b852ee82d73218e5eab0e9ffe7345d82_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b852ee82d73218e5eab0e9ffe7345d82_JaffaCakes118
Size

324KB
MD5

b852ee82d73218e5eab0e9ffe7345d82
SHA1

928e28c65ffc8ac31ce278806f69df9ed781193b
SHA256

cd783910dfec1ed66f28ae264d6d950b934a060e039effe44f3d4663e289d0f0
SHA512

91f86dbf903c4b6e13bd22fbab89617b2b58c01be65ca7915a36b82681ce591c69778ad6fd726f4e838513f555616e641b0fb584c948c7efe3da5badcb04d71d
SSDEEP

6144:n0eRBkJpbHCcDqQsMtNqJPKqtWnVqognpIuh:nBQCKsMtNq/dF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b852ee82d73218e5eab0e9ffe7345d82_JaffaCakes118

Files

b852ee82d73218e5eab0e9ffe7345d82_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d04b3078c3a82460b40c819959256e66

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetDiskFreeSpaceExW
GetDriveTypeA
GetEnvironmentStringsA
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDriveStringsA
GetLogicalDrives
GetLongPathNameA
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetThreadLocale
GetTickCount
GetTimeFormatA
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExA
GetVolumeInformationA
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
FreeLibrary
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MapViewOfFile
MoveFileA
MoveFileExW
MultiByteToWideChar
OpenEventA
OpenFileMappingA
OpenProcess
OutputDebugStringA
PeekNamedPipe
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
RemoveDirectoryW
RtlUnwind
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetHandleCount
SetLastError
SetProcessShutdownParameters
SetProcessWorkingSetSize
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepEx
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
WriteFileEx
lstrlenA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FlushFileBuffers
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitProcess
EnumSystemLocalesA
EnterCriticalSection
DuplicateHandle
DeviceIoControl
DeleteFileW
DeleteFileA
DeleteCriticalSection
CreatePipe
CreateMutexA
CreateFileW
CreateFileMappingA
CreateFileA
CreateEventA
CreateDirectoryW
CopyFileA
CompareStringW
CompareStringA
InterlockedExchange
CloseHandle

advapi32

RegEnumKeyExW
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
StartServiceA
SetSecurityDescriptorDacl
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyExA
RegOpenKeyA
RegEnumValueA
CloseServiceHandle
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
RegCreateKeyA
RegCloseKey
QueryServiceStatus
QueryServiceConfigA
OpenServiceA
OpenSCManagerA
InitializeSecurityDescriptor

oleaut32

SysAllocString
VariantInit
VariantClear
SysFreeString

ws2_32

setsockopt
shutdown
socket
sendto
send
select
recvfrom
recv
ntohs
ntohl
listen
ioctlsocket
htons
htonl
gethostbyname
connect
closesocket
bind
accept
__WSAFDIsSet
WSAStartup
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSACleanup

user32

RegisterWindowMessageA
PostMessageA
MessageBoxA
IsWindow
GetWindowThreadProcessId
GetWindowLongA
GetWindowInfo
GetSystemMetrics
GetDC
GetClassNameA
EnumWindows
EnumDisplayDevicesA

gdi32

GetDeviceCaps
ExtEscape
CreateDCA
DeleteDC

ole32

CoSetProxyBlanket
CoInitialize
CoCreateInstance
PropVariantClear
CoUninitialize

shell32

ShellExecuteA
ShellExecuteExA
SHGetFolderPathA

Exports

Exports

AddClientDV
AddCrashHandlerLimitModule
AddDiagAssertModule
AllocAndFillProcessModuleList
BSUAnsi2Wide
BSUGetModuleBaseNameA
BSUGetModuleBaseNameW
BSUGetModuleFileNameExA
BSUGetModuleFileNameExW
BSUIsInteractiveUser
BSUSetCurrentThreadNameA
BSUSetCurrentThreadNameW
BSUSetThreadNameA
BSUSetThreadNameW
BSUSymInitializeA
BSUSymInitializeW
BSUWide2Ansi
CreateCurrentProcessCrashDumpA
CreateCurrentProcessCrashDumpW
DiagAssertA
DiagAssertW
DiagOutputA
DiagOutputW
GetFaultReason
GetFirstStackTraceString
GetLimitModuleCount
GetLimitModulesArray
GetLoadedModules
GetNextStackTraceString
GetProcessThreadIds
GetRegisterString
GetSuperAssertionCount
HookImportedFunctionsByNameA
HookImportedFunctionsByNameW
HookOrdinalExportA
HookOrdinalExportW
IsMiniDumpFunctionAvailable
IsNT
IsNT4
IsServer2003
IsServer2003orBetter
IsW2K
IsW2KorBetter
IsXP
IsXPorBetter
MemStressInitializeA
MemStressInitializeW
MemStressTerminate
SetCrashHandlerFilter
SetDiagAssertFile
SetDiagAssertOptions
SetDiagOutputFile
SnapCurrentProcessMiniDumpA
SnapCurrentProcessMiniDumpW
SuperAssertionA
SuperAssertionW
ValidateAllBlocks

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d04b3078c3a82460b40c819959256e66

Headers

File Characteristics

Imports

kernel32

advapi32

oleaut32

ws2_32

user32

gdi32

ole32

shell32

Exports

Exports

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 112KB - Virtual size: 112KB

.data Size: 80KB - Virtual size: 1.7MB

.idata Size: 8KB - Virtual size: 8KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 112KB - Virtual size: 112KB

.data
Size: 80KB - Virtual size: 1.7MB

.idata
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 20KB - Virtual size: 20KB