07dad2881faa7d3d8fc7e98995f42a53_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

07dad2881faa7d3d8fc7e98995f42a53_JaffaCakes118
Size

364KB
MD5

07dad2881faa7d3d8fc7e98995f42a53
SHA1

623130dc2a872a61598e7a806f5f15be70b76811
SHA256

e16140b1c9db579f7903359330013ad45fc6bc9c6954c305bfa146e291c75c81
SHA512

072811db11e5e0e2a5f6ab03b97e73d8812c340362f1553ca8ed51d5b624bc8363553dc567414a7f328d27efea1eedec6ccaf2fd00917eb0f8397e566e0f8e24
SSDEEP

6144:1+PqGbjGrLUlHoeQhld1ZXU79SecO03f4HF0kgpXLQtQUaNQq96dKGPl4Hducm78:GqGHFlHrYIsecO0wlwpXLQtQpNQqjGPU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07dad2881faa7d3d8fc7e98995f42a53_JaffaCakes118

Files

07dad2881faa7d3d8fc7e98995f42a53_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2805f9dcd615d28ae9053e106cfaa980

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LocalFlags
GetNamedPipeHandleStateA
DeleteFileW
AddAtomA
GetProfileStringW
GlobalFindAtomW
CreateEventA
GetWindowsDirectoryW
HeapValidate
SetLocaleInfoW
GetConsoleMode
GetCurrencyFormatW
GetProcessAffinityMask
LocalFileTimeToFileTime
FileTimeToLocalFileTime
PulseEvent
CreateFileMappingA
GetSystemTime
WritePrivateProfileSectionA
ExpandEnvironmentStringsW
Process32First
ClearCommBreak
BackupRead
GetShortPathNameA
LocalLock
WritePrivateProfileStringW
FormatMessageW
GetLargestConsoleWindowSize
SetLocaleInfoA
GlobalSize
SetTimeZoneInformation
GlobalGetAtomNameW
FindResourceA
SetSystemTime
ResumeThread
VirtualQuery
VirtualFree
FindNextFileA
FindResourceExW
GetVersion
UnmapViewOfFile
SetErrorMode
GetEnvironmentStrings
SetEndOfFile
GlobalWire
GetTimeFormatW
VirtualQueryEx
Heap32ListFirst
HeapCreate
GetStartupInfoA
GetNumberFormatA
WriteConsoleOutputW
GlobalDeleteAtom
GetTimeFormatA
GetHandleInformation
CommConfigDialogW
DosDateTimeToFileTime
ExitThread
GlobalAddAtomW
PeekConsoleInputW
Sleep
GetFullPathNameA
FileTimeToSystemTime
SetCommBreak
SetThreadLocale
SetFileTime
VerLanguageNameW
GlobalAddAtomA
MoveFileW
IsBadReadPtr
GetACP
IsBadCodePtr
GetThreadLocale
GetSystemPowerStatus
LockFile
CreateDirectoryExA
DuplicateHandle
GetFileAttributesExA
GetFileType
BackupWrite
SetHandleCount
GetQueuedCompletionStatus
CreateDirectoryExW
GetVersionExA

user32

CreateDialogIndirectParamW
PostThreadMessageA
DrawStateW
GetClassInfoExA
GetMenuContextHelpId
MapVirtualKeyA
CloseWindowStation
GetWindow
GetDialogBaseUnits
PostQuitMessage
CharNextW
RegisterHotKey
InvalidateRgn
IsCharAlphaA
GetMenuItemInfoW
MoveWindow
SetDebugErrorLevel
SetMessageQueue
SendMessageCallbackA
EndDeferWindowPos
OffsetRect
DragObject
ToAscii
DlgDirListComboBoxA
CharPrevA
SetCursor
GetClassNameW
AnyPopup
CreateAcceleratorTableW
ActivateKeyboardLayout
EndPaint
CreateIconFromResourceEx
MessageBoxExA
HideCaret
CharToOemW
GetForegroundWindow
GetParent
CharPrevExA
IsIconic
RegisterClipboardFormatW
GetMenuItemRect
OemKeyScan
LoadCursorA
FindWindowA
WaitForInputIdle
EqualRect
GetKBCodePage
FillRect
RegisterClassExA
PeekMessageA
SetClassLongW
IsWindowEnabled
DialogBoxParamW
GetSysColor
AppendMenuW
wsprintfA
ChangeMenuA
DispatchMessageW
BeginDeferWindowPos
GetKeyState
TranslateAcceleratorW
ShowWindow
SetClipboardViewer
ScreenToClient
CharToOemBuffA
LoadIconA
InsertMenuA
DrawTextExA
SetLastErrorEx
WindowFromDC
EnumClipboardFormats
GetWindowTextLengthW
GetSysColorBrush
CharUpperBuffW
SetDlgItemInt
EnumPropsW
GetMessageExtraInfo
RemovePropW
ModifyMenuW
HiliteMenuItem
AdjustWindowRectEx
CloseWindow
DrawAnimatedRects
DrawMenuBar
GetAsyncKeyState
GetClipboardOwner

gdi32

CreateFontIndirectA
SetSystemPaletteUse
SetViewportExtEx
GetPath
CreateDIBPatternBrush
ExtCreateRegion
FixBrushOrgEx
DescribePixelFormat
PolyTextOutA
CheckColorsInGamut
GetEnhMetaFileDescriptionA
GetGlyphOutlineA
PaintRgn
StrokePath
AngleArc
GetViewportOrgEx
GetCharABCWidthsW
ExtSelectClipRgn
RoundRect
PlgBlt
CreateRectRgn
RectInRegion
GetMetaFileBitsEx
CreateMetaFileW
UpdateColors
GetRgnBox
SetDIBColorTable
SetColorAdjustment
SetICMProfileW
StartPage
CancelDC
UpdateICMRegKeyW
OffsetClipRgn
LineTo
GetWindowExtEx
SetBoundsRect
SetWindowExtEx
GetDeviceGammaRamp
ResetDCW
GetDeviceCaps
CreateEllipticRgnIndirect
AddFontResourceA
ModifyWorldTransform
GetTextCharacterExtra
CreateColorSpaceA
SetTextCharacterExtra
SetBitmapDimensionEx
PlayEnhMetaFileRecord
InvertRgn

comdlg32

GetOpenFileNameA
FindTextA
GetSaveFileNameW

advapi32

RegGetKeySecurity
SetSecurityDescriptorDacl
SetKernelObjectSecurity
NotifyBootConfigStatus
GetTrusteeNameW
InitiateSystemShutdownA
AddAuditAccessAce
OpenThreadToken
CryptSetProviderExW
MakeAbsoluteSD
GetMultipleTrusteeOperationW
BuildSecurityDescriptorA
RegCreateKeyA
ImpersonateSelf
GetSecurityDescriptorControl
SetEntriesInAclW
CryptSignHashW
CryptImportKey
CryptVerifySignatureA
StartServiceCtrlDispatcherA
RegQueryValueA
ReportEventW
GetFileSecurityW
RegEnumKeyExA
AbortSystemShutdownW
SetNamedSecurityInfoA
EnumDependentServicesW
AreAllAccessesGranted
RegDeleteValueW
RegEnumValueA
GetMultipleTrusteeOperationA
OpenEventLogA
AccessCheck
CryptGetProvParam
RegDeleteKeyW
OpenBackupEventLogA
IsTextUnicode
CryptCreateHash
BuildImpersonateExplicitAccessWithNameW
GetAclInformation
GetUserNameW
SetSecurityDescriptorOwner
NotifyChangeEventLog
GetSecurityDescriptorSacl
OpenEventLogW
ObjectOpenAuditAlarmA
SetFileSecurityW
CreatePrivateObjectSecurity
CryptEnumProviderTypesW
LookupAccountSidA
AdjustTokenPrivileges
CryptGetUserKey

shell32

SHGetMalloc
ExtractIconExW
SHEmptyRecycleBinW
DoEnvironmentSubstA
DragFinish
DragQueryFileW
SHGetPathFromIDListA
SHGetDesktopFolder
SHFileOperationW
ShellExecuteA
ord179

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3

Sections

.text
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ev6m5tb3
Size: 44KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wkqwi44f
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2805f9dcd615d28ae9053e106cfaa980

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

msvcrt

Sections

.text Size: 280KB - Virtual size: 280KB

.rdata Size: 8KB - Virtual size: 12KB

.data Size: 26KB - Virtual size: 28KB

ev6m5tb3 Size: 44KB - Virtual size: 48KB

wkqwi44f Size: 4KB - Virtual size: 4KB

.text
Size: 280KB - Virtual size: 280KB

.rdata
Size: 8KB - Virtual size: 12KB

.data
Size: 26KB - Virtual size: 28KB

ev6m5tb3
Size: 44KB - Virtual size: 48KB

wkqwi44f
Size: 4KB - Virtual size: 4KB