ce570446494979964acde4b35f550aff_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ce570446494979964acde4b35f550aff_JaffaCakes118
Size

480KB
MD5

ce570446494979964acde4b35f550aff
SHA1

7cd4c8d2fc37da30eb41496c64b944821df1a8a5
SHA256

7a371625b0c94b764aa3e560f6b5369e8012aa865a50a7696af6d6dcb296401b
SHA512

605e8ee31a860b9ac7ab534b6513560a18bdb47772b7795215f08242fdf79db5ef5911435159d63519b191193c0df40e21bf349f25de41cfb7dfbbd241ee863e
SSDEEP

12288:0YhNiTsjSfL4pcI05wbXfOuC7xNNXUbTDIX:0IrKL4pc5S7GdxDXCDIX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce570446494979964acde4b35f550aff_JaffaCakes118

Files

ce570446494979964acde4b35f550aff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e7d79699b002bcf0d48541d3ee71235

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\bepweeaqen\rjwnrn.pdb

Imports

kernel32

WriteFile
EnterCriticalSection
LCMapStringW
GetCurrentProcessId
MultiByteToWideChar
InterlockedExchange
SetLastError
FreeEnvironmentStringsA
GetTimeFormatA
GetEnvironmentStringsW
ExitProcess
HeapFree
LoadLibraryA
GetOEMCP
VirtualQuery
WideCharToMultiByte
InitializeCriticalSection
GetDateFormatA
SetStdHandle
TlsAlloc
VirtualFree
CompareStringW
QueryPerformanceCounter
FreeEnvironmentStringsW
GetStringTypeA
GetCurrentThreadId
GetStringTypeW
TlsFree
GetModuleHandleA
GetStartupInfoA
SetFilePointer
GetCurrentThread
GetModuleFileNameA
VirtualAlloc
CompareStringA
GetUserDefaultLCID
HeapAlloc
SetEnvironmentVariableA
CloseHandle
ReadFile
IsDebuggerPresent
GetTickCount
RtlUnwind
TerminateProcess
GetCPInfo
TlsSetValue
HeapReAlloc
IsValidLocale
GetStdHandle
TlsGetValue
FlushFileBuffers
GetACP
HeapDestroy
GetSystemTimeAsFileTime
EnumSystemLocalesA
GetLastError
LocalAlloc
GetFileType
HeapSize
SetHandleCount
GetVersionExA
LCMapStringA
GetProcAddress
GetLocaleInfoW
DeleteCriticalSection
GetLocaleInfoA
GetSystemInfo
FatalAppExitA
GetCommandLineA
CreateMutexA
IsBadWritePtr
UnhandledExceptionFilter
IsValidCodePage
LeaveCriticalSection
GetTimeZoneInformation
HeapCreate
GetCurrentProcess
VirtualProtect
GetEnvironmentStrings

ole32

CoDisconnectObject
CLSIDFromString
OleGetClipboard
OleSetContainedObject
OleFlushClipboard

user32

GetDesktopWindow
InsertMenuItemA
CreateDialogIndirectParamA
BeginPaint
RegisterClassA
IsDialogMessageA
wsprintfA
EqualRect
GetSysColor
TranslateAcceleratorA
SetTimer
DrawIcon
SetWindowsHookExA
DestroyCursor
GetWindowThreadProcessId
SetDlgItemTextA
GetWindowLongA
GetNextDlgTabItem
mouse_event
DrawFrameControl
IsRectEmpty
SendDlgItemMessageA
CopyAcceleratorTableA
ShowWindow
CharLowerA
DrawStateA
SendMessageA
IsWindowEnabled
GetMenuCheckMarkDimensions
GetMenuItemInfoA
GetWindow
GetDlgItemTextA
MessageBeep
CreateIconIndirect
ClientToScreen
CreateWindowExA
DrawMenuBar
SetCapture
IsMenu
GetWindowPlacement
IntersectRect
MessageBoxA
SetRectEmpty
SetParent
DestroyMenu
EnumChildWindows
SetWindowPlacement
GetIconInfo
ModifyMenuA
SetWindowPos
DefWindowProcA
DestroyWindow
EnableWindow
GetCursorPos
TrackPopupMenu
GetSysColorBrush
LoadIconA
GetParent
LoadBitmapA
GetMessageTime
DrawFocusRect
MapDialogRect
GetWindowRect
KillTimer
AdjustWindowRectEx
RedrawWindow
CreatePopupMenu
UnregisterClassA
OffsetRect
RegisterClassExA
RemovePropA
TranslateMessage
GetKeyNameTextA
GetFocus
EndPaint
PostQuitMessage
IsIconic
ShowOwnedPopups
WindowFromPoint
GetDlgCtrlID
SetFocus
SetRect
GetMenuItemCount
SetScrollPos
ScreenToClient

advapi32

RegFlushKey
GetTokenInformation
IsValidSid
CreateServiceA
RegEnumKeyExA
RegDeleteKeyA
DeleteService

comctl32

InitCommonControlsEx
PropertySheetW
ImageList_ReplaceIcon
ImageList_Draw

shell32

ord155
ShellExecuteExW

wininet

InternetGetLastResponseInfoA
InternetSetFilePointer
InternetSetOptionExA
InternetCrackUrlA
InternetOpenA
HttpOpenRequestA
InternetCanonicalizeUrlA

comdlg32

ChooseFontW
CommDlgExtendedError

version

VerQueryValueA
GetFileVersionInfoA
VerLanguageNameA
GetFileVersionInfoSizeA

gdi32

CreateEllipticRgnIndirect
GetClipBox
PolylineTo
GetBitmapDimensionEx
CreateSolidBrush
SetPaletteEntries
StretchBlt
RoundRect
RealizePalette
SetBkColor
RestoreDC
GetMapMode
CreateEnhMetaFileA
GetOutlineTextMetricsA
GetStockObject
StartDocA
SelectClipRgn
DPtoLP
SaveDC
GetTextExtentPoint32A
SetPixel
FillPath
StretchDIBits
SetTextColor
PtVisible
Arc
GetDeviceCaps
EqualRgn
GetDCOrgEx
EndPath
LineTo
GetPixel
CreatePolygonRgn
CreateRectRgnIndirect
PlayEnhMetaFile
BeginPath
GetTextExtentPointA
SetBitmapDimensionEx
Pie
SetBitmapBits
CreateDCA
GetROP2
GetPaletteEntries
GetObjectA
GetViewportOrgEx
AbortDoc
Ellipse
CloseMetaFile
SelectObject
CreateFontIndirectA
OffsetRgn
MoveToEx
PolyBezier
SetTextJustification
ExtCreatePen
GetNearestColor
SelectPalette
SetBoundsRect
PolyBezierTo
CreateDIBitmap
FillRgn
SetMapMode
BitBlt
Polyline
FrameRgn
SetPolyFillMode
ResizePalette
GetFontData
CreateCompatibleDC
SetROP2
TextOutA
FloodFill
OffsetWindowOrgEx
GetTextAlign
ExtCreateRegion
CreateHatchBrush
UpdateColors
Polygon
CreateFontA
UnrealizeObject
CreateMetaFileA
SetArcDirection
Chord
SetTextAlign
PtInRegion
GetClipRgn
GetCurrentObject
GetObjectType
GetBkMode
CloseEnhMetaFile
GetCharWidthA

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 260KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e7d79699b002bcf0d48541d3ee71235

Headers

File Characteristics

PDB Paths

Imports

kernel32

ole32

user32

advapi32

comctl32

shell32

wininet

comdlg32

version

gdi32

Sections

.text Size: 88KB - Virtual size: 87KB

.rdata Size: 260KB - Virtual size: 258KB

.data Size: 68KB - Virtual size: 75KB

.rsrc Size: 60KB - Virtual size: 57KB

.text
Size: 88KB - Virtual size: 87KB

.rdata
Size: 260KB - Virtual size: 258KB

.data
Size: 68KB - Virtual size: 75KB

.rsrc
Size: 60KB - Virtual size: 57KB