f9e3f15a41b6dd4ab25d95a957abee6a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f9e3f15a41b6dd4ab25d95a957abee6a_JaffaCakes118
Size

1.2MB
MD5

f9e3f15a41b6dd4ab25d95a957abee6a
SHA1

794e1343af82ac981e77a5c086ed9e6c25ecfbc1
SHA256

5916b8c0c0668d106ebfcad97eb5c90687c873a732eb61f00e5d7033f8fd85ed
SHA512

1668c15a607080703aded55eb0b1460c1d27ad441cff1fce3d0720c24a1e359f96ce72d64c7c69778a63f1d158fd30d7a731fe61bda297a81ad267f86ba9c2c6
SSDEEP

12288:VHsl/AEzRy7dHsMKtBKwY9Y4UDivaKG1HaCAD1rtm9qSymkA97k:Vb8RGHHUD5Ha0kSOA9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9e3f15a41b6dd4ab25d95a957abee6a_JaffaCakes118

Files

f9e3f15a41b6dd4ab25d95a957abee6a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

548419dfde24251978e08e7293e8aa3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Choose\talk\level\Meant\afraid\west\locateAbove.pdb

Imports

kernel32

SetLastError
InterlockedIncrement
InterlockedDecrement
FreeLibrary
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
lstrcmpA
GlobalFlags
GlobalGetAtomNameA
GetThreadLocale
GetCurrentThreadId
GetVersionExA
lstrcmpW
LoadLibraryA
GlobalFree
GlobalFindAtomA
GlobalAddAtomA
GetLocaleInfoA
GetOEMCP
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
RtlUnwind
VirtualAlloc
RaiseException
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoA
HeapSize
VirtualFree
HeapDestroy
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetACP
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetLocaleInfoW
SetStdHandle
GetConsoleOutputCP
WriteConsoleW
GlobalAlloc
GlobalLock
GlobalUnlock
LocalFree
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
GetWindowsDirectoryA
CloseHandle
GetModuleHandleA
GetProcAddress
GetProcessHeap
ExitProcess
CreateThread
WaitForSingleObject
GetSystemDirectoryA
GetStdHandle
WriteConsoleA
Sleep
HeapCreate
HeapAlloc
HeapFree
CreateFileA
GetLocalTime
HeapCompact
FindFirstChangeNotificationA
FindNextChangeNotification
FindCloseChangeNotification
GetModuleFileNameA
GetFileTime
GetCurrentProcessId
GetCPInfo
FormatMessageA
SetSystemPowerState
GetCommandLineA
GetSystemTimeAsFileTime
lstrlenA
WideCharToMultiByte
CompareStringA
MultiByteToWideChar
InterlockedExchange
GetVersion
GlobalDeleteAtom

user32

GrayStringA
DestroyMenu
PostQuitMessage
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
SetWindowPos
IsWindow
DrawTextExA
GetDlgItem
SetWindowsHookExA
CallNextHookEx
DispatchMessageA
GetKeyState
PeekMessageA
ValidateRect
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
GetWindowTextA
SetWindowTextA
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
UnhookWinEvent
AppendMenuA
GetActiveWindow
IsDialogMessageA
SetWindowLongA
PostMessageA
TrackPopupMenu
FillRect
IsDlgButtonChecked
SetDlgItemTextA
DestroyIcon
GetKeyNameTextA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
LoadIconA
WinHelpA
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
UnhookWindowsHookEx
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
UnregisterClassA

gdi32

Escape
DeleteDC
DeleteObject
SetWindowExtEx
GetClipBox
SetTextColor
SetBkColor
SaveDC
RestoreDC
ScaleWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetMapMode
GetStockObject
SetViewportExtEx
SetViewportOrgEx
CreateBitmap
GetDeviceCaps
ExtTextOutA
TextOutA
RectVisible
PtVisible
SelectObject

winspool.drv

DocumentPropertiesA
OpenPrinterA
DeletePrinterConnectionA
ClosePrinter

ole32

CoInitialize
CoRevokeClassObject
CoUninitialize

shlwapi

PathFindFileNameA
PathCompactPathExA
PathGetDriveNumberA
wnsprintfA
AssocQueryStringA
PathIsUNCA

avifil32

AVIFileOpenA
AVIFileReadData
AVIBuildFilterA
AVIFileInit

oleacc

CreateStdAccessibleObject
LresultFromObject
GetOleaccVersionInfo
AccessibleObjectFromPoint

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 212KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 976KB - Virtual size: 973KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

548419dfde24251978e08e7293e8aa3f

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

winspool.drv

ole32

shlwapi

avifil32

oleacc

oleaut32

Sections

.text Size: 212KB - Virtual size: 208KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 12KB - Virtual size: 75KB

.rsrc Size: 976KB - Virtual size: 973KB

.text
Size: 212KB - Virtual size: 208KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 12KB - Virtual size: 75KB

.rsrc
Size: 976KB - Virtual size: 973KB