041c7fcb283eacea860a1f4c583137ff_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

041c7fcb283eacea860a1f4c583137ff_JaffaCakes118
Size

212KB
MD5

041c7fcb283eacea860a1f4c583137ff
SHA1

a0f42a187899bce0231071035c1fd354b344e5f4
SHA256

c5b610afe369521ae2ec3dab49ea156823c30cd8258eb8bede68273655390958
SHA512

50d4946e06250fef5ecaed766e8282cb39462f2903d0a2abb1d72b0cc106a7a52ae5e34d331cad6f1af1fec5489d8b5713c5ed90f5463b9817dfb90f56cf841b
SSDEEP

3072:6glApRU88HTAEW5bmXN1U/pBQAIUg19D9oQoz2lOUFyJZlec2LCIUiqG6jVx2dmI:1o8zksJUgf9u2l+lgLCb5SZY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
041c7fcb283eacea860a1f4c583137ff_JaffaCakes118

Files

041c7fcb283eacea860a1f4c583137ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e1c45aeac048c1dfcae5b480a0b02c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

cfgmgr32

CM_Reenumerate_DevNode
CM_Locate_DevNodeA

setupapi

SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupCloseInfFile
SetupGetSourceFileLocationA
SetupOpenInfFileA

shlwapi

SHDeleteKeyA

kernel32

GetOEMCP
CreateFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetFullPathNameA
GlobalFlags
GetCPInfo
RtlUnwind
ExitProcess
GetStartupInfoA
HeapAlloc
HeapFree
RaiseException
GetACP
HeapSize
HeapReAlloc
LCMapStringA
LCMapStringW
GetStdHandle
UnhandledExceptionFilter
GetProcessVersion
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
VirtualQuery
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
GetCurrentDirectoryA
GetSystemDirectoryA
GetLastError
GetWindowsDirectoryA
GetDriveTypeA
RemoveDirectoryA
DeleteFileA
SetFileAttributesA
SetLastError
CreateDirectoryA
GetFileAttributesA
FindClose
FindFirstFileA
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcatA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpiA
GlobalFindAtomA
GlobalDeleteAtom
FreeEnvironmentStringsA
GetEnvironmentStrings
GetProcessHeap
GetShortPathNameA
GetCurrentThreadId
GetModuleFileNameA
LocalReAlloc
GetVersion
TlsGetValue
GlobalReAlloc
TlsSetValue
GlobalAlloc
GlobalHandle
GlobalLock
TlsFree
GlobalUnlock
SetCurrentDirectoryA
GlobalFree
TlsAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcpynA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcmpA
FindNextFileA
lstrcpyA
InterlockedDecrement
InterlockedIncrement
Sleep
LoadLibraryExA
FormatMessageA
GetCommandLineA
GetLocaleInfoA
GetLogicalDriveStringsA
CreateProcessA
WaitForSingleObject
CloseHandle
GetModuleHandleA
GetCurrentThread
GetCurrentProcess
GetPrivateProfileIntA
GetPrivateProfileStringA
GetPrivateProfileSectionA
GetVersionExA
GetLocalTime
LocalFree
LocalAlloc
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
CopyFileA
FreeEnvironmentStringsW
GetEnvironmentStringsW

user32

PostMessageA
LoadIconA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
SetFocus
AdjustWindowRectEx
MapWindowPoints
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
GetSysColor
GetFocus
GetNextDlgTabItem
GetKeyState
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SendMessageA
UnhookWindowsHookEx
LoadStringA
ExitWindowsEx
EnableWindow
KillTimer
SetTimer
GetMessageA
DestroyWindow
CreateDialogParamA
SetWindowTextA
GetDlgItem
ShowWindow
PeekMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
SetDlgItemTextA
wsprintfA
DefWindowProcA
GetClientRect
CopyRect
GetWindowTextA
GetDlgCtrlID
IsIconic
SystemParametersInfoA
CallNextHookEx
EnableMenuItem

gdi32

GetClipBox
CreateBitmap
SetTextColor
SetBkColor
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
RectVisible
TextOutA
PtVisible
Escape
ExtTextOutA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

GetTokenInformation
AllocateAndInitializeSid
OpenProcessToken
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
AdjustTokenPrivileges
EqualSid
FreeSid
RegEnumValueA
RegDeleteKeyA
RegDeleteValueA
OpenThreadToken
LookupPrivilegeValueA
RegSetKeySecurity
RegCreateKeyA
RegEnumKeyA
RegEnumKeyExA
RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey

comctl32

ord17

Sections

.text
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zoqcbfh
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6e1c45aeac048c1dfcae5b480a0b02c2

Headers

File Characteristics

Imports

version

cfgmgr32

setupapi

shlwapi

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

Sections

.text Size: 132KB - Virtual size: 129KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 16KB - Virtual size: 29KB

.rsrc Size: 36KB - Virtual size: 36KB

zoqcbfh Size: - Virtual size: 4KB

.text
Size: 132KB - Virtual size: 129KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 16KB - Virtual size: 29KB

.rsrc
Size: 36KB - Virtual size: 36KB

zoqcbfh
Size: - Virtual size: 4KB