0451ee8677bff6caa61ad11678661391_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0451ee8677bff6caa61ad11678661391_JaffaCakes118
Size

1.1MB
MD5

0451ee8677bff6caa61ad11678661391
SHA1

02d5b91745929b496abd7b6b03daac7e6d7a3fce
SHA256

0e2e7f0005f81ba44ba0d7f421a20488a243461dc88e908165b3719e458268cf
SHA512

31df31a76455459e8cdd85326030178d7c96e763adcf214a51e382149072c4d56a8343626cea52136b8c4276283e8bfe49dad513cdeec6b61f604c9bc3146106
SSDEEP

24576:Ryi4SUITWa+zB4jzp4/KCWvhTOexuHJuTY1NCGtSa1:Ryi4ShKh+jy/QvhTOeGkTY1HtSa1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0451ee8677bff6caa61ad11678661391_JaffaCakes118

Files

0451ee8677bff6caa61ad11678661391_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88cbe02a2bd1a61ef188965d491a449f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleGetIconOfFile
SetConvertStg
OleIsRunning
CoUninitialize
CoCopyProxy
OleConvertOLESTREAMToIStorage
OleQueryLinkFromData
CoInitializeEx
CoQueryClientBlanket
CreateClassMoniker
UtConvertDvtd32toDvtd16
CoTaskMemAlloc
CoResumeClassObjects
CreatePointerMoniker
CoCreateInstance
GetClassFile
OleCreateLinkToFileEx
OleCreateFromFileEx
CreateILockBytesOnHGlobal
StgCreateDocfile
CoGetCallerTID
StgSetTimes
StgCreateDocfileOnILockBytes
ReadClassStm
CoGetCurrentProcess
SetDocumentBitStg
CoGetCallContext
PropVariantCopy
WriteFmtUserTypeStg
CoCreateGuid
GetHGlobalFromStream
CoInitialize
CoInitializeSecurity
RegisterDragDrop
DllDebugObjectRPCHook
CoRegisterPSClsid
OleGetAutoConvert
CoGetInstanceFromIStorage
CoSetProxyBlanket
CoRevokeClassObject
CoFileTimeNow
CoQueryAuthenticationServices
UpdateDCOMSettings
OleCreateFromFile
OleCreateStaticFromData
IIDFromString
CoLoadLibrary
CreateStreamOnHGlobal
CoGetInstanceFromFile
FreePropVariantArray
OleSetAutoConvert
OleConvertOLESTREAMToIStorageEx
OleNoteObjectVisible
CoFreeUnusedLibraries
OleGetIconOfClass
OleSetMenuDescriptor

user32

SetKeyboardState
GetUserObjectInformationW
CharToOemW
RegisterClassExA
CreateIcon
CascadeChildWindows
CreateDialogIndirectParamW
SetUserObjectInformationW
EnumDesktopsW
DdeInitializeA
GetGuiResources
ScreenToClient
CreateDesktopA
GetDesktopWindow
GetCursorInfo
DefWindowProcA
DrawIcon
CopyAcceleratorTableA
DdeFreeDataHandle
EndMenu
GetClassLongA
SetDlgItemTextW
DispatchMessageA
GetMessageW
WindowFromPoint
LoadIconA
LoadImageA
GetKeyboardLayoutList
PeekMessageW
ExcludeUpdateRgn
TranslateMessage
GetWindowTextLengthA
WinHelpW
IsDlgButtonChecked
SetMenuItemBitmaps
GetCapture
GetMenuContextHelpId
UnhookWindowsHookEx
SendMessageCallbackA
GetScrollPos
EnumDisplaySettingsA
ChangeDisplaySettingsA
TabbedTextOutA
DlgDirListComboBoxW
GetMenuItemID
WINNLSGetIMEHotkey
DestroyWindow
EnumWindowStationsA
DlgDirSelectComboBoxExW
EnumThreadWindows
EnumChildWindows
InsertMenuW
InflateRect
CallMsgFilterA
GetKeyboardType
SetPropA
SetWindowPos
LookupIconIdFromDirectory
UpdateWindow
UnregisterClassA

kernel32

GetSystemTimeAdjustment
GetDiskFreeSpaceA
GetCommConfig
OpenProcess
LCMapStringW
CreateSemaphoreA
GetProcessHeaps
GetProfileIntW
FindFirstFileW
GetPrivateProfileStringA
FileTimeToDosDateTime
GetPriorityClass
SetTapePosition
CreateProcessW
GetShortPathNameA
WritePrivateProfileStringW
GetDiskFreeSpaceExA
GlobalFindAtomW
SetThreadExecutionState
WriteConsoleW
CreateNamedPipeA
lstrcmpiW
Thread32Next
EnumCalendarInfoExW
SetThreadAffinityMask
Heap32First
ReadFileEx
CreateMutexA
MapViewOfFile
SetLocalTime
SetDefaultCommConfigW
GetLastError
CreateMutexW
LoadLibraryExA
GetNumberFormatW
SetConsoleMode
LCMapStringA
GetConsoleTitleA
CreateThread
SetCommBreak
GetStringTypeExA
GetCommandLineA
MoveFileExA
GetSystemDirectoryA
VirtualAlloc
GetWindowsDirectoryW
CreateFiber
GetSystemDirectoryW
GetCalendarInfoW
InitializeCriticalSectionAndSpinCount
SetProcessPriorityBoost
GetDefaultCommConfigW
EndUpdateResourceA
DebugActiveProcess
GetSystemTime
TerminateProcess
VirtualProtect
GetTapePosition
IsBadHugeWritePtr
WriteConsoleOutputCharacterA
GetLogicalDriveStringsA
GetFileTime
GetCurrentThreadId
GetProcAddress
GetProcessTimes
FindNextFileW
WriteConsoleInputA
GetConsoleTitleW
ReadConsoleOutputAttribute
EraseTape
FindResourceExA
EnumDateFormatsExW
GetConsoleCursorInfo

advapi32

RegSetKeySecurity
BuildExplicitAccessWithNameW
GetKernelObjectSecurity
InitializeAcl
GetSecurityInfoExA
ClearEventLogA
CryptReleaseContext
CryptImportKey
RegEnumValueW
QueryServiceStatus
GetSecurityDescriptorDacl
RegUnLoadKeyA
LogonUserA
RegQueryValueExA
GetAuditedPermissionsFromAclA
GetUserNameW
ConvertSecurityDescriptorToAccessW
RegOpenKeyA
CryptGetDefaultProviderA
CryptContextAddRef
QueryServiceLockStatusW
CryptDeriveKey
GetServiceKeyNameW
GetSecurityDescriptorControl
StartServiceCtrlDispatcherA
CreateServiceA
GetSidIdentifierAuthority
RegCloseKey
QueryServiceObjectSecurity
GetAce
LockServiceDatabase
AdjustTokenPrivileges
RevertToSelf
RegReplaceKeyA
GetOldestEventLogRecord
ReadEventLogW
TrusteeAccessToObjectW
RegQueryInfoKeyA
ConvertSecurityDescriptorToAccessA
ChangeServiceConfigA
GetTrusteeTypeW
CryptSetProviderW
CryptDuplicateKey
ConvertSecurityDescriptorToAccessNamedW
StartServiceA
BackupEventLogA
OpenProcessToken
GetSidLengthRequired
ControlService
LookupPrivilegeNameA
RegRestoreKeyA
ObjectOpenAuditAlarmA
EnumServicesStatusA
RegSaveKeyW
ImpersonateSelf
CryptCreateHash
SetPrivateObjectSecurity
SetFileSecurityA
CryptGetUserKey

shlwapi

StrRStrIA
PathIsDirectoryEmptyW
PathUnquoteSpacesA
StrToIntExW
StrStrIW
PathIsUNCServerShareW
SHDeleteKeyA
UrlCombineA
SHRegDeleteEmptyUSKeyW
PathRemoveFileSpecA
StrRChrW
StrFromTimeIntervalW
StrStrW
SHDeleteKeyW
StrPBrkW
UrlApplySchemeW
SHSetValueA
PathMakeSystemFolderA
StrChrIW
StrCatBuffA
PathRelativePathToA
PathIsUNCServerA
PathAppendA
PathIsPrefixA
StrCatBuffW
StrFormatByteSize64A
StrIsIntlEqualA
PathRemoveBlanksA
UrlIsNoHistoryA
SHDeleteEmptyKeyA
SHSetThreadRef
StrCmpNIA
PathFileExistsA
PathIsUNCServerW
StrRStrIW
PathIsNetworkPathA
SHRegOpenUSKeyA
StrDupA
PathMatchSpecW
PathMakeSystemFolderW
SHRegDeleteEmptyUSKeyA
PathFindOnPathW
PathUnmakeSystemFolderA
PathAddBackslashA
PathRemoveBackslashW
PathIsLFNFileSpecW
PathGetCharTypeA
PathQuoteSpacesW
PathIsRelativeA
wnsprintfW
SHRegQueryInfoUSKeyA
SHRegGetUSValueW
PathIsURLA
StrFormatByteSizeW

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

88cbe02a2bd1a61ef188965d491a449f

Headers

DLL Characteristics

File Characteristics

Imports

ole32

user32

kernel32

advapi32

shlwapi

Sections

.text Size: 58KB - Virtual size: 58KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 12KB

.text
Size: 58KB - Virtual size: 58KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 12KB