ffb9fe2973f14b35bb86394008500285_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ffb9fe2973f14b35bb86394008500285_JaffaCakes118
Size

170KB
MD5

ffb9fe2973f14b35bb86394008500285
SHA1

fe8ea34949f6bad844b4e4c4f79861e52f3822d0
SHA256

0d521bbdfcb556978d5f15d45c4559adf224af9f0f16c2ef56fd80727c88a3a9
SHA512

6fa104fd23e57e836f2794102ab12e89e6b3f753a6ac52aa29b568ec1fde1a74eff908ae85cec3eb1b345fc8f4a1c0a088b406c3180fe0a8913ffd26c78f3813
SSDEEP

3072:Zx7n9S2CFmFCzYwwl3sfJEWLmJPnum4+VyIiBJPxq+wGW4hg/Ah:D9SlwiYwRfJXC8+VyBTJBhg/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffb9fe2973f14b35bb86394008500285_JaffaCakes118

Files

ffb9fe2973f14b35bb86394008500285_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bf906809e2eccd0872d0030b42e9522e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
GetTickCount
InterlockedIncrement
GlobalUnlock
GetACP
ReplaceFileW
GetProcAddress
GetVersionExA
FileTimeToSystemTime
GetVersionExW
FileTimeToLocalFileTime
CreateThread
SetFileAttributesW
GetCurrentThreadId
Sleep
SetThreadPriority
InterlockedDecrement
FindFirstChangeNotificationW
GetVersion
MultiByteToWideChar
lstrcpyW
lstrcpynW
QueryPerformanceCounter
WideCharToMultiByte
GetProcessId
GlobalFree
FindFirstFileW
FindCloseChangeNotification
GetLocaleInfoW
LockResource
GetModuleHandleW
EnumResourceTypesA
GetModuleFileNameW
GetPrivateProfileStringW
DeleteCriticalSection
FreeLibrary
LoadLibraryA
GlobalLock
GetFileAttributesW
GetThreadLocale
LoadLibraryW
LocalFree
ResumeThread
DeleteFileW
lstrlenW
FindNextChangeNotification
GetPrivateProfileIntW
ExitProcess
GetCurrentDirectoryW
InterlockedExchange
GlobalSize
GetSystemTimeAsFileTime
GetLastError
MulDiv
GlobalAlloc
FindClose
WritePrivateProfileStringW
LoadResource
CloseHandle
WaitForSingleObject
FindResourceW
LoadLibraryExW
lstrcmpW
GetCurrentProcessId

comctl32

ImageList_Add
InitCommonControlsEx
PropertySheetW
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_LoadImageW
ImageList_GetImageCount
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_Destroy
ImageList_Draw

advapi32

RegSetValueExW
RegEnumKeyExW
RegOpenKeyW
RegOpenKeyExW
RegCreateKeyExW
RegEnumValueW
RegQueryValueExW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey

shell32

SHGetDesktopFolder
SHGetPathFromIDListW
SHGetMalloc
DragAcceptFiles
SHGetFileInfoW
ShellExecuteW
SHGetSpecialFolderLocation
ShellExecuteExW
SHBrowseForFolderW
SHAppBarMessage
Shell_NotifyIconW

ole32

DoDragDrop
CoCreateInstance
OleRun

user32

SetCursor
SetWindowsHookExW
GetClassLongW
GetMenuItemID
mouse_event
EnumChildWindows
IsWindow
ShowCaret
GetWindowRect
LoadImageW
LoadIconW
LoadMenuW
ScreenToClient
SetWindowRgn
DeleteMenu
SetCursorPos
OpenClipboard
RegisterWindowMessageW
DestroyCaret
GetKeyNameTextW
MapVirtualKeyExW
GetScrollPos
GetLastActivePopup
DrawIcon
IsZoomed
FindWindowW
MapVirtualKeyW
GetCapture
MapWindowPoints
LockWindowUpdate
GetCursor
EnableMenuItem
SetScrollPos
GetNextDlgTabItem
AppendMenuW
SetWindowLongW
GetDlgItem
SetMenuDefaultItem
PtInRect
RegisterClipboardFormatW
DrawAnimatedRects
ReleaseDC
ShowScrollBar
LoadCursorW
OffsetRect
IsClipboardFormatAvailable
BringWindowToTop
GetDCEx
DrawTextExW
GetKeyboardLayout
EmptyClipboard
DestroyIcon
DrawEdge
GetCursorPos
SendMessageW
GetDlgCtrlID
DrawFrameControl
CopyRect
EndDeferWindowPos
SetRect
GetSystemMenu
GetMessageW
IsIconic
GetKeyState
DrawStateW
InvalidateRect
IntersectRect
GetSystemMetrics
GetScrollInfo
ShowWindow
CopyAcceleratorTableW
GetMessagePos
GetClassNameW
RedrawWindow
SetFocus
DestroyAcceleratorTable
WindowFromPoint
GetSubMenu
DrawIconEx
GetMenuDefaultItem
GetMenuState
DrawFocusRect
PostMessageW
SetClipboardData
CloseClipboard
SetParent
LoadBitmapW
SetRectEmpty
DestroyWindow
SetWindowPos
SystemParametersInfoW
TabbedTextOutW
SetTimer
BeginDeferWindowPos
CheckMenuItem
TranslateMessage
MessageBeep
EnableScrollBar
GetMenuItemCount
CallNextHookEx
GetDesktopWindow
GetFocus
GetForegroundWindow
UnhookWindowsHookEx
wsprintfW
SetScrollInfo
PeekMessageW
IsRectEmpty
EnableWindow
UnionRect
GetMenuItemInfoW
GetDC
CopyIcon
SetActiveWindow
CreatePopupMenu
GetIconInfo
SetForegroundWindow
UpdateWindow
SetCapture
CreateAcceleratorTableW
DispatchMessageW
DrawTextW
TrackPopupMenu
DragDetect
GetMenu
GetSysColor
ClientToScreen
GetActiveWindow
KillTimer
GetWindowLongW
GetTabbedTextExtentW
FillRect
SetMenu
DestroyCursor
GetClipboardData
EqualRect
GetParent
DeferWindowPos
GrayStringW
CreateIconIndirect
InsertMenuW
HideCaret
IsCharLowerW
CallWindowProcW
CloseWindow
IsChild
MoveWindow
CreateCaret
GetWindowTextW
GetSysColorBrush
GetClientRect
GetWindow
InflateRect
ReleaseCapture
IsWindowVisible
GetWindowPlacement
SetCaretPos
SystemParametersInfoA
IsMenu
DestroyMenu

gdiplus

GdipCreateHBITMAPFromBitmap
GdipCloneImage

gdi32

SetPixelV
GetBkColor
Rectangle
GetTextExtentPoint32W
CreateDIBSection

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bf906809e2eccd0872d0030b42e9522e

Headers

File Characteristics

Imports

kernel32

comctl32

advapi32

shell32

ole32

user32

gdiplus

gdi32

Sections

.text Size: 96KB - Virtual size: 95KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 65KB - Virtual size: 65KB

.tls Size: 1024B - Virtual size: 240KB

.text
Size: 96KB - Virtual size: 95KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 65KB - Virtual size: 65KB

.tls
Size: 1024B - Virtual size: 240KB