ce720530c691ae21b7121929fc391c2c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ce720530c691ae21b7121929fc391c2c_JaffaCakes118
Size

342KB
MD5

ce720530c691ae21b7121929fc391c2c
SHA1

2e1a2e8b753b6efa9bc63f4214b4c34b9051931a
SHA256

4163563b1a30ea42842f0b67627201a83ca0d972093956043fdc7c65baaaf2e9
SHA512

81fcf8124bff63545a136d959c0fe7068e0ae587baeed3739dc00d9af8b9e24010b7e962ce4ec3ef698e35b15e8172e4067c538299a10330a1c20d45bbb8e933
SSDEEP

6144:iLtyLtlQFkzTxQ3ECUC4c7VG4xMGz8iAN3:4totlQFMTW3ECP4qGuzjAN3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce720530c691ae21b7121929fc391c2c_JaffaCakes118

Files

ce720530c691ae21b7121929fc391c2c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d181d4e7f18fe624d26df1557c429498

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

KillTimer
PostMessageW
DispatchMessageW
TranslateMessageEx
CharUpperW
GetSysColorBrush
TranslateMessageEx
TranslateMessageEx
CharUpperW
CharUpperA
ReleaseDC
GetAppCompatFlags2
PostMessageW
RegisterClipboardFormatA
GetAppCompatFlags2
GetAppCompatFlags2
SetTimer
GetProcessWindowStation
GetSystemMetrics
GetAppCompatFlags2
GetUserObjectInformationW
CharUpperA
PostMessageW
SetTimer
DispatchMessageW
DispatchMessageW
CharUpperA
ReleaseDC
CharUpperA
TranslateMessageEx
RegisterWindowMessageA
RegisterClipboardFormatA
SetScrollInfo
GetUserObjectInformationW
SetScrollInfo
SetTimer
GetWindowLongW
GetUserObjectInformationW
TranslateMessage
GetWindowLongW
KillTimer
DispatchMessageW
RegisterWindowMessageA
GetAppCompatFlags2
PostMessageW
PostMessageW
RegisterWindowMessageA
ReleaseDC
GetWindowThreadProcessId
CharUpperW
SetScrollInfo
TranslateMessageEx
CharUpperW
TranslateMessageEx
TranslateMessage
GetUserObjectInformationW
GetProcessWindowStation
CharUpperW
GetDC
CharUpperW
RegisterWindowMessageA
KillTimer
CharUpperW
TranslateMessageEx
GetProcessWindowStation
KillTimer
SetTimer
ReleaseDC
ReleaseDC
GetSysColorBrush
CharUpperW
GetProcessWindowStation
SetTimer
GetWindowDC
GetWindowDC
DispatchMessageW
CharUpperA
SetScrollInfo
DispatchMessageW
GetUserObjectInformationW
SetTimer
SetScrollInfo
PostMessageW
GetWindowThreadProcessId
GetSystemMetrics
GetWindowThreadProcessId
GetDC
GetWindowDC
ReleaseDC
SetTimer
GetWindowThreadProcessId
TranslateMessageEx
SetTimer
GetSysColor
GetSysColor
GetSysColorBrush
GetWindowThreadProcessId
TranslateMessage
GetProcessWindowStation
GetAppCompatFlags2
CreateIconIndirect
GetWindowLongW
PostMessageW
ReleaseDC
GetSysColorBrush
CharUpperW
CharUpperA
ReleaseDC
TranslateMessage
CharUpperA

kernel32

LoadLibraryExA
CreateProcessA
WriteProcessMemory
LoadLibraryExA
CreateProcessA
GetSystemTime
TerminateProcess
ReleaseMutex
ReleaseMutex
CreateProcessA
GetStartupInfoA
LoadLibraryA
ReleaseMutex
ReadProcessMemory
VirtualProtect
LoadLibraryExW
ReadProcessMemory
ReleaseMutex
WriteProcessMemory
GetStartupInfoA
GetStartupInfoW
CreateProcessW
CreateFileA
ReadProcessMemory
GetStartupInfoA
GetStartupInfoW
CreateFileA
CreateProcessW
VirtualProtectEx
CreateProcessW
SleepEx
Sleep
GetStartupInfoA
LoadLibraryExA
WriteProcessMemory
ReadFile
GetStartupInfoW
CreateFileA
GetStartupInfoW
TerminateProcess
ReadFile
ReleaseMutex
ReleaseMutex
ReleaseMutex
CreateProcessW
WaitForSingleObject
LoadLibraryExA
GetSystemTime
VirtualProtect
ReadProcessMemory
WriteProcessMemory
Sleep
ReadFile
CreateProcessW
GetSystemTimeAsFileTime
LoadLibraryExW
WriteProcessMemory
GetSystemTime
ReadFile
WaitForSingleObject
VirtualProtectEx
GetSystemTimeAsFileTime
GetStartupInfoA
LoadLibraryA
Sleep
CreateProcessA
LoadLibraryExW
CreateFileA
CreateProcessW
CreateFileA
CreateProcessW
CreateFileA
WaitForSingleObject
LoadLibraryExA
LoadLibraryExW
LoadLibraryExA
VirtualProtect
VirtualProtect
TerminateProcess
GetSystemTimeAsFileTime
WriteProcessMemory
LoadLibraryExW
CreateFileA
GetSystemTimeAsFileTime
CreateFileA
VirtualProtectEx
GetSystemTime
WriteProcessMemory
LoadLibraryExW
LoadLibraryExW
WriteProcessMemory
VirtualProtect
CreateProcessA
ReadFile
CreateProcessA
LoadLibraryA
CreateProcessA
VirtualProtectEx
WaitForSingleObject
SleepEx
WriteProcessMemory
GetSystemTime
ReadFile
LoadLibraryExA
WaitForSingleObject
GetStartupInfoA
ReleaseMutex
ReadFile
SleepEx
ReadProcessMemory
GetSystemTime
ReadFile
TerminateProcess
GetStartupInfoA
GetStartupInfoA
LoadLibraryExW
LoadLibraryExA
LoadLibraryExA
VirtualProtect
ReadProcessMemory
Sleep
WriteProcessMemory
CreateProcessA
CreateProcessW
LoadLibraryExW
Sleep
Sleep
CreateFileA
LoadLibraryA
ReleaseMutex
LoadLibraryA
WriteProcessMemory
GetSystemTimeAsFileTime
LoadLibraryExA
SleepEx
LoadLibraryExA
GetStartupInfoW
LoadLibraryExA
ReleaseMutex
CreateFileA
ReadProcessMemory
LoadLibraryExW
CreateFileA
GetStartupInfoW
Sleep
CreateProcessA
ReadProcessMemory
CreateFileA
SleepEx
CreateProcessA
LoadLibraryA
LoadLibraryExW
GetStartupInfoW
GetSystemTime
LoadLibraryExW
Sleep
VirtualProtect
LoadLibraryExA
CreateFileA
LoadLibraryA
ReadProcessMemory
ReleaseMutex
GetSystemTimeAsFileTime
LoadLibraryA
Sleep
GetStartupInfoW
VirtualProtect
GetStartupInfoA
VirtualProtectEx
GetSystemTimeAsFileTime
LoadLibraryExW
LoadLibraryExA
WriteProcessMemory
WriteProcessMemory
SleepEx
GetSystemTime
ReadProcessMemory
CreateFileA
WriteProcessMemory
VirtualProtectEx
WaitForSingleObject
ReleaseMutex
VirtualProtectEx
SleepEx
ReadProcessMemory
TerminateProcess
GetSystemTimeAsFileTime
VirtualProtect
CreateProcessA
SleepEx
CreateProcessW
TerminateProcess
WriteProcessMemory
VirtualProtect
GetStartupInfoA
VirtualProtect
LoadLibraryA
LoadLibraryA
GetSystemTime
VirtualProtectEx
CreateProcessA
VirtualProtectEx
VirtualProtect
VirtualProtect
CreateProcessA
LoadLibraryExA
GetStartupInfoA
Sleep
ReadFile
ReleaseMutex
LoadLibraryExW
TerminateProcess
TerminateProcess
CreateProcessA
GetStartupInfoA
VirtualProtect
WriteProcessMemory
ReadProcessMemory
CreateProcessA
GetSystemTimeAsFileTime
CreateProcessA
ReadProcessMemory
CreateFileA
CreateFileA
TerminateProcess
CreateProcessA
ReadFile
GetStartupInfoW
LoadLibraryExW
ReadProcessMemory
WaitForSingleObject
CreateProcessA
SleepEx
Sleep
WriteProcessMemory
VirtualProtect
GetStartupInfoA
ReleaseMutex
WriteProcessMemory
WaitForSingleObject
VirtualProtect
ReadFile
Sleep
CreateFileA
LoadLibraryA
WaitForSingleObject
WriteProcessMemory
SleepEx
ReadFile
LoadLibraryA
VirtualProtect
LoadLibraryExA
ReadFile
VirtualProtectEx
Sleep
CreateProcessA
GetStartupInfoW
VirtualProtectEx
LoadLibraryA
SleepEx
GetStartupInfoW
LoadLibraryA
WaitForSingleObject
ReadProcessMemory
VirtualProtect
TerminateProcess
GetStartupInfoW
GetStartupInfoW
GetStartupInfoA
LoadLibraryExW
CreateFileA
ReadProcessMemory
GetStartupInfoA
CreateProcessW
SleepEx
CreateProcessA
CreateFileA
Sleep
Sleep
GetStartupInfoA
ReadProcessMemory
VirtualProtect
ReadFile
SleepEx
GetStartupInfoW
LoadLibraryExW
WaitForSingleObject
ReadFile
SleepEx
VirtualProtectEx
GetStartupInfoW
GetSystemTime
LoadLibraryA
WriteProcessMemory
LoadLibraryExA
ReadFile
ReleaseMutex
CreateProcessA
WriteProcessMemory
Sleep
ReadFile
LoadLibraryExA
CreateProcessW
ReadProcessMemory
CreateFileA
GetStartupInfoA
LoadLibraryExA
ReadFile
TerminateProcess
LoadLibraryExW
WriteProcessMemory
WriteProcessMemory
Sleep
Sleep
WaitForSingleObject
WaitForSingleObject
LoadLibraryA
CreateProcessW
VirtualProtect
ReadProcessMemory
GetSystemTime
LoadLibraryExA
GetSystemTime
LoadLibraryExW
GetStartupInfoA
SleepEx
TerminateProcess
WriteProcessMemory
SleepEx
GetSystemTime
GetSystemTimeAsFileTime
ReleaseMutex
LoadLibraryExW
LoadLibraryExW
CreateProcessA
LoadLibraryExW
CreateProcessW
LoadLibraryExA
WaitForSingleObject
VirtualProtectEx
LoadLibraryExA
GetSystemTime
ReleaseMutex
LoadLibraryExW
GetStartupInfoA
LoadLibraryA
TerminateProcess
ReadFile
ReadFile
VirtualProtect
CreateFileA
ReadFile
LoadLibraryExW
GetSystemTime
Sleep
GetSystemTimeAsFileTime
ReleaseMutex
GetSystemTimeAsFileTime
WaitForSingleObject
CreateProcessA
ReleaseMutex
CreateProcessA
LoadLibraryA
VirtualProtectEx
VirtualProtectEx
LoadLibraryExW
LoadLibraryExW
WriteProcessMemory
LoadLibraryA
CreateProcessW
ReadProcessMemory
LoadLibraryExA
CreateFileA
GetSystemTimeAsFileTime
GetStartupInfoW
CreateProcessW
GetStartupInfoW
TerminateProcess
ReadFile
LoadLibraryExW
CreateProcessA
ReadFile
WaitForSingleObject
WaitForSingleObject
GetStartupInfoA
GetStartupInfoW
GetStartupInfoA
WaitForSingleObject
CreateProcessA
CreateFileA
ReadProcessMemory
SleepEx
LoadLibraryA
GetSystemTime
GetStartupInfoA
SleepEx
GetStartupInfoW
CreateProcessA
VirtualProtect
GetSystemTimeAsFileTime
CreateFileA
CreateFileA
CreateProcessA
GetSystemTimeAsFileTime
WriteProcessMemory
LoadLibraryExA
ReadProcessMemory
GetSystemTimeAsFileTime
CreateProcessW
SleepEx
LoadLibraryExA
LoadLibraryExA
LoadLibraryExW
LoadLibraryExA
GetStartupInfoA
GetSystemTimeAsFileTime
GetSystemTimeAsFileTime
GetSystemTimeAsFileTime
GetSystemTimeAsFileTime
GetSystemTime
CreateProcessA
ReadProcessMemory
LoadLibraryA
VirtualProtect
TerminateProcess
CreateFileA
VirtualProtectEx
CreateProcessA
ReleaseMutex
VirtualProtectEx
GetSystemTime
LoadLibraryExW
LoadLibraryExW
CreateFileA
LoadLibraryExW
VirtualProtect
CreateProcessA
LoadLibraryA
ReadProcessMemory
ReadProcessMemory
ReadFile
ReleaseMutex
WriteProcessMemory
Sleep
ReadProcessMemory
TerminateProcess
GetStartupInfoW
Sleep
CreateProcessA
CreateProcessA
WriteProcessMemory
LoadLibraryExA
CreateProcessA
LoadLibraryExA
WriteProcessMemory
WriteProcessMemory
LoadLibraryExA
ReleaseMutex
GetSystemTime
CreateProcessW
Sleep
LoadLibraryExW
ReleaseMutex
ReleaseMutex
Sleep
ReleaseMutex
ReadProcessMemory
WaitForSingleObject
ReleaseMutex
LoadLibraryExA
ReadFile
GetStartupInfoW
CreateProcessA
LoadLibraryExA
TerminateProcess
VirtualProtectEx
VirtualProtectEx
SleepEx
VirtualProtectEx
LoadLibraryExW
VirtualProtect
WriteProcessMemory
VirtualProtectEx
GetStartupInfoA
ReadFile
VirtualProtectEx
CreateProcessA
TerminateProcess
TerminateProcess
LoadLibraryA
GetStartupInfoA
VirtualProtectEx
WriteProcessMemory
ReleaseMutex
CreateProcessA
CreateProcessA
LoadLibraryA
ReadProcessMemory
LoadLibraryA
GetStartupInfoA

Sections

.text
Size: 183KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d181d4e7f18fe624d26df1557c429498

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 183KB - Virtual size: 184KB

.data Size: 18KB - Virtual size: 20KB

.rsrc Size: 140KB - Virtual size: 139KB

.text
Size: 183KB - Virtual size: 184KB

.data
Size: 18KB - Virtual size: 20KB

.rsrc
Size: 140KB - Virtual size: 139KB