121ba58d4f35a29243a57592b5b49e0c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

121ba58d4f35a29243a57592b5b49e0c_JaffaCakes118
Size

379KB
MD5

121ba58d4f35a29243a57592b5b49e0c
SHA1

0d55c6acf48f88432c1359d2a30711f0bdc26e2d
SHA256

222ae0b88ca8dc3a73d3d24848d157ac841c8c51632a3ea48c8ca9d44377ef0d
SHA512

8c89aabc04cc3ddc3053fc9d22d38219d1114db804c49e817518eecdbb5d2056a267c1e8eef39e4938a07ed265c78958fccc137709b24e2d7de681ed562f54ca
SSDEEP

6144:7HTXl2ndnWv2uEPzjFIiDhL/oagCYRuM0L4NQKS3ll5wfbgu:7H7lodWv2dPGi9gjP0L4Nd0nwf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
121ba58d4f35a29243a57592b5b49e0c_JaffaCakes118

Files

121ba58d4f35a29243a57592b5b49e0c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

210201282048e1d30a67be2de0ea309d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

PDB Paths

c:\Must\A\Continuations.pdb

Imports

kernel32

FreeLibrary
GetLastError
HeapAlloc
GetEnvironmentStringsW
GetProcessHeap
HeapFree
DeviceIoControl
GlobalMemoryStatus
GetLocalTime
IsProcessorFeaturePresent
CreateEventA
GetCurrentThread
GetThreadPriority
SetThreadPriority
ResetEvent
SetEvent
WaitForSingleObject
CloseHandle
lstrcmpiW
GetTempPathA
SetLastError
GetTempFileNameA
Sleep
GetModuleFileNameA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
SetEnvironmentVariableA
MulDiv
DeleteCriticalSection
EnterCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
lstrlenA
GetDiskFreeSpaceA
lstrcpynW
GlobalUnlock
GlobalLock
MultiByteToWideChar
lstrcatW
LocalAlloc
lstrcpynA
lstrcmpW
GetSystemTimeAsFileTime
GetStartupInfoW
GetSystemTimes
GetSystemInfo
ExitThread

user32

GetWindowPlacement
IsIconic
DrawEdge
GrayStringW
TabbedTextOutW
InflateRect
CopyRect
GetSysColorBrush
UnregisterClassW
OemToCharBuffA
CharToOemBuffA
CharUpperW
IsCharAlphaW
CharNextW
CharNextA
OffsetRect
SwitchToThisWindow
FindWindowW
GetClassInfoW
RegisterClassW
DefWindowProcW
GetForegroundWindow
IsWindowVisible
GetMonitorInfoW
EnumChildWindows
GetAsyncKeyState
ExitWindowsEx
GetAncestor
DrawIcon
DrawFocusRect
GetWindowTextA
LoadStringA
UpdateWindow
LookupIconIdFromDirectory
CreateIconIndirect
PrivateExtractIconsW
GetSysColor
GetWindowThreadProcessId
RemovePropW
CopyIcon
EnumWindows
GetClassNameW
SetTimer
GetWindow
GetCursorPos
MonitorFromPoint
SetForegroundWindow
MonitorFromWindow
IsWindowEnabled
MapVirtualKeyW
SetFocus
DrawTextW
BeginDeferWindowPos
EndDeferWindowPos
DeferWindowPos
LoadIconW
GetKeyState
MapWindowPoints
SetWindowPos
GetShellWindow
IsCharUpperW
BeginPaint
GetClientRect
EndPaint
LoadImageW
SetWindowTextW
GetDlgItemTextW
GetSystemMetrics
CreateWindowExW
SetMenu
TrackPopupMenuEx
LockSetForegroundWindow
ShowCaret
HideCaret
SystemParametersInfoA
NotifyWinEvent
AdjustWindowRectEx
LoadCursorW
SetCursor
SetMenuDefaultItem
IsWindow
GetDlgItem
EnableWindow
GetDlgCtrlID
WinHelpW
SetDlgItemTextW
EnumDisplayDevicesW
wsprintfW
GetWindowLongW
SetWindowLongW
GetWindowTextW
GetWindowTextLengthW
LoadStringW
GetParent
CheckDlgButton
ShowWindow
MoveWindow
ScreenToClient
GetWindowRect
SetDlgItemTextA
IsDlgButtonChecked
SetPropW
GetDlgItemTextA
SetDlgItemInt
GetNextDlgTabItem
CheckRadioButton
LoadBitmapW
MonitorFromRect
AdjustWindowRect
SetRect
CloseDesktop
OpenInputDesktop
AllowSetForegroundWindow
GetWindowModuleFileNameA
IsChild
EqualRect

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegDeleteKeyA
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegOpenKeyW
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegEnumKeyExA

shell32

SHGetDesktopFolder
DragQueryFileW
SHChangeNotify

ole32

CoTaskMemFree
ReleaseStgMedium
CoTaskMemAlloc

msvcrt

swscanf
wcsncpy
strtol
wcstok
qsort
atoi
wcscpy
wcslen
memmove
malloc
localtime
printf
fwrite
fread
ftell
fseek
exit
rand
time
rewind
asctime
fscanf
srand
fprintf
fclose
free

mscms

InstallColorProfileW
IsColorProfileValid
EnumColorProfilesW
UninstallColorProfileW

Sections

.text
Size: 289KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

210201282048e1d30a67be2de0ea309d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

winspool.drv

advapi32

shell32

ole32

msvcrt

mscms

Sections

.text Size: 289KB - Virtual size: 289KB

.data Size: 89KB - Virtual size: 97KB

.text
Size: 289KB - Virtual size: 289KB

.data
Size: 89KB - Virtual size: 97KB