cdf79fac24cb2c33be919639086ca2df_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

cdf79fac24cb2c33be919639086ca2df_JaffaCakes118
Size

606KB
MD5

cdf79fac24cb2c33be919639086ca2df
SHA1

fd44656385f4826150f9c3ee411e859a34a0c431
SHA256

f9913f6ca5254a11a58f5f6f87a3e9f81583f58957d8fc067d2b30822bb1785e
SHA512

90cc58908fa6d92e35aec56b76f54ab7b8c6a87185f0ae4101182d33c818c8d1ac0a8c62fe7e6a0e7dacdd3a907fea44d629e2d6f08bd2627d1e4b18e39ab361
SSDEEP

12288:MIT+UrvWDpIwGSFEkLzu/U/NQ/gm8SpQMIUNtFVvsjLESEW:MIyUrvWdGSCGu/UVSM2tF9sjLtX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdf79fac24cb2c33be919639086ca2df_JaffaCakes118

Files

cdf79fac24cb2c33be919639086ca2df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de1d7236a73574d527515832a9cc402a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
GetProfileIntA
GetModuleHandleA
SetErrorMode
LocalReAlloc
GetHandleInformation
CreateMutexA
FindResourceExW
EnumResourceLanguagesW
GetSystemDefaultLangID
CompareStringW
GetFileAttributesA
GetWindowsDirectoryA
GetOEMCP
ReleaseSemaphore
GetDateFormatA
DuplicateHandle
FindFirstFileA
GlobalFindAtomW
GetEnvironmentVariableW
SystemTimeToFileTime
GetPrivateProfileSectionW
GetShortPathNameA
SetConsoleWindowInfo
ConnectNamedPipe
PulseEvent
MultiByteToWideChar
LoadLibraryExW
MoveFileExA
GetStartupInfoA
GetFileInformationByHandle
SuspendThread
IsBadStringPtrA
GetCommConfig
CreateEventA
GlobalAddAtomA
ReadConsoleA
ScrollConsoleScreenBufferA
GetLongPathNameA
Beep
OutputDebugStringA
GetDiskFreeSpaceW
SearchPathW
EraseTape
WritePrivateProfileStringA
AreFileApisANSI
GlobalUnlock
AllocConsole
FormatMessageA
lstrcatW
GlobalGetAtomNameW
FileTimeToLocalFileTime
lstrcpyA
FreeLibrary
EnumCalendarInfoA
CreateDirectoryA
ExitProcess
GlobalReAlloc
EnumCalendarInfoW
WriteProcessMemory
GetSystemTimeAsFileTime
CompareStringA
FindFirstFileW
GetNumberFormatW
GetModuleFileNameW
CreatePipe
GetLargestConsoleWindowSize
DebugBreak
SetConsoleCursorPosition
SetThreadAffinityMask
GetCommandLineW
WriteFile
EnumTimeFormatsW
GlobalFree

user32

SetTimer
SetMenu
RegisterWindowMessageW
WaitMessage
SetActiveWindow
DestroyWindow
ScrollWindow
SetWindowRgn
GetAsyncKeyState
GetMessageA
ChangeMenuA
DestroyCursor
GetGuiResources
CloseDesktop
SetWindowContextHelpId
PostThreadMessageW
LoadIconA
ScreenToClient
GetPropA
InSendMessage
EnumDesktopsA
OpenDesktopA
GetClassNameW
ReleaseCapture
InsertMenuItemA
GetIconInfo
GetSystemMetrics
GetKeyboardState
CreateDesktopA
DispatchMessageW
GetClassNameA
ActivateKeyboardLayout
DrawFrameControl
AdjustWindowRect
DialogBoxParamA

gdi32

CopyMetaFileW
GetCurrentObject
SelectClipPath
GetWinMetaFileBits
CreateMetaFileW
SetPixelFormat
GetEnhMetaFileBits
SetColorAdjustment
GetTextCharacterExtra
LineTo
CreatePalette
GetCharWidthA
GetBkMode
CreatePolygonRgn
EndDoc
CreateICW
SetEnhMetaFileBits
ModifyWorldTransform
GetPixel
IntersectClipRect
DPtoLP

comdlg32

ReplaceTextA
GetFileTitleW

advapi32

AdjustTokenPrivileges
RegisterEventSourceA
ObjectCloseAuditAlarmA
GetSecurityDescriptorSacl
SetTokenInformation
QueryServiceLockStatusW
GetServiceDisplayNameW
FreeSid
CryptSetProvParam
GetSidIdentifierAuthority
CryptEncrypt
CryptHashData
RegDeleteValueA
DeregisterEventSource
RegOpenKeyExA
QueryServiceConfigW
LookupPrivilegeNameA
StartServiceW
RegisterServiceCtrlHandlerW
RegLoadKeyA
RegQueryValueA
AddAccessDeniedAce
LockServiceDatabase
LogonUserW
NotifyBootConfigStatus
ReadEventLogW
AccessCheck
RevertToSelf
RegConnectRegistryA
InitializeSecurityDescriptor
SetEntriesInAclW
GetFileSecurityA
RegQueryInfoKeyW
RegFlushKey

shell32

DragFinish
Shell_NotifyIconW
SHBrowseForFolderA
SHFileOperationW
SHGetSettings
SHGetPathFromIDListA

ole32

CoQueryProxyBlanket
CoInitializeEx
StgCreateStorageEx
CoMarshalInterThreadInterfaceInStream
ProgIDFromCLSID
OleIsRunning
CoLockObjectExternal
OleRegGetMiscStatus
WriteClassStg
CoUninitialize

oleaut32

LoadTypeLibEx
SysStringLen
SafeArrayPutElement

shlwapi

PathIsRelativeW
SHRegSetUSValueW
StrTrimW
SHRegOpenUSKeyW
PathStripToRootW
PathAddExtensionW

msvcrt

strcoll
ceil
_wcsicmp
_execlp
_mbsdec
_getpid
_putenv
fclose
setvbuf
wcsncat
_beginthreadex
mbstowcs
_pctype
toupper
_wsystem
_splitpath
_wtoi64
_sleep
_locking
_fileno
wcstol
_fcvt
system
_wcsrev
_mbslwr
_tell
swprintf
_stat

Sections

.text
Size: 8KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de1d7236a73574d527515832a9cc402a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

msvcrt

Sections

.text Size: 8KB - Virtual size: 224KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 268KB - Virtual size: 267KB

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 8KB - Virtual size: 224KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 268KB - Virtual size: 267KB

.rsrc
Size: 16KB - Virtual size: 16KB