be5e68dc2be3085ca521f672df751dad_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

be5e68dc2be3085ca521f672df751dad_JaffaCakes118
Size

290KB
MD5

be5e68dc2be3085ca521f672df751dad
SHA1

d0ed256b9fbf4661eb5cab59eea881a6332e34bc
SHA256

e7022e9eaae48c6cd99709ff89823dcfd370ffc05c20db169c50b6aa59c404a3
SHA512

e931c4de0f1f6719393c825fc34d6100a8a32b72d35f0f8995b4d8d65f57126ae8c988450b9e9a2c378bc6b8f0402163e84771a73ebfb2ac77a080743736a6d2
SSDEEP

6144:8D85sF9Y0wUr+eRM+cjcbrrPeZ+zpW8SwhrYvc:8D8sMU6EncjcbrrPegzpW8zrX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be5e68dc2be3085ca521f672df751dad_JaffaCakes118

Files

be5e68dc2be3085ca521f672df751dad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

70923533b4d08eec9088232998aebacd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCommandLineA
TerminateProcess
ExitProcess
GetVersion
GetStartupInfoW
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetVersionExA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
GetStringTypeA
GetStringTypeW
LCMapStringA
FormatMessageW
LocalFree
LocalAlloc
Sleep
GetCurrentThreadId
GetCommandLineW
GetModuleFileNameW
CreateDirectoryW
CreateMutexW
CompareFileTime
FreeLibrary
MoveFileW
LoadLibraryW
GetModuleHandleW
GetProcAddress
lstrcmpW
lstrcatW
GetVersionExW
DeleteFileW
CopyFileW
WriteFile
FlushFileBuffers
CreateFileW
GetFileSize
ReadFile
CloseHandle
FindFirstFileW
FindClose
lstrcpynW
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
GetLocalTime
SystemTimeToFileTime
IsBadReadPtr
GlobalSize
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
lstrcmpiW
GetLastError
SetLastError
lstrlenW
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
lstrcpyW
LCMapStringW

user32

GetSubMenu
DrawTextW
DrawIconEx
DrawFrameControl
GetMenuItemInfoW
GetMenuState
LoadStringW
DialogBoxParamW
EndDialog
EnableWindow
SendDlgItemMessageW
GetClassNameW
keybd_event
CheckDlgButton
IsDlgButtonChecked
SetWindowPos
DrawTextExW
SetRectEmpty
GetCursor
GetIconInfo
ScreenToClient
CheckMenuItem
GetMenu
EnableMenuItem
GetMenuStringW
LoadMenuW
RegisterHotKey
GetMenuItemCount
WindowFromDC
ClientToScreen
PostQuitMessage
RegisterWindowMessageW
SetTimer
KillTimer
GetClipboardViewer
ChangeClipboardChain
SetClipboardViewer
CopyIcon
WindowFromPoint
LoadIconW
IsIconic
ModifyMenuW
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
IsWindowEnabled
GetDCEx
OffsetRect
GetDoubleClickTime
GetDesktopWindow
GetForegroundWindow
GetWindowTextW
GetWindowRect
GetSystemMetrics
GetWindowDC
DrawFocusRect
SystemParametersInfoW
CharLowerBuffW
CharUpperBuffW
CreateCaret
ShowCaret
GetCaretPos
DestroyCaret
HideCaret
SetCaretPos
SetCursor
SetCapture
ReleaseCapture
IsClipboardFormatAvailable
SetMenuDefaultItem
MessageBoxW
GetScrollPos
RegisterClassW
LoadCursorW
InvalidateRect
DestroyMenu
GetScrollRange
GetAsyncKeyState
LoadImageW
wsprintfW
CharUpperW
CharLowerW
MapVirtualKeyW
GetKeyNameTextW
UnregisterHotKey
FindWindowW
IsZoomed
TrackPopupMenu
GetCursorPos
AppendMenuW
CreatePopupMenu
DefWindowProcW
ScrollWindowEx
GetKeyState
DestroyIcon
GetDlgItem
GetWindow
IsWindowVisible
MoveWindow
UpdateWindow
ShowWindow
RegisterClipboardFormatW
SetClipboardData
OpenClipboard
EmptyClipboard
CloseClipboard
EnumClipboardFormats
GetClipboardData
GetClipboardFormatNameW
CreateWindowExW
GetFocus
FrameRect
EnableScrollBar
SetScrollInfo
DestroyWindow
GetWindowLongW
BeginPaint
GetClientRect
SetRect
FillRect
EndPaint
SendMessageW
SetWindowLongW
GetDC
ReleaseDC
GetSysColor
GetScrollInfo
SetScrollPos
GetParent
SetFocus
PostMessageW

gdi32

TextOutW
SetTextColor
SetBkColor
GetDIBits
GetObjectW
CreateDIBitmap
GetMetaFileBitsEx
CopyMetaFileW
GetEnhMetaFileBits
CopyEnhMetaFileW
CreatePalette
GetPaletteEntries
SetMetaFileBitsEx
SetEnhMetaFileBits
DeleteMetaFile
DeleteEnhMetaFile
GetMetaFileW
GetEnhMetaFileW
CreateCompatibleBitmap
SetBrushOrgEx
SetStretchBltMode
CreateFontIndirectW
FillRgn
SetBkMode
GetTextExtentPoint32W
CombineRgn
CreateRectRgnIndirect
ExtTextOutW
GetTextCharset
CreateRectRgn
ExcludeClipRect
LineTo
MoveToEx
CreatePen
GetTextColor
GetStockObject
GetPixel
GetDeviceCaps
BitBlt
DeleteObject
SelectObject
DeleteDC
CreateCompatibleDC
CreateSolidBrush
GetTextMetricsW
SetMapMode
SetTextCharacterExtra
StretchBlt
SetTextAlign
SetTextJustification

comdlg32

GetOpenFileNameW
GetSaveFileNameW
ChooseFontW

advapi32

SetSecurityDescriptorDacl
GetUserNameW
InitializeSecurityDescriptor

shell32

Shell_NotifyIconW
SHGetFileInfoW
DragFinish
DragQueryFileW
ShellExecuteExW
ExtractIconExW

ole32

OleUninitialize
RevokeDragDrop
ReleaseStgMedium
DoDragDrop
OleInitialize
RegisterDragDrop

comctl32

ord17
ImageList_ReplaceIcon
CreateStatusWindowW
CreateToolbarEx
ImageList_SetBkColor
ImageList_Create
ImageList_Destroy

imm32

ImmAssociateContext
ImmReleaseContext
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmGetContext
ImmSetCompositionFontW

Exports

Exports

bitmap_bytes_to_data
bitmap_copy_data
bitmap_data_to_bytes
bitmap_data_to_file
bitmap_file_to_data
bitmap_free
bitmap_free_data
bitmap_free_item
bitmap_get_file_info
bitmap_get_icon
bitmap_get_menu_bitmap
bitmap_get_menu_icon
bitmap_get_menu_title
bitmap_get_tooltip_text
bitmap_initialize
bitmap_initialize_item
bitmap_window_create
bitmap_window_destroy
bitmap_window_hide_data
bitmap_window_save_data
bitmap_window_show_data
file_bytes_to_data
file_copy_data
file_data_to_bytes
file_data_to_file
file_file_to_data
file_free
file_free_data
file_free_item
file_get_file_info
file_get_icon
file_get_menu_bitmap
file_get_menu_icon
file_get_menu_title
file_get_tooltip_text
file_initialize
file_initialize_item
file_window_create
file_window_destroy
file_window_hide_data
file_window_save_data
file_window_show_data
text_bytes_to_data
text_copy_data
text_data_to_bytes
text_data_to_file
text_file_to_data
text_free
text_free_data
text_free_item
text_get_file_info
text_get_icon
text_get_menu_bitmap
text_get_menu_icon
text_get_menu_title
text_get_tooltip_text
text_initialize
text_initialize_item
text_window_create
text_window_destroy
text_window_hide_data
text_window_save_data
text_window_show_data

Sections

.text
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bak
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bak
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bak
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bak
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bak
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

70923533b4d08eec9088232998aebacd

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

comctl32

imm32

Exports

Exports

Sections

.text Size: 149KB - Virtual size: 148KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 15KB - Virtual size: 21KB

.rsrc Size: 81KB - Virtual size: 81KB

.bak Size: 6KB - Virtual size: 6KB

.bak Size: 6KB - Virtual size: 6KB

.bak Size: 6KB - Virtual size: 6KB

.bak Size: 6KB - Virtual size: 6KB

.bak Size: 6KB - Virtual size: 6KB

.text
Size: 149KB - Virtual size: 148KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 15KB - Virtual size: 21KB

.rsrc
Size: 81KB - Virtual size: 81KB

.bak
Size: 6KB - Virtual size: 6KB

.bak
Size: 6KB - Virtual size: 6KB

.bak
Size: 6KB - Virtual size: 6KB

.bak
Size: 6KB - Virtual size: 6KB

.bak
Size: 6KB - Virtual size: 6KB