e7aa8dd2f3d63a4a16ca9617d0feb88f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e7aa8dd2f3d63a4a16ca9617d0feb88f_JaffaCakes118
Size

316KB
MD5

e7aa8dd2f3d63a4a16ca9617d0feb88f
SHA1

638b28bf3ca50badb3d252bbea4405001805eafe
SHA256

539d54a1eba2aabbcd01b626039a75f757a09ebea9f49736fb33d615e8b81666
SHA512

6d5dd3e5a9f0643372e8650276756ad44bf14948a2289d593adcd806bd72cd9de5759bc8ca49b04cde3c39cf1bd8bbee6affa3a4ddebdac4b4b3f7f23f53bc24
SSDEEP

6144:DGa4c7rzLW8HOEzymzFznQ+Kbx7o3XP+WcYWhgkNIKR3JAXnfdc/e:Kym6Fz8d7oHGxPhgkHJgnFSe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7aa8dd2f3d63a4a16ca9617d0feb88f_JaffaCakes118

Files

e7aa8dd2f3d63a4a16ca9617d0feb88f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b971df38f04db5bf29085dd4af1f1e6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
GetCurrentDirectoryA
RtlUnwind
RaiseException
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
ExitProcess
FileTimeToSystemTime
ExitThread
GetACP
SetStdHandle
GetCPInfo
GetOEMCP
GetTimeZoneInformation
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
TerminateProcess
CreateThread
HeapSize
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetFileType
SetErrorMode
MapViewOfFile
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
lstrcatA
lstrcpyA
LoadLibraryA
GetProcAddress
HeapDestroy
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
GetLastError
FindResourceA
LoadResource
SizeofResource
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MulDiv
WideCharToMultiByte
lstrlenA
GetProcessVersion
GlobalFlags
TlsSetValue
TlsGetValue
LocalReAlloc
TlsAlloc
TlsFree
GlobalHandle
LocalAlloc
GetFileTime
DeleteFileA
GetVolumeInformationA
UnlockFile
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
CreateEventA
ReadFile
DuplicateHandle
ResumeThread
SuspendThread
SetThreadPriority
LocalFree
SetEvent
GetCurrentThread
GlobalGetAtomNameA
SetLastError
GetVersion
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
GlobalSize
lstrcmpA
GlobalFree
MoveFileExA
GlobalReAlloc
GetVersionExA
GetWindowsDirectoryA
WritePrivateProfileStringA
GetTempPathA
GetFullPathNameA
FindFirstFileA
Sleep
WaitForSingleObject
LockResource
FindClose
CreateFileMappingA
UnmapViewOfFile
GetFileSize
GetEnvironmentStringsW
GetTempFileNameA
MultiByteToWideChar
GetFileAttributesA
CreateFileA
WriteFile
CloseHandle
CreateDirectoryA
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
GetDriveTypeA
UnhandledExceptionFilter
HeapCreate
VirtualFree
VirtualAlloc

user32

LoadIconA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
DispatchMessageA
SetActiveWindow
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
SetScrollInfo
GetTopWindow
MessageBoxA
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SystemParametersInfoA
IsIconic
LoadStringA
EnumChildWindows
EnableMenuItem
WindowFromPoint
GetCursorPos
KillTimer
SetTimer
InflateRect
PeekMessageA
GetAsyncKeyState
GetScrollRange
SetScrollPos
SetScrollRange
GetScrollPos
IsRectEmpty
ShowScrollBar
SetRectEmpty
GetSysColor
CopyRect
UnregisterClassA
GetClientRect
EndPaint
InvalidateRect
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
DestroyWindow
SetFocus
GetFocus
IsChild
GetClassInfoExA
RegisterClassExA
CharUpperA
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
CharNextA
CreateWindowExA
CallWindowProcA
GetWindowLongA
SetWindowLongA
ShowWindow
UnionRect
PtInRect
GetKeyState
DefWindowProcA
GetClassNameA
ScreenToClient
GetDC
GetSysColorBrush
PostMessageA
GetWindowPlacement
ReleaseDC
wsprintfA
LoadBitmapA
GetWindowRect
SetWindowPos
LoadCursorA
SetCursor
GetWindowTextA
IsWindow
SendMessageA
RegisterWindowMessageA
EnableWindow
GetParent
GetNextDlgTabItem
DestroyMenu
GetDesktopWindow
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
GetMessageA
TranslateMessage
ValidateRect
ShowOwnedPopups
PostQuitMessage
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GrayStringA
DrawTextA
TabbedTextOutA
ClientToScreen
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
BeginPaint
IsDialogMessageA
IsWindowEnabled
SetWindowTextA
MoveWindow
GetSystemMetrics
GetDlgCtrlID

gdi32

TextOutA
Rectangle
CreateRectRgnIndirect
DeleteMetaFile
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
CreateMetaFileA
DeleteDC
SetViewportOrgEx
SetMapMode
CreateDCA
CreateSolidBrush
LPtoDP
SelectObject
GetStockObject
CreatePen
GetTextMetricsA
GetObjectA
Polygon
GetClipBox
SetTextColor
CreateBitmap
SetBkColor
SetBkMode
CreateFontIndirectA
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
ScaleWindowExtEx
LineTo
MoveToEx
DeleteObject
RectVisible
ExtTextOutA
PtVisible
Escape
GetDeviceCaps
SetTextAlign
GetTextExtentPoint32A

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA

shell32

DragQueryFileA
DragFinish
FindExecutableA
ShellExecuteA

ole32

CoCreateGuid
CoGetMalloc
CreateOleAdviseHolder
OleSaveToStream
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CreateDataAdviseHolder
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
CoDisconnectObject
CoCreateInstance
WriteClassStm
OleLoadFromStream

olepro32

ord250

oleaut32

VarUI4FromStr
LoadTypeLi
SysStringLen
SysAllocString
GetErrorInfo
VariantClear
RegisterTypeLi
VariantChangeType
SysAllocStringByteLen
SysStringByteLen
LoadRegTypeLi
SysAllocStringLen
SysFreeString

Sections

.text
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ffff
Size: 146KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yyup
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b971df38f04db5bf29085dd4af1f1e6f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

ole32

olepro32

oleaut32

Sections

.text Size: 8KB - Virtual size: 12KB

.rdata Size: 156KB - Virtual size: 156KB

.data Size: 2KB - Virtual size: 4KB

.ffff Size: 146KB - Virtual size: 148KB

.yyup Size: 512B - Virtual size: 76KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 8KB - Virtual size: 12KB

.rdata
Size: 156KB - Virtual size: 156KB

.data
Size: 2KB - Virtual size: 4KB

.ffff
Size: 146KB - Virtual size: 148KB

.yyup
Size: 512B - Virtual size: 76KB

.rsrc
Size: 2KB - Virtual size: 2KB