109cfc09fd1bf2dd9c1e05c681e5a7f7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

109cfc09fd1bf2dd9c1e05c681e5a7f7_JaffaCakes118
Size

46KB
MD5

109cfc09fd1bf2dd9c1e05c681e5a7f7
SHA1

9c5d91f9ad9e1d14676e7ad194a72d9077d2ee77
SHA256

0a0f7f83fee9778a35af0d7ecc3ff7ecd99d365a659c1ed8da4804467f780a48
SHA512

8012e00d69acaf133aed58033bc1815650cab3330464fc7eab2f034bedb10110210bd6e23cb30af822c46038d08d39e993cf15f3a1a3b81a03cfb27963f77157
SSDEEP

768:pL70HBuggGV+NxR72o4kAwkVZVVIifk8XeaBx:pLjggGoxR72o4kKZVVkaBx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
109cfc09fd1bf2dd9c1e05c681e5a7f7_JaffaCakes118

Files

109cfc09fd1bf2dd9c1e05c681e5a7f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e4d954d3a8d87578ac57381f02f2f625

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

NDRcopy
NDRCContextMarshall
DllGetClassObject
CreateStubFromTypeInfo
NdrByteCountPointerBufferSize
NdrAsyncClientCall
MesHandleFree
MesEncodeFixedBufferHandleCreate
MesDecodeIncrementalHandleCreate
DllRegisterServer
NdrClientInitialize
CStdStubBuffer_CountRefs
NdrAllocate
MesIncrementalHandleReset
NDRSContextMarshallEx
MesInqProcEncodingId
NdrConformantStructBufferSize
NdrByteCountPointerFree
NdrAsyncServerCall
NDRCContextBinding
NdrByteCountPointerUnmarshall
NDRSContextMarshall
MesBufferHandleReset
DceErrorInqTextW

gdi32

CreateCompatibleDC
SaveDC
CreateDIBitmap
BitBlt
GetDeviceCaps
LineTo
CreatePen
CreateSolidBrush
SelectObject
CreateFontIndirectA
SelectPalette
UnrealizeObject
GetTextMetricsA
SelectClipRgn
ExtTextOutA
GetTextExtentPointA
MoveToEx
DeleteObject
GetObjectA
CreateRectRgn
SetBkColor
GetSystemPaletteEntries
RealizePalette
DeleteDC
SetTextColor
RestoreDC

msvcrt

_initterm
_local_unwind2
_snwprintf
malloc
_onexit
_wtoi
strtol
wcsncmp
wcsncpy
free
fwrite
_vsnwprintf
_itow
wcslen
_ftol
swprintf
_iob
realloc
wcscmp
_wcsicmp
_adjust_fdiv
_strnicmp
__dllonexit
_except_handler3

kernel32

OpenProcess
WaitForMultipleObjects
ReadConsoleInputA
PeekConsoleInputW
PeekConsoleInputA
MoveFileExA
GetShortPathNameA
FormatMessageA
LoadLibraryA
SetConsoleMode
GetLargestConsoleWindowSize
SetLastError
SetConsoleCP
FileTimeToLocalFileTime
FileTimeToDosDateTime
CreateFileMappingA
GetFullPathNameA
GetVolumeInformationA
SetFileApisToANSI
ExpandEnvironmentStringsA
DeleteFileA
FlushConsoleInputBuffer
SetFilePointer
FindFirstFileA
GetConsoleCursorInfo
GetSystemTime
WriteConsoleOutputW
SetConsoleWindowInfo
SetFileApisToOEM
RemoveDirectoryA
ReadConsoleOutputW
SetErrorMode
QueryDosDeviceA
DeleteCriticalSection
WriteConsoleInputW
lstrcmpiA
GetCurrentDirectoryA
SetConsoleTextAttribute
CreateMutexA
GetTickCount
VirtualAlloc
InitializeCriticalSection
IsBadReadPtr
LocalFileTimeToFileTime
WaitForSingleObject
GetEnvironmentVariableA
GetLastError
GetConsoleOutputCP
FindClose
UnmapViewOfFile
GetConsoleScreenBufferInfo
SetFileTime
GetCompressedFileSizeA
IsBadWritePtr
InterlockedIncrement
SetEndOfFile
SetConsoleOutputCP
GetCurrentThreadId
ReadConsoleInputW
InterlockedDecrement
GetLogicalDrives
ReadFile
DefineDosDeviceA
GetConsoleCP
SearchPathA
MapViewOfFile
LeaveCriticalSection
FlushFileBuffers
FindFirstChangeNotificationA
SetConsoleTitleA
BackupWrite
GetFileType
GetFileAttributesA
SetEnvironmentVariableA
ReadConsoleW
RaiseException
SetConsoleCursorPosition
SetConsoleActiveScreenBuffer
FreeLibrary
FindCloseChangeNotification
MoveFileA
ReadConsoleA
TerminateProcess
WriteConsoleOutputA
EnterCriticalSection
GetModuleHandleA
GetDiskFreeSpaceA
IsBadCodePtr
SetStdHandle
CopyFileA
GetFileTime
FindNextFileA
GetConsoleMode
SetConsoleCursorInfo
CreateProcessA
GetCurrentProcessId
GetComputerNameA
GlobalMemoryStatus
GetFileInformationByHandle
WriteFile
ReleaseMutex
CreateFileA
GetSystemTimeAsFileTime
GetStdHandle
SetConsoleCtrlHandler
SetCurrentDirectoryA
FreeConsole
SystemTimeToFileTime
GetLocaleInfoA
GetNumberFormatA
SetConsoleScreenBufferSize
GetModuleFileNameA
GetFileSize
CreateDirectoryA
CreateFileW
ReadConsoleOutputA
GetVersionExA
AllocConsole

ws2_32

WSAGetLastError
WSAStartup
connect
WSACleanup
recv
accept
send

crypt32

CertAddEncodedCTLToStore

ole32

CoAllowSetForegroundWindow
CLSIDFromOle1Class
CoDeactivateObject
CoCreateGuid
CoCancelCall
CLIPFORMAT_UserSize
CLSIDFromString
CoCopyProxy
CoAddRefServerProcess
CoCreateInstanceEx
CoDisableCallCancellation
CoCreateFreeThreadedMarshaler
OleInitialize
OleGetClipboard
CLSIDFromProgIDEx
CLIPFORMAT_UserMarshal
CoCreateInstance
CLIPFORMAT_UserFree
OleSetClipboard
CoBuildVersion

version

VerLanguageNameA
VerQueryValueW

oleacc

CreateStdAccessibleProxyW
CreateStdAccessibleObject
GetStateTextW
CreateStdAccessibleProxyA
GetStateTextA
AccessibleObjectFromWindow
DllUnregisterServer
GetRoleTextW
ObjectFromLresult
LresultFromObject
AccessibleChildren
DllCanUnloadNow
IID_IAccessibleHandler
AccessibleObjectFromPoint
AccessibleObjectFromEvent
IID_IAccessible
DllGetClassObject
GetRoleTextA
GetOleaccVersionInfo
WindowFromAccessibleObject
LIBID_Accessibility

shell32

Shell_MergeMenus
IsNetDrive
DllCanUnloadNow
SHStartNetConnectionDialogW
SHILCreateFromPath
PathQualify
Shell_GetImageLists
SHDefExtractIconW
DAD_DragMove
DllGetClassObject
DAD_DragLeave
DriveType
PifMgr_OpenProperties
DragFinish
DllInstall
DragAcceptFiles
SHChangeNotifyDeregister
GetFileNameFromBrowse
SHChangeNotifyRegister
SHGetSetSettings
PickIconDlg
DllGetVersion
PathResolve
SHCoCreateInstance
DAD_DragEnterEx
DllUnregisterServer
DllRegisterServer

user32

GetDC
GetSystemMetrics
LoadStringW
EnableWindow
ReleaseDC
TranslateMessage
GetClientRect
MessageBoxA
GetWindowRect
EndDialog
ShowWindow
GetDlgItem

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e4d954d3a8d87578ac57381f02f2f625

Headers

File Characteristics

Imports

rpcrt4

gdi32

msvcrt

kernel32

ws2_32

crypt32

ole32

version

oleacc

shell32

user32

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 11KB - Virtual size: 76KB

.rsrc Size: 23KB - Virtual size: 22KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 11KB - Virtual size: 76KB

.rsrc
Size: 23KB - Virtual size: 22KB