0e14fd456a27eb171f71e32f8062a7af_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0e14fd456a27eb171f71e32f8062a7af_JaffaCakes118
Size

374KB
MD5

0e14fd456a27eb171f71e32f8062a7af
SHA1

cfa5382ff1836228572f4fd6ff8a3fcf9fdff22c
SHA256

26548a524445033359f5c998a9b6075106e972122e31e12529d984d3f11ce5ab
SHA512

1823a3e8b7c193257e3fabfd5da81e7ec3ff3c13b45a9c41381be4c10c9bf426ba307776ce71240c9e2d94e472b1c7205697434431e88126e8c349dd5e861c39
SSDEEP

6144:g/i6xtPH8g0zO29LjszSpcE56QgAdnj0CO3H70svw2CK7eIicgYfs7R1jgFTaE:ii6xepO29Ljg+ReM63H7jI2CwhDJTaE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e14fd456a27eb171f71e32f8062a7af_JaffaCakes118

Files

0e14fd456a27eb171f71e32f8062a7af_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c9b78de2e463cefc2d69dd1fb6426727

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_vsnwprintf
free
_initterm
malloc
wcscmp
_except_handler3
_adjust_fdiv

gdi32

GetObjectW
SelectObject
CreateCompatibleDC
LineTo
MoveToEx
SetStretchBltMode
SetBrushOrgEx
RealizePalette
SelectPalette
CreateHalftonePalette
GetDeviceCaps
StretchBlt
CreateFontIndirectW
GetTextExtentPoint32W
SetLayout
SetTextColor
SetBkMode
CreateDIBSection
CreateSolidBrush
CreateCompatibleBitmap
BitBlt
CreatePen
Rectangle
Arc
Ellipse
CreatePenIndirect
SetBkColor
SetROP2
GetStockObject
DeleteDC
DeleteObject

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GlobalAlloc
GlobalUnlock
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
FreeLibraryAndExitThread
GetCurrentThreadId
Sleep
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
WaitForSingleObject
DuplicateHandle
ResetEvent
GetModuleFileNameW
GetWindowsDirectoryW
CreateMutexW
OpenFileMappingW
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
ReleaseMutex
CompareStringW
lstrcmpW
MoveFileW
CopyFileW
DeleteFileW
lstrcpynW
MulDiv
LoadLibraryW
GetProcAddress
FreeLibrary
GetTickCount
QueryPerformanceCounter
CreateEventW
CloseHandle
CreateThread
SetEvent
IsBadWritePtr
MultiByteToWideChar
lstrcpyW
lstrlenW
GetLastError
GetModuleHandleW
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
GlobalLock
LocalFree
LocalAlloc
ExitThread

ole32

CoUnmarshalInterface
CLSIDFromString
ReleaseStgMedium
CoCreateInstance
CoTaskMemFree
FreePropVariantArray
CoTaskMemAlloc
PropVariantClear
CoAllowSetForegroundWindow
CoUninitialize
CreateStreamOnHGlobal
CoInitialize

oleaut32

SysFreeString
SysAllocString
SysAllocStringLen

shell32

SHGetFileInfoW
DragQueryFileW

shlwapi

StrFormatByteSizeW
wnsprintfA

user32

CharNextW
MessageBeep
SetWindowsHookExW
LoadAcceleratorsW
CopyAcceleratorTableW
CreateAcceleratorTableW
KillTimer
DestroyAcceleratorTable
UnhookWindowsHookEx
MessageBoxW
PostThreadMessageW
CallNextHookEx
IsChild
TranslateAcceleratorW
LoadIconW
GetKeyState
OffsetRect
IntersectRect
CopyRect
MoveWindow
IsRectEmpty
IsWindowVisible
PostMessageW
RegisterWindowMessageW
FrameRect
GetWindowTextLengthW
GetWindowTextW
DrawFocusRect
GetCursorPos
GetCapture
ReleaseCapture
SetCapture
PtInRect
SendNotifyMessageW
SetTimer
MapWindowPoints
GetParent
SetDlgItemInt
ShowWindow
SetWindowTextW
GetFocus
SetFocus
GetSystemMetrics
LoadImageW
SetDlgItemTextW
SendDlgItemMessageW
CharUpperBuffW
EnableWindow
LoadCursorW
SetCursor
GetDlgItem
SendMessageW
EndDialog
GetWindowRect
GetDC
ReleaseDC
CopyIcon
RegisterClassW
GetWindowLongW
SetWindowLongW
DefWindowProcW
IsWindowEnabled
InvalidateRect
UpdateWindow
BeginPaint
GetClientRect
GetSysColorBrush
FillRect
EndPaint
DestroyIcon
LoadStringW
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
MapDialogRect
PostQuitMessage
DestroyWindow
EnableMenuItem
GetSystemMenu
SetForegroundWindow
DispatchMessageW
CharUpperW
TranslateMessage
IsDialogMessageW
GetMessageW
DialogBoxParamW
GetDlgItemInt
RegisterClipboardFormatW
PeekMessageW
MsgWaitForMultipleObjects
wsprintfW
GetIconInfo
FindWindowExW
SetWindowPos
GetMonitorInfoW
MonitorFromRect
GetDesktopWindow
IsWindow
DrawTextExW
InflateRect
DrawIconEx
GetSysColor
MonitorFromWindow
GetClassNameW
DrawTextW
WinHelpW
GetLastActivePopup
CreateWindowExW
CreateDialogParamW
RegisterClassExW

winmm

PlaySoundW

gdiplus

GdipCloneImage
GdipDrawImageRectRectI
GdipGetImageGraphicsContext
GdipSetImageAttributesThreshold
GdipSetImageAttributesColorMatrix
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageDecoders
GdipGetImageDecodersSize
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipAlloc
GdipFree

msimg32

AlphaBlend

advapi32

RegEnumKeyExW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.AAAJ
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.AAAS
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.AAAA
Size: 343KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9b78de2e463cefc2d69dd1fb6426727

Headers

File Characteristics

Imports

msvcrt

gdi32

kernel32

ole32

oleaut32

shell32

shlwapi

user32

winmm

gdiplus

msimg32

advapi32

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 7KB - Virtual size: 8KB

.data Size: 2KB - Virtual size: 8KB

.AAAJ Size: 512B - Virtual size: 4KB

.AAAS Size: 512B - Virtual size: 4KB

.AAAA Size: 343KB - Virtual size: 388KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 7KB - Virtual size: 8KB

.data
Size: 2KB - Virtual size: 8KB

.AAAJ
Size: 512B - Virtual size: 4KB

.AAAS
Size: 512B - Virtual size: 4KB

.AAAA
Size: 343KB - Virtual size: 388KB

.rsrc
Size: 4KB - Virtual size: 3KB