6c9f41c2f733e27a8e26154382dc3205_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
6c9f41c2f733e27a8e26154382dc3205_JaffaCakes118
Size 330KB
Sample241023-bpc56awarq
SHA256 d9ed5ac0c6264236346b8797c0a4bfda7a3379ec2dee8ad1901cb308d4a2ac08
MD5 6c9f41c2f733e27a8e26154382dc3205
SHA1 1c32916fda95cb9221082807c706241c557159c1
SHA512 acbd37958be92aa0aa0180b49ad5a3c55723cf34d7ded551a49fe79d2051eea55d07c462613512bc842db1b3f9f163cf6cef29f0b74e6a3c672706a4175a5760
SSDEEP 6144:qaCLEhxwqz/Q5lEq20w7bJ8t9Kf+9k3deUuJ/MFW8zJJho:rhyqz0QH7bJ8tw8UU/MpPo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c9f41c2f733e27a8e26154382dc3205_JaffaCakes118

File Explorer

6c9f41c2f733e27a8e26154382dc3205_JaffaCakes118

.exe 330KB

6c9f41c2f733e27a8e26154382dc3205_JaffaCakes118

IMPHASH 26db8a61bfab0db0649dac0d2a63a57c
SHA256 d9ed5ac0c6264236346b8797c0a4bfda7a3379ec2dee8ad1901cb308d4a2ac08
MD5 6c9f41c2f733e27a8e26154382dc3205
SHA1 1c32916fda95cb9221082807c706241c557159c1
SHA512 acbd37958be92aa0aa0180b49ad5a3c55723cf34d7ded551a49fe79d2051eea55d07c462613512bc842db1b3f9f163cf6cef29f0b74e6a3c672706a4175a5760
SSDEEP 6144:qaCLEhxwqz/Q5lEq20w7bJ8t9Kf+9k3deUuJ/MFW8zJJho:rhyqz0QH7bJ8tw8UU/MpPo
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21002

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MulDiv FreeEnvironmentStringsA OutputDebugStringA SetThreadLocale GetSystemDefaultLCID CreateFileMappingA FindClose FindResourceW VirtualProtect DeleteCriticalSection DeleteFileA GetDiskFreeSpaceW TlsFree GetProcessVersion RaiseException CompareStringA ResetEvent EnumSystemLocalesW GlobalUnlock GlobalSize FreeLibrary SizeofResource GlobalAlloc GetCurrentThreadId FormatMessageA SetErrorMode HeapAlloc GlobalDeleteAtom LoadLibraryExW VirtualFree IsDebuggerPresent GetFullPathNameW GetComputerNameW UnhandledExceptionFilter HeapFree LeaveCriticalSection CreateEventA WideCharToMultiByte lstrcmpiA SetHandleCount MapViewOfFileEx lstrcpyW SignalObjectAndWait GlobalFree SetFilePointer ReadFile VirtualQuery FindFirstFileW ResumeThread GetStringTypeExW GetOEMCP GetExitCodeThread FreeResource IsValidLocale LoadResource GetCommandLineW GetStdHandle VirtualQueryEx FormatMessageW GetDateFormatW WaitForSingleObject FlushInstructionCache CompareStringW UnmapViewOfFile WriteFile GetFileType ReleaseMutex SetLastError GetLocalTime SetConsoleCtrlHandler GetModuleHandleW VirtualAlloc GlobalFindAtomW LCMapStringA CreateEventW IsDBCSLeadByteEx EnumCalendarInfoW WaitForMultipleObjectsEx CloseHandle GetModuleHandleA TlsSetValue LockResource DebugBreak EnterCriticalSection lstrcpynW CreateFileW GetSystemInfo CreateFileA GetTimeZoneInformation GlobalLock GetProcessHeap GlobalAddAtomW lstrcpynA LoadLibraryExA SetThreadPriority GetThreadLocale SwitchToThread GetUserDefaultLCID LocalFree SetEndOfFile CreateThread RtlUnwind GetACP TlsGetValue lstrlenA CreateMutexA TlsAlloc ExitThread EnumSystemCodePagesW lstrlenW GetSystemDefaultLangID GetCurrentProcess

user32

MapWindowPoints IsZoomed DrawFrameControl IsDialogMessageW GetForegroundWindow DrawTextW CharLowerBuffW IsWindowUnicode MapVirtualKeyW DispatchMessageA UpdateWindow GetActiveWindow OpenClipboard SendMessageW DefMDIChildProcW SetClassLongW RemoveMenu EnableScrollBar TranslateMDISysAccel PeekMessageA InflateRect GetDC SetScrollInfo GetWindowLongA GetMessageTime DrawIcon SetWindowPlacement InvalidateRect GetMenu IntersectRect UnhookWindowsHookEx SetScrollRange OffsetRect GetWindow GetKeyboardLayoutList SetWindowsHookExW EmptyClipboard GetClassLongW IsWindow DestroyMenu RedrawWindow DestroyIcon CharNextExA GetSystemMetrics ShowScrollBar InsertMenuItemW SetForegroundWindow GetWindowThreadProcessId SetTimer ScreenToClient GetCursor GetSysColorBrush WindowFromPoint SendMessageA SetCapture SetWindowRgn GetPropW GetWindowPlacement GetSystemMenu GetMenuState FillRect GetMenuStringW GetWindowRect wsprintfA GetSysColor GetWindowTextW ShowWindow PostMessageA GetScrollRange GetMenuItemInfoW EnumWindows DefWindowProcW SetRect GetCapture SetWindowPos DrawIconEx MsgWaitForMultipleObjectsEx AdjustWindowRectEx EnumThreadWindows CallWindowProcW FindWindowExW SetWindowLongW SystemParametersInfoW CharNextW ActivateKeyboardLayout GetParent GetScrollInfo BeginPaint GetKeyboardType SetActiveWindow UnregisterClassW LoadBitmapW CreateWindowExW MessageBoxW GetCursorPos GetKeyNameTextW DrawTextExW EnableMenuItem SystemParametersInfoA ReleaseDC WaitMessage GetKeyboardState IsChild IsIconic RegisterClipboardFormatW ShowOwnedPopups FindWindowA GetMessagePos MsgWaitForMultipleObjects SetPropW EndPaint DrawMenuBar CreateIcon DrawEdge LoadKeyboardLayoutW GetSubMenu GetDesktopWindow GetClassNameA CheckMenuItem PtInRect SetScrollPos LoadStringW PostQuitMessage OpenInputDesktop FindWindowW InsertMenuW GetMenuItemCount ReleaseCapture GetKeyboardLayout LoadIconW DestroyCursor GetClassInfoW SetWindowTextW GetLastActivePopup CallWindowProcA SetMenu CloseClipboard SetCursor ScrollWindow MessageBeep GetDCEx CharLowerW SetClipboardData SetMenuItemInfoW PeekMessageW GetTopWindow DrawFocusRect GetMenuItemID GetScrollPos DeleteMenu EnumChildWindows TranslateMessage GetKeyboardLayoutNameW GetClipboardData PostMessageW TrackPopupMenu GetWindowLongW CreatePopupMenu GetClientRect CreateMenu GetUserObjectInformationA IsWindowVisible LoadCursorW DestroyWindow RegisterWindowMessageW RegisterClassW SetFocus DefFrameProcW CharUpperBuffW IsWindowEnabled DispatchMessageW EnableWindow GetIconInfo IsDialogMessageA CallNextHookEx RemovePropW GetKeyState GetFocus SetWindowLongA GetWindowDC CloseDesktop MessageBoxA SetParent ClientToScreen FrameRect KillTimer

comctl32

ImageList_GetBkColor ImageList_Destroy ImageList_GetDragImage ImageList_SetImageCount InitializeFlatSB ImageList_SetIconSize ImageList_DrawEx ImageList_BeginDrag ImageList_DragMove FlatSB_GetScrollPos FlatSB_SetScrollInfo ImageList_Read ImageList_Draw _TrackMouseEvent ImageList_GetImageCount ImageList_EndDrag FlatSB_SetScrollProp ImageList_Remove ImageList_DragLeave ImageList_Create FlatSB_GetScrollInfo ImageList_GetIconSize ImageList_Write FlatSB_SetScrollPos ImageList_Add ImageList_DragEnter ImageList_DragShowNolock ImageList_SetBkColor

gdi32

GetTextMetricsW GetEnhMetaFileBits CreateFontIndirectW GetWinMetaFileBits RestoreDC CreateBrushIndirect GetTextExtentPointW CreatePenIndirect GetSystemPaletteEntries GetTextMetricsA PlayEnhMetaFile CreateBitmap CreateRectRgn GetDIBits IntersectClipRect SelectPalette CreateHalftonePalette SetBrushOrgEx SetBkMode DeleteObject StretchBlt RealizePalette SetROP2 MaskBlt SetEnhMetaFileBits DeleteEnhMetaFile GetDeviceCaps SetViewportOrgEx CreateSolidBrush FrameRgn GetRgnBox GetEnhMetaFileDescriptionW SetTextColor GetCurrentPositionEx SelectClipRgn SelectObject GetBitmapBits SetWinMetaFileBits ExtTextOutW CopyEnhMetaFileW GetStockObject GetDCOrgEx CreatePalette ExcludeClipRect GetTextExtentPoint32A LineTo CreateCompatibleBitmap CreateDIBitmap GetEnhMetaFilePaletteEntries GetPixel GetEnhMetaFileHeader PatBlt SetBkColor GetBrushOrgEx CloseEnhMetaFile SetMapMode TranslateCharsetInfo SetWindowOrgEx GetTextExtentPoint32W SetDIBColorTable CreateCompatibleDC Rectangle UnrealizeObject GetObjectW GetClipRgn SetStretchBltMode CreateDIBSection GetWindowOrgEx CreateEnhMetaFileW SetPixel DeleteDC GetClipBox RectVisible SaveDC GetViewportOrgEx GetPaletteEntries MoveToEx LPtoDP BitBlt GetDIBColorTable

msimg32

AlphaBlend

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

advapi32

RegCloseKey OpenProcessToken InitializeSecurityDescriptor SetSecurityDescriptorDacl RegQueryValueExA RegOpenKeyExA GetTokenInformation RegOpenKeyExW RegFlushKey RegQueryValueExW RegCreateKeyExW

ole32

CoGetClassObject OleInitialize CoTaskMemAlloc IsAccelerator ProgIDFromCLSID OleDraw OleSetMenuDescriptor OleUninitialize CoInitialize CoUninitialize StringFromCLSID CreateStreamOnHGlobal CoTaskMemFree CoCreateInstance IsEqualGUID

shell32

ShellExecuteA ShellExecuteExA

oleaut32

SafeArrayUnaccessData SysAllocStringLen GetActiveObject SafeArrayAccessData SafeArrayCreate VariantInit SafeArrayGetUBound VariantClear SafeArrayGetElement SafeArrayGetLBound SafeArrayPutElement GetErrorInfo SafeArrayRedim SafeArrayPtrOfIndex SysReAllocStringLen SysFreeString SysAllocString VariantCopy VariantChangeType

iphlpapi

GetTcpTable GetUdpTable do_echo_rep FlushIpNetTable GetAdaptersInfo Icmp6SendEcho2 InternalSetTcpEntry IcmpSendEcho NhpAllocateAndGetInterfaceInfoFromStack GetUniDirectionalAdapterInfo

kbdcr

KbdLayerDescriptor

Sharing

General

Malware Config

Signatures

File Explorer

6c9f41c2f733e27a8e26154382dc3205_JaffaCakes118

kernel32

user32

comctl32

gdi32

msimg32

version

advapi32

ole32

shell32

oleaut32

iphlpapi

kbdcr

generic