dfed85d52ebc5ea8be4edbb0fd2b1bc5_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

dfed85d52ebc5ea8be4edbb0fd2b1bc5_JaffaCakes118
Size

369KB
MD5

dfed85d52ebc5ea8be4edbb0fd2b1bc5
SHA1

eb390709d52cab2aef63329cbb4beffbcb9eca71
SHA256

f5243af6980d6b65342ef0bed961450c07cc81567a12142b8406f17300c80a85
SHA512

3a92d7d873fcb63d823ac3fa944644f3f2315c7346ca26b6f22877ff074077e2210b55cbcc4ee25f49968d1e2d104d9ce0ffda7a2afb1c8f6e54fa6853a73d8c
SSDEEP

6144:GGInVHmhv2gCSkpapiqnl+CH1Ey+FofBbDCAORPXfuhtK8Xhe/46HNGmYN6nfy15:G7ncOgCSkpUiql+CmyuohGA4atK8x0Ar

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfed85d52ebc5ea8be4edbb0fd2b1bc5_JaffaCakes118

Files

dfed85d52ebc5ea8be4edbb0fd2b1bc5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c9b78de2e463cefc2d69dd1fb6426727

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_vsnwprintf
free
_initterm
malloc
wcscmp
_except_handler3
_adjust_fdiv

gdi32

GetObjectW
SelectObject
CreateCompatibleDC
LineTo
MoveToEx
SetStretchBltMode
SetBrushOrgEx
RealizePalette
SelectPalette
CreateHalftonePalette
GetDeviceCaps
StretchBlt
CreateFontIndirectW
GetTextExtentPoint32W
SetLayout
SetTextColor
SetBkMode
CreateDIBSection
CreateSolidBrush
CreateCompatibleBitmap
BitBlt
CreatePen
Rectangle
Arc
Ellipse
CreatePenIndirect
SetBkColor
SetROP2
GetStockObject
DeleteDC
DeleteObject

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GlobalAlloc
GlobalUnlock
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
FreeLibraryAndExitThread
GetCurrentThreadId
Sleep
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
WaitForSingleObject
DuplicateHandle
ResetEvent
GetModuleFileNameW
GetWindowsDirectoryW
CreateMutexW
OpenFileMappingW
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
ReleaseMutex
CompareStringW
lstrcmpW
MoveFileW
CopyFileW
DeleteFileW
lstrcpynW
MulDiv
LoadLibraryW
GetProcAddress
FreeLibrary
GetTickCount
QueryPerformanceCounter
CreateEventW
CloseHandle
CreateThread
SetEvent
IsBadWritePtr
MultiByteToWideChar
lstrcpyW
lstrlenW
GetLastError
GetModuleHandleW
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
GlobalLock
LocalFree
LocalAlloc
ExitThread

ole32

CoUnmarshalInterface
CLSIDFromString
ReleaseStgMedium
CoCreateInstance
CoTaskMemFree
FreePropVariantArray
CoTaskMemAlloc
PropVariantClear
CoAllowSetForegroundWindow
CoUninitialize
CreateStreamOnHGlobal
CoInitialize

oleaut32

SysFreeString
SysAllocString
SysAllocStringLen

shell32

SHGetFileInfoW
DragQueryFileW

shlwapi

StrFormatByteSizeW
wnsprintfA

user32

CharNextW
MessageBeep
SetWindowsHookExW
LoadAcceleratorsW
CopyAcceleratorTableW
CreateAcceleratorTableW
KillTimer
DestroyAcceleratorTable
UnhookWindowsHookEx
MessageBoxW
PostThreadMessageW
CallNextHookEx
IsChild
TranslateAcceleratorW
LoadIconW
GetKeyState
OffsetRect
IntersectRect
CopyRect
MoveWindow
IsRectEmpty
IsWindowVisible
PostMessageW
RegisterWindowMessageW
FrameRect
GetWindowTextLengthW
GetWindowTextW
DrawFocusRect
GetCursorPos
GetCapture
ReleaseCapture
SetCapture
PtInRect
SendNotifyMessageW
SetTimer
MapWindowPoints
GetParent
SetDlgItemInt
ShowWindow
SetWindowTextW
GetFocus
SetFocus
GetSystemMetrics
LoadImageW
SetDlgItemTextW
SendDlgItemMessageW
CharUpperBuffW
EnableWindow
LoadCursorW
SetCursor
GetDlgItem
SendMessageW
EndDialog
GetWindowRect
GetDC
ReleaseDC
CopyIcon
RegisterClassW
GetWindowLongW
SetWindowLongW
DefWindowProcW
IsWindowEnabled
InvalidateRect
UpdateWindow
BeginPaint
GetClientRect
GetSysColorBrush
FillRect
EndPaint
DestroyIcon
LoadStringW
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
MapDialogRect
PostQuitMessage
DestroyWindow
EnableMenuItem
GetSystemMenu
SetForegroundWindow
DispatchMessageW
CharUpperW
TranslateMessage
IsDialogMessageW
GetMessageW
DialogBoxParamW
GetDlgItemInt
RegisterClipboardFormatW
PeekMessageW
MsgWaitForMultipleObjects
wsprintfW
GetIconInfo
FindWindowExW
SetWindowPos
GetMonitorInfoW
MonitorFromRect
GetDesktopWindow
IsWindow
DrawTextExW
InflateRect
DrawIconEx
GetSysColor
MonitorFromWindow
GetClassNameW
DrawTextW
WinHelpW
GetLastActivePopup
CreateWindowExW
CreateDialogParamW
RegisterClassExW

winmm

PlaySoundW

gdiplus

GdipCloneImage
GdipDrawImageRectRectI
GdipGetImageGraphicsContext
GdipSetImageAttributesThreshold
GdipSetImageAttributesColorMatrix
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageDecoders
GdipGetImageDecodersSize
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipAlloc
GdipFree

msimg32

AlphaBlend

advapi32

RegEnumKeyExW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey

Sections

.text
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.AAAA
Size: 338KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9b78de2e463cefc2d69dd1fb6426727

Headers

File Characteristics

Imports

msvcrt

gdi32

kernel32

ole32

oleaut32

shell32

shlwapi

user32

winmm

gdiplus

msimg32

advapi32

Sections

.text Size: 15KB - Virtual size: 16KB

.rdata Size: 7KB - Virtual size: 8KB

.data Size: 2KB - Virtual size: 4KB

.AAAA Size: 338KB - Virtual size: 400KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 15KB - Virtual size: 16KB

.rdata
Size: 7KB - Virtual size: 8KB

.data
Size: 2KB - Virtual size: 4KB

.AAAA
Size: 338KB - Virtual size: 400KB

.rsrc
Size: 4KB - Virtual size: 3KB