c09e6e1b2725382baf5244a377b93d3f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c09e6e1b2725382baf5244a377b93d3f_JaffaCakes118
Size

236KB
MD5

c09e6e1b2725382baf5244a377b93d3f
SHA1

764c6c10b4a1c3593cc5281af865932ccf746eb3
SHA256

8701f508745dc9b7b2910e007179542effda75a61094278f0d2cadc00c3450d7
SHA512

2ecc367e04c52f285fe5d886419657b4f9c12832167700d94d971f6e0a6d3eedb8fa8528349809ed9cb75a8744c35c76cbddaedd1affdbaf3f9053378981f424
SSDEEP

6144:juaEGOlXUQrqtgljP/M250tItPmY3O6xdEQad0XJFwnv:x9OlXUqFPKtIEQZJQv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c09e6e1b2725382baf5244a377b93d3f_JaffaCakes118

Files

c09e6e1b2725382baf5244a377b93d3f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b45da9f933c95d47a6fef7b4afae308d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

bind
WSACancelBlockingCall
WSAUnhookBlockingHook

kernel32

GetCPInfo
HeapSize
HeapReAlloc
VirtualAlloc
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
GetACP
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WideCharToMultiByte
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
GetOEMCP
IsValidCodePage
CompareStringA
MultiByteToWideChar
CompareStringW
SetEnvironmentVariableA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
lstrlenA
LoadLibraryA
CreateToolhelp32Snapshot
GetModuleFileNameA
IsBadWritePtr
IsDBCSLeadByte
FindNextVolumeMountPointA
FindResourceExA
CreateMutexA
GetLastError
IsDBCSLeadByteEx
TerminateThread
lstrcmpA
TerminateProcess
FlushViewOfFile
FreeUserPhysicalPages
TlsGetValue
UnlockFile
GetCommandLineA
CreateFiber
ReadProcessMemory
GetModuleFileNameW
lstrlenW
WriteProcessMemory
CreateFileMappingW
Toolhelp32ReadProcessMemory
FreeEnvironmentStringsW
IsDebuggerPresent
GetCurrentProcess
CopyFileExW
GetModuleHandleA
FindNextChangeNotification
IsBadCodePtr
CreateTimerQueue
lstrcmpiA
IsBadHugeWritePtr
FlushConsoleInputBuffer
IsBadStringPtrA
FindVolumeMountPointClose
FreeConsole
Sleep
GetCPInfoExW
CreateFiberEx
GenerateConsoleCtrlEvent
lstrcatA
TransmitCommChar
lstrcpyA
DuplicateHandle
GetCalendarInfoA
GetAtomNameW
GetProcAddress
FindCloseChangeNotification
ExitProcess
LCMapStringA
LCMapStringW
WriteFile
TlsAlloc
GetModuleHandleW
GetSystemTimeAsFileTime
GetStartupInfoA
HeapFree
HeapAlloc
RaiseException

user32

EndPaint
DestroyCaret
ActivateKeyboardLayout
GetActiveWindow
ShowWindowAsync
VkKeyScanW
SwapMouseButton
SetWindowsHookW
mouse_event
UnhookWinEvent
DrawMenuBar
SwitchToThisWindow
UpdateWindow
DrawFocusRect
EnableWindow
GetClassNameA
MessageBoxW
GetClipCursor
DestroyIcon
GetClientRect
AnyPopup
ArrangeIconicWindows
GetClassLongW
ValidateRect
ShowWindow
GetAncestor
UnloadKeyboardLayout
SetWindowWord
DrawCaption
TileWindows
VkKeyScanExW
DestroyWindow
UnregisterHotKey
TrackPopupMenuEx
ShowCaret
DestroyCursor
UnhookWindowsHookEx
GetClipboardData
DlgDirSelectExW
VkKeyScanExA
EmptyClipboard
DrawTextW
DlgDirListW
MessageBoxA
TrackPopupMenu
ValidateRgn
DrawAnimatedRects
EnableMenuItem
WaitForInputIdle
AttachThreadInput

gdi32

SetPixelV
WidenPath
GetTextMetricsA
SetDCBrushColor
GetOutlineTextMetricsA
SetAbortProc
ScaleViewportExtEx
UpdateColors
SetWindowOrgEx
GetKerningPairsW
GetTextCharacterExtra
SetStretchBltMode
GetTextFaceA
GetTextMetricsW
SetSystemPaletteUse
StartDocW
BitBlt
GetStretchBltMode
CheckColorsInGamut
PolyPolyline
GetWorldTransform
UnrealizeObject
GetRgnBox
CreatePolygonRgn
GetPixel
RemoveFontResourceExA
PlayEnhMetaFile
GetStockObject
GetTextExtentExPointW
GetMapMode
ColorCorrectPalette
SetWindowExtEx
CreateHatchBrush
CreateHalftonePalette
CreateCompatibleBitmap
GetViewportExtEx
ColorMatchToTarget
InvertRgn
Pie
GetTextCharsetInfo
SetWorldTransform
SetRectRgn
GetTextColor
CancelDC
LineTo
OffsetWindowOrgEx
GetICMProfileW
CreateDIBPatternBrush
SetLayout
IntersectClipRect
GetTextCharset
PolyBezierTo
ResizePalette
GetRandomRgn
SetTextColor
GetObjectType
SetMapperFlags
SelectClipRgn
GetSystemPaletteUse
GetLayout
GetSystemPaletteEntries
OffsetViewportOrgEx
RemoveFontMemResourceEx
GetRasterizerCaps
GetPixelFormat
CreateBitmap
GetMetaRgn
RemoveFontResourceA
GetNearestColor
MaskBlt
SetPixel
GetWindowOrgEx
SetViewportExtEx
GetLogColorSpaceW
PolyDraw
SetDCPenColor

shell32

SHGetFileInfoA

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b45da9f933c95d47a6fef7b4afae308d

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

shell32

Sections

.text Size: 96KB - Virtual size: 95KB

.rdata Size: 46KB - Virtual size: 46KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 88KB - Virtual size: 88KB

.text
Size: 96KB - Virtual size: 95KB

.rdata
Size: 46KB - Virtual size: 46KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 88KB - Virtual size: 88KB