dff0940a39675fe15fdf0dfbf6fa1549_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

dff0940a39675fe15fdf0dfbf6fa1549_JaffaCakes118
Size

411KB
MD5

dff0940a39675fe15fdf0dfbf6fa1549
SHA1

e85713e8074d02a21cfa9b8ace7723e9540774cb
SHA256

49ffc90ff02fb02e0d9401bcee07583533aef33f84eb028a8ff0e996f1a1e1a6
SHA512

d9b7307f0ea3abbb5bbd2e01e55060c5623ff279a33746e79d98606163dc5172912c2718d6aec0aadd61e75712116f06ba65c80b70f1f97574d442765205da39
SSDEEP

6144:DvZojeATcNGmaTePGEysp5BBQXQkhB9q6KoFx5a4NcmQRulVQF2EgoS2UFMeu:TZyeAToaaPG3spfiB1KMKGEgoXovu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dff0940a39675fe15fdf0dfbf6fa1549_JaffaCakes118

Files

dff0940a39675fe15fdf0dfbf6fa1549_JaffaCakes118
.exe windows:5 windows x86 arch:x86

eb95cb145d7ba6f84578f43dceeb1543

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSectionAndSpinCount
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentDirectoryA
ExitProcess
HeapSize
SetFilePointer
ReadFile
FlushFileBuffers
GetConsoleCP
WriteFile
GetFileType
SetHandleCount
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
SetLastError
WriteConsoleA
SetStdHandle
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
WideCharToMultiByte
LCMapStringA
GetStartupInfoA
GetCommandLineA
CreateThread
GetCurrentThreadId
ExitThread
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
GetFullPathNameA
GetDriveTypeA
HeapAlloc
RtlUnwind
HeapFree
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
TlsFree
GetConsoleOutputCP
CreateFileW
GetLocaleInfoW
SetEndOfFile
GetProcessHeap
MultiByteToWideChar
CreateIoCompletionPort
CreateFileA
GetFileInformationByHandle
GetFileTime
MulDiv
CloseHandle
Sleep
InterlockedDecrement
LocalLock
LocalUnlock
LocalAlloc
InterlockedIncrement
SetFileAttributesW
SetFileAttributesA
FindNextFileA
FindClose
RemoveDirectoryA
lstrcpynA
GetTickCount
LoadLibraryW
GetProcAddress
lstrcpyA
GlobalLock
GlobalUnlock
GetModuleFileNameA
GetCurrentThread
SetThreadPriority
GetThreadPriority
GetModuleHandleW
GetStdHandle
GetLocalTime
GetDateFormatW
WriteConsoleW
LoadLibraryA
FormatMessageA
LocalFree
GetLastError
FindFirstFileA
lstrlenA
lstrcmpiA
GetModuleHandleA
TlsSetValue

user32

SetScrollInfo
GetSystemMetrics
SetLayeredWindowAttributes
SetWindowLongA
GetWindowLongA
GetWindowRect
SystemParametersInfoA
CreateAcceleratorTableA
DdeUninitialize
DdeDisconnect
DdeCreateDataHandle
DdeFreeStringHandle
ReleaseDC
GetDC
SendMessageA
DestroyWindow
InvalidateRect
EndPaint
SetWindowPos
GetForegroundWindow
DdeCreateStringHandleA
DdeInitializeA
CreateWindowExA
LoadCursorA
GetMenu
GetMenuItemCount
DefWindowProcA
PostQuitMessage
DrawTextExW
GetClientRect
GetScrollInfo
ScrollWindow
UpdateWindow
GetWindow
GetParent
LoadIconA
GetSysColor
SetWindowTextA
DispatchMessageW
GetMessageW
IsWindow
GetKeyNameTextA
DrawTextA
GetWindowDC
GetSysColorBrush
SetDlgItemTextA
RegisterClassA
LoadMenuA
CreateDialogParamA
GetMenuCheckMarkDimensions
GetWindowTextLengthA
DefRawInputProc
DefDlgProcA
DdeUnaccessData
GetDialogBaseUnits
EnableWindow
BeginPaint
DdeConnect
GetSubMenu
LoadAcceleratorsA
GetMessageA
TranslateMDISysAccel
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
DestroyMenu
GetWindowWord
KillTimer
SetWindowWord
SetTimer
DefMDIChildProcA
GetDlgItem
DialogBoxParamA
DrawMenuBar
GetIconInfo
FillRect
DrawIconEx
DestroyIcon
SetRect
PeekMessageA
MsgWaitForMultipleObjects
GetWindowTextA
GetDesktopWindow
ShowWindow
RedrawWindow
CallNextHookEx
GetActiveWindow
GetWindowThreadProcessId
GetKeyboardLayout
GetKeyboardState
MapVirtualKeyExA
ToUnicodeEx
ScreenToClient
DrawFocusRect
CopyRect
InflateRect
MessageBoxA
AttachThreadInput
wsprintfA
MoveWindow
IsDlgButtonChecked

gdi32

CreateCompatibleBitmap
DeleteDC
ExcludeClipRect
SelectClipRgn
ExtTextOutA
EnumFontFamiliesExA
CreatePen
MoveToEx
LineTo
CreateRectRgn
GetClipRgn
ExtSelectClipRgn
CreateCompatibleDC
RoundRect
Ellipse
Pie
Polygon
SetMapMode
SetWindowExtEx
SetViewportOrgEx
CreateSolidBrush
GetObjectA
GetCurrentObject
Rectangle
UnrealizeObject
BitBlt
GetTextExtentPoint32A
TranslateCharsetInfo
SetTextAlign
TextOutA
GetTextMetricsA
DeleteObject
SetTextColor
SetBkMode
SelectObject
GetRgnBox
GetStockObject
CreateFontIndirectA

winspool.drv

GetPrinterA
OpenPrinterA
ConnectToPrinterDlg
DeleteMonitorA
DeletePortA

comdlg32

ChooseColorA

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExA

shell32

SHFileOperationA
SHFileOperationW
DragQueryFileA

ole32

ReleaseStgMedium
CoUninitialize
CoCreateInstance
CoInitialize
CoCreateGuid
StringFromCLSID

ws2_32

closesocket
WSASocketA
shutdown

netapi32

NetShareGetInfo

msacm32

acmDriverOpen
acmDriverEnum
acmFormatChooseA
acmMetrics

winmm

mixerGetID
mixerGetLineControlsW
mixerGetDevCapsW
waveOutMessage

shlwapi

PathFindExtensionA
StrChrA
PathIsDirectoryA
PathFindFileNameA
UrlUnescapeA

comctl32

ord337
ord413
PropertySheetA
ord17
CreatePropertySheetPageA

gdiplus

GdipAddPathString
GdipDeleteFontFamily
GdipDeletePath
GdipCreatePath
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeletePen
GdipCreateFontFamilyFromName
GdipCreatePen1

imm32

ImmAssociateContext

winhttp

WinHttpSendRequest

wtsapi32

WTSEnumerateProcessesA
WTSQuerySessionInformationA

uxtheme

DrawThemeBackground
CloseThemeData

tapi32

lineProxyResponse

Sections

.text
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb95cb145d7ba6f84578f43dceeb1543

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

ws2_32

netapi32

msacm32

winmm

shlwapi

comctl32

gdiplus

imm32

winhttp

wtsapi32

uxtheme

tapi32

Sections

.text Size: 179KB - Virtual size: 178KB

.rdata Size: 51KB - Virtual size: 50KB

.data Size: 7KB - Virtual size: 14KB

.rsrc Size: 173KB - Virtual size: 172KB

.text
Size: 179KB - Virtual size: 178KB

.rdata
Size: 51KB - Virtual size: 50KB

.data
Size: 7KB - Virtual size: 14KB

.rsrc
Size: 173KB - Virtual size: 172KB