0980d9cf4c5a6cf97fa77d73cb5c9b06_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0980d9cf4c5a6cf97fa77d73cb5c9b06_JaffaCakes118
Size

135KB
MD5

0980d9cf4c5a6cf97fa77d73cb5c9b06
SHA1

3178eda15345cab4d88ddcaa4cc48f0b32de21f6
SHA256

6b0571b6aa3e5a39e6e342923740dfea35959885b9ddae55ebb509964140c349
SHA512

1bcc766e314fc84bac19ed0e4d6e7d66972d438c02182f6e5e2b877e205dbaa231a06f4acf9213a2ec5f7897b9997349e16f90893954e71b05fbe9f93251616a
SSDEEP

3072:82l+cRXWkKropqqYB9Rs7O/0GEJm9ZUnFq3znoWUagLneusb:blHWkKMIqyRsy/0GB9ZGFZWUVLe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0980d9cf4c5a6cf97fa77d73cb5c9b06_JaffaCakes118

Files

0980d9cf4c5a6cf97fa77d73cb5c9b06_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ff7dc9b399fe260124a9e5c4e58da9a2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\5i\syx27d\gadh48g\m8iyzc\dg\la8r4t7n\a4gk.pdb

Imports

kernel32

GetModuleFileNameA
HeapDestroy
ReadFile
EnumSystemLocalesA
lstrlenA
GetSystemDefaultLangID
GlobalUnlock
GetLocaleInfoW
GlobalSize
CreateFileA
EnterCriticalSection
lstrcpynW
GetLastError
CreateThread
CopyFileW
GetACP
FindFirstChangeNotificationW
GetModuleHandleA
lstrcatW
GetFileType
FormatMessageW
InterlockedDecrement
WriteConsoleW
GetCPInfo
OutputDebugStringW
GetCommandLineW
InterlockedIncrement
SystemTimeToTzSpecificLocalTime
FindNextChangeNotification
IsValidCodePage
lstrcpynA
LoadLibraryA
GetStartupInfoA
VerLanguageNameW
InitializeCriticalSection
WaitForSingleObject
GetFileSize
IsValidLocale
GetConsoleMode
TerminateProcess
LocalFree
GetVersion
HeapAlloc
InterlockedCompareExchange
GetStartupInfoW
GlobalLock
GetTempPathW
LCMapStringA
Sleep
HeapFree
TlsFree
GetTimeFormatA
lstrcmpiW
CompareStringW
GetModuleHandleW
WritePrivateProfileSectionW
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
GetStdHandle
LoadLibraryW
GetTempFileNameW
ResetEvent
FileTimeToSystemTime
TlsSetValue
GetWindowsDirectoryW
GetEnvironmentStringsW
GetCurrentThread
GetModuleFileNameW
GetVersionExW
GetLocaleInfoA
GetFileAttributesW
FlushInstructionCache
VirtualQuery
VirtualFree
DebugBreak
CreateFileW
GetSystemDirectoryW
SetLastError
LockResource
CompareStringA
lstrlenW
SetConsoleCtrlHandler
DeleteCriticalSection
GetPrivateProfileStringW
SetHandleCount
lstrcpyW
LCMapStringW
ExitProcess
SizeofResource
GetCurrentProcess
LeaveCriticalSection
WinExec
GlobalAlloc
WriteConsoleA
GetCurrentThreadId
HeapCreate
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsA
HeapSize
QueryPerformanceCounter
TlsGetValue
GetStringTypeA
GetConsoleOutputCP
SetStdHandle
LocalAlloc
GetUserDefaultLCID
FreeLibrary
TlsAlloc
lstrcmpW
WideCharToMultiByte
FreeEnvironmentStringsW
GetCurrentProcessId
CloseHandle
GetConsoleCP
GetFileAttributesExW
WritePrivateProfileStringW
FatalAppExitA
GetStringTypeW
VirtualAlloc
GetDateFormatA
RtlUnwind
ExpandEnvironmentStringsW
InterlockedExchange
FindResourceW
GetDateFormatW
GetOEMCP
GetComputerNameW
IsProcessorFeaturePresent
RaiseException
HeapReAlloc
SetUnhandledExceptionFilter
GetProcAddress
MulDiv
WaitForMultipleObjects
LoadResource
GetPrivateProfileIntW
IsDebuggerPresent
OpenEventW

user32

wvsprintfW
ShowScrollBar
SetFocus
GetClassNameW
SetCursor
DefMDIChildProcW
ShowWindow
GetWindowThreadProcessId
TrackPopupMenuEx
ScreenToClient
LoadStringA
GetDoubleClickTime
MessageBeep
ShowCaret
UnregisterClassW
InsertMenuW
MessageBoxW
GetWindowLongW
PostMessageW
SetTimer
DrawTextW
OpenClipboard
LoadImageW
GetDlgItemTextW
DestroyWindow
GetMenuStringW
EnableMenuItem
TranslateMDISysAccel
DefFrameProcW
RedrawWindow
AdjustWindowRectEx
IsWindow
KillTimer
FindWindowW
GetMessageW
CloseClipboard
GetScrollInfo
SetWindowLongW
RemoveMenu
GetKeyState
GetDC
SetWindowsHookExW
GetParent
SetDlgItemInt
GetCapture
CreateCaret
DefWindowProcW
DrawMenuBar
SetForegroundWindow
GetSystemMetrics
DragDetect
MonitorFromWindow
EndDeferWindowPos
RegisterWindowMessageW
GetWindowTextLengthA
RegisterClassExW
LoadAcceleratorsW
SetMenuItemInfoW
ModifyMenuW
IsWindowEnabled
GetClassInfoExW
CharNextW
SetScrollInfo
GetWindowRect
UnregisterClassA
LoadMenuW
DeferWindowPos
SetDlgItemTextW
SetWindowPos
EmptyClipboard
EnableWindow
LoadBitmapW
GetClientRect
CreateWindowExW
TranslateAcceleratorW
SetCaretPos
SetClipboardData
SetMenuDefaultItem
CallNextHookEx
EndPaint
GetMonitorInfoW
GetWindowDC
IsWindowVisible
SetWindowTextW
AppendMenuW
DestroyMenu
FillRect
PtInRect
GetActiveWindow
SetCapture
UpdateWindow
GetClassLongW
RegisterClipboardFormatW
GetMenuDefaultItem
LoadIconW
TrackPopupMenu
InvalidateRect
LoadStringW
GetClassInfoW
GetWindowTextLengthW
InflateRect
GetSysColorBrush
PeekMessageW
RegisterClassW
CopyRect
BeginPaint
EndDialog
DrawFocusRect
MapWindowPoints
DrawEdge
GetMenu
GetWindowTextW
GetCursorPos
SystemParametersInfoW
GetMenuItemCount
GetWindow
GetFocus
GetMessagePos
EqualRect
SetRectEmpty
SendMessageW
OffsetRect
ReleaseCapture
LoadCursorW
GetDlgCtrlID
GetDesktopWindow
IsMenu
BringWindowToTop
DispatchMessageW
GetDlgItemInt
MoveWindow
GetWindowPlacement
DrawIconEx
DialogBoxParamW
SetWindowPlacement
GetSystemMenu
WindowFromPoint
BeginDeferWindowPos
IsClipboardFormatAvailable
DrawFrameControl
ReleaseDC
FrameRect
LockWindowUpdate
GetMenuItemID
GetMenuItemInfoW
TranslateMessage
SetScrollPos
ClientToScreen
UnhookWindowsHookEx
CallWindowProcW
CreatePopupMenu
PostQuitMessage
SetMenu
IntersectRect
SetParent
CharLowerW
DestroyCaret
IsChild
ScrollWindowEx
GetSubMenu

gdi32

RealizePalette
CreatePalette
CreateCompatibleBitmap
Polygon
GetViewportOrgEx
ExtTextOutW
RestoreDC
Rectangle
GetTextMetricsW
IntersectClipRect
CreateFontW
GetDeviceCaps
CreateFontIndirectW
SetBkColor
MoveToEx
SetTextColor
CreateCompatibleDC
Polyline
GetObjectW
DeleteObject
TextOutW
SetBrushOrgEx
SetBkMode
CreateRectRgn
CreatePatternBrush
SelectObject
LineTo
GetClipRgn
SetPolyFillMode
PatBlt
CreateDIBSection
GetClipBox
DeleteDC
DPtoLP
SaveDC
SelectPalette
GetTextExtentPoint32W
LPtoDP
SelectClipRgn
GetStockObject
CreateSolidBrush
SetWindowOrgEx
SetViewportOrgEx
CreateBitmap
BitBlt
GetTextExtentPointW
CreatePen

comdlg32

ChooseFontW
GetSaveFileNameW
ChooseColorW
GetOpenFileNameW

advapi32

RegReplaceKeyW
RegOpenKeyExW
SetSecurityDescriptorDacl
RegEnumValueA
GetLengthSid
IsTextUnicode
AdjustTokenPrivileges
GetSidSubAuthority
GetTokenInformation
RegConnectRegistryW
GetSecurityDescriptorSacl
RegSetKeySecurity
RegRestoreKeyW
RegDeleteKeyW
RegGetKeySecurity
CopySid
LookupPrivilegeValueW
RegDeleteValueW
RegOpenKeyExA
RegCreateKeyExW
RegCloseKey
GetNamedSecurityInfoW
GetSecurityDescriptorControl
GetSecurityDescriptorDacl
GetUserNameW
RegQueryValueExA
OpenProcessToken
GetSecurityDescriptorGroup
MapGenericMask
RegEnumKeyExW
RegUnLoadKeyW
RegSetValueExW
GetSidIdentifierAuthority
GetSidSubAuthorityCount
RegQueryInfoKeyW
GetSecurityDescriptorOwner
RegSaveKeyW
RegLoadKeyW
SetNamedSecurityInfoW
InitializeAcl
RegEnumValueW
RegQueryValueExW
InitializeSecurityDescriptor

ole32

CoTaskMemAlloc
CoTaskMemFree

oleaut32

VarUI4FromStr
VarDecFromStr
SysFreeString
VarDecCmp
VarR8FromStr
VarI4FromStr
SystemTimeToVariantTime

msvcrt

rand
fclose
__setusermatherr
_acmdln
__set_app_type
_except_handler3
_purecall
_adjust_fdiv
_initterm
sprintf
_i64toa
fwrite
exit
_ftol
fopen
atol
__getmainargs
__CxxFrameHandler
strchr
_CIsqrt
__dllonexit
__p__commode
_exit
atoi
__p__fmode
_stricmp
time
localtime
_XcptFilter
strncmp
_strnicmp
wcslen
_controlfp
_setmbcp
memmove
_onexit

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff7dc9b399fe260124a9e5c4e58da9a2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

oleaut32

msvcrt

Sections

.text Size: 106KB - Virtual size: 106KB

.data Size: 23KB - Virtual size: 121KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 106KB - Virtual size: 106KB

.data
Size: 23KB - Virtual size: 121KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB