e29aee8bb881089dadae49aab4bf7ea1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e29aee8bb881089dadae49aab4bf7ea1_JaffaCakes118
Size

9.7MB
MD5

e29aee8bb881089dadae49aab4bf7ea1
SHA1

135d4bf0d2d18c21c5bc3bdcf4fa1accb4cf3c78
SHA256

ca36d20d37f18506141d792e5a6911494d3da38c7a58bd683c509ebce50eac46
SHA512

11a13a425c926457627165506082b26f541c34937c7a17aa33d52a72ad08d37ba28883b5fac4c9e95e68fd4cc347fda502cf8bcfa537d53567874a69d8c42da9
SSDEEP

98304:6zusnYXUk4or6WN2IFVPIIGiiyeiZyeiqzoO:1EZor6WMIFVPIubede5zoO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e29aee8bb881089dadae49aab4bf7ea1_JaffaCakes118

Files

e29aee8bb881089dadae49aab4bf7ea1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c58b5623cdf4ed8e999d5ba183d95055

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FillRect
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetCursorPos
PtInRect
GetKeyState
SetForegroundWindow
BeginPaint
EndPaint
GetDesktopWindow
InvalidateRgn
SetCursor
GetDC
ReleaseDC
SetRect
HideCaret
ShowCaret
SetCaretPos
SetTimer
KillTimer
GetKeyboardState
GetKeyboardLayoutList
ToUnicodeEx
ActivateKeyboardLayout
GetKeyboardLayout
MessageBoxA
ShowWindow
SetFocus
GetSystemMetrics
DestroyWindow
TranslateMessage
GetQueueStatus
FrameRect
GetSysColor
UpdateWindow
SetScrollPos
GetUpdateRect
GetFocus
PostQuitMessage
SetScrollInfo
ShowScrollBar
CreateCaret
wsprintfA
GetClientRect
InvalidateRect

rpcrt4

UuidFromStringW

wininet

InternetCrackUrlW
InternetCanonicalizeUrlW
InternetCreateUrlW
HttpSendRequestA
HttpOpenRequestA
InternetReadFile
InternetConnectA
InternetCloseHandle
InternetOpenA
InternetAttemptConnect
HttpQueryInfoW
HttpEndRequestW
HttpSendRequestExA
HttpOpenRequestW
InternetSetStatusCallbackW
InternetWriteFile
InternetConnectW
InternetOpenW
InternetSetOptionW
HttpSendRequestW
InternetQueryDataAvailable
InternetQueryOptionW
InternetSetFilePointer
FtpOpenFileW
HttpSendRequestExW

wsock32

send
recv
ntohs
closesocket
WSACleanup
gethostname
WSAAsyncSelect
gethostbyaddr
getsockname
ntohl
WSACancelBlockingCall
connect
setsockopt
listen
socket
bind
htonl
htons
inet_addr
accept
WSAGetLastError
WSASetLastError
ioctlsocket
gethostbyname
WSAStartup
shutdown

ole32

CoUninitialize
CoTaskMemFree
CLSIDFromProgID
CoCreateInstance
CoCreateGuid
CoInitialize

oleaut32

GetErrorInfo
SysFreeString
VariantInit
SysAllocString
VariantClear

kernel32

GetLocaleInfoA
SetEndOfFile
ReadFile
RtlUnwind
Sleep
SetEvent
FreeLibrary
WaitForSingleObject
ResetEvent
GetLocalTime
OpenMutexA
CreateMutexA
IsValidLocale
SetUnhandledExceptionFilter
FindClose
GetFileSize
Beep
GetCommandLineW
IsBadReadPtr
MulDiv
GetUserDefaultLCID
InterlockedDecrement
MapViewOfFile
UnmapViewOfFile
SetErrorMode
GlobalMemoryStatus
GetLogicalDrives
GetCurrentProcessId
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LoadResource
LockResource
CreateFileA
FindFirstFileA
GetWindowsDirectoryA
GetComputerNameA
GetVolumeInformationA
DeleteFileA
GetSystemDirectoryA
CopyFileA
GetExitCodeProcess
CreateProcessA
SetFileAttributesA
GetFileAttributesA
GetVersion
GetSystemDefaultLCID
GetSystemDefaultLangID
GetTimeZoneInformation
GetDriveTypeA
FindNextFileA
DeviceIoControl
DefineDosDeviceA
QueryDosDeviceA
LocalFree
CompareStringA
InterlockedExchange
FlushInstructionCache
SetLastError
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetOEMCP
GetACP
LoadLibraryA
VirtualQuery
GetSystemInfo
VirtualProtect
LCMapStringA
FlushFileBuffers
SetStdHandle
GetStringTypeA
SetFilePointer
GetFileType
SetHandleCount
GetEnvironmentStrings
LocalUnlock
LocalLock
LocalAlloc
MoveFileExA
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
CloseHandle
GetLastError
HeapSize
HeapReAlloc
VirtualAlloc
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
GetModuleHandleA
ExitProcess
GetSystemTimeAsFileTime
HeapAlloc
FlushConsoleInputBuffer
FileTimeToSystemTime
FileTimeToLocalFileTime
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
IsBadCodePtr
SetEnvironmentVariableA
SetConsoleCtrlHandler
RaiseException
GetFullPathNameA
GetCurrentDirectoryA
GlobalFree

netapi32

Netbios

comctl32

CreateStatusWindowW

winspool.drv

EndDocPrinter
StartPagePrinter
WritePrinter
EndPagePrinter
ClosePrinter

gdi32

CreateSolidBrush
SelectClipRgn
SetBkMode
PatBlt
StretchBlt
SetStretchBltMode
SetTextCharacterExtra
CreateRectRgn
MoveToEx
LineTo
StartPage
EndPage
GetEnhMetaFileBits
DeleteEnhMetaFile
CloseEnhMetaFile
AbortDoc
CreatePen
PtInRegion
CreateHalftonePalette
GetDIBColorTable
SelectPalette
RealizePalette
CreatePalette
SetTextJustification
PaintRgn
CreateCompatibleBitmap
SetEnhMetaFileBits
GetEnhMetaFileHeader
PlayEnhMetaFile
GetDIBits
CombineRgn
GetStockObject
SetRectRgn
EndDoc
FrameRgn
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
CreateBitmap
SetTextColor
GetDeviceCaps
SetBkColor
Escape
GetRgnBox
BitBlt

odbc32

ord136
ord4
ord127
ord15
ord24
ord16
ord13
ord18
ord111
ord141
ord75
ord14

advapi32

RegCloseKey
CryptReleaseContext
CryptAcquireContextW
CryptAcquireContextA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegSetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegEnumKeyExA
RegEnumValueA
CryptGenRandom

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 244KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 304KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.4MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 188KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c58b5623cdf4ed8e999d5ba183d95055

Headers

File Characteristics

Imports

user32

rpcrt4

wininet

wsock32

ole32

oleaut32

kernel32

netapi32

comctl32

winspool.drv

gdi32

odbc32

advapi32

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 244KB - Virtual size: 240KB

.data Size: 304KB - Virtual size: 1.2MB

.data1 Size: 88KB - Virtual size: 86KB

.rsrc Size: 6.4MB - Virtual size: 6.3MB

.reloc Size: 188KB - Virtual size: 244KB

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 244KB - Virtual size: 240KB

.data
Size: 304KB - Virtual size: 1.2MB

.data1
Size: 88KB - Virtual size: 86KB

.rsrc
Size: 6.4MB - Virtual size: 6.3MB

.reloc
Size: 188KB - Virtual size: 244KB