d2d638d02df0b2d6bb6d7fdaee079e47_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d2d638d02df0b2d6bb6d7fdaee079e47_JaffaCakes118
Size

439KB
MD5

d2d638d02df0b2d6bb6d7fdaee079e47
SHA1

050fbdcfa56378009416eb4b3068d04b1e1a65de
SHA256

38edabfeb15c200535a5718a88b337e79d7fa907859ae955de263e7504dac25b
SHA512

4dc06aaf27dcf494a5aca25c48ac58510a6fe96fa9e3e811f393a371234a56cde8e1b78544996af1b9f057d5bd1fe75b69298b60663942e4e9c789c349e42df5
SSDEEP

6144:RiFdJIh4egwGik0fa19v8sQbgS3t3DIapgRIiK4KsUErkDjj0JyFLz75Zj76:6PI6e+ibfKOkSJImgl1lran0Jyl7/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2d638d02df0b2d6bb6d7fdaee079e47_JaffaCakes118

Files

d2d638d02df0b2d6bb6d7fdaee079e47_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4ccb4688c447c7eaeff7950e52d8dc74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlUnwind
_vsnwprintf
wcslen
_wcsicmp
NtAllocateVirtualMemory
RtlIsNameLegalDOS8Dot3
RtlAnsiStringToUnicodeString
NtQueryVirtualMemory
RtlInitUnicodeStringEx
RtlUnicodeToMultiByteSize
_chkstk
memmove

user32

GrayStringW
CreateDialogIndirectParamW
EnableWindow
GetSysColorBrush
CreateWindowExW
CreateDialogIndirectParamAorW
IsWindowEnabled
IntersectRect
DispatchMessageW
SetDlgItemTextW
ReleaseDC
EndDeferWindowPos
CharLowerW
GetParent
SetWindowPos
BeginPaint
SetDlgItemTextA
CheckDlgButton
MessageBoxW
CallNextHookEx
DestroyWindow
MessageBeep
RemovePropW
ShowCursor
LoadCursorW
CharNextW
CheckRadioButton
GetWindowTextLengthW
SetCapture
FindWindowExW
LoadIconW
GetDlgItem
SetCursor
GetDC
GetWindow
DialogBoxIndirectParamW
MoveWindow
GetWindowPlacement
SetPropW
RegisterWindowMessageA
UnhookWindowsHookEx
DrawTextW
ShowWindow
SetWindowPlacement
GetSystemMetrics
CharPrevW
GetDialogBaseUnits
EndDialog
InflateRect
ClipCursor
SetWindowTextW
SetParent
GetSystemMenu
GetWindowTextW
CreatePopupMenu
SetWindowLongW
DialogBoxIndirectParamAorW
PostMessageW
CallWindowProcW
GetKeyboardLayout
ChildWindowFromPoint
EqualRect
GetWindowLongW
DefWindowProcW
DeferWindowPos
GetFocus
GetWindowLongA
RegisterClipboardFormatW
SetWindowsHookExW
UpdateWindow
PtInRect
InvalidateRect
MsgWaitForMultipleObjects
FrameRect
DrawEdge
ScreenToClient
CharNextA
ValidateRect
GetSysColor
GetDlgItemTextW
GetDlgCtrlID
SendDlgItemMessageW
GetClientRect
LoadImageW
SetDlgItemInt
KillTimer
EnumChildWindows
RedrawWindow
SendMessageW
PeekMessageW
IsWindow
LoadStringW
MapWindowPoints
SetFocus
GetWindowRect
CopyRect
GetDlgItemTextA
CreateDialogIndirectParamA
TranslateMessage
SetTimer
DeleteMenu
GetLastActivePopup
FillRect
DrawIcon
DrawFocusRect
IsWindowVisible
WinHelpW
IsDlgButtonChecked
BeginDeferWindowPos
GetPropW
DlgDirListW
DestroyMenu
GetKeyState
EndPaint
GetDlgItemInt
TranslateAcceleratorW
LockWindowUpdate
RegisterWindowMessageW
LoadAcceleratorsW

gdi32

CreateFontIndirectW
EnumFontFamiliesExW
PatBlt
LineTo
SelectClipRgn
DeleteDC
GetTextMetricsW
SetViewportExtEx
TextOutW
GetTextExtentPointW
SetMapMode
GetNearestColor
GetDeviceCaps
GetMapMode
CreateRectRgnIndirect
CreateCompatibleDC
SetBkMode
SelectPalette
DeleteObject
CreateCompatibleBitmap
GetTextCharset
CreateFontW
RealizePalette
GetStockObject
CreatePen
SetBkColor
SetWindowExtEx
SetTextColor
GetObjectW
CreateDIBitmap
Rectangle
ExtTextOutW
GetWindowExtEx
SelectObject
ExcludeClipRect
MoveToEx
BitBlt
CreateDCW
CreateSolidBrush
CreateICW
GetViewportExtEx
GetCharWidth32W
CreateDiscardableBitmap
GetTextCharsetInfo
TranslateCharsetInfo

comctl32

ImageList_Draw
PropertySheetW
ImageList_GetIconSize
CreateToolbarEx
CreatePropertySheetPageW
InitCommonControlsEx
CreateToolbar

mswsock

GetAcceptExSockaddrs
AcceptEx

ole32

CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitializeEx

ws2_32

WSALookupServiceNextW
getaddrinfo
WSALookupServiceBeginW
WSAAddressToStringA
WSARecvFrom
WSAIoctl
WSAAddressToStringW
freeaddrinfo
WSASendTo
getnameinfo
WSAStringToAddressA
WSASocketW
WSALookupServiceEnd
WSAEventSelect

advapi32

RegOpenKeyExA
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueW
RegEnumValueW
RegQueryValueExA
RegQueryValueExW

kernel32

MultiByteToWideChar
LocalFree
SizeofResource
TlsSetValue
EnterCriticalSection
LoadLibraryW
CreateThread
GetACP
FreeLibraryAndExitThread
LocalSize
GetProcAddress
FormatMessageW
InterlockedIncrement
Sleep
GetShortPathNameW
CreateEventW
FindFirstFileW
ResetEvent
lstrlenW
GetSystemTimeAsFileTime
InterlockedCompareExchange
CreateFileW
ExpandEnvironmentStringsW
GetCurrentDirectoryW
LockResource
GetProfileStringW
SetErrorMode
MulDiv
GlobalLock
DelayLoadFailureHook
GetFullPathNameW
InterlockedExchange
GlobalReAlloc
LoadResource
GetLocaleInfoW
UnhandledExceptionFilter
FreeLibrary
lstrlenA
GlobalUnlock
FreeResource
SetEvent
GlobalAlloc
lstrcpynW
FindResourceExW
GlobalFree
GetModuleFileNameW
DeleteCriticalSection
GetTempFileNameW
SetUnhandledExceptionFilter
GetCurrentProcess
TlsFree
lstrcmpW
FindClose
LocalAlloc
GetProcessVersion
lstrcmpiW
SetCurrentDirectoryW
TerminateProcess
DisableThreadLibraryCalls
InterlockedDecrement
GetCurrentProcessId
lstrcpyW
GetTickCount
TlsAlloc
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
GetFileAttributesW
CloseHandle
QueryPerformanceCounter
DeleteFileW
TlsGetValue
LocalReAlloc
GetUserDefaultLCID
LoadLibraryA
SetLastError
GetVolumeInformationW
FindNextFileW
GetModuleHandleW
GetVersionExA
lstrcpyA
WideCharToMultiByte
LeaveCriticalSection
GetCurrentThreadId
FindResourceW
GetDriveTypeW
GetLastError
GetModuleHandleA
FindResourceA

dnsapi

DnsApiAlloc
DnsApiFree

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 30KB - Virtual size: 928KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4ccb4688c447c7eaeff7950e52d8dc74

Headers

File Characteristics

Imports

ntdll

user32

gdi32

comctl32

mswsock

ole32

ws2_32

advapi32

kernel32

dnsapi

Sections

.text Size: 5KB - Virtual size: 4KB

.rsrc Size: 175KB - Virtual size: 175KB

.rdata Size: 228KB - Virtual size: 227KB

.data Size: 30KB - Virtual size: 928KB

.text
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 175KB - Virtual size: 175KB

.rdata
Size: 228KB - Virtual size: 227KB

.data
Size: 30KB - Virtual size: 928KB