d5b37dddcf5b28c936e67dec0374e2af_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d5b37dddcf5b28c936e67dec0374e2af_JaffaCakes118
Size

618KB
MD5

d5b37dddcf5b28c936e67dec0374e2af
SHA1

eb478e55b269e2b5adc1bf2b32daa71323b9a653
SHA256

5f99ce46fd0c8cd169f0531702cb94a4f13e244e68a2d3a5e0ecd7e9af2a9d67
SHA512

f4020467ec2395abf8cf380266b9946eed691fac69832c8285740779af96e0dc2c3309671321e2d77749f9f6d75d5f2cfd377fcc9087fc62c3a77a58b569f4c3
SSDEEP

12288:BDgktcMYqn1umZAk9o/jpzPVBM8m3JUfUyPGg6801ARLyFYecsoiu/b:ltcPHkctBjmZXyPG7+yfoiuT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5b37dddcf5b28c936e67dec0374e2af_JaffaCakes118

Files

d5b37dddcf5b28c936e67dec0374e2af_JaffaCakes118
.exe windows:5 windows x86 arch:x86

197d8bf643713270ff310b3343302871

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetStartupInfoA
SetHandleCount
GetConsoleMode
GetConsoleCP
LoadLibraryW
OutputDebugStringW
GetFileType
WriteConsoleW
LoadLibraryA
WriteFile
GetStdHandle
DebugBreak
VirtualQuery
SetLastError
TlsFree
TlsSetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetEndOfFile
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapSize
HeapReAlloc
FlushFileBuffers
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
SetStdHandle
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
GetLocaleInfoW
OutputDebugStringA
ExitProcess
GetProfileStringA
VirtualAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
IsBadReadPtr
HeapValidate
GetStartupInfoW
GetProcAddress
GetModuleHandleW
RtlUnwind
GetModuleFileNameW
CreateFileA
CloseHandle
ReadFile
GetFileAttributesA
CreateEventA
WaitForSingleObject
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetModuleHandleA
GetLastError
SetConsoleCtrlHandler
FormatMessageA
InterlockedExchange
GetProcessHeap
GetCurrentThreadId
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
Sleep
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement

user32

GetDlgItem
SetDlgItemInt
BeginDeferWindowPos
GetCursorPos
SystemParametersInfoA
GetMenuItemInfoA
GetSystemMenu
MessageBoxA
RegisterClassA
IsDlgButtonChecked
CreateWindowExA
SetClipboardViewer
GetMessageA
SetProcessDefaultLayout
GetDC
SendMessageA
ChangeClipboardChain
DispatchMessageA
OffsetRect
TrackPopupMenuEx
LoadAcceleratorsA
TranslateAcceleratorA
LoadIconA
LoadCursorA
RegisterClassExW
LoadMenuA
GetSubMenu
DestroyWindow
ClientToScreen
CallWindowProcA
DialogBoxParamA
GetDlgItemTextA
InvalidateRect
GetParent
SetTimer
KillTimer
EndDialog
CreateWindowExW
ShowWindow
UpdateWindow
wsprintfA
ReleaseDC
SetMenu
DrawFrameControl
IntersectRect
DefWindowProcA
BeginPaint
ValidateRect
EndPaint
PostQuitMessage
RemovePropA
GetWindowTextLengthA
GetWindowTextA
TranslateMessage

gdi32

CreateSolidBrush
Rectangle
SetTextColor
SetBkMode
CreateEllipticRgn
Ellipse
CreateRectRgn
PtInRegion
CreateFontA
SelectObject
GetStockObject
SetMapMode
SetWindowExtEx
SetViewportExtEx
SetViewportOrgEx
LineTo
MoveToEx
CreatePen
TextOutA
DeleteObject
CombineRgn
GetDeviceCaps
GetPixel
SetBrushOrgEx
Escape
GetTextMetricsA
SetTextAlign
EnumFontFamiliesA
PatBlt

comdlg32

ChooseColorA

advapi32

GetSidSubAuthorityCount
IsValidSid
AllocateAndInitializeSid
GetSidIdentifierAuthority

shell32

ShellExecuteA

ole32

CoInitialize
CLSIDFromString
CoCreateInstance

oleaut32

CreateErrorInfo
VarRound
SysFreeString
VariantClear
SysAllocString
GetErrorInfo

ws2_32

WSASendDisconnect
WSASendTo

avifil32

AVIFileInit
AVIFileOpenA
AVIFileRelease
AVIFileInfoA
AVIFileGetStream
AVIMakeCompressedStream
AVIFileExit
AVIStreamStart
AVIStreamLength
AVIStreamGetFrameOpen
AVIStreamGetFrame
AVIStreamGetFrameClose
AVIMakeStreamFromClipboard
AVIStreamRead
AVIStreamReadFormat
AVIStreamRelease
AVIStreamOpenFromFileA

winmm

waveInGetNumDevs
joyGetNumDevs
midiOutGetNumDevs
midiInGetNumDevs
auxGetNumDevs
waveInGetDevCapsA
waveOutGetDevCapsA
waveOutGetNumDevs

shlwapi

PathFindNextComponentW
PathCommonPrefixW
PathFindExtensionW
PathFileExistsA
PathFindFileNameW
PathCombineW

pdh

PdhGetFormattedCounterValue

wintrust

CryptCATAdminEnumCatalogFromHash
WinVerifyTrust

Sections

.text
Size: 311KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

197d8bf643713270ff310b3343302871

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

ws2_32

avifil32

winmm

shlwapi

pdh

wintrust

Sections

.text Size: 311KB - Virtual size: 311KB

.rdata Size: 88KB - Virtual size: 88KB

.data Size: 13KB - Virtual size: 24KB

.rsrc Size: 204KB - Virtual size: 204KB

.text
Size: 311KB - Virtual size: 311KB

.rdata
Size: 88KB - Virtual size: 88KB

.data
Size: 13KB - Virtual size: 24KB

.rsrc
Size: 204KB - Virtual size: 204KB