d310c99779c65a60cb79a2c7f1f23a32_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d310c99779c65a60cb79a2c7f1f23a32_JaffaCakes118
Size

552KB
MD5

d310c99779c65a60cb79a2c7f1f23a32
SHA1

46120f381f86e9672f04d76ed73d20a5c3dbe302
SHA256

4d02ed4d04399f9162b30f5a8506a13581fd22641a752ed13cee5a12062be7c7
SHA512

6036e197f68e7560515aa5d0c95340bfce96c8dfc8c736d8ec68f46506c562f684505f4884719ddb9e707313e82cd059730898a3ea70967bf20507c0bd65875d
SSDEEP

6144:sUVivNNcwlfYXfdMK9ErguFYZOizZJONBpqfkaKZ+rYXwBO9OQZpZdUH6l+vnOQ+:av0EfEsguOZTmUfkZ+rYXwU9pZc3vk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d310c99779c65a60cb79a2c7f1f23a32_JaffaCakes118

Files

d310c99779c65a60cb79a2c7f1f23a32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d35ab3fa1a06a51dbf85ca6dc7a8240b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

n:\satct

Imports

comctl32

ImageList_AddMasked
ImageList_EndDrag
GetEffectiveClientRect
CreateToolbar
ImageList_DragMove
CreateUpDownControl
DrawStatusTextW
ImageList_SetImageCount
_TrackMouseEvent
ImageList_Write
ImageList_SetOverlayImage
ImageList_GetImageRect
ImageList_LoadImage
ImageList_LoadImageW
ImageList_DrawIndirect
ImageList_GetDragImage
ImageList_Read
InitCommonControlsEx
CreateMappedBitmap
ImageList_Remove
ImageList_Merge

kernel32

GetTimeZoneInformation
CompareStringA
InitializeCriticalSection
ExitProcess
GetVersionExA
SetLastError
VirtualProtect
GetEnvironmentStrings
TlsSetValue
DeleteCriticalSection
RtlUnwind
GetDateFormatA
GetCurrentThreadId
IsValidLocale
HeapFree
GetTickCount
TlsFree
GetOEMCP
MultiByteToWideChar
HeapCreate
HeapReAlloc
UnhandledExceptionFilter
LCMapStringA
GetEnvironmentStringsW
GetTimeFormatA
LCMapStringW
GetModuleFileNameA
GetLocaleInfoW
GetStringTypeA
GetACP
LeaveCriticalSection
GetProfileIntW
TlsGetValue
IsBadWritePtr
CompareStringW
GetProcAddress
GetSystemInfo
GetStringTypeW
CreateSemaphoreW
EnterCriticalSection
WriteFile
SetFilePointer
GetCPInfo
CloseHandle
GetStdHandle
OpenMutexA
EnumSystemLocalesA
HeapAlloc
GetCurrentThread
InterlockedExchange
ReleaseSemaphore
CreateMutexA
FlushFileBuffers
SetHandleCount
HeapDestroy
VirtualQuery
GetSystemTimeAsFileTime
HeapSize
GetFileType
TlsAlloc
GetModuleHandleA
VirtualAlloc
GetCurrentProcess
GetCommandLineA
SetStdHandle
VirtualFree
SetEvent
TerminateProcess
GetLocaleInfoA
ReadFile
GetCurrentProcessId
IsValidCodePage
FreeEnvironmentStringsA
SetEnvironmentVariableA
FreeEnvironmentStringsW
QueryPerformanceCounter
WideCharToMultiByte
GetStartupInfoA
GetLastError
LoadLibraryA
GetUserDefaultLCID

user32

DefWindowProcA
LoadIconA
DrawTextW
RealChildWindowFromPoint
MapVirtualKeyW
RegisterClassA
MonitorFromWindow
ShowWindow
MapDialogRect
DrawIconEx
ScrollWindowEx
SetScrollRange
CallWindowProcW
MessageBoxW
GetCursorInfo
SetSystemCursor
CloseWindowStation
InSendMessageEx
MsgWaitForMultipleObjectsEx
RegisterClassExA
MapWindowPoints
GetUpdateRgn
RegisterClassExW
DestroyWindow
GetKeyboardLayoutList
BroadcastSystemMessageW
GetUpdateRect
CreateWindowExW
WINNLSGetIMEHotkey

comdlg32

GetSaveFileNameA
GetFileTitleW

shell32

DragFinish

gdi32

GetWinMetaFileBits
GetCurrentPositionEx
PlayEnhMetaFileRecord
SetWindowExtEx
SetBitmapDimensionEx
GetSystemPaletteUse
GetStretchBltMode
gdiPlaySpoolStream
GetTextExtentPoint32W
EnumObjects
DeleteDC
GetRasterizerCaps
OffsetWindowOrgEx
DeviceCapabilitiesExW
SetTextJustification
SetEnhMetaFileBits
RectInRegion
GetWindowOrgEx
SelectObject
CreatePalette
GetDeviceCaps
CloseMetaFile
GetCharABCWidthsA
CreateCompatibleBitmap
CreateDIBSection
GetTextAlign
CreateDCA
GetObjectA
Polyline

Sections

.text
Size: 160KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 248KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d35ab3fa1a06a51dbf85ca6dc7a8240b

Headers

File Characteristics

PDB Paths

Imports

comctl32

kernel32

user32

comdlg32

shell32

gdi32

Sections

.text Size: 160KB - Virtual size: 157KB

.rdata Size: 248KB - Virtual size: 245KB

.data Size: 120KB - Virtual size: 139KB

.rsrc Size: 20KB - Virtual size: 16KB

.text
Size: 160KB - Virtual size: 157KB

.rdata
Size: 248KB - Virtual size: 245KB

.data
Size: 120KB - Virtual size: 139KB

.rsrc
Size: 20KB - Virtual size: 16KB