ffd1e89679ded2bfd3e65205aaf6a403_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ffd1e89679ded2bfd3e65205aaf6a403_JaffaCakes118
Size

623KB
MD5

ffd1e89679ded2bfd3e65205aaf6a403
SHA1

8b2cd072044d0b03a60f2402c3ae57e7d192f706
SHA256

c6348e90b3bebc823bc3ed426cecc49155c5d87d3417102fa8e3fe390413152d
SHA512

bf87f3fd21e64b7f8ff8666e3f20659b64b70f3601052fd8eeee5cd73fa54a9bacc81b8b5a8633e5cbf081ee171e67cefa141486fe7914fad0931331e70613d4
SSDEEP

12288:LAjbJV+wWpew+DmSeKx//j5jYjm7/EuQPxsjCAnAGLUTiqrVD:LNwWpj+DmSeKx/j5jYjEs3POj/A3TiY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffd1e89679ded2bfd3e65205aaf6a403_JaffaCakes118

Files

ffd1e89679ded2bfd3e65205aaf6a403_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1a28d97710e6dd5fbdee9f93a2b2351a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathW
SHBrowseForFolderA

kernel32

GetExitCodeThread
GetLocaleInfoW
GetConsoleMode
SetFilePointer
GetEnvironmentStrings
LoadLibraryA
CloseHandle
FoldStringA
GetSystemTimeAsFileTime
GetLongPathNameW
GetNamedPipeHandleStateA
FreeEnvironmentStringsW
QueryPerformanceCounter
SetEnvironmentVariableA
RtlUnwind
VirtualFree
SetTimeZoneInformation
GetFileAttributesExA
GetStartupInfoA
CreateFileW
FlushFileBuffers
WritePrivateProfileStringA
WideCharToMultiByte
VirtualFreeEx
VirtualAlloc
SetConsoleTitleA
TlsGetValue
EnterCriticalSection
CreateMutexA
WriteConsoleW
lstrcpyW
IsValidCodePage
CopyFileA
HeapSize
GetTimeZoneInformation
LocalFlags
GetFileType
TlsSetValue
SetLastError
GetProcessShutdownParameters
GetProcAddress
GetStringTypeExA
EnumResourceTypesW
GetOEMCP
ReadConsoleW
GetEnvironmentStringsW
HeapCreate
lstrcmpiW
GetUserDefaultLCID
lstrcpyA
CompareStringW
AddAtomW
HeapAlloc
CreateWaitableTimerW
ExpandEnvironmentStringsW
SetStdHandle
RtlFillMemory
SetFileTime
GetModuleHandleA
GetDiskFreeSpaceW
GetCommandLineA
CreateSemaphoreA
LoadResource
HeapDestroy
FindFirstFileExW
ReadFile
WriteFile
ExitProcess
EnumSystemLocalesA
UnhandledExceptionFilter
GetVersionExA
GetCurrentProcessId
GetCurrentThread
SetUnhandledExceptionFilter
InterlockedDecrement
VirtualProtect
GlobalLock
WriteConsoleInputA
TerminateProcess
WriteFileEx
IsValidLocale
GetStringTypeA
SetCriticalSectionSpinCount
GetDateFormatA
VirtualQuery
ResumeThread
SetThreadPriority
ReadConsoleOutputAttribute
WriteConsoleOutputA
GetACP
WritePrivateProfileStructW
TlsAlloc
SetComputerNameW
TlsFree
CreateDirectoryW
OpenFile
DeleteFileA
LCMapStringA
OpenMutexA
GetTickCount
GetModuleFileNameA
EnumDateFormatsExW
GlobalFindAtomW
HeapFree
LCMapStringW
SetComputerNameA
SetWaitableTimer
GetCPInfo
LeaveCriticalSection
OpenFileMappingA
GetStdHandle
FreeEnvironmentStringsA
GetThreadLocale
GetCurrentThreadId
DeleteCriticalSection
MultiByteToWideChar
GetVersionExW
CreateFileMappingA
EnumTimeFormatsA
CreateSemaphoreW
VirtualAllocEx
GetCurrentProcess
HeapReAlloc
GetStringTypeW
GetLastError
CompareStringA
SetHandleCount
GetCurrentDirectoryA
InitializeCriticalSection
CreateToolhelp32Snapshot
CreateThread
GetTimeFormatA
IsBadWritePtr
SetEnvironmentVariableW
InterlockedExchange
ConvertDefaultLocale
GetSystemInfo
GetLocaleInfoA

advapi32

CryptGetHashParam
CryptDestroyKey
CryptGetDefaultProviderW
RegQueryValueW
CryptSetProviderA
CryptAcquireContextW
RegOpenKeyA
RegQueryValueExW
CryptVerifySignatureA
RegLoadKeyW
CryptEnumProviderTypesW
ReportEventA
CryptEncrypt
CryptImportKey
RegOpenKeyW
CryptGetKeyParam

user32

DefWindowProcW
RegisterClassExA
DestroyWindow
DdeDisconnectList
IsCharAlphaW
MapWindowPoints
GetGUIThreadInfo
GetKBCodePage
RemovePropA
GetClipboardViewer
GetWindowTextLengthA
GetInputState
TranslateMessage
SetTimer
IsWindow
CharUpperBuffA
RegisterClassA
GetClassNameA
GetAsyncKeyState
CloseWindowStation
GetMenuState
MsgWaitForMultipleObjects
LoadCursorFromFileW
GetMessageExtraInfo
CallMsgFilterA
EnumWindowStationsW
CopyAcceleratorTableA
MessageBoxA
IsRectEmpty
GetClientRect
DdeReconnect
GetClipboardData
OemToCharW
TabbedTextOutA
CreateMDIWindowA
ChangeMenuW
ShowWindow
OpenClipboard
CreateWindowExA
IsIconic
DefDlgProcW
LoadCursorW
GetMenuItemInfoA
DestroyCursor
EditWndProc
CharUpperW

comctl32

CreatePropertySheetPageA
ImageList_GetDragImage
DrawInsert
ImageList_EndDrag
CreateStatusWindow
ImageList_Copy
_TrackMouseEvent
ImageList_ReplaceIcon
DrawStatusText
CreateMappedBitmap
ImageList_BeginDrag
ImageList_LoadImageW
CreateStatusWindowW
ImageList_DrawEx
CreatePropertySheetPage
ImageList_DrawIndirect
ImageList_Add
ImageList_Draw
MakeDragList
InitCommonControlsEx
ImageList_GetIcon
ImageList_SetFlags

Sections

.text
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a28d97710e6dd5fbdee9f93a2b2351a

Headers

File Characteristics

Imports

shell32

kernel32

advapi32

user32

comctl32

Sections

.text Size: 205KB - Virtual size: 204KB

.rdata Size: 252KB - Virtual size: 251KB

.data Size: 115KB - Virtual size: 140KB

.rsrc Size: 50KB - Virtual size: 49KB

.text
Size: 205KB - Virtual size: 204KB

.rdata
Size: 252KB - Virtual size: 251KB

.data
Size: 115KB - Virtual size: 140KB

.rsrc
Size: 50KB - Virtual size: 49KB