08c7890c20ca35f435edfc13f16df121_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

08c7890c20ca35f435edfc13f16df121_JaffaCakes118
Size

637KB
MD5

08c7890c20ca35f435edfc13f16df121
SHA1

b10152e008cc0138d77d53f1d88aec1c658608bf
SHA256

a363872a9742e402250ad3be8284afcdec694a6a99248f40a7e3defa29ca19db
SHA512

4139c7d7763442543f6eea43d9f62930527f241f03ff2de9489c980d87b4577ce2e9487a307bc5c4fd6f9d35d976ff3ff27733c302651cf3cbc95635ea6e6ee8
SSDEEP

12288:DbZf4RDspFGoa9QB+azMnqk8jkk5PBMkkqk8jk:fZf+sp8o9B/kIztkI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08c7890c20ca35f435edfc13f16df121_JaffaCakes118

Files

08c7890c20ca35f435edfc13f16df121_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bd820d10cb5f94e7df124a16dcf57992

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetSaveFileNameW
GetOpenFileNameW

rpcrt4

RpcStringFreeA
UuidToStringA
UuidCreate

kernel32

InterlockedIncrement
LocalAlloc
GetCommandLineW
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringA
InterlockedExchange
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStdHandle
WriteFile
ExitProcess
Sleep
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
GetStartupInfoW
HeapSize
HeapReAlloc
HeapDestroy
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
WideCharToMultiByte
CreateFileA
GetFileSize
FormatMessageA
SetFilePointer
ReadFile
GetTempPathW
CreateFileW
CloseHandle
FormatMessageW
GetVersionExA
lstrlenA
VirtualQuery
lstrcpynA
FindResourceExW
FindResourceW
FreeLibrary
LoadResource
LoadLibraryExW
GetModuleHandleA
InterlockedDecrement
GetCurrentProcess
GlobalLock
GetModuleHandleW
GetTickCount
InitializeCriticalSection
GlobalAlloc
LoadLibraryW
SizeofResource
GetVersionExW
LeaveCriticalSection
lstrcpynW
MulDiv
GetModuleFileNameW
lstrcmpW
MultiByteToWideChar
lstrlenW
GlobalUnlock
FlushInstructionCache
RaiseException
GetLastError
SetLastError
lstrcpyW
GetCurrentProcessId
DeleteFileW
GetCurrentThreadId
DeleteCriticalSection
VirtualProtect
lstrcmpiW
GetModuleFileNameA
LockResource
EnterCriticalSection
VirtualAlloc
GetProcAddress

user32

ScreenToClient
SetTimer
DestroyAcceleratorTable
GetDlgItemInt
SendMessageW
TranslateAcceleratorW
SetDlgItemTextW
IsWindowVisible
GetWindowTextLengthW
SetCursor
DestroyWindow
ClientToScreen
EndPaint
GetWindowRect
SetWindowTextW
SetMenuItemInfoW
GetDialogBaseUnits
GetMonitorInfoW
CallWindowProcW
DefWindowProcW
CopyRect
GetWindow
GetSystemMetrics
ReleaseCapture
MessageBoxW
EqualRect
SetMenuDefaultItem
CreateWindowExW
RemoveMenu
MapDialogRect
EnableWindow
GetDlgCtrlID
MapWindowPoints
GetMessageW
MonitorFromPoint
PostQuitMessage
CharNextW
TrackPopupMenu
GetWindowDC
RegisterWindowMessageW
MoveWindow
UnregisterClassA
DispatchMessageW
FillRect
IsChild
LoadImageW
SetCapture
PostMessageW
DrawTextW
KillTimer
GetKeyState
LoadStringA
GetFocus
DialogBoxParamW
GetParent
InvalidateRgn
LoadCursorW
MessageBeep
GetClientRect
CreateAcceleratorTableW
SetFocus
DrawEdge
GetMenuItemInfoW
SetRectEmpty
BeginPaint
GetClassLongW
PtInRect
GetClassInfoExW
wsprintfW
GetDoubleClickTime
GetDC
GetCapture
DrawFocusRect
TranslateMessage
LoadAcceleratorsW
InflateRect
SetDlgItemInt
IsDialogMessageW
RegisterClassExW
OffsetRect
TrackPopupMenuEx
IntersectRect
InvalidateRect
LoadMenuW
GetWindowLongW
AppendMenuW
GetWindowTextW
SystemParametersInfoW
PeekMessageW
GetDCEx
GetClassNameW
ReleaseDC
MonitorFromWindow
GetDlgItem
SetWindowLongW
EndDialog
RedrawWindow
DestroyCursor
GetDesktopWindow
GetSysColor
SetWindowPos
GetCursorPos
LoadStringW
ShowWindow
CreatePopupMenu
GetSysColorBrush
CreateDialogParamW
GetMenuItemCount
IsWindow
DestroyMenu

gdi32

GetClipRgn
MoveToEx
SetWindowOrgEx
BitBlt
PatBlt
SetViewportOrgEx
LineTo
LPtoDP
SetTextColor
DeleteDC
Polygon
CreateFontIndirectW
GetDeviceCaps
SetBkColor
ExcludeClipRect
RemoveFontMemResourceEx
SetBkMode
DeleteObject
SelectObject
SelectClipRgn
CreateCompatibleDC
CreateRectRgnIndirect
DPtoLP
CombineRgn
CreateCompatibleBitmap
ExtTextOutW
SaveDC
CreateFontW
GetObjectW
AddFontMemResourceEx
CreateRectRgn
Polyline
CreatePen
GetClipBox
IntersectClipRect
GetStockObject
RestoreDC
CreateSolidBrush

advapi32

RegCreateKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegQueryValueExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegEnumKeyExW

ole32

CoTaskMemFree
DoDragDrop
CreateItemMoniker
CoGetClassObject
CoTaskMemAlloc
StringFromGUID2
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoTaskMemRealloc
OleLockRunning
OleInitialize
CoCreateInstance
GetRunningObjectTable
OleUninitialize

oleaut32

SysStringLen
LoadRegTypeLi
SysFreeString
VarUI4FromStr
OleCreateFontIndirect
OleCreatePropertyFrame
VariantChangeType
SysAllocStringLen
VarBstrCmp
VariantInit
LoadTypeLi
VariantClear
DispCallFunc
SysAllocString

mkzlib

inflateEnd
inflateInit_
inflate
inflateReset

mkunicode

iso_getentry
Utf16ToUtf8

shlwapi

SHAutoComplete
StrCmpIW
UrlEscapeW

comctl32

ImageList_Draw
ImageList_SetOverlayImage
InitCommonControlsEx
ImageList_GetImageInfo
ImageList_LoadImageW
_TrackMouseEvent

Sections

.text
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

a_m
Size: 119KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dccrpcy
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�F^
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bd820d10cb5f94e7df124a16dcf57992

Headers

DLL Characteristics

File Characteristics

Imports

comdlg32

rpcrt4

kernel32

user32

gdi32

advapi32

ole32

oleaut32

mkzlib

mkunicode

shlwapi

comctl32

Sections

.text Size: 231KB - Virtual size: 230KB

.rdata Size: 49KB - Virtual size: 48KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 37KB - Virtual size: 37KB

.reloc Size: 19KB - Virtual size: 18KB

a_m Size: 119KB - Virtual size: 120KB

dccrpcy Size: 76KB - Virtual size: 76KB

�F^ Size: 92KB - Virtual size: 92KB

.text
Size: 231KB - Virtual size: 230KB

.rdata
Size: 49KB - Virtual size: 48KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 37KB - Virtual size: 37KB

.reloc
Size: 19KB - Virtual size: 18KB

a_m
Size: 119KB - Virtual size: 120KB

dccrpcy
Size: 76KB - Virtual size: 76KB

�F^
Size: 92KB - Virtual size: 92KB