be39d725bda9a76eab2e0f1b3fad8fa3_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

be39d725bda9a76eab2e0f1b3fad8fa3_JaffaCakes118
Size

340KB
MD5

be39d725bda9a76eab2e0f1b3fad8fa3
SHA1

cde3884a065b4ae763af3733a9fe546f7a6e1e8a
SHA256

c454fb9987b2644da1d0064a8b60d4487219df07835e4af3c4bb04644b4a7a4c
SHA512

581deced7131a56bf97cb89853ea85071228e2755775c45bb944a59b46cd8e2e4fddf25855cca85bf805a00c9dc98f74fb7ad8e660b9ee1149d505d97ecf6cdb
SSDEEP

6144:t3PAm8xfLj02pTMxD73OnbdWiPLmfNfDGU+:tgxfHhhMxD73MpANfDGU+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be39d725bda9a76eab2e0f1b3fad8fa3_JaffaCakes118

Files

be39d725bda9a76eab2e0f1b3fad8fa3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

74377fa0901ef806126638f51f7127e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlUnwind

kernel32

CompareStringA
CompareStringW
CopyFileW
CreateDirectoryA
CreateDirectoryW
CreateFileA
CreateFileW
CreateThread
DeleteCriticalSection
DeleteFileA
DeleteFileW
DisableThreadLibraryCalls
DosDateTimeToFileTime
EnterCriticalSection
ExitProcess
ExitThread
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCalendarInfoW
GetCommandLineA
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceA
GetDiskFreeSpaceExW
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStringsA
GetEnvironmentStringsW
GetFileAttributesA
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFullPathNameA
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
CompareFileTime
GetTempFileNameA
GetTempPathW
GetTickCount
GetTimeZoneInformation
GetVersionExA
GetVolumeInformationA
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByte
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryW
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LocalLock
LocalUnlock
MoveFileA
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
RemoveDirectoryA
RemoveDirectoryW
SetCurrentDirectoryA
SetCurrentDirectoryW
SetEnvironmentVariableA
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SetVolumeLabelA
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
CloseHandle
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenA
lstrlenW
GetSystemWindowsDirectoryW
WriteFile

gdi32

GetStockObject
GetDeviceCaps
DeleteObject
CreateFontIndirectW

user32

SetMenuDefaultItem
SetWindowLongW
SetWindowTextW
ShowCursor
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMessage
SetForegroundWindow
SetFocus
SetDlgItemTextW
SetCursor
SendMessageW
SendDlgItemMessageW
RemoveMenu
RegisterClipboardFormatW
RegisterClassW
PostMessageW
PeekMessageW
PeekMessageA
OemToCharBuffA
MessageBoxW
MessageBoxA
LoadStringW
LoadMenuW
LoadCursorW
CharLowerA
CharNextA
CharNextW
CharPrevA
CharToOemA
CharToOemBuffA
CharUpperA
CharUpperBuffA
CheckDlgButton
IsDlgButtonChecked
IsDialogMessageW
InsertMenuW
GetWindowTextW
GetWindowRect
GetWindowLongW
GetSubMenu
GetParent
GetForegroundWindow
GetDlgItemTextW
GetDlgItem
GetDesktopWindow
GetAsyncKeyState
GetActiveWindow
EndDialog
EnableWindow
DispatchMessageW
DispatchMessageA
DialogBoxParamW
DestroyWindow
DestroyMenu
DeleteMenu
DefWindowProcW
CreateWindowExW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

DragQueryFileW
SHChangeNotify
SHFileOperationW
SHGetDesktopFolder
SHGetFileInfoW
SHGetFolderPathW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
ShellExecuteExW
ShellExecuteW
SHBrowseForFolderW

ole32

CoCreateInstance
CoUninitialize
CreateBindCtx
OleGetClipboard
OleSetClipboard
ReleaseStgMedium
CoInitializeEx
CoTaskMemFree

oleaut32

SafeArrayAccessData
SafeArrayCreateVector
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
SysAllocString
SystemTimeToVariantTime
VariantClear
VariantInit

shlwapi

PathRemoveFileSpecW
PathSkipRootW
PathStripToRootW
ord16
SHStrDupW
PathAppendW
StrChrW
StrCmpNIW
StrRetToBufW
StrFormatKBSizeW
StrCpyNW
PathCanonicalizeW
PathCombineW
PathCommonPrefixW
PathCompactPathExW
PathCompactPathW
PathFileExistsW
PathFindExtensionW
PathFindFileNameA
PathFindFileNameW
PathIsPrefixW
PathIsRelativeW
PathRemoveBackslashW
StrCatBuffW
PathRemoveBlanksW
StrStrW
StrToIntW
wnsprintfW

Exports

Exports

av_free
av_log_get_callback
av_log_get_level
av_log_set_callback
av_log_set_level
av_parser_close
av_parser_init
av_parser_parse
avcodec_alloc_context
avcodec_alloc_frame
avcodec_close
avcodec_decode_audio2
avcodec_decode_video
avcodec_default_get_buffer
avcodec_default_reget_buffer
avcodec_default_release_buffer
avcodec_encode_audio
avcodec_encode_video
avcodec_find_decoder
avcodec_find_encoder
avcodec_flush_buffers
avcodec_get_current_idct
avcodec_get_encoder_info
avcodec_h264_decode_init_is_avc
avcodec_h264_search_recovery_point
avcodec_init
avcodec_open
avcodec_register_all
avcodec_thread_free
avcodec_thread_init
dsputil_init
getVersion

Sections

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74377fa0901ef806126638f51f7127e2

Headers

File Characteristics

Imports

ntdll

kernel32

gdi32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

Exports

Exports

Sections

.text Size: 232KB - Virtual size: 232KB

.rdata Size: 48KB - Virtual size: 48KB

.data Size: 20KB - Virtual size: 1.7MB

.idata Size: 8KB - Virtual size: 8KB

.rsrc Size: 28KB - Virtual size: 28KB

.text
Size: 232KB - Virtual size: 232KB

.rdata
Size: 48KB - Virtual size: 48KB

.data
Size: 20KB - Virtual size: 1.7MB

.idata
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 28KB - Virtual size: 28KB