da978556e92fb6e5be5d4a961067ec83_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

da978556e92fb6e5be5d4a961067ec83_JaffaCakes118
Size

1.5MB
MD5

da978556e92fb6e5be5d4a961067ec83
SHA1

a23812017d9ff45d0beee2f52cc45ea11841e339
SHA256

6ab21b0bf168ffde618f4d0dec7f8046ba4f949b6d59666e3d54a73cc5ecc17b
SHA512

3c9c4d0818cb2876a4d1b39918972dde218bdcfccbeef48ac54206edec983b2b9c1d2a031f69f4981144e6425d4186dabadf37ca6e64d53fa13a96390a61b967
SSDEEP

24576:7djEkbmUn8C4dwi19WzTcNxifnIw2klrsuzpjhoj/bY:Vl8vdXQTcNxMnqAvzRhobb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da978556e92fb6e5be5d4a961067ec83_JaffaCakes118

Files

da978556e92fb6e5be5d4a961067ec83_JaffaCakes118
.exe windows:5 windows x86 arch:x86

be92c640affcfa9535687b1354a32586

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
LocalSize
LockResource
MultiByteToWideChar
OpenProcess
RequestDeviceWakeup
RtlUnwind
SetCommTimeouts
SetConsoleDisplayMode
SetConsoleTitleA
SetThreadPriority
SetVolumeLabelW
SizeofResource
LeaveCriticalSection
SwitchToThread
TerminateProcess
UnregisterWaitEx
WideCharToMultiByte
WriteFile
WritePrivateProfileStructA
_lclose
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
LCMapStringW
LCMapStringA
IsBadWritePtr
InterlockedCompareExchange
InitializeCriticalSection
HeapValidate
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalReAlloc
GetVolumePathNameA
GetVersionExA
GetTickCount
GetThreadPriority
GetThreadContext
GetSystemWindowsDirectoryA
GetSystemDefaultLangID
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProcessHeap
GetPrivateProfileStringA
GetPrivateProfileSectionW
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCurrentThread
GetCurrentProcessId
GetConsoleWindow
GetConsoleTitleW
GetConsoleTitleA
GetConsoleAliasW
GetCommandLineA
GetCPInfoExW
FreeResource
FindResourceA
FindNextVolumeMountPointA
FindFirstVolumeMountPointW
ExitProcess
EnumTimeFormatsA
EnumResourceTypesW
EnumResourceTypesA
EnumResourceLanguagesW
EnumDateFormatsExA
EnumDateFormatsA
EnterCriticalSection
DnsHostnameToComputerNameW
DeleteVolumeMountPointA
DeleteFileA
DeleteCriticalSection
DeleteAtom
DebugBreak
CreateToolhelp32Snapshot
CreateProcessA
CreateMutexW
CreateJobObjectW
CompareStringW
CompareStringA
CloseHandle
AreFileApisANSI
LoadLibraryA
GetProcAddress
Sleep
GetModuleHandleA

user32

GetWindowRect
GetWindowTextA
GetWindowTextLengthA
GetWindowTextW
GetWindowThreadProcessId
InvalidateRect
IsCharAlphaA
IsCharAlphaNumericW
IsCharUpperA
IsDialogMessageA
IsWindow
IsWindowVisible
KillTimer
LoadAcceleratorsA
LoadCursorA
LoadIconA
LoadMenuA
LoadStringA
MessageBeep
MessageBoxA
MonitorFromWindow
MoveWindow
OpenDesktopA
PostMessageA
PostQuitMessage
PtInRect
RealGetWindowClass
RegisterClassA
ReleaseDC
RemoveMenu
ScreenToClient
SendIMEMessageExW
SendMessageA
SendMessageTimeoutA
SetCapture
SetClassWord
SetDlgItemInt
SetFocus
SetForegroundWindow
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
ShowWindowAsync
SystemParametersInfoA
ToUnicode
TrackPopupMenu
TranslateMessage
UnregisterClassA
VkKeyScanA
wsprintfA
wvsprintfA
GetWindowModuleFileNameW
GetWindowLongA
GetWindowDC
GetWindow
GetTabbedTextExtentA
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetSubMenu
GetShellWindow
GetScrollInfo
GetPropA
GetParent
GetMessageExtraInfo
GetMessageA
GetMenuState
GetMenuInfo
GetListBoxInfo
GetIconInfo
GetDlgItemTextA
GetDesktopWindow
GetDC
GetCursorPos
GetClipboardFormatNameW
GetClientRect
GetClassNameA
FindWindowA
ExitWindowsEx
EqualRect
EnumWindows
EnumChildWindows
EndPaint
EnableWindow
EnableMenuItem
DispatchMessageA
DestroyWindow
DestroyMenu
DefWindowProcA
DdeUninitialize
DdeQueryConvInfo
DdeKeepStringHandle
DdeImpersonateClient
DdeCreateStringHandleA
DdeCreateDataHandle
CreateWindowExA
CreateDialogParamA
CreateDialogIndirectParamA
CreateAcceleratorTableW
ClientToScreen
ChildWindowFromPointEx
CheckMenuItem
CharUpperW
CharUpperA
CharPrevW
CharPrevExA
CharPrevA
CharLowerW
CharLowerA
CallWindowProcA
BroadcastSystemMessageW
BeginPaint
AnyPopup
AnimateWindow
DrawMenuBar
GetClipboardSequenceNumber
IsGUIThread
CloseDesktop
GetActiveWindow
DestroyCursor
GetDialogBaseUnits
IsCharUpperW
VkKeyScanW
IsCharAlphaW
GetMessagePos
CountClipboardFormats
CreateMenu
CopyIcon
GetKBCodePage
LoadIconW
GetForegroundWindow

gdi32

GdiAlphaBlend
GdiConsoleTextOut
GdiEntry12
GdiEntry16
GdiFullscreenControl
GdiGetLocalFont
GdiPlayJournal
GdiRealizationInfo
GetCharABCWidthsI
GetCharABCWidthsW
GetDCBrushColor
GetFontAssocStatus
GetGlyphOutlineW
GetMetaFileW
GetOutlineTextMetricsA
GetROP2
GetRandomRgn
GetStockObject
FillPath
GetTextCharset
GetTextExtentExPointI
GetTextMetricsA
LineDDA
Polyline
RectInRegion
SelectObject
SetArcDirection
SetBkColor
SetTextAlign
EudcLoadLinkW
EngUnicodeToMultiByteN
EngStretchBltROP
EngLoadModule
EngFreeModule
BeginPath
EngDeletePath
EngCreatePalette
EngBitBlt
EndPath
BRUSHOBJ_ulGetBrushColor
Arc
AddFontMemResourceEx
CreateMetaFileA
DeleteDC
GetPolyFillMode
GdiFlush
GetStringBitmapA
GdiGetBatchLimit
CreatePatternBrush
CreateHalftonePalette
CloseMetaFile
DeleteObject
AbortPath
CloseEnhMetaFile

advapi32

RegEnumValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyW
RegCreateKeyExA
RegCloseKey
GetUserNameA
RegQueryValueExW

shell32

ShellExecuteA
SHLoadInProc
SHGetSettings
SHGetFolderPathA
SHCreateDirectoryExW
DragQueryFileW

ole32

CLSIDFromProgID
CoCreateInstance
CoFreeUnusedLibraries
CoGetMalloc
CoInitialize
CoRegisterClassObject
CoRevokeClassObject
CoTaskMemAlloc
StgOpenStorage
StgCreateDocfile
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree

shlwapi

StrRChrIW
StrCmpNIA
StrChrW
StrChrIW
StrChrA

comctl32

CreateToolbarEx

msvcrt

_wcsnicmp
wcsncmp
wcsncat
wcslen
wcscpy
wcscmp
wcschr
wcscat
toupper
tolower
strstr
strncpy
strncmp
strlen
_EH_prolog
_XcptFilter
__CxxFrameHandler
__dllonexit
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_controlfp
_except_handler3
_exit
_initterm
_onexit
_purecall
_strcmpi
_stricmp
_wcsicmp
_wstrdate
atoi
atol
bsearch
calloc
exit
free
isspace
iswalpha
iswspace
iswupper
malloc
memcmp
memcpy
memmove
memset
qsort
realloc
strcat
strcpy

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be92c640affcfa9535687b1354a32586

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

comctl32

msvcrt

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 132KB - Virtual size: 132KB

.data Size: 512B - Virtual size: 320B

.rsrc Size: 4KB - Virtual size: 324KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 132KB - Virtual size: 132KB

.data
Size: 512B - Virtual size: 320B

.rsrc
Size: 4KB - Virtual size: 324KB