dfb4eb8bd70bff62d3af73ecaa65ab66_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

dfb4eb8bd70bff62d3af73ecaa65ab66_JaffaCakes118
Size

206KB
MD5

dfb4eb8bd70bff62d3af73ecaa65ab66
SHA1

6c6ad0830e29abcb5a82151d31cb22bd7375dbdc
SHA256

49f111d8204025cc70bfe223e2d42544bb52247027fd81d019640284c075ab7d
SHA512

0b9ea95db214df8e722e178d18bd2858437340c4cf16d7a45bc14b4ffb61b05e393d6b1eac2248dbe683699376f3e300db114b435f2d4a7a3dff7c79cb7344d9
SSDEEP

3072:OxWx9S4okFxovjl2A0vpxXCNSJQjOw1vRuqfFjtFYwIhJ2toNh2/GUl99:Ou3vL6joAAxLaHNvsJ2tweh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfb4eb8bd70bff62d3af73ecaa65ab66_JaffaCakes118

Files

dfb4eb8bd70bff62d3af73ecaa65ab66_JaffaCakes118
.exe .ps1 windows:5 windows x86 arch:x86 polyglot

5630ec6f87ea61ebd871b3e84cd15c90

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeMountPointA
FindFirstVolumeMountPointW
FlushFileBuffers
FlushInstructionCache
GetACP
GetAtomNameA
GetComputerNameA
GetComputerNameExW
GetConsoleAliasW
GetConsoleCursorInfo
GetConsoleFontSize
GetConsoleScreenBufferInfo
GetCurrencyFormatW
GetDriveTypeW
GetEnvironmentStrings
GetFileAttributesExW
GetFullPathNameA
GetLastError
GetLocalTime
GetLogicalDrives
GetModuleFileNameW
GetNumberOfConsoleInputEvents
GetPrivateProfileSectionNamesA
GetProcessPriorityBoost
GetStartupInfoA
GetStringTypeExA
GetTimeZoneInformation
GetUserDefaultLCID
GetVolumeNameForVolumeMountPointA
GlobalFree
GlobalMemoryStatus
GlobalUnlock
Heap32ListNext
Heap32Next
HeapAlloc
InterlockedExchangeAdd
InterlockedIncrement
IsBadReadPtr
EnumSystemCodePagesA
IsValidCodePage
IsValidLanguageGroup
LocalFileTimeToFileTime
MoveFileWithProgressA
MoveFileWithProgressW
MulDiv
OpenSemaphoreW
QueryDosDeviceA
RaiseException
ReadConsoleA
ReadConsoleOutputW
ResetEvent
RtlFillMemory
RtlMoveMemory
SetCalendarInfoA
SetConsoleCP
SetConsoleScreenBufferSize
SetConsoleTitleW
SetLocaleInfoW
SetProcessWorkingSetSize
SetThreadContext
SetThreadLocale
SetTimeZoneInformation
SleepEx
UpdateResourceW
WaitForMultipleObjects
WaitForMultipleObjectsEx
WaitNamedPipeA
WriteConsoleA
WriteConsoleOutputAttribute
WriteConsoleOutputCharacterW
WriteFileGather
WriteProfileSectionW
_hread
lstrcmp
lstrcpyA
EnumLanguageGroupLocalesA
EnumDateFormatsA
EnumCalendarInfoA
EnterCriticalSection
CreateFileW
DosDateTimeToFileTime
DisableThreadLibraryCalls
DeleteVolumeMountPointA
DeleteCriticalSection
DefineDosDeviceA
DebugActiveProcess
CreateNamedPipeA
CreateHardLinkW
CreateHardLinkA
CreateConsoleScreenBuffer
ClearCommError
ClearCommBreak
VirtualAlloc
GetWindowsDirectoryW
lstrlenW
lstrcpyW
IsBadStringPtrW

user32

wvsprintfW
WindowFromPoint
WindowFromDC
WaitMessage
UnloadKeyboardLayout
UnionRect
TranslateAccelerator
TrackPopupMenuEx
ToUnicodeEx
ToAsciiEx
SetWindowTextA
LoadIconA
AnimateWindow
AppendMenuA
AttachThreadInput
ChangeDisplaySettingsExW
CharNextExA
CharPrevW
CharToOemW
CharUpperW
CheckDlgButton
ClipCursor
CopyRect
DdeAddData
DdeDisconnect
DdeEnableCallback
DdeUninitialize
DlgDirSelectExW
EmptyClipboard
EnableScrollBar
EnableWindow
EndDeferWindowPos
EnumClipboardFormats
EnumDesktopsA
FindWindowExW
GetClassInfoExA
GetClassLongA
GetClipboardOwner
GetCursorInfo
GetDlgItemTextW
GetGuiResources
GetInputState
GetKeyNameTextW
GetKeyState
GetKeyboardType
GetMenuItemInfoA
GetMenuState
GetMessagePos
GetParent
GetScrollInfo
GetScrollRange
GetSystemMetrics
GetTabbedTextExtentA
GetWindowContextHelpId
GrayStringA
IMPGetIMEW
IMPQueryIMEA
InsertMenuItemW
InsertMenuW
InvalidateRgn
IsCharLowerA
IsClipboardFormatAvailable
IsDialogMessageW
IsRectEmpty
LoadCursorA
LoadImageA
LoadKeyboardLayoutW
LoadMenuIndirectA
LookupIconIdFromDirectoryEx
MapWindowPoints
MessageBoxIndirectA
MessageBoxW
MonitorFromRect
NotifyWinEvent
OemToCharA
OpenClipboard
RealChildWindowFromPoint
ReleaseCapture
RemovePropA
ReplyMessage
ScrollWindow
SendDlgItemMessageW
SendIMEMessageExA
SendMessageA
SendNotifyMessageA
SetCaretPos
SetClassLongW
SetCursor
SetForegroundWindow
SetKeyboardState
SetMenu
SetMenuDefaultItem
SetMessageExtraInfo
SetRect
SetSysColors

comdlg32

ReplaceTextW
ReplaceTextA
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
ChooseColorA
ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
GetFileTitleA
GetFileTitleW
GetOpenFileNameA
GetOpenFileNameW
GetSaveFileNameA

advapi32

RegOpenKeyExA

ole32

WdtpInterfacePointer_UserFree
UtConvertDvtd32toDvtd16
UpdateDCOMSettings
StringFromIID
StringFromCLSID
StgSetTimes
StgPropertyLengthAsVariant
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateStorageEx
SetConvertStg
STGMEDIUM_UserSize
SNB_UserSize
ReleaseStgMedium
RegisterDragDrop
ReadOleStg
ProgIDFromCLSID
OleUninitialize
OleRegEnumVerbs
OleRegEnumFormatEtc
OleQueryLinkFromData
OleMetafilePictFromIconAndLabel
OleInitialize
OleCreateLinkFromDataEx
OleCreateLinkEx
OleCreateLink
OleCreateFromFileEx
OleCreateFromDataEx
OleCreateFromData
MkParseDisplayName
IsEqualGUID
HkOleRegisterObject
HWND_UserSize
HWND_UserFree
HPALETTE_UserFree
HMENU_UserFree
HICON_UserSize
HGLOBAL_UserMarshal
HBRUSH_UserSize
HBITMAP_UserMarshal
HACCEL_UserFree
GetHGlobalFromStream
GetHGlobalFromILockBytes
GetClassFile
DoDragDrop
DllGetClassObjectWOW
CreateStreamOnHGlobal
CreateOleAdviseHolder
CreateILockBytesOnHGlobal
CreateGenericComposite
CreateDataAdviseHolder
CreateAntiMoniker
CoWaitForMultipleHandles
CoUnmarshalHresult
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoSuspendClassObjects
CoSetProxyBlanket
CoRevokeMallocSpy
CoRevokeClassObject
CoRevertToSelf
CoResumeClassObjects
CoReleaseMarshalData
CoRegisterMallocSpy
CoMarshalHresult
CoLoadLibrary
CoIsOle1Class
CoIsHandlerConnected
CoInstall
CoGetObjectContext
CoGetClassVersion
CoGetCallContext
CoFreeAllLibraries
CoDosDateTimeToFileTime
CoDisconnectObject
CoDisableCallCancellation
CoCopyProxy
CoAddRefServerProcess
CLSIDFromString
CLSIDFromProgID
CLIPFORMAT_UserFree
BindMoniker
StringFromGUID2

oleaut32

VarI1FromUI4
VarI1FromUI2
VarI1FromI4
VarI1FromDec
VarI1FromCy
VarFix
VarDecFromUI2
VarDecFromStr
VarDecFromCy
VarDecFromBool
VarDecFix
VarDateFromUI4
VarDateFromUI2
VarDateFromR4
VarDateFromI2
VarDateFromDisp
VarDateFromDec
VarCySu
VarCyRound
VarCyFromUI2
VarCyFromStr
VarCyFromR4
VarCyFromI4
VarCyFromDisp
VarCyFromDec
VarCyFromDate
VarCyFromBool
VarCyFix
VarCmp
VarBstrFromUI4
VarBstrFromUI2
VarBstrFromUI1
VarBstrFromI1
VarBoolFromUI1
VarBoolFromI4
VarBoolFromDec
VarBoolFromDate
VarAnd
VARIANT_UserSize
VARIANT_UserMarshal
SysStringLen
SysAllocStringByteLen
SafeArrayUnlock
SafeArrayGetIID
SafeArrayGetElemsize
SafeArrayDestroy
SafeArrayCreateVectorEx
SafeArrayCreateVector
SafeArrayCreateEx
SafeArrayCopyData
OleLoadPictureFileEx
OleLoadPictureFile
OleCreatePropertyFrameIndirect
OleCreatePropertyFrame
OleCreateFontIndirect
LoadTypeLibEx
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_Unmarshal
LPSAFEARRAY_Size
DispInvoke
DispCallFunc
ClearCustData
VarI2FromBool
VarI2FromDisp
VarI2FromR4
VarI2FromR8
VarI4FromUI4
VarIdiv
VarR4FromI1
VarR4FromI4
VarR8FromCy
VarR8FromDate
VarR8FromDec
VarR8Round
VarUI1FromCy
VarUI1FromDisp
VarUI1FromStr
VarUI2FromCy
VarUI2FromDate
VarUI2FromI4
VarUI4FromR4
VariantCopy
VariantTimeToSystemTime
VarUI2FromDisp

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5630ec6f87ea61ebd871b3e84cd15c90

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

ole32

oleaut32

Sections

.text Size: 200KB - Virtual size: 199KB

.data Size: 512B - Virtual size: 188B

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 200KB - Virtual size: 199KB

.data
Size: 512B - Virtual size: 188B

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 2KB - Virtual size: 2KB