bc2350c1345734a68c3881eb119145c4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bc2350c1345734a68c3881eb119145c4_JaffaCakes118
Size

253KB
MD5

bc2350c1345734a68c3881eb119145c4
SHA1

048a664a7e97de5e2ff992b2375559ca6f920d31
SHA256

32cf908e899510c80de5684586bf197c77ec2fda328a9cf20fdf33a9ca75737f
SHA512

178cf874065c71b8db1d90db64b78a8ed2900bfdcd608f7f50b8e650b7e92516fbb4100ddb0eaed4037a8514715348f70388032691ea32b8dfea3e1445a2030b
SSDEEP

3072:x2HD8sfSgvuNAtGdQyptt+dpxp1612vwPJOCOx8mZUkDWGRi7jyQA8niMzMt5G3U:xeLvftaQ0b+dp7162uJRepZ7ez7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc2350c1345734a68c3881eb119145c4_JaffaCakes118

Files

bc2350c1345734a68c3881eb119145c4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6026c9bc0f2b10b9b969deac441da97e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
CreateMutexA
GetLastError
lstrcpyA
lstrcatA
lstrlenA
ExpandEnvironmentStringsA
GetFileAttributesExA
HeapAlloc
WaitForSingleObject
TerminateThread
CloseHandle
WriteFile
VirtualFree
HeapFree
HeapCreate
HeapDestroy
HeapSize
HeapReAlloc
VirtualAlloc
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
GetStringTypeA
GetStringTypeW
MoveFileA
RemoveDirectoryA
DeleteFileA
CreateDirectoryA
GetTempPathA
GetCommandLineA
GetModuleFileNameA
Sleep
GetLocalTime
GetTickCount
ReadFile
GetProcessHeap
SetEndOfFile
LoadLibraryA
GetLocaleInfoA
CreateThread
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
LoadLibraryW
ExitProcess
OutputDebugStringW
GetFileType
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetStartupInfoA
HeapValidate
IsBadReadPtr
GetProcAddress
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
MultiByteToWideChar
LCMapStringA
LCMapStringW
DebugBreak
GetStdHandle
OutputDebugStringA
WriteConsoleW

user32

GetClassLongA
wsprintfA

advapi32

RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey

ole32

CoInitialize

shell32

ShellExecuteA

shlwapi

PathFileExistsA
PathIsDirectoryA
PathFindFileNameA
PathRemoveBlanksA
PathGetArgsA

gdi32

ScaleViewportExtEx
GetCharWidthA
GetTextCharset
GetRasterizerCaps
DeleteMetaFile
ChoosePixelFormat
SetGraphicsMode
SetBkColor
SetDeviceGammaRamp
GetTextExtentExPointI
CreateICA
CreateDIBitmap
SetEnhMetaFileBits
GetCurrentObject
SetBitmapDimensionEx
CreateBitmap
SelectClipRgn
GetObjectW
CreateDIBPatternBrush
GetNearestColor
PlayEnhMetaFile
WidenPath
PolyTextOutA
AddFontResourceW
CloseMetaFile
ColorMatchToTarget
CreateICW
DeleteDC
GetROP2
EnumObjects
SelectClipPath
GetBitmapBits
GetEnhMetaFileDescriptionA
GetKerningPairsA
DPtoLP
SetLayout
GetCharacterPlacementA
StartPage
CreateRoundRectRgn
CreateBrushIndirect
CreateSolidBrush
CreateDiscardableBitmap
Polyline
CreateScalableFontResourceA
CreateDIBSection
CancelDC
CreateDCW
RestoreDC
GdiComment
ExtTextOutW
SelectPalette
BitBlt
FillPath
GetWindowExtEx
CombineTransform
Rectangle
AbortPath
GetFontData
Polygon
EnumFontFamiliesExW
GetCharWidth32A
GetDCOrgEx
CreateCompatibleBitmap
GetMetaRgn
CreateEnhMetaFileW
GetEnhMetaFilePaletteEntries
GetTextMetricsW
FixBrushOrgEx
OffsetViewportOrgEx
GetTextExtentPointW
SetTextCharacterExtra
GetMapMode
RealizePalette

ws2_32

closesocket
htons
select
connect
ioctlsocket
socket
gethostbyname
send
WSAStartup
__WSAFDIsSet
recv

netapi32

Netbios

comdlg32

FindTextA
ChooseFontW
GetOpenFileNameW
CommDlgExtendedError
ReplaceTextW
PageSetupDlgW
GetSaveFileNameW
PrintDlgW
ChooseColorA
GetFileTitleW
GetOpenFileNameA

comsvcs

MTSCreateActivity
RecycleSurrogate
CoEnterServiceDomain

imm32

ImmGetDescriptionW
ImmGetRegisterWordStyleW
ImmGetCompositionFontA
ImmGetCandidateListCountW
ImmSetCompositionStringA

iphlpapi

GetIfEntry
DeleteIpForwardEntry
GetBestInterface
GetIpStatistics
GetAdapterOrderMap
SetIfEntry
RestoreMediaSense
SetIpTTL
DeleteProxyArpEntry
SendARP
NotifyRouteChange
GetIpErrorString
DeleteIPAddress
GetOwnerModuleFromUdpEntry
CreateIpForwardEntry
GetNumberOfInterfaces
GetRTTAndHopCount
GetTcpTable
GetFriendlyIfIndex
GetBestInterfaceEx
GetUdpStatisticsEx
SetIpStatistics
GetOwnerModuleFromTcpEntry
GetNetworkParams
GetIpAddrTable
SetIpForwardEntry
FlushIpNetTable
SetTcpEntry
UnenableRouter
DeleteIpNetEntry
AddIPAddress
GetUniDirectionalAdapterInfo

msimg32

TransparentBlt

msvfw32

DrawDibTime
ICSendMessage
ICDraw
MCIWndRegisterClass
ord2
ICInfo
ICCompressorChoose
ICImageDecompress

mswsock

TransmitFile

Sections

.text
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6026c9bc0f2b10b9b969deac441da97e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

shell32

shlwapi

gdi32

ws2_32

netapi32

comdlg32

comsvcs

imm32

iphlpapi

msimg32

msvfw32

mswsock

Sections

.text Size: 167KB - Virtual size: 166KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 4KB - Virtual size: 21KB

.reloc Size: 17KB - Virtual size: 16KB

.text
Size: 167KB - Virtual size: 166KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 4KB - Virtual size: 21KB

.reloc
Size: 17KB - Virtual size: 16KB