c8dc08a5fcd7630888d542fce12ca08b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

c8dc08a5fcd7630888d542fce12ca08b_JaffaCakes118
Size

280KB
MD5

c8dc08a5fcd7630888d542fce12ca08b
SHA1

e7cdd5a3a5fec37f87918115b3c2371a5c4345e0
SHA256

47722e3227d90fe5a6363442b32bbdd88e4a09273a2fa63b7f52e03342851267
SHA512

a710b44510e087709917e01d0ee83b6252a5ca597e9e13b4fbe97c94f1dc8467add0ebf2438fa17ad3c40bcf85833bd65cf82bb0347eb6d7e76c822a35c49b3d
SSDEEP

6144:3sq5ebIEeU8aKdv3VGxvX3ktBAjBv3nCY0WD9RG+oL:h5ebIEVCFGx/3ktBAjBvSY0W5RRo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8dc08a5fcd7630888d542fce12ca08b_JaffaCakes118

Files

c8dc08a5fcd7630888d542fce12ca08b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b0a320e7a377f41382f71625288ee2ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\wgksext\nqvnfsfs.pdb

Imports

user32

SendNotifyMessageW
DefWindowProcA
SetClipboardViewer
AttachThreadInput
GetScrollInfo
FindWindowA
ClipCursor
IsDialogMessageA
LoadStringA
ChangeMenuA
GetScrollPos
DefWindowProcW
DestroyWindow
TileWindows
DefFrameProcA
GetThreadDesktop
RegisterClassExA
RealGetWindowClass
ShowScrollBar
RegisterClassA
CharToOemA
CharLowerBuffW
DlgDirListComboBoxA
GetAncestor
GetClipboardSequenceNumber
GetClassLongA
CharLowerA
MapVirtualKeyExA
BroadcastSystemMessage
DrawAnimatedRects
LoadKeyboardLayoutW
LoadMenuIndirectA
GetClipCursor
AppendMenuA
ShowWindow
SetSystemCursor
CreateWindowExW
EditWndProc
LockWindowUpdate
CallMsgFilterA
DrawFrameControl
SetScrollRange
MessageBoxW
GetClipboardFormatNameW
OemKeyScan
DispatchMessageA
CharPrevW
DragObject
DdeSetQualityOfService
ToUnicode
EnumDisplaySettingsExA
GetClientRect
OemToCharA
ScrollDC
FillRect
IsDialogMessageW

comctl32

DrawStatusTextA
InitCommonControlsEx
MakeDragList
CreateStatusWindow
ImageList_BeginDrag
ImageList_Copy
ImageList_Create
CreateMappedBitmap
ImageList_Replace
ImageList_SetFlags
ImageList_DragShowNolock
CreateStatusWindowA
ImageList_Destroy
DrawStatusText
ImageList_SetDragCursorImage
ImageList_GetDragImage
InitMUILanguage
ImageList_GetImageInfo
CreateToolbarEx
ImageList_Add

kernel32

GetCommandLineW
RemoveDirectoryW
VirtualProtect
GetProcAddress
EnumSystemLocalesA
WriteConsoleInputA
WideCharToMultiByte
GetStartupInfoW
TlsFree
ExitThread
RtlUnwind
SetConsoleTitleA
FreeEnvironmentStringsW
HeapCreate
SetEndOfFile
GetSystemInfo
CompareStringA
LocalAlloc
GlobalFix
GetOEMCP
UnhandledExceptionFilter
InterlockedIncrement
FillConsoleOutputAttribute
TlsSetValue
TlsGetValue
VirtualQuery
HeapSize
GetStringTypeExA
GetCurrentProcessId
OutputDebugStringW
HeapFree
InitializeCriticalSection
GetDateFormatA
TlsAlloc
OpenWaitableTimerW
GetFileAttributesExW
LoadLibraryExW
GetEnvironmentStringsW
LocalCompact
LoadModule
GetCurrentProcess
WriteProfileSectionA
WaitForSingleObjectEx
WriteConsoleOutputW
IsValidCodePage
CreateThread
LCMapStringA
UnmapViewOfFile
SetConsoleActiveScreenBuffer
LeaveCriticalSection
OpenMutexA
GetDriveTypeW
GetLocaleInfoW
SetLastError
DeleteCriticalSection
GetModuleHandleA
WaitNamedPipeW
GetLongPathNameW
GetTimeFormatA
EnumResourceNamesA
CloseHandle
HeapReAlloc
HeapAlloc
GetPrivateProfileSectionW
GetLastError
RaiseException
IsBadWritePtr
CreateMutexA
EnumDateFormatsExW
SetUnhandledExceptionFilter
CreateFileW
GetCurrentThreadId
GetCPInfo
TransmitCommChar
GetFileType
SetEnvironmentVariableA
GetStringTypeW
SetHandleCount
PulseEvent
HeapDestroy
EnterCriticalSection
GetCalendarInfoW
GetCurrentThread
OutputDebugStringA
IsValidLocale
FlushFileBuffers
FreeResource
VirtualAlloc
LCMapStringW
GetCommandLineA
GetVersionExA
TerminateProcess
GetUserDefaultLCID
GetTimeZoneInformation
GetSystemTimeAsFileTime
ReadFile
CompareStringW
FreeEnvironmentStringsA
GlobalHandle
GetStringTypeA
ReadConsoleOutputCharacterA
SetStdHandle
InitializeCriticalSectionAndSpinCount
ReadConsoleInputW
InterlockedExchange
QueryPerformanceCounter
EnumSystemCodePagesW
LocalShrink
WriteFile
GlobalLock
FindNextFileW
GetModuleFileNameA
MultiByteToWideChar
VirtualFree
LoadLibraryA
GetLocaleInfoA
GetTickCount
GetModuleFileNameW
OpenSemaphoreA
GetConsoleCP
GetACP
GetStdHandle
GetStartupInfoA
SetFilePointer
GetEnvironmentStrings
ExitProcess

advapi32

RegCreateKeyExA
RegCreateKeyExW
CryptCreateHash
LogonUserA
LookupPrivilegeValueA
CryptEnumProviderTypesW
GetUserNameW
CryptGetDefaultProviderW
CryptDuplicateKey
RegEnumKeyExW
RegEnumValueW
CryptHashSessionKey
InitiateSystemShutdownA
CryptSetKeyParam
LookupPrivilegeDisplayNameA
CryptEncrypt
CreateServiceW
CryptEnumProvidersA
RegEnumValueA

wininet

UnlockUrlCacheEntryFileA
InternetOpenUrlA
FtpFindFirstFileA
GetUrlCacheEntryInfoExW
RegisterUrlCacheNotification
InternetGetCertByURL

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0a320e7a377f41382f71625288ee2ca

Headers

File Characteristics

PDB Paths

Imports

user32

comctl32

kernel32

advapi32

wininet

Sections

.text Size: 80KB - Virtual size: 77KB

.rdata Size: 76KB - Virtual size: 73KB

.data Size: 88KB - Virtual size: 115KB

.rsrc Size: 32KB - Virtual size: 30KB

.text
Size: 80KB - Virtual size: 77KB

.rdata
Size: 76KB - Virtual size: 73KB

.data
Size: 88KB - Virtual size: 115KB

.rsrc
Size: 32KB - Virtual size: 30KB