49090a6f81ea36463449b6e94a45dda5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
49090a6f81ea36463449b6e94a45dda5_JaffaCakes118
Size 840KB
Sample241015-vsb7ta1arm
SHA256 d471446740ce73cc9c6334258c5985d1eb751f5c2f7d2e0b9d2d27abc44b3738
MD5 49090a6f81ea36463449b6e94a45dda5
SHA1 08a100bdf62749006783c9b61ad45836f7471bb8
SHA512 9904f9c98105c5fac72cccd2052f80c3c0f1a083a9f983506c345e94547bc255368d72a29f3b2d745d18903bf5635e47b67ceb9abe58d721255edde97e862b84
SSDEEP 24576:pozPk3YREkmW0BXxnJTczwntkTgmvwFDgfOpFXRtenTmudXt:k81BDGz/gmYFD3z6yu5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49090a6f81ea36463449b6e94a45dda5_JaffaCakes118

File Explorer

49090a6f81ea36463449b6e94a45dda5_JaffaCakes118

.exe 840KB

49090a6f81ea36463449b6e94a45dda5_JaffaCakes118

IMPHASH cc753492cf13cdf40c153818898aeb85
SHA256 d471446740ce73cc9c6334258c5985d1eb751f5c2f7d2e0b9d2d27abc44b3738
MD5 49090a6f81ea36463449b6e94a45dda5
SHA1 08a100bdf62749006783c9b61ad45836f7471bb8
SHA512 9904f9c98105c5fac72cccd2052f80c3c0f1a083a9f983506c345e94547bc255368d72a29f3b2d745d18903bf5635e47b67ceb9abe58d721255edde97e862b84
SSDEEP 24576:pozPk3YREkmW0BXxnJTczwntkTgmvwFDgfOpFXRtenTmudXt:k81BDGz/gmYFD3z6yu5
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4252

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue FileTimeToSystemTime SetLastError QueryPerformanceCounter GlobalSize InitializeCriticalSection GlobalFlags FlushFileBuffers GetLocaleInfoW LockFile ExitThread GetVersionExW SetEnvironmentVariableA TlsFree FormatMessageW InterlockedExchange SetEndOfFile GetTempPathW LocalAlloc CloseHandle CopyFileW GetStartupInfoW GetFileType HeapAlloc HeapSize VirtualAlloc WriteFile CreateFileW FreeResource GetTempFileNameW GetFileTime GetCurrentProcess LoadLibraryW SetHandleCount SetUnhandledExceptionFilter SetThreadPriority CreateMutexW TerminateThread GetCPInfo GetSystemDirectoryW GlobalUnlock GetProcAddress WaitForSingleObject FreeEnvironmentStringsW GetStringTypeW GlobalHandle GetACP lstrlenW LockResource HeapSetInformation SetEvent GetConsoleCP GlobalGetAtomNameW GetFullPathNameW Sleep EnterCriticalSection HeapQueryInformation CreateEventW HeapCreate GetStdHandle GetFileAttributesExW GlobalAddAtomW SetStdHandle GlobalLock GetFileSizeEx HeapDestroy FileTimeToLocalFileTime lstrlenA GetVolumeInformationW IsValidCodePage DeleteCriticalSection GetCurrentProcessId MultiByteToWideChar GlobalAlloc IsProcessorFeaturePresent GetCurrentThread FreeLibrary WideCharToMultiByte LocalReAlloc CreateThread GetModuleFileNameW MulDiv ReadFile FindClose SetFilePointer UnhandledExceptionFilter GetFileSize RaiseException GetModuleHandleW FindFirstFileW HeapReAlloc GetUserDefaultUILanguage GetCurrentDirectoryW InterlockedIncrement HeapFree FindResourceW GetNumberFormatW GetSystemTimeAsFileTime lstrcmpiW GlobalReAlloc GetSystemInfo DuplicateHandle CreateNamedPipeW GetEnvironmentStringsW FindResourceExW TlsAlloc GetFileAttributesW WriteConsoleW ResumeThread GetProcessHeap GetTimeZoneInformation lstrcmpW lstrcpyW InitializeCriticalSectionAndSpinCount GlobalFree LCMapStringW LocalFree LoadResource RtlUnwind UnlockFile GetConsoleMode GetCommandLineW GlobalDeleteAtom SizeofResource GlobalFindAtomW GetCurrentThreadId LoadLibraryExW LeaveCriticalSection VirtualProtectEx TlsSetValue WaitForMultipleObjects CompareStringW VirtualQuery GetLastError InterlockedDecrement IsDebuggerPresent GetOEMCP GetTickCount lstrcmpA

user32

PostQuitMessage WinHelpW ModifyMenuW PostMessageW GetKeyNameTextW GetKeyboardLayout EndDeferWindowPos GetClassInfoExW GetMenuItemID CopyImage SetWindowTextW DefMDIChildProcW PostThreadMessageW ShowScrollBar SetScrollRange SetWindowPlacement SendDlgItemMessageW LoadIconW GetWindowPlacement CreatePopupMenu AppendMenuW DestroyIcon SetCursorPos GetClassInfoW DestroyWindow SetRect GetMenuDefaultItem SetMenuItemBitmaps IsZoomed EnableMenuItem NotifyWinEvent TrackPopupMenu EndPaint ToUnicodeEx EqualRect MonitorFromPoint GetDesktopWindow MessageBoxW MapWindowPoints IsWindow GetAsyncKeyState IsDialogMessageW IsChild BeginDeferWindowPos ReleaseCapture InvertRect FillRect DestroyAcceleratorTable DrawIconEx IsCharLowerW GetNextDlgGroupItem BeginPaint CreateAcceleratorTableW RealChildWindowFromPoint GetSysColorBrush GetMenuItemCount PeekMessageW GetCapture GetUpdateRect CheckDlgButton CreateMenu UnpackDDElParam DialogBoxParamW SetMenu GetClientRect GetLastActivePopup CopyAcceleratorTableW GetWindowThreadProcessId IsMenu GetKeyboardState DispatchMessageW GetWindowRgn DefFrameProcW RegisterClipboardFormatW MapVirtualKeyExW GetMonitorInfoW GetDlgItem TranslateMDISysAccel ShowOwnedPopups SetWindowLongW GetDoubleClickTime ShowWindow IsWindowVisible TranslateAcceleratorW CloseClipboard PtInRect SetClipboardData EmptyClipboard MapVirtualKeyW GetKeyState SubtractRect BringWindowToTop SetTimer GetScrollRange DestroyCursor CreateDialogIndirectParamW GetCursorPos GetMessageTime RegisterClassW LoadCursorW UpdateWindow GetWindow DrawTextExW ValidateRect GetActiveWindow LockWindowUpdate OpenClipboard ScreenToClient GetSystemMetrics ScrollWindow InsertMenuItemW EnableScrollBar CallNextHookEx IsIconic GetMenuStringW InsertMenuW KillTimer SetWindowRgn DeleteMenu DestroyMenu MapDialogRect AdjustWindowRectEx SetScrollPos ReuseDDElParam DrawTextW DrawIcon LoadImageW GetForegroundWindow EnumWindows UnionRect SetForegroundWindow IsRectEmpty InvalidateRect GetMessageW UpdateLayeredWindow GetMessagePos SetWindowPos GetFocus GetWindowTextLengthW GetMenuState GetClassNameW DrawFrameControl GetWindowLongW EndDialog SetCapture SetCursor SystemParametersInfoW EnableWindow GetDlgCtrlID IsClipboardFormatAvailable CopyRect RedrawWindow IsWindowEnabled LoadAcceleratorsW DrawFocusRect GetScrollPos CopyIcon GetDC SetRectEmpty SetClassLongW RemovePropW GetClassLongW SetMenuDefaultItem HideCaret CreateWindowExW RemoveMenu LoadBitmapW SetLayeredWindowAttributes GetNextDlgTabItem GetMenuCheckMarkDimensions GetMenuItemInfoW WaitMessage SetPropW CharUpperW SendDlgItemMessageA SetScrollInfo SetParent CheckMenuItem DefWindowProcW MonitorFromWindow InflateRect EnumDisplayMonitors TranslateMessage GetScrollInfo GrayStringW IntersectRect UnhookWindowsHookEx CharUpperBuffW GetTopWindow GetSysColor GetPropW DrawMenuBar MessageBeep SetActiveWindow CallWindowProcW SetFocus GetWindowTextW DrawStateW LoadMenuW OffsetRect MoveWindow SendMessageW DeferWindowPos ClientToScreen GetSystemMenu GetMenu FrameRect GetWindowRect ReleaseDC RegisterWindowMessageW SetWindowsHookExW GetIconInfo TabbedTextOutW GetWindowDC DrawEdge GetSubMenu WindowFromPoint

gdi32

GetBkColor Polyline GetNearestPaletteIndex EnumFontFamiliesW TextOutW SetMapMode SelectClipRgn GetBitmapBits CreateRectRgn SaveDC SetViewportExtEx PtInRegion OffsetRgn GetTextMetricsW GetTextColor ExtFloodFill Rectangle BitBlt SetPixel SetPaletteEntries SetBkColor StretchBlt ScaleViewportExtEx GetPixel LPtoDP GetObjectW CreateDIBSection ExtTextOutW CreateBitmap Polygon OffsetWindowOrgEx SetRectRgn SelectObject CombineRgn GetWindowOrgEx SetROP2 OffsetViewportOrgEx GetTextFaceW FrameRgn GetDeviceCaps PtVisible CreateCompatibleBitmap GetTextCharsetInfo GetPaletteEntries CreateDCW DPtoLP RestoreDC CreateDIBitmap GetViewportOrgEx SetWindowExtEx CreateHatchBrush Escape GetClipBox CreateCompatibleDC MoveToEx SelectPalette GetRgnBox SetBkMode CreatePatternBrush CreatePalette CreatePen SetTextAlign RectVisible EnumFontFamiliesExW PatBlt SetPolyFillMode SetViewportOrgEx RealizePalette CreateFontIndirectW IntersectClipRect SetTextColor SetWindowOrgEx GetTextExtentPoint32W DeleteDC CreateSolidBrush GetObjectType CreatePolygonRgn ScaleWindowExtEx SetDIBColorTable LineTo FillRgn Ellipse GetLayout CreateEllipticRgn SetPixelV CreateRectRgnIndirect GetWindowExtEx GetBoundsRect DeleteObject ExtSelectClipRgn GetSystemPaletteEntries ExcludeClipRect SetLayout GetViewportExtEx CreateRoundRectRgn CopyMetaFileW

advapi32

SetSecurityDescriptorSacl InitializeSecurityDescriptor RegSetValueExW ConvertSidToStringSidW GetTokenInformation RegQueryValueExW RegDeleteKeyW ConvertStringSecurityDescriptorToSecurityDescriptorW RegDeleteValueW RegCloseKey SetSecurityDescriptorDacl RegOpenKeyExW OpenThreadToken GetSecurityDescriptorSacl OpenProcessToken RegEnumKeyExW RegCreateKeyExW IsValidSid

shell32

DragQueryFileW DragFinish SHGetFileInfoW SHGetDesktopFolder SHAppBarMessage SHGetPathFromIDListW SHGetFolderLocation ShellExecuteW SHBrowseForFolderW ShellExecuteExW SHGetSpecialFolderLocation

ole32

CoLockObjectExternal OleGetClipboard CoCreateInstance ReleaseStgMedium CoTaskMemFree CLSIDFromString DoDragDrop IsAccelerator OleLockRunning RevokeDragDrop CoInitializeEx OleCreateMenuDescriptor CreateStreamOnHGlobal OleDuplicateData OleTranslateAccelerator CoInitialize CoTaskMemAlloc CoUninitialize OleDestroyMenuDescriptor RegisterDragDrop

oleaut32

VariantClear VariantChangeType SysStringLen SystemTimeToVariantTime SysAllocStringByteLen VariantTimeToSystemTime VarBstrFromDate SysFreeString SysAllocString SysAllocStringLen VariantInit SysStringByteLen

comctl32

ImageList_GetIconSize

shlwapi

SHDeleteEmptyKeyA SHDeleteValueA PathRemoveFileSpecW PathFindExtensionW PathIsUNCW PathStripToRootW PathFindFileNameW

gdiplus

GdipDrawImageRectI GdipDisposeImage GdipGetImagePalette GdipGetImageGraphicsContext GdipBitmapUnlockBits GdipFree GdipCreateBitmapFromHBITMAP GdipCreateBitmapFromStream GdipAlloc GdipCreateBitmapFromScan0 GdipGetImagePixelFormat GdipCloneImage GdipDeleteGraphics GdipBitmapLockBits GdipCreateFromHDC GdipGetImagePaletteSize GdipGetImageHeight GdipDrawImageI GdiplusStartup GdipGetImageWidth GdiplusShutdown GdipSetInterpolationMode

Name

.text

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.kyup

Size

512B

Virtual Size

150B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.kyul

Size

Virtual Size

5.4MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

309KB

Virtual Size

309KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.kuyul

Size

455KB

Virtual Size

455KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

57B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

49090a6f81ea36463449b6e94a45dda5_JaffaCakes118

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

gdiplus

generic