c7a2c85ebf67d8ed5c221dd0ee02c6e2_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

c7a2c85ebf67d8ed5c221dd0ee02c6e2_JaffaCakes118
Size

676KB
MD5

c7a2c85ebf67d8ed5c221dd0ee02c6e2
SHA1

c13d711cad87e5bc2fb51c2c68ee161061d64b31
SHA256

2beadbb903bdbbaa2d8b55f5d0e13392a99350ff73ba51c17b8d346cded67d22
SHA512

aed1db8d2c099ee3846b829e138ac7d56314376076e88bbdea73f2f0babdd2975dd9ba3c6e821f167ae3361d523653bda7fdc6457050e44737c4b0423f476232
SSDEEP

12288:4IZSfERqMjTIvv41UlTiR422sFk3iCpjnkm+ivTk9SnM0fMBtG:lqa/UWUlAFk3iSRzn8w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7a2c85ebf67d8ed5c221dd0ee02c6e2_JaffaCakes118

Files

c7a2c85ebf67d8ed5c221dd0ee02c6e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d66f5433fcac9c1cfb759c4dbd2ebed7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\maaoogpvam\tecqcee

Imports

user32

CharToOemBuffW
GetMonitorInfoW
SetUserObjectInformationW
GetForegroundWindow
CharUpperW
DdeAddData
AdjustWindowRect
RemovePropA
GetKeyboardState
CopyImage
DestroyWindow
CreateIcon
DefWindowProcA
ToUnicodeEx
UnpackDDElParam
DdeInitializeA
ValidateRgn
EnumPropsA
SendMessageTimeoutW
wvsprintfW
ImpersonateDdeClientWindow
ChangeDisplaySettingsExA
CreateWindowExW
DdeCreateDataHandle
EnumDisplayDevicesA
GetUpdateRect
SetDlgItemTextA
MonitorFromRect
CreateIconFromResourceEx
CharToOemA
LookupIconIdFromDirectory
SetMenu
CopyRect
CountClipboardFormats
EnumWindowStationsA
RegisterClassA
RegisterClassW
MessageBoxIndirectW
GetActiveWindow
GetDlgItem
PackDDElParam
SetSystemCursor
BringWindowToTop
GetMenu
CreateCaret
UnionRect
GetGuiResources
EndMenu
ShowWindow
EnumDisplayDevicesW
OemToCharA
GetKeyboardType
GetMenuItemInfoA
RemovePropW
LoadStringA
GetParent
GetMenuBarInfo
MessageBoxW
SetUserObjectInformationA
SetPropW
SetMenuInfo
EndDialog
LoadMenuA
CharLowerBuffA
GetShellWindow
InvalidateRgn
MessageBoxIndirectA
UnloadKeyboardLayout
DlgDirSelectComboBoxExA
SetWinEventHook
RegisterClassExA

kernel32

OpenMutexA
GetLogicalDriveStringsA
LoadLibraryW
SetLocalTime
RaiseException
GetLastError
GetStringTypeW
EnterCriticalSection
RtlUnwind
GetFileType
GetModuleFileNameA
GetCurrentThread
GetLocaleInfoA
VirtualAlloc
SetUnhandledExceptionFilter
HeapCreate
GetModuleFileNameW
LoadLibraryA
GetTimeFormatW
EnumResourceLanguagesA
HeapFree
SetConsoleTextAttribute
FileTimeToLocalFileTime
RemoveDirectoryA
WideCharToMultiByte
LCMapStringW
SetLastError
EnumSystemLocalesA
TlsAlloc
SetCurrentDirectoryW
FreeEnvironmentStringsW
SetVolumeLabelA
CreateEventA
CompareStringW
ExitProcess
GetWindowsDirectoryA
IsValidLocale
SetConsoleCtrlHandler
GetConsoleCP
CreateNamedPipeW
GetCurrentProcessId
GetCurrentDirectoryA
GetStdHandle
InterlockedExchange
lstrlenA
LeaveCriticalSection
GetConsoleMode
GetTimeFormatA
HeapDestroy
CreateFileA
GetModuleHandleA
GlobalAddAtomA
GetCurrentProcess
SetWaitableTimer
EnumTimeFormatsW
OpenFileMappingA
VirtualFree
GetCurrencyFormatA
IsDebuggerPresent
ReadFile
CreateMutexA
CompareFileTime
GetComputerNameW
GlobalLock
OutputDebugStringA
GetEnvironmentStringsW
SetFileAttributesW
WriteFile
SetThreadLocale
SetLocaleInfoW
OpenSemaphoreA
GetCommandLineA
OpenSemaphoreW
SetPriorityClass
GetTickCount
FreeEnvironmentStringsA
lstrcmpW
ReadConsoleA
InterlockedDecrement
GetStartupInfoA
GetProcessHeaps
HeapValidate
GetVersionExA
ReleaseMutex
FindClose
GetVersion
HeapReAlloc
GetACP
GetTimeZoneInformation
RemoveDirectoryW
VirtualQuery
FreeLibrary
SetHandleCount
IsValidCodePage
GetDiskFreeSpaceA
DebugBreak
WriteConsoleA
LCMapStringA
IsBadReadPtr
FlushFileBuffers
SetStdHandle
UnhandledExceptionFilter
DeleteCriticalSection
GetConsoleOutputCP
SetEnvironmentVariableA
GetSystemTimeAsFileTime
SetThreadPriority
lstrlen
TlsGetValue
InterlockedIncrement
OutputDebugStringW
GetThreadLocale
GetCurrentThreadId
GetUserDefaultLCID
WriteConsoleInputW
GetCPInfo
GetProfileIntW
GetProcessHeap
GetDiskFreeSpaceW
GetStringTypeA
TlsSetValue
GetDateFormatA
GetTempPathA
InterlockedCompareExchange
CreateFileW
SetFilePointer
SetFileAttributesA
GetProcAddress
ReadConsoleOutputA
GetThreadPriorityBoost
GetProfileSectionA
InitializeCriticalSection
WriteConsoleW
TlsFree
CompareStringA
GetPrivateProfileIntW
QueryPerformanceCounter
FlushViewOfFile
MultiByteToWideChar
HeapAlloc
GetProcAddress
GlobalAlloc
SetEndOfFile
GetLocaleInfoW
CloseHandle
GetOEMCP
RtlMoveMemory
GetProfileStringW
CreateWaitableTimerW
CreateFileMappingW
GetEnvironmentStrings
lstrcmpA
TerminateProcess

comctl32

InitMUILanguage
ImageList_GetImageCount
DestroyPropertySheetPage
ImageList_DragLeave
ImageList_SetFlags
ImageList_SetIconSize
DrawInsert
CreateStatusWindow
InitCommonControlsEx
ImageList_SetFilter
ImageList_Destroy
ImageList_GetIconSize
ImageList_LoadImageW
ImageList_GetBkColor
CreatePropertySheetPageW
ImageList_Create
ImageList_Replace
ImageList_Read

Sections

.text
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d66f5433fcac9c1cfb759c4dbd2ebed7

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

comctl32

Sections

.text Size: 220KB - Virtual size: 219KB

.rdata Size: 292KB - Virtual size: 291KB

.data Size: 104KB - Virtual size: 124KB

.rsrc Size: 56KB - Virtual size: 53KB

.text
Size: 220KB - Virtual size: 219KB

.rdata
Size: 292KB - Virtual size: 291KB

.data
Size: 104KB - Virtual size: 124KB

.rsrc
Size: 56KB - Virtual size: 53KB