ceaea8431eea6c8d3b220dfd7b498f09_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ceaea8431eea6c8d3b220dfd7b498f09_JaffaCakes118
Size

264KB
MD5

ceaea8431eea6c8d3b220dfd7b498f09
SHA1

e122bfc3c26585ccd0bbf3a8a7de122539481c6d
SHA256

cdc835e1963248025360c66be87b688c2cdddf6d4ea4262b151e73ad55b105a6
SHA512

dfa2a44bbc3ce8b404e60d656e6d87279a7da6113574bbffe978be4959014ba9e15c0b8e73de3c243f5459f92614be04add7f2a34163369c7cfe5aad96db27f8
SSDEEP

3072:WzWw6Cyf/lZibKv1wUFl482EKXI0tfliaKGtLDPxi3V7JRWmEDHxGt0/Fqqo:fZnlkmv1j6Hy7Gt5i3VNBuRGt0d8

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ceaea8431eea6c8d3b220dfd7b498f09_JaffaCakes118

Files

ceaea8431eea6c8d3b220dfd7b498f09_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb9beb3a6e2505629d5f1cc0b9fca546

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17
_TrackMouseEvent

shell32

ShellExecuteA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

winmm

PlaySoundA

kernel32

GetCommandLineA
GetModuleHandleA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
LocalFree
lstrcpynA
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
FindResourceA
GlobalFree
SetLastError
RaiseException
InitializeCriticalSection
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
LocalAlloc
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
lstrcmpA
GlobalFlags
GetCurrentThreadId
lstrcpyA
GetProcAddress
lstrcmpW
WideCharToMultiByte
FreeLibrary
LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCPInfo
GetOEMCP
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetCurrentProcess
CreateFileA
HeapFree
RtlUnwind
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
lstrcatA
ExitProcess
HeapReAlloc
HeapSize
TerminateProcess
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
GetLastError
GetVersion
lstrcmpiA
lstrlenA
CompareStringA
CompareStringW
CloseHandle
CreateMutexA
GetTempFileNameA
GetTempPathA
DeleteFileA

user32

MapWindowPoints
LoadIconA
GetMessagePos
GetMessageTime
GetTopWindow
GetForegroundWindow
RemovePropA
GetPropA
SetPropA
GetClassInfoExA
GetClassLongA
GetCapture
WinHelpA
RegisterWindowMessageA
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
DestroyMenu
RegisterClassA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
CopyRect
SetMenuItemBitmaps
ModifyMenuA
CheckMenuItem
LoadBitmapA
GetDlgItem
SetWindowsHookExA
CallNextHookEx
GetKeyState
PeekMessageA
ValidateRect
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetFocus
GetWindowTextA
GetClassNameA
GetParent
GetLastActivePopup
IsWindowEnabled
UnhookWindowsHookEx
GetSysColor
GetSysColorBrush
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetMenu
PostMessageA
AdjustWindowRectEx
EnableMenuItem
MessageBoxA
EnumWindows
SetForegroundWindow
RegisterClassExA
GetWindowLongA
DefWindowProcA
GetMenuCheckMarkDimensions
GetClassInfoA
ReleaseDC
GetDC
GetDesktopWindow
LoadStringA
ShowWindow
PostQuitMessage
SendMessageA
LoadImageA
SetWindowTextA
SetWindowPos
SetRect
GetSystemMetrics
EndDialog
DestroyWindow
DispatchMessageA
TranslateMessage
IsDialogMessageA
GetMessageA
SetWindowLongA
CreateDialogParamA
UnregisterClassA
UpdateWindow
LoadCursorA
SetCursor
GetClientRect
InvalidateRect
BeginPaint
EndPaint
EnableWindow
CreateWindowExA

gdi32

SetMapMode
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
RestoreDC
SetWindowExtEx
ScaleWindowExtEx
GetStockObject
GetDeviceCaps
SaveDC
SetBkColor
SetTextColor
DeleteDC
SetPixel
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
DeleteObject
GetClipBox
CreateBitmap

oleacc

CreateStdAccessibleObject
LresultFromObject

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

oleaut32

VariantChangeType
VariantClear
VariantInit

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX0
Size: 104KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

eb9beb3a6e2505629d5f1cc0b9fca546

Headers

File Characteristics

Imports

comctl32

shell32

advapi32

winmm

kernel32

user32

gdi32

oleacc

winspool.drv

oleaut32

Sections

.text Size: 88KB - Virtual size: 84KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 8KB - Virtual size: 52KB

.rsrc Size: 40KB - Virtual size: 39KB

.UPX0 Size: 104KB - Virtual size: 252KB

.text
Size: 88KB - Virtual size: 84KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 8KB - Virtual size: 52KB

.rsrc
Size: 40KB - Virtual size: 39KB

.UPX0
Size: 104KB - Virtual size: 252KB