f66a5c637b0c1ab53cb049ffc39a7a5c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f66a5c637b0c1ab53cb049ffc39a7a5c_JaffaCakes118
Size

1.4MB
MD5

f66a5c637b0c1ab53cb049ffc39a7a5c
SHA1

2a23f8a689658a362b7a88b278da02a279c4b63a
SHA256

b50861feea5b05622e47b3c9d9c3e4f2db4b1b6115babe083d0f705e5b477c37
SHA512

3dcde9d0fcd771d778685a44eb3be38cca6f65ae4e95cd939bd7038fcf0f42c16d1b2ec45a5d157a11dc25186c7bae822590d1e52f166808fb9ff57f0520d026
SSDEEP

24576:XXb9W0YKkUopfDS6caFnDsKQ7a6YOnGW6oNfS:QlesD3DsKQ7a0nf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f66a5c637b0c1ab53cb049ffc39a7a5c_JaffaCakes118

Files

f66a5c637b0c1ab53cb049ffc39a7a5c_JaffaCakes118
.exe windows:6 windows x86 arch:x86

45602a292e2e7a3bfffc0553eb863ed2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msacm32

acmStreamSize
acmStreamClose
acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader
acmStreamOpen

winmm

mixerGetControlDetailsA
mixerGetNumDevs
mixerGetLineInfoW
timeBeginPeriod
mixerSetControlDetails
mixerGetDevCapsA
timeGetTime
mixerClose
mixerGetLineInfoA
mixerGetLineControlsA
timeEndPeriod
mixerOpen

shlwapi

PathStripToRootW
PathRemoveFileSpecW
PathFileExistsW

kernel32

EndUpdateResourceW
LockResource
LoadResource
FindResourceW
UpdateResourceW
GetModuleHandleW
BeginUpdateResourceW
GetFullPathNameW
WriteFile
CreateMutexW
WaitForSingleObject
CreateFileW
ReleaseMutex
GetLastError
CloseHandle
CreateThread
GetTempFileNameW
DeleteFileW
LoadLibraryW
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
GetCurrentProcess
VirtualAlloc
SetFileTime
SetThreadPriority
GetTempPathW
GetCurrentThread
LoadLibraryA
QueryPerformanceFrequency
GetSystemInfo
SystemTimeToFileTime
CreateProcessW
GetConsoleWindow
GetThreadTimes
GlobalMemoryStatus
QueryPerformanceCounter
GetTickCount
GetExitCodeProcess
GetModuleFileNameW
FreeLibrary
GetFileAttributesW
SetFileAttributesW
GetStartupInfoW
GetCurrentThreadId
GetCurrentProcessId
GetProcessHeap
ReleaseSemaphore
InitializeCriticalSection
CreateEventW
SetEvent
ResetEvent
CreateSemaphoreW
FormatMessageW
GetDiskFreeSpaceExW
LocalFree
GetModuleHandleA
WaitForMultipleObjects
DeviceIoControl
GetUserDefaultLCID
GetExitCodeThread
CreateFileMappingA
AreFileApisANSI
ResumeThread
TlsFree
GetVersion
TlsAlloc
SetThreadAffinityMask
CreateFileA
GetFileSize
SetFilePointer
TlsGetValue
MapViewOfFile
UnmapViewOfFile
WaitForSingleObjectEx
TlsSetValue
WideCharToMultiByte
Sleep
CreateEventA
ReadFile
MultiByteToWideChar
VirtualUnlock
FreeLibraryAndExitThread
QueueUserAPC
GetModuleFileNameA
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
SetThreadExecutionState
VerSetConditionMask
EnumSystemLocalesW
IsValidLocale
HeapAlloc
HeapFree
HeapReAlloc
GetConsoleCP
ReadConsoleW
GetConsoleMode
DuplicateHandle
ExitThread
SetFilePointerEx
MoveFileExW
CreatePipe
RemoveDirectoryW
SetStdHandle
CreateDirectoryW
GetFileAttributesExW
ExitProcess
WriteConsoleW
GetModuleHandleExW
GetFileType
GetStdHandle
LoadLibraryExW
RaiseException
RtlUnwind
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
SetLastError
GetCPInfo
DecodePointer
OutputDebugStringW
EncodePointer
InitializeSListHead
GetSystemTimeAsFileTime
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetEndOfFile
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
SizeofResource
FreeEnvironmentStringsW
FlushFileBuffers
GetFileSizeEx
VirtualLock
HeapSize

user32

ChangeDisplaySettingsExW
EnumDisplaySettingsW
EnumDisplaySettingsExW
EnumDisplayDevicesW
EnumDisplayMonitors
MapVirtualKeyW
GetWindowLongW
PtInRect
SetRect
ClipCursor
WindowFromPoint
ScreenToClient
ClientToScreen
SetCursor
ToUnicode
AdjustWindowRectEx
GetClientRect
RemovePropW
GetPropW
SetPropW
RedrawWindow
ReleaseDC
GetDC
SetForegroundWindow
ReleaseCapture
SetCapture
GetAsyncKeyState
GetKeyState
UnregisterDeviceNotification
RegisterDeviceNotificationW
GetRawInputDeviceList
GetRawInputDeviceInfoA
RegisterRawInputDevices
GetRawInputData
GetMonitorInfoW
SystemParametersInfoW
LoadImageW
DestroyIcon
LoadCursorW
SetCursorPos
SetWindowLongW
MessageBoxW
GetActiveWindow
GetSystemMetrics
MonitorFromWindow
SetFocus
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
IsZoomed
BringWindowToTop
IsIconic
IsWindowVisible
SetLayeredWindowAttributes
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
UnregisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
TranslateMessage
TrackMouseEvent
GetMessageTime
GetDesktopWindow
GetCursorPos
CharToOemW
SetWindowPos

gdi32

SwapBuffers
SetPixelFormat
DescribePixelFormat
ChoosePixelFormat
DeleteDC
CreateDCW
DeleteObject
CreateRectRgn
GetDeviceCaps
SetDeviceGammaRamp

advapi32

RegSetValueExW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegCloseKey
RegCreateKeyExW

shell32

ShellExecuteW
ord165
SHBrowseForFolderW
DragAcceptFiles
DragFinish
DragQueryPoint
DragQueryFileW
SHGetFolderPathW
SHGetPathFromIDListW

ole32

CoUninitialize
CoCreateInstance
CoInitializeEx
CoTaskMemFree
CoInitialize
CLSIDFromString
PropVariantClear

Sections

.text
Size: 656KB - Virtual size: 656KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 360KB - Virtual size: 359KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 137KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 198KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45602a292e2e7a3bfffc0553eb863ed2

Headers

DLL Characteristics

File Characteristics

Imports

msacm32

winmm

shlwapi

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 656KB - Virtual size: 656KB

.rdata Size: 360KB - Virtual size: 359KB

.data Size: 137KB - Virtual size: 362KB

.rsrc Size: 198KB - Virtual size: 198KB

.reloc Size: 29KB - Virtual size: 28KB

.text
Size: 656KB - Virtual size: 656KB

.rdata
Size: 360KB - Virtual size: 359KB

.data
Size: 137KB - Virtual size: 362KB

.rsrc
Size: 198KB - Virtual size: 198KB

.reloc
Size: 29KB - Virtual size: 28KB