db341a2a1ac1fef5dd008e927b76a385_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

db341a2a1ac1fef5dd008e927b76a385_JaffaCakes118
Size

453KB
MD5

db341a2a1ac1fef5dd008e927b76a385
SHA1

1c44299e6939f5cb36f391c5b1f63a20798e4f04
SHA256

f31efed2db6477cfeb53040ce746929ecdac255bfd114097fd90d6588861ddd3
SHA512

79d4a85067a788e3e6e9c51b40d3c2a3816f109c0f72923e609581899e33529edd1c8c2a650f78bc4833188c3fcec247901a29c82713d04f08644d1fcf5fc2c1
SSDEEP

6144:QtOnuk9hUnwmh86MVV0a3iBQP8hnhVmPp1Kpt4gwAQ5PwOJZsWmXl1n5o:3nLHyRMVV0M8hh4Pbgjb5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db341a2a1ac1fef5dd008e927b76a385_JaffaCakes118

Files

db341a2a1ac1fef5dd008e927b76a385_JaffaCakes118
.exe windows:5 windows x64 arch:x64

f83b3bb81c8485adcd6dde54b7e780b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

netapi32

DsGetDcNameW
NetApiBufferFree
DsRoleGetPrimaryDomainInformation
DsRoleFreeMemory

mpr

WNetOpenEnumW
WNetEnumResourceW

kernel32

GetConsoleMode
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetConsoleCP
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
GetProcessHeap
LCMapStringW
FlsAlloc
FlsFree
SizeofResource
FlsSetValue
FlsGetValue
DecodePointer
EncodePointer
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapSize
HeapQueryInformation
ExitProcess
Sleep
HeapReAlloc
HeapFree
HeapAlloc
RtlPcToFileHeader
RaiseException
RtlUnwindEx
RtlLookupFunctionEntry
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalFlags
WritePrivateProfileStringW
GlobalAddAtomW
GlobalFindAtomW
LoadLibraryA
GetVersionExA
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GetCurrentProcessId
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
LoadLibraryW
lstrcmpW
SetErrorMode
GetProcAddress
GetModuleFileNameW
lstrlenA
lstrcmpA
WideCharToMultiByte
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenW
SetLastError
GetCommandLineW
GetModuleHandleW
GetVersionExW
CreateFileW
FindFirstFileW
FindNextFileW
FindClose
LoadLibraryExW
FormatMessageW
FreeLibrary
GetCurrentProcess
CloseHandle
GetLastError
LocalAlloc
LocalFree
MultiByteToWideChar
FindResourceW
LoadResource
LockResource

user32

DestroyMenu
ShowWindow
SetWindowTextW
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMessageW
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
LoadIconW
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongPtrW
SetPropW
GetPropW
RemovePropW
GetFocus
IsWindow
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetForegroundWindow
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrW
SetWindowLongPtrW
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowPos
SystemParametersInfoA
IsIconic
GetClassNameW
GetMenuState
PostQuitMessage
PostMessageW
MessageBoxW
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetParent
GetWindowLongW
SendMessageW
GetWindowThreadProcessId
UnhookWindowsHookEx
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
GetWindowPlacement
GetWindowRect
GetWindow
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowTextW
LoadCursorW
RegisterWindowMessageW

gdi32

TextOutW
GetStockObject
CreateBitmap
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
SetTextColor
RectVisible
PtVisible
DeleteObject
GetClipBox
SetMapMode
GetDeviceCaps
SaveDC
RestoreDC
SetBkColor
ExtTextOutW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegSetValueExW
RegEnumKeyW
RegDeleteKeyW
RegQueryValueW
RegOpenKeyW
RegQueryValueExW
GetSecurityDescriptorControl
ConvertSecurityDescriptorToStringSecurityDescriptorW
SetEntriesInAclW
ConvertStringSecurityDescriptorToSecurityDescriptorW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorSacl
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorControl
SetKernelObjectSecurity
SetNamedSecurityInfoW
GetKernelObjectSecurity
GetNamedSecurityInfoW
MakeAbsoluteSD
IsValidSecurityDescriptor
IsValidSid
ConvertStringSidToSidW
LookupAccountNameW
MapGenericMask
LookupAccountSidW
ConvertSidToStringSidW
RegEnumKeyExW
RegConnectRegistryW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
EqualSid
CopySid
IsValidAcl
GetAce
DeleteAce
GetAclInformation
GetLengthSid
InitializeAcl
AddAccessAllowedAce
AddAce

shlwapi

PathFindFileNameW
PathFindExtensionW

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 289KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�
Size: 21KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f83b3bb81c8485adcd6dde54b7e780b3

Headers

DLL Characteristics

File Characteristics

Imports

netapi32

mpr

kernel32

user32

gdi32

winspool.drv

advapi32

shlwapi

oleaut32

Sections

.text Size: 289KB - Virtual size: 289KB

.rdata Size: 105KB - Virtual size: 104KB

.data Size: 11KB - Virtual size: 34KB

.pdata Size: 19KB - Virtual size: 18KB

� Size: 21KB - Virtual size: 25KB

.text
Size: 289KB - Virtual size: 289KB

.rdata
Size: 105KB - Virtual size: 104KB

.data
Size: 11KB - Virtual size: 34KB

.pdata
Size: 19KB - Virtual size: 18KB

�
Size: 21KB - Virtual size: 25KB