dd8d69268df0e290ed3aaa0daaca3486_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

dd8d69268df0e290ed3aaa0daaca3486_JaffaCakes118
Size

132KB
MD5

dd8d69268df0e290ed3aaa0daaca3486
SHA1

96b3ee34ee1e3419958c982e5e577eef1639a3ca
SHA256

a21d2a28bd07162faf40c79c48d2fe218eb08dbd321ed0c7e5350e6bb53607a6
SHA512

0e534e922be3044869ede1c1a121fcd0818ca6b3a84d06c02ce22fbf328800cf148244616d978769ec5c03c20e65106c0ac251e43aae3cb65aab3692caa5e410
SSDEEP

3072:8tutuKBtlG4gM5joHt+6XmdQsUXz7UVz7bxl0y4kWo5UIc:88uKBPG4F5jo+VU/Ubxr4Lo5U7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd8d69268df0e290ed3aaa0daaca3486_JaffaCakes118

Files

dd8d69268df0e290ed3aaa0daaca3486_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8984288d79e70019270ad748b43dc9fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFileInfoA
DragQueryFileA
ShellAboutA
DragAcceptFiles
DragFinish

winmm

waveOutReset
waveInGetPosition
waveOutGetPosition
waveInStart
mmioCreateChunk
mmioGetInfo
mmioOpenA
mmioDescend
mmioSeek
mmioRead
waveInReset
mmioAscend
waveOutPause
waveOutRestart
waveOutOpen
waveOutClose
waveInClose
waveInPrepareHeader
waveOutPrepareHeader
waveInAddBuffer
waveOutWrite
waveInUnprepareHeader
waveOutUnprepareHeader
waveInOpen
mmioClose
waveInGetNumDevs
waveOutGetNumDevs
mmioWrite

user32

DrawIcon
SetFocus
DrawMenuBar
DeleteMenu
SetForegroundWindow
ModifyMenuA
IsWindow
GetMenu
DialogBoxParamA
IsIconic
MoveWindow
GetWindowRect
EndDialog
DrawFocusRect
RemovePropA
CopyRect
RegisterClipboardFormatA
wsprintfW
SetPropA
SetWindowLongA
MapWindowPoints
GetPropA
SetRect
DrawEdge
GetFocus
GetActiveWindow
SetDlgItemTextA
InvalidateRect
CreateWindowExA
EnableWindow
KillTimer
GetAsyncKeyState
PeekMessageA
SetTimer
ShowWindow
InflateRect
DefWindowProcA
GetDC
ReleaseDC
BeginPaint
EndPaint
GetWindowTextA
GetDlgCtrlID
RegisterWindowMessageA
GetDlgItem
LoadIconA
DefDlgProcA
RegisterClassA
LoadAcceleratorsA
SetClassLongA
SetWindowTextA
CharNextA
CharPrevA
MessageBeep
GetWindowLongA
wvsprintfA
MessageBoxA
wsprintfA
OpenClipboard
GetClipboardData
LoadCursorA
CloseClipboard
SetCursor
PostQuitMessage
DestroyWindow
GetClientRect
FillRect
GetSysColor
LoadStringA
ClientToScreen
ScreenToClient
GetWindow
GetKeyState
EnableMenuItem
IsClipboardFormatAvailable
IsWindowEnabled
UpdateWindow
SendMessageA
WinHelpA
IsWindowVisible
SetActiveWindow
PostMessageA
GetSystemMetrics
CreateDialogParamA
GetMessageA
TranslateAcceleratorA
IsDialogMessageA
TranslateMessage
DispatchMessageA
CallWindowProcA
CreateMenu
DestroyMenu
SetWindowPos
RemoveMenu
GetParent
RedrawWindow
GetMenuStringA
InsertMenuA
GetSubMenu

gdi32

SelectPalette
CloseMetaFile
GetTextExtentPointA
SetBkColor
RealizePalette
DeleteObject
SetBrushOrgEx
CreateSolidBrush
ExtTextOutA
SelectObject
GetStockObject
SetTextColor
BitBlt
PatBlt
DeleteDC
CreateBitmap
CreateCompatibleDC
SetMapMode
CreateHatchBrush
DeleteMetaFile
SetWindowExtEx
StretchBlt
CreateCompatibleBitmap
GetDIBits
GetDeviceCaps
SetWindowOrgEx
CreateMetaFileA
GetObjectA

kernel32

VirtualFree
VirtualAlloc
GetCPInfo
GetLastError
GetFileType
GetACP
GetModuleFileNameA
GetStdHandle
GetOEMCP
ExitProcess
GetVersion
GetEnvironmentStrings
UnhandledExceptionFilter
GetModuleHandleA
GetTempFileNameA
lstrcpynA
RtlZeroMemory
MultiByteToWideChar
FreeResource
RtlUnwind
CreateThread
GlobalMemoryStatus
GetLocaleInfoA
GetCommandLineA
lstrlenA
lstrcatA
DeleteFileA
GetFullPathNameA
CreateFileA
CloseHandle
lstrcpyA
GlobalAlloc
GlobalLock
GlobalSize
LoadLibraryA
FreeLibrary
lstrcmpiA
MulDiv
lstrcmpA
GlobalHandle
GlobalUnlock
GlobalFree
GetProcAddress
LockResource
LoadResource
FindResourceA
RtlMoveMemory
WideCharToMultiByte
GlobalReAlloc
GetStartupInfoA
WaitForSingleObject

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
RegSetValueExA
RegQueryValueExA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

comctl32

PropertySheetA
ord17
ord8

ole32

WriteClassStg
OleNoteObjectVisible
StgCreateDocfile
OleSave
CreateFileMoniker
OleInitialize
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterClassObject
CoLockObjectExternal
OleUninitialize
CoCreateInstance
OleBuildVersion
CLSIDFromString
OleDraw
WriteClassStm
CreateStreamOnHGlobal
ReleaseStgMedium
CreateDataAdviseHolder
WriteFmtUserTypeStg
StgOpenStorage
CreateOleAdviseHolder
CoGetMalloc
GetRunningObjectTable
CreateBindCtx
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleCreateMenuDescriptor
OleDestroyMenuDescriptor

msacm32

acmFormatSuggest
acmStreamClose
acmStreamOpen
acmFormatDetailsA
acmFormatTagDetailsA
acmFormatChooseA
acmMetrics
acmStreamSize
acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.osok
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8984288d79e70019270ad748b43dc9fe

Headers

File Characteristics

Imports

shell32

winmm

user32

gdi32

kernel32

advapi32

comdlg32

comctl32

ole32

msacm32

Sections

.text Size: 64KB - Virtual size: 63KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 6KB

.idata Size: 8KB - Virtual size: 6KB

.rsrc Size: 16KB - Virtual size: 15KB

.osok Size: 32KB - Virtual size: 32KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 6KB

.idata
Size: 8KB - Virtual size: 6KB

.rsrc
Size: 16KB - Virtual size: 15KB

.osok
Size: 32KB - Virtual size: 32KB