bb25fc98e5593fe8929c385e7e1ca4a7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bb25fc98e5593fe8929c385e7e1ca4a7_JaffaCakes118
Size

324KB
MD5

bb25fc98e5593fe8929c385e7e1ca4a7
SHA1

91f74adfea6d06a262b6f37599c7b8c60f7eac24
SHA256

6baec35bfdfe10afd85a8ed22a707a0ddc6f5c8a28861042ca49c93defa89478
SHA512

bc4a3180591793251cee44dcfdf9b40c63dd67595480bd356b755dce621c171bb1149b0f88cb91230d73446b9cc6537beb49c225348ae7a92f36e97bf0473e11
SSDEEP

6144:U0wMbr2lkKtl2NGPemAxPLBmYBI3FAoVOsAKLf8Ij8+i3quh:7wYmk0l2NGaxTBI3iNFKLdY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb25fc98e5593fe8929c385e7e1ca4a7_JaffaCakes118

Files

bb25fc98e5593fe8929c385e7e1ca4a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01bf7f267233c75186f62543b91a91c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowInfo
GetWindowLongA
GetDC
IsWindow
MessageBoxA
PostMessageA
RegisterWindowMessageA
GetClassNameA
GetWindowThreadProcessId
EnumWindows
GetSystemMetrics
EnumDisplayDevicesA

ws2_32

shutdown
setsockopt
sendto
send
select
socket
recv
ntohs
ntohl
listen
ioctlsocket
htons
htonl
gethostbyname
connect
closesocket
bind
accept
__WSAFDIsSet
WSAStartup
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACleanup
recvfrom

shell32

ShellExecuteA
ShellExecuteExA
SHGetFolderPathA

advapi32

RegEnumKeyExW
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
StartServiceA
SetSecurityDescriptorDacl
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyExA
RegOpenKeyA
RegEnumValueA
CloseServiceHandle
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
RegCreateKeyA
RegCloseKey
QueryServiceStatus
QueryServiceConfigA
OpenServiceA
OpenSCManagerA
InitializeSecurityDescriptor

winmm

waveOutMessage
waveOutGetDevCapsA
joyGetNumDevs
joyGetDevCapsA

gdi32

DeleteDC
ExtEscape
CreateDCA
GetDeviceCaps

ole32

PropVariantClear
CoUninitialize
CoSetProxyBlanket
CoCreateInstance
CoInitialize

shlwapi

SHStrDupA
SHStrDupW
SHDeleteKeyA

oleaut32

VariantInit
VariantClear
SysFreeString
SysAllocString

kernel32

SetEnvironmentVariableW
SetEnvironmentVariableA
SetEndOfFile
RtlUnwind
RemoveDirectoryW
ReleaseMutex
ReadFile
RaiseException
SetErrorMode
PeekNamedPipe
OutputDebugStringA
OpenProcess
SetEvent
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetHandleCount
SetLastError
SetProcessShutdownParameters
SetProcessWorkingSetSize
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepEx
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
OpenFileMappingA
OpenEventA
MultiByteToWideChar
MoveFileExW
MoveFileA
WriteFile
WriteFileEx
lstrlenA
QueryPerformanceCounter
FreeEnvironmentStringsA
MapViewOfFile
LoadLibraryW
LoadLibraryExW
LoadLibraryExA
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsValidCodePage
IsDebuggerPresent
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
CloseHandle
CompareStringA
CompareStringW
CopyFileA
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileMappingA
CreateFileW
CreateMutexA
CreatePipe
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeviceIoControl
DuplicateHandle
EnterCriticalSection
EnumSystemLocalesA
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetDiskFreeSpaceExW
GetDriveTypeA
GetEnvironmentStringsA
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDriveStringsA
GetLogicalDrives
GetLongPathNameA
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetThreadLocale
GetTickCount
GetTimeFormatA
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExA
GetVolumeInformationA
HeapAlloc
HeapFree

Exports

Exports

cef_browser_create
cef_browser_create_sync
cef_bsupports_mime_type
cef_clear_htmlcache
cef_delete_all_cookies
cef_delete_cookie
cef_do_message_loop_work
cef_initialize
cef_post_data_create
cef_post_data_element_create
cef_register_extension
cef_register_plugin
cef_register_scheme
cef_request_create
cef_set_cookie
cef_shutdown
cef_stream_reader_create_for_data
cef_stream_reader_create_for_file
cef_stream_reader_create_for_handler
cef_stream_writer_create_for_file
cef_stream_writer_create_for_handler
cef_string_alloc
cef_string_alloc_length
cef_string_free
cef_string_length
cef_string_list_alloc
cef_string_list_append
cef_string_list_clear
cef_string_list_free
cef_string_list_size
cef_string_list_value
cef_string_map_alloc
cef_string_map_append
cef_string_map_clear
cef_string_map_find
cef_string_map_free
cef_string_map_key
cef_string_map_size
cef_string_map_value
cef_string_realloc
cef_string_realloc_length
cef_v8value_create_array
cef_v8value_create_bool
cef_v8value_create_double
cef_v8value_create_function
cef_v8value_create_int
cef_v8value_create_null
cef_v8value_create_object
cef_v8value_create_string
cef_v8value_create_undefined

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

01bf7f267233c75186f62543b91a91c8

Headers

File Characteristics

Imports

user32

ws2_32

shell32

advapi32

winmm

gdi32

ole32

shlwapi

oleaut32

kernel32

Exports

Exports

Sections

.text Size: 104KB - Virtual size: 104KB

.rdata Size: 112KB - Virtual size: 112KB

.data Size: 76KB - Virtual size: 1.7MB

.idata Size: 8KB - Virtual size: 8KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 104KB - Virtual size: 104KB

.rdata
Size: 112KB - Virtual size: 112KB

.data
Size: 76KB - Virtual size: 1.7MB

.idata
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 20KB - Virtual size: 20KB