d487f86406e289b634f3af97ab48cff7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d487f86406e289b634f3af97ab48cff7_JaffaCakes118
Size

1.2MB
MD5

d487f86406e289b634f3af97ab48cff7
SHA1

2a9105c08e2dc6dadbf4905e2609224aeaf6944c
SHA256

971718193bb7c0f3788d2192b70606b1f60e6d655dd30b58312081a80fdef2d4
SHA512

edef18c952c2d9c4df424fe4f34ee0ca9c8a0d9671012ae5acfb7699420ec3379a78c17023815ed85108017e886b71b7493f74aefdee587d6dde33931f585487
SSDEEP

24576:fcoEqRTkGGaInZgMv+byDx/EO3n7REPXMvN:02RTJGhaWxRL2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d487f86406e289b634f3af97ab48cff7_JaffaCakes118

Files

d487f86406e289b634f3af97ab48cff7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fc6dd47d4d1747c9338024053ee7665f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
RtlUnwind
Sleep
ExitProcess
RaiseException
VirtualAlloc
HeapReAlloc
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetConsoleCP
GetConsoleMode
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
HeapAlloc
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetACP
IsValidCodePage
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcessHeap
GetStartupInfoA
CreateFileA
GetCurrentProcess
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetOEMCP
GetCPInfo
GetModuleHandleW
GetCurrentProcessId
InterlockedIncrement
GlobalFlags
WritePrivateProfileStringA
CloseHandle
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
LoadLibraryA
lstrcmpW
GetVersionExA
FormatMessageA
MultiByteToWideChar
TlsFree
GlobalFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalFree
LocalAlloc
GetLastError
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryExA
CompareStringA
InterlockedExchange
lstrcmpA
SetErrorMode
lstrlenA
FreeLibrary
WideCharToMultiByte
InterlockedDecrement
GetModuleFileNameW
SetLastError
GetProcAddress
GetCommandLineA
GetModuleHandleA
FindResourceA
LoadResource
LockResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
FreeResource
GetModuleFileNameA
SetFileAttributesA

user32

DestroyMenu
ShowWindow
LoadCursorA
GetSysColorBrush
GetWindowThreadProcessId
IsWindowEnabled
SetWindowTextA
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
RegisterWindowMessageA
LoadIconA
WinHelpA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetMenu
EnableWindow
SetForegroundWindow
UnhookWindowsHookEx
PostQuitMessage
PostMessageA
IsWindowVisible
GetClientRect
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
GetParent
CopyRect
PtInRect
GetDlgCtrlID
GetCapture
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
GetDC
ReleaseDC
SendMessageA
DefWindowProcA
CallWindowProcA
GetMenu
GetWindowLongA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindow
GetSysColor
SetWindowsHookExA

gdi32

CreateBitmap
GetStockObject
DeleteDC
ExtTextOutA
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
GetDeviceCaps
TextOutA
RectVisible
PtVisible
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
Escape

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
OpenServiceA
ChangeServiceConfigA
StartServiceA
CloseServiceHandle
RegOpenKeyExA
RegSetValueExA

shell32

ShellExecuteA

shlwapi

PathFindExtensionA
PathFindFileNameA

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc6dd47d4d1747c9338024053ee7665f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

oleaut32

Sections

.text Size: 126KB - Virtual size: 126KB

.rdata Size: 29KB - Virtual size: 29KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.reloc Size: 29KB - Virtual size: 29KB

.text
Size: 126KB - Virtual size: 126KB

.rdata
Size: 29KB - Virtual size: 29KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

.reloc
Size: 29KB - Virtual size: 29KB