40707cdcd4220213b9ef2545043d6c99_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

40707cdcd4220213b9ef2545043d6c99_JaffaCakes118
Size

388KB
MD5

40707cdcd4220213b9ef2545043d6c99
SHA1

7f9d3ad1125de47368644e29b5d5cd515c6497e8
SHA256

6f7c7b4f3bd9e6ce0dc0d4dd7662e35d8a2079dfe61b2febf2645b68fe11ee3f
SHA512

0a3cda582f1a444ad78d5f09d4e204a753c74863bcbbbdf5c6ffcafa523b195ac4c6aa7922973cf2687b673e4e346f94b6525402db7380a4e53c3f8855480088
SSDEEP

6144:tYMk7V7PQkaYO0iNq/PimTBQNEETJYOo0DldfrvwmjcMVW5OouUI5KtrQ8POyU:tnSdO0iNEPn+TGOoYzwscMSOXUIJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
40707cdcd4220213b9ef2545043d6c99_JaffaCakes118

Files

40707cdcd4220213b9ef2545043d6c99_JaffaCakes118
.exe windows:4 windows x86 arch:x86

23c389b06dc51960e6823d6e7038e3ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

SetServiceStatus
RegEnumKeyW
OpenSCManagerA
InitiateSystemShutdownA
RegQueryValueA
ChangeServiceConfigA
QueryServiceLockStatusW
ReportEventA
CloseServiceHandle
ChangeServiceConfig2A
StartServiceA
RegQueryValueW
LsaFreeMemory
QueryServiceStatus
GetUserNameA
RegisterEventSourceA
CreateServiceW
DecryptFileW
RegCreateKeyA
RegisterServiceCtrlHandlerA
ChangeServiceConfig2W
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
LogonUserA
GetServiceDisplayNameW
ReadEventLogW
StartServiceCtrlDispatcherW
RegOverridePredefKey
RegOpenKeyExW
OpenEventLogW
EnumDependentServicesA
OpenServiceA
StartServiceCtrlDispatcherA
RegRestoreKeyW
CreateProcessAsUserW
RegUnLoadKeyW
EnumServicesStatusA
RegQueryInfoKeyW
RegEnumKeyExA
RegSetValueExW
RegCreateKeyExA
SetServiceObjectSecurity
LsaOpenPolicy
RegCreateKeyW
LockServiceDatabase
GetUserNameW
GetServiceKeyNameA

gdi32

Polygon
SetTextColor
CreateICW
RectVisible
SetBkMode
GetTextMetricsA
GetCharABCWidthsW
SetPixelFormat
RestoreDC
CreateDCW
OffsetViewportOrgEx
GetClipRgn
RealizePalette
CreatePolygonRgn
GetTextMetricsW
CreateBitmap
ExtEscape
GetStockObject
CreateRectRgn
CreatePenIndirect
GetTextFaceA
PolyDraw
GetTextCharsetInfo
CreateFontIndirectA
EnumFontsA
CloseEnhMetaFile
SetWindowOrgEx
GetClipBox
SwapBuffers
CreateCompatibleBitmap
SetWindowExtEx
SetColorAdjustment
UnrealizeObject
GetNearestPaletteIndex
GetEnhMetaFilePaletteEntries
StrokePath
CreateRoundRectRgn
TextOutA
CreateSolidBrush
GetSystemPaletteEntries
DeleteObject
CreatePen
GetBrushOrgEx
SaveDC
SetPixel
SetStretchBltMode
UpdateColors
EnumMetaFile
GetPixel
EqualRgn
CreateFontA
GdiFlush
StartDocW
CreateICA
SetPixelV
ScaleViewportExtEx
GetMapMode
GetDIBits
CombineRgn
CopyEnhMetaFileW
EnumFontFamiliesA
ExtSelectClipRgn
GetTextExtentPointA
GetGlyphOutlineW
GetBkColor
EnumFontsW
CreateDIBPatternBrushPt
RectInRegion
GetTextExtentPoint32A
SetViewportOrgEx
CreateEnhMetaFileA
CreateCompatibleDC
SelectPalette
ResizePalette
SetMapMode
SetBkColor
GetTextAlign
GetRgnBox
DPtoLP
ExtCreateRegion
EndDoc
CreateEllipticRgn
EnumFontFamiliesExW
Chord
IntersectClipRect
GetTextExtentPoint32W
SetPolyFillMode
GetObjectA
SetDIBColorTable
GetPolyFillMode
MoveToEx
GetGlyphOutlineA
WidenPath
SelectClipRgn
GetEnhMetaFileBits
Pie
EndPath
GetCharWidthA
PolyBezierTo
DeleteEnhMetaFile
SetRectRgn
PtVisible
PolyBezier
EndPage
SetDeviceGammaRamp
CopyEnhMetaFileA
GetDeviceCaps
LPtoDP
CreateMetaFileA
GetWinMetaFileBits
SetWinMetaFileBits
ExtFloodFill
PatBlt
OffsetClipRgn
DeleteDC
OffsetRgn
PlayEnhMetaFile
Polyline
GetObjectW
Arc

kernel32

CreateConsoleScreenBuffer
ExitProcess
ClearCommError
CloseHandle
GetStringTypeA
SetLastError
QueryDepthSList

rasapi32

RasEnumConnectionsA
RasGetConnectStatusA

msvcrt

_except_handler3
_setmbcp
__set_app_type
sin
__dllonexit
_onexit
_ftol
__threadid
_iob
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_controlfp

user32

FillRect
GetClipboardViewer
TrackPopupMenu
CreateCursor
DrawIconEx
DrawIcon
ReleaseDC
CloseWindow
EnableWindow
PostThreadMessageW
DrawTextExA
TranslateAcceleratorA
PostQuitMessage
DrawTextA
ChangeDisplaySettingsA
ScreenToClient
LoadMenuA
MoveWindow
LockWindowUpdate
GetDoubleClickTime
DrawTextW
SetWindowTextA
GetClassInfoA
CharNextA
CharUpperBuffW
FindWindowA
GetWindowTextLengthA
DefWindowProcA
ShowOwnedPopups
LoadMenuW
GetKeyboardState
GetMessageExtraInfo
ShowCursor
SetWindowPos
EmptyClipboard
SystemParametersInfoA
TranslateMessage
GetClassInfoExW
CharUpperW
CheckRadioButton
MapVirtualKeyA
CreateWindowExW
CreateDialogIndirectParamA
AdjustWindowRect
CreateDialogParamA
DestroyMenu
GetClassLongA
GetNextDlgTabItem
OemToCharBuffA
GetClassNameW
CreateDialogIndirectParamW
SystemParametersInfoW
IsCharAlphaW
CopyAcceleratorTableW
PeekMessageW
GetDC
GetClipboardData
GetForegroundWindow
GetClassInfoW
ChildWindowFromPointEx
IsCharAlphaNumericA
GetClassNameA
SetPropA
CreateMenu
wvsprintfA
GetScrollRange
DeferWindowPos
DestroyCursor
GetGUIThreadInfo
DialogBoxIndirectParamW
ToAscii
SetMenu
SetWindowPlacement
DispatchMessageA
SetCaretPos
IsWindowEnabled
ScrollWindow
GetClipCursor
SetClipboardData
GetWindowThreadProcessId
GetKeyboardLayoutNameW
ShowWindow
CloseDesktop
GetClipboardFormatNameW
MapVirtualKeyExA
GetMenuState
GetWindowTextA
SetMenuDefaultItem
DdeClientTransaction
DestroyAcceleratorTable
DispatchMessageW
InvalidateRect
GetLastActivePopup
SetForegroundWindow
RegisterWindowMessageA
LoadStringW
CharLowerW
LoadIconA
MessageBoxA
SendInput
SetKeyboardState
BlockInput
GetDlgItemTextA
WinHelpA
PtInRect
LoadCursorA
GetProcessWindowStation
SetActiveWindow
ScrollWindowEx
CallMsgFilterA
IntersectRect
RemoveMenu
GetMenu
UnionRect
ModifyMenuA
GetDlgItemTextW
GetTabbedTextExtentA
AppendMenuW
GetParent
CreateWindowStationW
SetFocus
EnumDisplaySettingsW
SetWindowLongW
CharToOemA
DdeAccessData
IsMenu
MapDialogRect
DdeFreeStringHandle
DefDlgProcA
IsCharLowerA
MapVirtualKeyExW
SetCursor
IsZoomed
RemovePropA
TranslateMDISysAccel
DdeQueryStringA
GetUserObjectInformationW
VkKeyScanW
VkKeyScanExA
GetMenuItemID
WindowFromPoint
PostMessageA
DefFrameProcW
GetWindow
CopyImage

mfc42

ord1576
ord561
ord3738
ord4424
ord1060
ord4080
ord3079
ord3825
ord3831
ord3830
ord3401
ord2976
ord3081
ord2985
ord1168
ord3262
ord1088
ord4465
ord3259
ord1094
ord2982
ord1090
ord5714
ord1093
ord5307
ord4698
ord1019
ord2725
ord5302
ord1084
ord3346
ord2396
ord1042
ord1089
ord3922
ord5731
ord1010
ord2554
ord4486
ord6375
ord815

Sections

.text
Size: 268KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23c389b06dc51960e6823d6e7038e3ec

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

rasapi32

msvcrt

user32

mfc42

Sections

.text Size: 268KB - Virtual size: 266KB

.rdata Size: 52KB - Virtual size: 50KB

.data Size: 52KB - Virtual size: 4.0MB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 268KB - Virtual size: 266KB

.rdata
Size: 52KB - Virtual size: 50KB

.data
Size: 52KB - Virtual size: 4.0MB

.rsrc
Size: 12KB - Virtual size: 9KB