ce52dae01b028107a3c1f060256f8392_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ce52dae01b028107a3c1f060256f8392_JaffaCakes118
Size

298KB
MD5

ce52dae01b028107a3c1f060256f8392
SHA1

1028a5bae60667d4b13c9594dade04e41ddd10e6
SHA256

1d7d93329e8d0e31437bad47536cbef8b3ef419f1bae0b69eb37c666e385f8e0
SHA512

fdb66d3c78ba3db4a931662aaad2e7c8dafc43ba5c5a8297240aa321c0b6a72904d1844a2c2ccf46dd3f59fba9db76713a382dafbc01341000d3b4fd87c614c8
SSDEEP

6144:f5Dimk83GUrGbj0fG63BWmj8qT0Rh+royrxscSY8ezlIu5:f5mm13GUrsj4T0R2jjSnezlIu5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce52dae01b028107a3c1f060256f8392_JaffaCakes118

Files

ce52dae01b028107a3c1f060256f8392_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6a3f47812dfb5877a1fb731308961725

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Dancer.pdb

Imports

msvcrt

__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
_adjust_fdiv
fwprintf
fclose
_CIpow
ceil
_wsplitpath
_wmakepath
_ftol
swscanf
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_except_handler3
__dllonexit
_onexit
??1type_info@@UAE@XZ
_controlfp
swprintf
_snwprintf
wcschr
_beginthreadex
srand
rand
??2@YAPAXI@Z
realloc
wcsncpy
malloc
__CxxFrameHandler
memmove
wcslen
_CxxThrowException
??3@YAXPAX@Z
free
_wfopen
wcstok
_wtoi
wcscmp
_purecall
_vsnwprintf
memset
wcscat
wcscpy
_wcsicmp

advapi32

RegEnumValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExA
RegOpenKeyExA

kernel32

LoadLibraryA
GetProcAddress
HeapAlloc
VirtualFree
HeapFree
GetStartupInfoW
GetModuleHandleA
SetUnhandledExceptionFilter
HeapDestroy
HeapReAlloc
HeapSize
GetSystemDefaultLCID
GetUserDefaultLCID
GetModuleHandleW
GetFileAttributesW
VirtualAlloc
GetVersionExA
GetProcessHeap
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExW
InitializeCriticalSection
LocalFree
RaiseException
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
FormatMessageW
lstrlenW
EnterCriticalSection
LeaveCriticalSection
GetLastError
FlushInstructionCache
GetCurrentProcess
lstrcmpiW
CloseHandle
WaitForSingleObject
lstrcpyW
GetModuleFileNameW
Sleep
lstrcpynW
lstrcatW
GetCurrentThreadId
DeleteFileW
CreateThread
CreateEventW
InterlockedIncrement
SetEvent
InterlockedDecrement
SetLastError
FreeLibrary
MultiByteToWideChar
LoadLibraryExW
CreateFileW
GetTempFileNameW
GetTempPathW
GetSystemTime
GetCommandLineW
CreateMutexW
OutputDebugStringW
ResetEvent
lstrcmpW
FindClose
FindNextFileW
FindFirstFileW
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentDirectoryW
WriteFile
SetFilePointer
ReadFile
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime

gdi32

GetObjectW
GetDeviceCaps
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
StretchBlt
DeleteObject
CreateSolidBrush
GetStockObject
CreateDIBSection

user32

DestroyMenu
PostMessageW
LoadBitmapW
GetSystemMetrics
UnregisterClassW
SetMenuItemBitmaps
GetSubMenu
LoadMenuW
TrackPopupMenuEx
InsertMenuW
GetMenuItemCount
CheckMenuItem
InsertMenuItemW
DeleteMenu
FlashWindowEx
SetActiveWindow
SetForegroundWindow
SetWindowLongW
CharNextW
ShowWindow
IsWindow
wsprintfW
LoadCursorW
CharUpperW
DefWindowProcW
DestroyWindow
DispatchMessageW
TranslateMessage
GetMessageW
PostThreadMessageW
RegisterClassExW
CreateWindowExW
MessageBoxW
MoveWindow
SetWindowPos
GetWindowRect
SetCapture
GetCursorPos
ReleaseCapture
GetMonitorInfoW
MonitorFromPoint
SendMessageW
wvsprintfW
CallWindowProcW
BeginPaint
EndPaint
InvalidateRgn
LoadIconW
UpdateLayeredWindow
SendDlgItemMessageW
GetParent
GetDlgItem
MapWindowPoints
GetClientRect
SystemParametersInfoW
GetWindow
InvalidateRect
ReleaseDC
GetDC
SetCursor
EnableWindow
DialogBoxParamW
SetWindowTextW
PostQuitMessage
GetActiveWindow
EndDialog
FindWindowExW
IsWindowVisible
FindWindowW
SetTimer
KillTimer
GetSysColor
FillRect
GetDesktopWindow
SetFocus
IsChild
GetFocus
DestroyAcceleratorTable
RedrawWindow
GetClassNameW
CreateAcceleratorTableW
GetWindowTextW
GetWindowTextLengthW
RegisterWindowMessageW
ScreenToClient
SetDlgItemTextW
GetWindowLongW
GetClassInfoExW

shell32

ShellExecuteW
Shell_NotifyIconW
SHAppBarMessage

ole32

CoRevokeClassObject
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
CreateStreamOnHGlobal
OleLockRunning
CoCreateInstance
StringFromGUID2
CoUninitialize
CoInitialize
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoRegisterClassObject

oleaut32

LoadRegTypeLi
SysStringLen
SysAllocStringLen
VarUI4FromStr
OleCreateFontIndirect
VariantClear
VariantInit
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringByteLen
SysFreeString

comctl32

PropertySheetW
CreatePropertySheetPageW
DestroyPropertySheetPage
InitCommonControlsEx

shlwapi

PathFindExtensionW

avifil32

AVIStreamGetFrame
AVIStreamGetFrameOpen
AVIStreamGetFrameClose
AVIFileGetStream
AVIFileOpenW
AVIFileRelease
AVIStreamRelease

winmm

waveInStart
timeGetTime
timeBeginPeriod
timeSetEvent
timeKillEvent
timeEndPeriod
waveOutMessage
mixerGetID
waveInGetNumDevs
sndPlaySoundW
mixerClose
mixerSetControlDetails
mixerOpen
mixerGetLineInfoW
mixerGetLineControlsW
mixerGetControlDetailsW
waveInOpen
waveInPrepareHeader
waveInAddBuffer
waveInReset
waveInStop
waveInUnprepareHeader
waveInClose
timeGetDevCaps

wmvcore

WMCreateSyncReader

msimg32

AlphaBlend

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6a3f47812dfb5877a1fb731308961725

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

advapi32

kernel32

gdi32

user32

shell32

ole32

oleaut32

comctl32

shlwapi

avifil32

winmm

wmvcore

msimg32

oleacc

Sections

.text Size: 133KB - Virtual size: 133KB

.data Size: 3KB - Virtual size: 277KB

.rsrc Size: 46KB - Virtual size: 45KB

.text Size: 114KB - Virtual size: 116KB

.text
Size: 133KB - Virtual size: 133KB

.data
Size: 3KB - Virtual size: 277KB

.rsrc
Size: 46KB - Virtual size: 45KB

.text
Size: 114KB - Virtual size: 116KB