0bda122bc8cb2ee04c149cdea1d3221c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0bda122bc8cb2ee04c149cdea1d3221c_JaffaCakes118
Size

135KB
MD5

0bda122bc8cb2ee04c149cdea1d3221c
SHA1

79cb850cb48e70d834ad4b8f818eb3cefc3b5fc5
SHA256

7dae4190f0bf186a6b8e8e1b97221c85efe4d01220f7a9bf994a1fd1b798aa41
SHA512

52c7219e23797c70f492ee0e4b7fec5868bb36e2cd191e78d6632a6431d95627b5440c23f981bf215f2dad746d60c93b9ab63821621b50870603ff41a7138337
SSDEEP

3072:4rFqs7/G5fZwlmHD1HflKoTT8aGBI0YPmXLbGWqgYei:4rFqmOHpooTwDhbGWrY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bda122bc8cb2ee04c149cdea1d3221c_JaffaCakes118

Files

0bda122bc8cb2ee04c149cdea1d3221c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

0c8db356e1eb50e195eb6eab9fda3030

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

X:\77b59\qb\3\ok817p\6jgyp\5fnvz.pdb

Imports

kernel32

GlobalSize
TerminateProcess
LCMapStringA
GetWindowsDirectoryW
GetCurrentProcess
lstrlenW
CopyFileW
MulDiv
GlobalLock
GetSystemDirectoryW
GlobalUnlock
WideCharToMultiByte
GetModuleHandleA
DebugBreak
lstrcmpW
FindNextChangeNotification
TlsSetValue
GetDateFormatA
WriteConsoleA
lstrcmpiW
GetPrivateProfileIntW
OpenEventW
GetTempPathW
LockResource
LoadLibraryA
IsValidCodePage
FreeEnvironmentStringsW
lstrlenA
QueryPerformanceCounter
GetFileAttributesW
LCMapStringW
GetTimeFormatA
GetLastError
GetUserDefaultLCID
WinExec
GetFileAttributesExW
Sleep
CompareStringW
FindAtomA
GetVersion
WaitForSingleObject
WriteConsoleW
TlsFree
TlsGetValue
SystemTimeToTzSpecificLocalTime
InterlockedIncrement
HeapCreate
GetPrivateProfileStringW
GetModuleFileNameW
FlushInstructionCache
LocalAlloc
InterlockedCompareExchange
ExitProcess
HeapAlloc
lstrcpyW
LeaveCriticalSection
RaiseException
SetConsoleCtrlHandler
MultiByteToWideChar
lstrcatW
GetConsoleOutputCP
GetStartupInfoW
LoadLibraryW
ReadFile
lstrcpynA
FreeLibrary
LocalFree
FindResourceW
GetTempFileNameW
GetDateFormatW
GetCommandLineW
GetCPInfo
FileTimeToSystemTime
WaitForMultipleObjects
EnumSystemLocalesA
VirtualFree
GlobalAlloc
GetOEMCP
HeapReAlloc
UnhandledExceptionFilter
FindFirstChangeNotificationW
VirtualAlloc
VirtualQuery
GetVersionExW
lstrcpynW
InitializeCriticalSectionAndSpinCount
GetStartupInfoA
SetHandleCount
ExpandEnvironmentStringsA
LoadResource
OutputDebugStringW
FormatMessageW
InitializeCriticalSection
CompareStringA
ExpandEnvironmentStringsW
GetStringTypeW
VerLanguageNameW
LoadLibraryExW
SetUnhandledExceptionFilter
TlsAlloc
CreateFileW
CloseHandle
GetCurrentThread
GetCurrentThreadId
HeapDestroy
ResetEvent
RtlUnwind
GetModuleHandleW
CreateFileA
IsValidLocale
InterlockedDecrement
GetStdHandle
GetModuleFileNameA
GetComputerNameW
WritePrivateProfileSectionW
GetStringTypeA
WritePrivateProfileStringW
GetFileType
GetACP
SetStdHandle
GetConsoleMode
SetLastError
GetFileSize
HeapFree
SizeofResource
EnterCriticalSection
GetEnvironmentStringsW
InterlockedExchange
GetSystemDefaultLangID
CreateThread
DeleteCriticalSection
IsProcessorFeaturePresent
GetCurrentProcessId
GetProcAddress
IsDebuggerPresent
HeapSize
GetConsoleCP

user32

CopyRect
SetMenuItemInfoW
LockWindowUpdate
GetDesktopWindow
DragDetect
SetMenu
IsMenu
FindWindowW
ClientToScreen
GetWindowTextLengthW
GetWindowPlacement
GetClientRect
WindowFromPoint
OpenClipboard
MoveWindow
SetWindowTextW
GetDC
ModifyMenuW
ShowScrollBar
CharNextW
SetCapture
GetWindowLongW
MonitorFromWindow
LoadIconW
CreateWindowExW
GetDlgItemInt
SetScrollInfo
SetClipboardData
CreatePopupMenu
GetWindowRect
TranslateMessage
GetCursorPos
DestroyWindow
GetSystemMetrics
RegisterWindowMessageW
GetActiveWindow
InvalidateRect
EqualRect
DestroyMenu
SetWindowPos
EndDeferWindowPos
EndPaint
ScrollWindowEx
SetFocus
LoadCursorW
GetWindowLongA
DrawMenuBar
FrameRect
GetMonitorInfoW
GetParent
IntersectRect
GetWindowDC
ReleaseCapture
LoadMenuW
SetDlgItemInt
GetMenuDefaultItem
PtInRect
RemoveMenu
DispatchMessageW
GetWindowThreadProcessId
DefMDIChildProcW
GetMessageW
LoadStringA
TranslateAcceleratorW
TrackPopupMenuEx
FillRect
DefWindowProcW
DrawFrameControl
DrawEdge
GetSubMenu
DrawFocusRect
ScreenToClient
UnhookWindowsHookEx
GetClassInfoW
IsWindowEnabled
IsChild
EnableMenuItem
MessageBoxW
TrackPopupMenu
InflateRect
SetCursor
CallNextHookEx
CallWindowProcW
GetScrollInfo
IsClipboardFormatAvailable
SetTimer
DeferWindowPos
SetForegroundWindow
LoadAcceleratorsW
GetClassLongW
PostMessageW
IsWindowVisible
SetCaretPos
wvsprintfW
LoadStringW
CreateCaret
GetMenu
UnregisterClassA
DefFrameProcW
PeekMessageW
UnregisterClassW
RegisterClassW
EnableWindow
AppendMenuW
BeginPaint
GetDlgItemTextW
GetSystemMenu
BringWindowToTop
GetDoubleClickTime
GetWindowTextW
GetSysColorBrush
LoadImageW
RegisterClipboardFormatW
EndDialog
GetMenuItemID
ReleaseDC
GetWindow
OffsetRect
DestroyCaret
SetWindowsHookExW
RegisterClassExW
KillTimer
GetMenuStringW
SetDlgItemTextW
GetDlgCtrlID
GetFocus
SetScrollPos
BeginDeferWindowPos
EmptyClipboard
LoadBitmapW
GetCapture
CloseClipboard
PostQuitMessage
GetClassNameW
SetMenuDefaultItem
MapWindowPoints
SetRectEmpty
DialogBoxParamW
InsertMenuW
CharLowerW
UpdateWindow
MessageBeep
SystemParametersInfoW
RedrawWindow
SetParent
GetKeyState
GetMenuItemInfoW
SendMessageW
TranslateMDISysAccel
GetMessagePos
ShowCaret

gdi32

DPtoLP
GetDeviceCaps
GetTextExtentPointW
CreatePatternBrush
SetTextColor
SetPolyFillMode
GetClipBox
SetBkMode
CreateBitmap
Polygon
CreateCompatibleBitmap
GetStockObject
SetWindowOrgEx
SetBkColor
SaveDC
MoveToEx
SelectPalette
CreateCompatibleDC
GetObjectW
ExtTextOutW
GetTextMetricsW
CreateFontIndirectW
TextOutW
CreateFontW
RealizePalette
SelectObject
BitBlt
RestoreDC
LineTo
GetTextExtentPoint32W
CreatePalette
LPtoDP
GetViewportOrgEx
Rectangle
DeleteObject
SetBrushOrgEx
SetViewportOrgEx
DeleteDC
CreatePen
CreateSolidBrush
CreateDIBSection
GetClipRgn
SelectClipRgn
Polyline
IntersectClipRect
PatBlt
CreateRectRgn

comdlg32

GetSaveFileNameW
GetOpenFileNameW
ChooseColorW
ChooseFontW

advapi32

GetLengthSid
RegOpenKeyExA
SetNamedSecurityInfoW
InitializeSecurityDescriptor
RegLoadKeyW
GetSecurityDescriptorSacl
RegEnumValueA
InitializeAcl
RegConnectRegistryW
RegEnumKeyExW
GetSidSubAuthorityCount
IsTextUnicode
SetSecurityDescriptorDacl
GetTokenInformation
GetSecurityDescriptorControl
RegDeleteKeyW
RegCloseKey
MapGenericMask
CopySid
RegQueryValueExA
OpenProcessToken
AdjustTokenPrivileges
GetSidSubAuthority
RegQueryInfoKeyW
GetUserNameW
RegQueryValueExW
RegGetKeySecurity
GetSecurityDescriptorGroup
RegDeleteValueW
RegSetValueExW
RegEnumValueW
GetSecurityDescriptorDacl
GetSecurityDescriptorOwner
RegUnLoadKeyW
RegSetKeySecurity
RegRestoreKeyW
RegSaveKeyW
GetNamedSecurityInfoW
RegOpenKeyExW
RegCreateKeyExW
GetSidIdentifierAuthority
LookupPrivilegeValueW
RegReplaceKeyW

oleaut32

VarUI4FromStr
VarR8FromStr
VarDecFromStr
VarI4FromStr
VarDecCmp
SysFreeString
SystemTimeToVariantTime

msvcrt

fopen
_i64toa
__set_app_type
_setmbcp
exit
strchr
sprintf
fwrite
_adjust_fdiv
__setusermatherr
fclose
__CxxFrameHandler
__getmainargs
__dllonexit
localtime
atol
__p__commode
_exit
_except_handler3
_XcptFilter
_controlfp
_onexit
_purecall
strncmp
wcslen
_initterm
memmove
_stricmp
rand
__p__fmode
_strnicmp
time
_ftol
_acmdln
atoi

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0c8db356e1eb50e195eb6eab9fda3030

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

oleaut32

msvcrt

Sections

.text Size: 106KB - Virtual size: 105KB

.data Size: 24KB - Virtual size: 186KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 106KB - Virtual size: 105KB

.data
Size: 24KB - Virtual size: 186KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB