0d18dea8844fc91ce9b5beba8a0275a2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0d18dea8844fc91ce9b5beba8a0275a2_JaffaCakes118
Size

359KB
MD5

0d18dea8844fc91ce9b5beba8a0275a2
SHA1

a1f4f7e3b34b38aa6dde32b1d80bea7da8235110
SHA256

e501171b2373686d56fc2dd3f49fe05c071eeeff3e803ffb615ba0f9048c9cb0
SHA512

055f76541772715757becaf0ef56d2c262853aa2441c8a9e6597c9b11dc933f87ad57405d86e3b72399a67800e2c177cf4c9702dd7c4fed84876adc044af07f9
SSDEEP

3072:hSSHUMXqfQ3I5z8ciTDmYoqFatTdIQlZoyK4A282:hSS0AqhF8ciXFQfA282

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d18dea8844fc91ce9b5beba8a0275a2_JaffaCakes118

Files

0d18dea8844fc91ce9b5beba8a0275a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c4728e9284e2359fcbea3ca22f09880

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
lstrlenA
_lread
GetWindowsDirectoryA
ExpandEnvironmentStringsA
CreateDirectoryA
GetModuleFileNameA
SetCurrentDirectoryA
OpenMutexA
CreateMutexA
GetLastError
ReleaseMutex
GetVersionExA
WaitForSingleObject
_lopen
_lclose
SetFileAttributesA
DeleteFileA
CopyFileA
_llseek
_lwrite
Sleep
SetEnvironmentVariableA
CompareStringW
CompareStringA
FindClose
FindFirstFileA
GlobalFree
GlobalAlloc
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
lstrcpynA
lstrcpyA
FreeLibrary
LocalAlloc
LocalFree
FormatMessageA
LoadLibraryA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
DuplicateHandle
GetCurrentProcess
CreateFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
CloseHandle
LockFile
UnlockFile
SetEndOfFile
GetProcAddress
GetVolumeInformationA
GetFullPathNameA
lstrcmpiA
SetLastError
InterlockedIncrement
InterlockedDecrement
GetFileAttributesA
GetFileSize
GetFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrcatA
TlsAlloc
GlobalUnlock
GlobalHandle
GlobalLock
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetVersion
lstrcmpA
GetCurrentThreadId
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetProcessVersion
GlobalFlags
GetCPInfo
GetOEMCP
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
CreateThread
ExitThread
GetStartupInfoA
ExitProcess
RaiseException
HeapAlloc
HeapFree
SetStdHandle
GetFileType
GetACP
HeapSize
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr

user32

CharUpperA
UnhookWindowsHookEx
EnableWindow
IsWindowEnabled
GetLastActivePopup
LoadStringA
SetWindowsHookExA
PeekMessageA
CallNextHookEx
GetKeyState
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
SetWindowPos
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
DestroyWindow
GetDlgCtrlID
GetWindowTextA
GetDlgItem
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
LoadCursorA
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
SetWindowLongA
GetClientRect
GetWindowLongA
SendMessageA
UpdateWindow
ShowWindow
CreateWindowExA
GetSystemMetrics
RegisterClassA
GetSysColorBrush
SetRect
DefWindowProcA
IsWindow
TranslateMessage
DispatchMessageA
GetMessageA
GetParent
GetWindow
MessageBoxA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

shell32

ShellExecuteA

ole32

OleSetContainedObject
OleInitialize
OleCreate

ws2_32

recv
connect
WSAGetLastError
closesocket
ioctlsocket
htons
gethostbyname
socket
send
WSACleanup
WSAStartup
setsockopt
sendto

winmm

timeGetTime

comctl32

ord17

wininet

InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
InternetGetLastResponseInfoA
InternetOpenUrlA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetQueryDataAvailable

gdi32

RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
SaveDC
DeleteDC
DeleteObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDeviceCaps
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comdlg32

GetFileTitleA

oleaut32

SysFreeString
VariantInit
SysAllocString
VariantClear
SafeArrayCreate
SafeArrayDestroy
SafeArrayAccessData

Sections

.text
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9c4728e9284e2359fcbea3ca22f09880

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

ws2_32

winmm

comctl32

wininet

gdi32

winspool.drv

comdlg32

oleaut32

Sections

.text Size: 104KB - Virtual size: 101KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 8KB - Virtual size: 25KB

.text
Size: 104KB - Virtual size: 101KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 8KB - Virtual size: 25KB