoadResource
CreateFileA
FreeResource
GetLastError
lstrcpyA
CloseHandle
lstrcatA
GetModuleFileNameA
GetVersionExA
lstrcmpA
SetPriorityClass
RaiseException
GetCurrentProcess
GetTimeZoneInformation
GetLocaleInfoW
GetStringTypeA
GetOEMCP
GetStringTypeW
IsBadCodePtr
IsBadReadPtr
GetACP
SetStdHandle
EnumSystemLocalesA
SetUnhandledExceptionFilter
IsValidLocale
GetCPInfo
IsValidCodePage
LCMapStringA
IsBadWritePtr
LCMapStringW
VirtualFree
HeapCreate
VirtualAlloc
GetStdHandle
SetHandleCount
HeapDestroy
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
ResumeThread
FreeEnvironmentStringsA
HeapSize
TerminateProcess
HeapReAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
TlsGetValue
TlsSetValue
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetWindowsDirectoryA
GetSystemDirectoryA
GetUserDefaultLCID
GetLocaleInfoA
GetShortPathNameA
lstrcmpiA
LoadLibraryA
GetProcAddress
lstrcpynA
IsDBCSLeadByte
SetLastError
SizeofResource
FormatMessageA
GetExitCodeProcess
GetTempFileNameA
FindClose
GetFullPathNameA
GetModuleHandleA
MultiByteToWideChar
VirtualProtect
CreateProcessA
WaitForSingleObject
CreateEventA
SetEvent
FindFirstChangeNotificationA
FindCloseChangeNotification
FreeLibrary
FindNextChangeNotification
ReleaseMutex
GetCurrentThreadId
CreateMutexA
HeapFree
HeapAlloc
FreeEnvironmentStringsW
GetCurrentThread
SetThreadPriority
GetEnvironmentVariableA
FlushFileBuffers
WritePrivateProfileStringA
CreateThread
GlobalMemoryStatus
GetSystemInfo
SetErrorMode
GetPrivateProfileStringA
QueryPerformanceCounter
GetThreadPriority
GetPriorityClass
QueryPerformanceFrequency
DeviceIoControl
CreateDirectoryA
WriteFile
ReadFile
SetFileTime
GetFileTime
SetFilePointer
GetFileSize
GetFileType
MoveFileExA
SetEndOfFile
GetCurrentDirectoryA
UnhandledExceptionFilter
GetDiskFreeSpaceA
SetCurrentDirectoryA
FindFirstFileA
FindNextFileA
SetFileAttributesA
GetExitCodeThread
GetTickCount
ExitThread
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess

user32

ShowWindow
GetDlgItem
InvalidateRect
EnableWindow
CreateDialogParamA
DestroyWindow
UnregisterClassA
SetWindowTextA
SendDlgItemMessageA
GetMessageA
DispatchMessageA
TranslateMessage
GetSystemMetrics
SetFocus
CreateWindowExA
FindWindowA
ReleaseDC
GetDC
LoadIconA
LoadStringA
GetSysColorBrush
PostQuitMessage
RedrawWindow
GetUpdateRect
CopyRect
DialogBoxParamA
EndDialog
FillRect
GetDlgItemTextA
PeekMessageA
FindWindowExA
MsgWaitForMultipleObjects
RegisterClassA
LoadCursorA
SetDlgItemTextA
SendMessageA
MessageBoxA
SetForegroundWindow
EnumWindows
IsWindow
UpdateWindow
CharPrevA
CharNextA
wvsprintfA
SetWindowPos
GetKeyboardType
WaitForInputIdle
GetDesktopWindow
CharUpperA
PostMessageA
CharToOemA
ExitWindowsEx
DefWindowProcA
GetClientRect
GetParent
EnumDisplaySettingsA
SetCursor
BeginPaint
FrameRect
InflateRect
GetWindowWord
wsprintfA
EndPaint
SetWindowWord

gdi32

ExtTextOutA
GetStockObject
SelectObject
GetTextExtentPoint32A
DeleteDC
DeleteObject
GetDeviceCaps
RealizePalette
SelectPalette
BitBlt
GetObjectA
TextOutA
CreateCompatibleDC
SetBkMode
GetBkMode
GetTextColor
CreateDIBitmap
CreatePalette
SetTextAlign
SetBkColor
SetTextColor
GetSystemPaletteEntries
AddFontResourceA

shell32

SHChangeNotify
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteExA

version

GetFileVersionInfoSizeA
VerQueryValueA
VerLanguageNameA
GetFileVersionInfoA

winmm

timeGetTime
joyGetNumDevs
waveOutGetDevCapsA
waveOutGetNumDevs

advapi32

AdjustTokenPrivileges
RegDeleteValueA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
LookupPrivilegeValueA
OpenProcessToken
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA

ole32

OleInitialize
CoUninitialize
CoCreateInstance
CoInitialize
OleUninitialize

Exports

Exports

?MasterCallback@@YG?AW4EBURETCODE@@PAX@Z
_CPPDlgProc@16

Sections

.text
Size: 156KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a61626fd06ddccd88fcdcd7ca7739059

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

version

winmm

advapi32

ole32

Exports

Exports

Sections

.text Size: 156KB - Virtual size: 153KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 28KB - Virtual size: 53KB

.rsrc Size: 128KB - Virtual size: 128KB

.text
Size: 156KB - Virtual size: 153KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 28KB - Virtual size: 53KB

.rsrc
Size: 128KB - Virtual size: 128KB