d2bfea69fde94a2e61ee4e9773874745_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d2bfea69fde94a2e61ee4e9773874745_JaffaCakes118
Size

292KB
MD5

d2bfea69fde94a2e61ee4e9773874745
SHA1

0288bb93ee854c7a0bf15a2d71217ddb2b9cb3f7
SHA256

7929cf3de0279d162f6686c5528984ff9de27d844fc222a7e1d17a857a5bb4cf
SHA512

bb2c3812b8f38442478d13ece5b1bf764e6cba2e65faf01ab19afe96abe651b9289cf6f029722f7c88a130dc5455ff29d572b5d23444c55caad8e9dfecf710b3
SSDEEP

6144:yzDMBon+llKIOx+ZD3PHG4BoyAk81Ih4OeM:eMBo+lQzA3PHzBoyAk8w4Oe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2bfea69fde94a2e61ee4e9773874745_JaffaCakes118

Files

d2bfea69fde94a2e61ee4e9773874745_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c570a6ac15de2ded780efa2eca9ceef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceExA
VirtualLock
GetPrivateProfileSectionW
CreateMutexA
Beep
CreateWaitableTimerA
LocalSize
GetModuleHandleA
SuspendThread
GetTapeStatus
LoadLibraryExW
GlobalAddAtomA
OutputDebugStringW
FindFirstFileA
OpenMutexA
FlushConsoleInputBuffer
GlobalDeleteAtom
GetShortPathNameW
GetLocaleInfoW
GetFileAttributesA
CreateProcessA
SearchPathW
GetLongPathNameA
FindNextChangeNotification
GetDiskFreeSpaceW
DeleteCriticalSection
GetEnvironmentVariableW
GlobalFree
SetConsoleTitleA
FormatMessageW
SetProcessWorkingSetSize
GetTickCount
GlobalFindAtomW
CopyFileExW
VirtualQueryEx
VirtualFree
GetPrivateProfileStringA
SetTimeZoneInformation
EnumCalendarInfoW
TlsGetValue
CancelIo
GetAtomNameA
ScrollConsoleScreenBufferA
PeekNamedPipe
EnumResourceNamesW
RemoveDirectoryW
QueryDosDeviceW
FormatMessageA
SetStdHandle
GetDiskFreeSpaceExA
SetErrorMode
OpenSemaphoreW
FatalAppExitA
SetCurrentDirectoryA
LeaveCriticalSection
SetConsoleWindowInfo
GetStartupInfoA
WritePrivateProfileStringA
CloseHandle
QueryDosDeviceA
GetCPInfo
GetProfileIntA
WritePrivateProfileSectionA
GetFullPathNameA
GetTempPathW
VirtualAllocEx
VirtualAlloc

user32

GetProcessDefaultLayout
RegisterDeviceNotificationW
InvalidateRect
RegisterDeviceNotificationA
DialogBoxIndirectParamA
TileWindows
CreateWindowStationW
EqualRect
CloseClipboard
SetWindowTextW
WinHelpA
LoadMenuA
ClientToScreen
TranslateMDISysAccel
SetWindowsHookExW
DefWindowProcA
ExcludeUpdateRgn
GetCapture
GetMenuInfo
SetFocus
LoadCursorA
SetMenu
ShowWindowAsync
GetCaretPos
GetDlgCtrlID
SetRectEmpty
GetWindowInfo
IsCharLowerW
DefDlgProcA
GetWindow
GetClipboardViewer
mouse_event
MapWindowPoints
RegisterWindowMessageW
SetForegroundWindow
PostThreadMessageA
GetQueueStatus
GetMessageA
SetSysColors
CloseWindow
InternalGetWindowText
GetClipboardFormatNameW
GetScrollBarInfo
wvsprintfW
LoadStringW
TabbedTextOutW
GetKeyboardLayoutList
MsgWaitForMultipleObjectsEx
GetIconInfo
DrawTextA
DestroyIcon
GetClassInfoExA
LoadCursorFromFileW
RegisterClassExA
FillRect
FrameRect
EnumDisplaySettingsExA
CheckRadioButton
CharUpperBuffA

gdi32

CloseEnhMetaFile
PolyDraw
SetBrushOrgEx
GetBrushOrgEx
GetSystemPaletteEntries
Chord
AbortDoc
SetPixelFormat
SetPolyFillMode
SetPixel
GetDeviceCaps
EnumFontFamiliesExA
GetObjectW
GetEnhMetaFileBits
CreateRectRgn
DeleteDC
GetCurrentObject
GetDIBits
GetWindowOrgEx
MaskBlt
CloseFigure
LPtoDP

advapi32

SetSecurityDescriptorSacl
CryptExportKey
RegQueryValueW
SetFileSecurityW
AllocateAndInitializeSid
OpenSCManagerA
DestroyPrivateObjectSecurity
ChangeServiceConfigA
GetSidSubAuthority
SetNamedSecurityInfoA
MapGenericMask
StartServiceCtrlDispatcherW
CloseServiceHandle
GetCurrentHwProfileW
CryptDeriveKey
EnumDependentServicesW
CreateServiceW
QueryServiceStatus
GetFileSecurityA
CryptSignHashW
AccessCheckAndAuditAlarmW
CryptVerifySignatureA
BuildSecurityDescriptorW
GetServiceKeyNameW
CryptDestroyHash
ClearEventLogW
GetSecurityDescriptorSacl
CloseEventLog
RegSetValueA

shell32

SHGetDesktopFolder
SHGetSpecialFolderPathW
Shell_NotifyIconA
DragFinish

ole32

OleRegGetUserType
CreateStreamOnHGlobal
CoGetObject
CoTreatAsClass

oleaut32

SysAllocStringLen
VariantCopy
SafeArrayRedim
LoadTypeLi
SafeArrayCreate
QueryPathOfRegTypeLi
SysFreeString
SysStringLen

comctl32

ImageList_DragEnter
ImageList_GetIcon
ImageList_Replace
ImageList_Draw

shlwapi

StrPBrkW
PathUndecorateW
SHAutoComplete
ChrCmpIW
PathIsRootW
UrlCanonicalizeW
StrDupA
PathParseIconLocationW
UrlApplySchemeW

msvcrt

_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_controlfp
__set_app_type

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 276KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5c570a6ac15de2ded780efa2eca9ceef

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

msvcrt

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 276KB - Virtual size: 273KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 276KB - Virtual size: 273KB