2d7061eb1bfdb0241501349c871bfba0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2d7061eb1bfdb0241501349c871bfba0_JaffaCakes118
Size

224KB
MD5

2d7061eb1bfdb0241501349c871bfba0
SHA1

6cef861316b07ac18f24fb134eaac764ffa10ae1
SHA256

cc189333df5f529332afbeb325b9fcfb4e032036ae4ea379a0512c4a743b43b4
SHA512

47812072c6bd3f9b84e83ef5abff5c72694ab742396b37eab8572c36f339acb9d7b630ea376a9f379c7d9d051af60fadb6e15cd3e84e157f2d1dbacbd0fe9713
SSDEEP

3072:zsBwTNH9Yq6N1FAUmqGXkUlqDBvyEFuRacE3BNDuxHYtaxIxQtye5++wodvsm:zJTNS12U/wx8DBvyoA2BN7tgIej++wo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d7061eb1bfdb0241501349c871bfba0_JaffaCakes118

Files

2d7061eb1bfdb0241501349c871bfba0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

90228d342e92696ad62300ef285357c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\For\Each\And\Or\Or.pdb

Imports

kernel32

CreateFileMappingA
VirtualAlloc
VirtualProtect
GetFullPathNameA
SetFilePointer
GetFileAttributesA
ExpandEnvironmentStringsA
GetTempFileNameA
DeleteFileA
GetEnvironmentVariableA
GetModuleFileNameA
GetVersionExA
InitializeCriticalSection
DeviceIoControl
HeapFree
HeapAlloc
CreateFileA
FindFirstFileA
FindNextFileA
LocalFree
CopyFileA
CopyFileW
GetFileAttributesW
SetFileAttributesW
UnhandledExceptionFilter
CompareStringW
MultiByteToWideChar
DeleteAtom
AddAtomW
FindResourceW
GetStringTypeW
LoadLibraryExW
CreateActCtxW
CloseHandle
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
WriteFile
lstrlenW
lstrcmpiW
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
CreateFileW
GetModuleFileNameW
OutputDebugStringA
GetLastError
GetAtomNameW
SetLastError
lstrcpynW
FreeLibraryAndExitThread
GetCurrentThread
LocalAlloc
LoadLibraryW
GetUserDefaultUILanguage
VirtualFree
GetSystemInfo
lstrcmpW
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
GlobalFree
GlobalUnlock
GlobalLock
GetModuleHandleW
GetFullPathNameW
UnmapViewOfFile
CreateSemaphoreW
DuplicateHandle
MapViewOfFile
ExitThread
GetExitCodeThread
WaitForSingleObject
IsBadStringPtrW
FindClose
FindNextFileW
FindFirstFileW
ActivateActCtx
DeactivateActCtx
GetProcAddress
ExpandEnvironmentStringsW
GetFileSize
ReadFile
LockResource
LoadResource
SizeofResource
IsBadCodePtr
GetSystemTimeAsFileTime
QueryPerformanceCounter
DeleteFileW
SetErrorMode
GetProcessHeap
GetVersionExW
SuspendThread
ResumeThread
GetThreadContext
VirtualQueryEx
TerminateThread
CreateThread
GetThreadSelectorEntry
GetFileType
Sleep
CreateFileMappingW
LCMapStringA
LCMapStringW
GetDriveTypeW
SetEndOfFile
MapViewOfFileEx
FlushViewOfFile
lstrlenA
CreateDirectoryW
GetCommandLineW
LoadLibraryA
SetEvent
OpenProcess
FreeLibrary
GetVersion
ProcessIdToSessionId
GetDateFormatW
DisableThreadLibraryCalls
DeleteCriticalSection
LeaveCriticalSection
GetModuleHandleA
MulDiv
GlobalAlloc

user32

EnumChildWindows
GetWindow
CloseDesktop
EnumDesktopWindows
OpenDesktopW
EnumDesktopsW
GetClassNameW
GetDC
GetDCEx
GetSystemMenu
GetClassLongW
SetRectEmpty
GetWindowTextW
InternalGetWindowText
GetWindowRect
DefFrameProcW
DefWindowProcW
SetMenuItemInfoW
GetWindowInfo
GetParent
WindowFromDC
SetWindowRgn
GetSysColorBrush
GetClientRect
GetMonitorInfoW
MonitorFromWindow
IsZoomed
LoadIconW
ReleaseCapture
MsgWaitForMultipleObjectsEx
DrawEdge
DrawIconEx
TrackMouseEvent
GetMenuItemCount
GetMenuBarInfo
SetWindowPos
DestroyWindow
SetWindowTextW
CreateWindowExW
LoadCursorW
GetClassInfoW
AdjustWindowRectEx
SystemParametersInfoA
TrackPopupMenuEx
GetScrollInfo
EnableWindow
GetKeyState
KillTimer
ShowCaret
GetDoubleClickTime
DrawFrameControl
InvertRect
NotifyWinEvent
LoadMenuW
GetSubMenu
GetWindowLongW
SetWindowLongW
RemovePropW
GetPropW
GetWindowThreadProcessId
DrawTextExW
ReleaseDC
GetGUIThreadInfo
GetProcessWindowStation
GetUserObjectInformationW
PtInRect
IntersectRect
FillRect
CharNextW
GetThreadDesktop
EnumDisplayDevicesW
LoadImageW
IsCharAlphaNumericW
IsIconic
GetCursorPos
ScreenToClient
ChildWindowFromPoint
GetDlgCtrlID
WinHelpW
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemTextW
AppendMenuW
RegisterClassW
GetDlgItem
ShowWindow
SetTimer
OemToCharA
LoadStringA
wsprintfA
SetForegroundWindow
UpdateWindow
EndDialog
GetSystemMetrics

advapi32

RegCreateKeyExA
FreeSid
AddAccessAllowedAce
InitializeAcl
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
ReportEventA
RegisterEventSourceA
SetThreadToken
RevertToSelf
ReportEventW
OpenEventLogW
ReadEventLogW
DeregisterEventSource
RegisterEventSourceW
IsTextUnicode
RegQueryInfoKeyW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegOpenKeyExW
RegSetValueExW
ImpersonateLoggedOnUser
OpenThreadToken
RegDeleteValueW
RegEnumValueW
RegCreateKeyExW
OpenProcessToken
RegQueryValueExW
RegSetValueExA

ole32

CoInitializeEx
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetFileVersionInfoW

msvcrt

isdigit
exit
swprintf
strchr
wprintf
strncmp
strstr
qsort
isspace
wcslen
ctime
strncpy
time
tolower
strrchr
calloc
sprintf
wcsncat
printf
free
wcscpy
wcsrchr
fflush
fopen
fseek
fread
bsearch
towlower
fclose
wcsncmp
wcscmp
wcsncpy
isprint
malloc
memmove
swscanf
memchr
fputs
fputc
ftell

crypt32

CertGetCertificateContextProperty
CertFreeCertificateContext
CertCreateCertificateContext

Exports

Exports

CALNot
CALsYour
LicensedCALsNeedRun
OfDirectlyOf
SoftwareToIndirectlyOnly
TheSoftwareThoseInternetYou
YourA

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90228d342e92696ad62300ef285357c1

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

ole32

version

msvcrt

crypt32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 72KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 60KB - Virtual size: 132KB

.rsrc Size: 36KB - Virtual size: 35KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 76KB - Virtual size: 72KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 60KB - Virtual size: 132KB

.rsrc
Size: 36KB - Virtual size: 35KB

.reloc
Size: 4KB - Virtual size: 1KB