2ecf9b2a4f99af1346f125ecaa828054_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2ecf9b2a4f99af1346f125ecaa828054_JaffaCakes118
Size

167KB
MD5

2ecf9b2a4f99af1346f125ecaa828054
SHA1

97c380b17f2ec8e700f15a05e1e2b3ca0c069d7b
SHA256

a4342dd45b7a9dfc6afedd4a37c9c833cfe8e5b311e073a95503d65e75ffde00
SHA512

e5a40f59b79f2c2f786a536f43bbcf73e44f7122b2ec4852cafb97a32424b7c36e6c770a9d0cfd7d50e5fbb9e352fb1520b19dd3a2ca528c1d67f751c1d293b2
SSDEEP

3072:yA8qKVuRA1Nhr/gzuRjsAL6zxCkS1q6Yezq2u:SEMX/0uBHCXS8Hed

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ecf9b2a4f99af1346f125ecaa828054_JaffaCakes118

Files

2ecf9b2a4f99af1346f125ecaa828054_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f806a9afcd8382693fc463a4744dcc31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\LestExpoWerelotTwit3rakexi\jo5viareSrismiffRapsShivdeKine3mortasLive\repNesshafayukGlueGoutvrow939.pdb

Imports

rpcrt4

CStdStubBuffer_AddRef
CStdStubBuffer_Connect

kernel32

FindResourceExW
UnmapViewOfFile
IsBadWritePtr
GetSystemTime
CreateThread
GetStdHandle
VirtualFree
CreatePipe
GetWindowsDirectoryA
ResumeThread
lstrcmpA
GetCurrentThread
VirtualProtect
SetThreadLocale
GlobalFlags
UnlockFile
PulseEvent
SetupComm
GetWindowsDirectoryW
lstrlenW
FlushViewOfFile
GetDateFormatA
GetCommModemStatus
MoveFileExW
LocalLock
CreateRemoteThread
IsDBCSLeadByteEx
ReleaseMutex
GetNumberFormatW
CancelIo
FindCloseChangeNotification
GetFileSize
LoadResource
GetThreadTimes
EscapeCommFunction
GetFullPathNameW
LCMapStringW
GetAtomNameA
LocalFree
FindResourceExA
LockResource
SetCurrentDirectoryW
lstrlenA
GetComputerNameW
GlobalDeleteAtom
FileTimeToLocalFileTime
GetFileType
GetModuleHandleW
IsDBCSLeadByte
DisconnectNamedPipe
GetFileInformationByHandle
HeapWalk
CreateEventW
CompareStringA
SearchPathA
SystemTimeToFileTime
HeapUnlock
GetProfileIntA
GlobalSize
LockFile
GetTempPathA
LocalReAlloc
SetThreadPriority
CreateMailslotW
SetTimerQueueTimer
RemoveDirectoryW
GetSystemInfo
MoveFileA
FileTimeToSystemTime
FindClose
CreateMutexA
FoldStringW
IsBadStringPtrW
GetTempFileNameW
SetLocalTime
SetLastError
GetCurrentThreadId
GetLocaleInfoW
GetVersionExW
RtlUnwind
SetNamedPipeHandleState
SetFileAttributesA
SetFileAttributesW
GetFullPathNameA
DuplicateHandle
FreeResource
EnumResourceLanguagesA
GetFileAttributesExW
lstrcmpiA
DeleteFileA
FormatMessageA
LeaveCriticalSection
GetTimeZoneInformation
CreateSemaphoreW
GetCPInfo
GlobalReAlloc
lstrcpynA
GetTimeFormatA
GetModuleFileNameW
GetShortPathNameA
GlobalMemoryStatusEx
VirtualQuery
CreateWaitableTimerW
FindFirstFileA
CreateFileW
CreateNamedPipeW
GetComputerNameExA
RemoveDirectoryA
RegisterWaitForSingleObject
lstrcpyA
GetOverlappedResult
WaitForSingleObject
InitializeCriticalSection
TlsGetValue

gdi32

GetObjectA
MoveToEx
LineTo
TextOutW
ScaleWindowExtEx
GetCharWidth32W
LineDDA
RealizePalette
PatBlt
CreateHatchBrush
SetDIBitsToDevice
SetTextColor
GetTextExtentPoint32W
GetBitmapBits
GetTextMetricsW
StretchBlt
CreatePenIndirect
GetPaletteEntries
CreateHalftonePalette
SetLayout
EndDoc
SetViewportExtEx
CreateSolidBrush
TextOutA
CombineRgn
IntersectClipRect
ExtFloodFill
GetTextMetricsA
CreateBitmap
RectInRegion
GetDIBColorTable
GetTextExtentPointA
EndPage
SetRectRgn
CreatePatternBrush
BitBlt
RemoveFontResourceW
SetBrushOrgEx
SetViewportOrgEx
GetDIBits
GetTextExtentPoint32A
GetViewportOrgEx
ExtTextOutA
PolyBezier
GetSystemPaletteUse
GetDeviceCaps
SetTextAlign
TranslateCharsetInfo
ResizePalette
GetROP2
RestoreDC
GetTextAlign

user32

ModifyMenuW
CharNextExA
CharLowerA
LockWindowUpdate
GetWindowLongA
CreateDialogParamA
CreateCaret
SendMessageTimeoutW
IsDlgButtonChecked
IsWindow
CheckMenuRadioItem
CharPrevA
LoadMenuA
SetRect
GetKeyboardLayoutNameW
GetCursorPos
DrawTextA
CharUpperBuffW
GetUpdateRgn
DrawStateA
WindowFromPoint
GetDlgCtrlID
SwitchToThisWindow
DrawTextW
GetUserObjectInformationA
LoadAcceleratorsA
FindWindowW
DefWindowProcW
TranslateAcceleratorW
ShowWindow
ValidateRect
SystemParametersInfoW
AppendMenuW
ArrangeIconicWindows
SetDlgItemTextW
SetCaretPos
CheckDlgButton
GetClipCursor
PostQuitMessage
CopyRect
GetMenuItemCount
CreateWindowExA
DrawAnimatedRects
DispatchMessageA
GetFocus
SetMenuItemBitmaps
CheckRadioButton
ShowWindowAsync
InsertMenuW
FindWindowA
RegisterHotKey
GetMenuItemInfoW
GetClassInfoW
GetUserObjectInformationW
DrawMenuBar
PtInRect
SendNotifyMessageW
LookupIconIdFromDirectory
GetClassInfoA
CallWindowProcW
CharUpperBuffA
GetMenuItemID
GetClassLongW
SetWindowTextA
TrackPopupMenu
SetActiveWindow
IsRectEmpty
MessageBoxW
ChildWindowFromPointEx
ReplyMessage
MapVirtualKeyExW
GetMessageExtraInfo
LoadStringA
CharToOemBuffA
InvalidateRect
GetClientRect
GetWindowLongW
GetDCEx
DefDlgProcW
CopyImage
GetMessageW
EnableMenuItem
HideCaret
InSendMessageEx
TabbedTextOutW
GetNextDlgTabItem
DragObject
GetMessagePos
SetWindowLongA
CallWindowProcA
DestroyIcon
UpdateWindow
OemToCharA
GetMessageTime
CreateWindowExW
DefWindowProcA
EnumThreadWindows
GetDesktopWindow
SystemParametersInfoA
GetClassInfoExW
InsertMenuA
RedrawWindow
RemoveMenu
FindWindowExA
DefFrameProcW
CharToOemA
DestroyCursor
PeekMessageA
SetWindowTextW
DestroyCaret
ShowCursor
CreatePopupMenu
DrawEdge
UnloadKeyboardLayout
GetClassLongA
SetScrollInfo

ole32

CoInitialize

Exports

Exports

PenExW

Sections

.text
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Agio
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Much
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lex
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sat
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fix
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oypac
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jibmed
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f806a9afcd8382693fc463a4744dcc31

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

rpcrt4

kernel32

gdi32

user32

ole32

Exports

Exports

Sections

.text Size: 127KB - Virtual size: 126KB

.Agio Size: 10KB - Virtual size: 13KB

.Much Size: 512B - Virtual size: 32B

.lex Size: 512B - Virtual size: 32B

.sat Size: 512B - Virtual size: 32B

.fix Size: 512B - Virtual size: 32B

.oypac Size: 512B - Virtual size: 368B

.jibmed Size: 22KB - Virtual size: 22KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 127KB - Virtual size: 126KB

.Agio
Size: 10KB - Virtual size: 13KB

.Much
Size: 512B - Virtual size: 32B

.lex
Size: 512B - Virtual size: 32B

.sat
Size: 512B - Virtual size: 32B

.fix
Size: 512B - Virtual size: 32B

.oypac
Size: 512B - Virtual size: 368B

.jibmed
Size: 22KB - Virtual size: 22KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 4KB - Virtual size: 3KB