e8cdd0492eed4108e13abf3ee83acb04_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e8cdd0492eed4108e13abf3ee83acb04_JaffaCakes118
Size

464KB
MD5

e8cdd0492eed4108e13abf3ee83acb04
SHA1

96105f6b8e6e7caad7b1fae9a3fb768170bf0983
SHA256

ee0977b9b281217301ccc285128ec16bc9ca2ff90f2cb9dc511a0c5980348c3b
SHA512

db43d98739db8e5762ab8c68d8e111623b3a375d24d13d7776cfcccae9436b4500157c8ae26d571a2ec537c81aa0d3e29edbb7fbb8cb929611e805dbeb6cba40
SSDEEP

12288:owQKEK7WXpCceRrJY/Cjbl+dDjl/fTR4EMMnMMMMMQ:oyceDY/Cj4LlMMnMMMMM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8cdd0492eed4108e13abf3ee83acb04_JaffaCakes118

Files

e8cdd0492eed4108e13abf3ee83acb04_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f9a5a886912a7a5ff28c564b6e40077a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetMenuItemBitmaps
DeleteMenu
SystemParametersInfoA
DispatchMessageA
GetScrollPos
PtInRect
DefWindowProcA
GetWindowTextLengthA
RegisterWindowMessageA
OffsetRect
GetSysColor
DrawTextA
OemToCharA
SetWindowTextA
ShowWindow
GetParent
GetSysColorBrush
IsWindow
TrackPopupMenu
SetScrollPos
SetScrollRange
GetMenuCheckMarkDimensions
SetScrollInfo
BeginPaint
GetMenu
GetMenuState
ClientToScreen
TabbedTextOutA
IsWindowVisible
CheckRadioButton
LoadBitmapA
IsIconic
GetMenuStringA
UpdateWindow
RemovePropA
GetWindow
GetTopWindow
InsertMenuA
GetMenuItemCount
GetCursorPos
SetActiveWindow
ModifyMenuA
GetFocus
GetDC
TranslateMessage
MessageBoxA
GetMessageTime
EndPaint
IsWindowEnabled
GetForegroundWindow
ValidateRect
SetWindowsHookExA
IsChild
CheckDlgButton
GetClassInfoA
CharUpperA
EnableWindow
EndDeferWindowPos
GetMessageA
GetWindowLongA
ScreenToClient
GetClientRect
CallNextHookEx
GetWindowPlacement
GetDesktopWindow
GetNextDlgTabItem
CreateWindowExA
GetCapture
GetScrollInfo
GetDlgCtrlID
SetWindowPos
WinHelpA
LoadStringA
SetForegroundWindow
GetWindowDC
SetDlgItemTextA
GetClassLongA
CheckMenuItem
GetMessagePos
IsDialogMessageA
PostQuitMessage
PeekMessageA
IsDlgButtonChecked
GetPropA
GetDlgItem
DestroyWindow
SetFocus
ScrollWindowEx
GetMenuItemID
IntersectRect
GetActiveWindow
ScrollWindow
GetLastActivePopup
LoadIconA
SetWindowPlacement
GetClassNameA
SendMessageA
UnhookWindowsHookEx
SetWindowLongA
GetKeyState
wsprintfA
RegisterClassA
MoveWindow
GetSubMenu
DestroyMenu
EnableMenuItem
GetDlgItemTextA
GetSystemMetrics
GetWindowRect
GrayStringA
SetCursor
GetWindowTextA
ShowScrollBar
ShowOwnedPopups
CallWindowProcA
DeferWindowPos
GetScrollRange
GetDlgItemInt
SetDlgItemInt
LoadCursorA
CopyRect
SetPropA
BeginDeferWindowPos
ReleaseDC
MapWindowPoints
CharToOemA
PostMessageA
EqualRect
SendDlgItemMessageA
CallMsgFilterA

comdlg32

GetFileTitleA

advapi32

RegEnumValueA
RegQueryValueExA
LookupPrivilegeValueA
RegDeleteKeyA
RegQueryInfoKeyA
AdjustTokenPrivileges
RegOpenKeyExA
RegOpenKeyA
RegDeleteValueA
RegCloseKey
RegRestoreKeyA
RegSetValueExA
OpenProcessToken
RegCreateKeyExA

setupapi

SetupDiCreateDeviceInfoA
SetupOpenInfFileA
SetupDiEnumDeviceInfo
SetupDiClassGuidsFromNameA
SetupDiEnumDriverInfoA
SetupDiSetSelectedDriverA
SetupFindFirstLineA
SetupCloseInfFile
SetupDiOpenDevRegKey
SetupDiSetDeviceRegistryPropertyA
SetupFindNextLine
SetupDiBuildDriverInfoList
SetupGetStringFieldA
SetupDiGetDeviceInstallParamsA
SetupDiSetDeviceInstallParamsA

kernel32

FreeEnvironmentStringsA
GetACP
Sleep
GetVersionExA
ExitProcess
IsBadReadPtr
GetCurrentProcess
GetStringTypeA
GetEnvironmentVariableA
GetLocalTime
LocalAlloc
GetThreadLocale
MulDiv
EnumSystemLocalesA
GlobalUnlock
GetTimeZoneInformation
GetSystemTime
RtlUnwind
GetShortPathNameA
lstrcpyA
SetThreadPriority
SetFileTime
LocalFileTimeToFileTime
UnhandledExceptionFilter
GetStartupInfoA
GetEnvironmentStrings
InitializeCriticalSection
lstrcatA
IsBadCodePtr
LockFile
GetStringTypeW
GetOEMCP
GetPrivateProfileStringA
GetLastError
GetFileAttributesA
GetPrivateProfileIntA
CreateFileA
GetCommandLineA
HeapAlloc
FlushFileBuffers
GetVolumeInformationA
EnterCriticalSection
lstrcmpA
HeapFree
CreateEventA
DuplicateHandle
GetWindowsDirectoryA
LockResource
CloseHandle
FreeLibrary
HeapCreate
WriteFile
ExitThread
GlobalDeleteAtom
FindFirstFileA
GetStdHandle
SystemTimeToFileTime
GetProcessVersion
TlsAlloc
GlobalGetAtomNameA
FindResourceA
WritePrivateProfileStringA
SetErrorMode
DeleteCriticalSection
GetModuleFileNameA
LocalFree
FileTimeToSystemTime
GetStringTypeExA
GetProcAddress
ResumeThread
GetUserDefaultLCID
GetCPInfo
IsValidCodePage
GlobalAddAtomA
LocalReAlloc
IsBadWritePtr
SetFileAttributesA
InterlockedDecrement
CompareStringA
TerminateProcess
GlobalFree
SetEvent
GetLocaleInfoA
SuspendThread
CreateThread
lstrlenA
GetCurrentThreadId
WaitForSingleObject
GetModuleHandleA
VirtualAlloc
HeapDestroy
TlsFree
FileTimeToLocalFileTime
LoadResource
LoadLibraryA
GetEnvironmentStringsW
CompareStringW
FindClose
GlobalFindAtomA
IsValidLocale
lstrcmpiA
TlsGetValue
SetEnvironmentVariableA
GetCurrentDirectoryA
GetFileType
GlobalHandle
DeleteFileA
GlobalAlloc
WideCharToMultiByte
MoveFileA
GlobalFlags
SetUnhandledExceptionFilter
SetEndOfFile
GlobalLock
SetConsoleCtrlHandler
SetFilePointer
LCMapStringW
ReadFile
FatalAppExitA
LCMapStringA
GlobalReAlloc
GetFullPathNameA
GetVersion
RaiseException
MultiByteToWideChar
GetFileTime
SetLastError
LeaveCriticalSection
VirtualFree
FreeEnvironmentStringsW
HeapReAlloc
GetFileSize
InterlockedIncrement
lstrcpynA
SetHandleCount
GetCurrentThread
TlsSetValue
HeapSize
UnlockFile
GetLocaleInfoW

msi

MsiDatabaseExportA
MsiDatabaseCommit
MsiConfigureProductA
MsiConfigureFeatureW

shell32

SHGetFileInfoA
DragAcceptFiles

samlib

SamConnectWithCreds
SamTestPrivateFunctionsUser
SamiEncryptPasswords
SamRemoveMultipleMembersFromAlias

gdi32

OffsetViewportOrgEx
RectVisible
GetDCOrgEx
ExtSelectClipRgn
SelectPalette
ArcTo
SetPolyFillMode
PolylineTo
CreateRectRgn
SetTextColor
ScaleViewportExtEx
GetDeviceCaps
MoveToEx
SaveDC
GetObjectType
SetStretchBltMode
SetViewportOrgEx
SetTextCharacterExtra
SetArcDirection
SetWindowExtEx
CreateSolidBrush
DeleteDC
SelectObject
GetViewportExtEx
ScaleWindowExtEx
RestoreDC
PolyDraw
GetWindowExtEx
SetColorAdjustment
SetMapMode
PolyBezierTo
LineTo
PtVisible
CreatePatternBrush
StartDocA
Escape
GetObjectA
SetMapperFlags
ExtTextOutA
CreatePen
CreateBitmap
ExtCreatePen
ExcludeClipRect
CreateDIBPatternBrushPt
SetBkColor
GetClipBox
GetClipRgn
SetROP2
OffsetWindowOrgEx
PlayMetaFile
SetBkMode
SetTextJustification
TextOutA
CreateHatchBrush
SelectClipPath
DeleteObject
GetCurrentPositionEx
EnumMetaFile
OffsetClipRgn
GetStockObject
SetTextAlign
SelectClipRgn
SetViewportExtEx
SetWindowOrgEx
IntersectClipRect
PlayMetaFileRecord

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 415KB - Virtual size: 944KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f9a5a886912a7a5ff28c564b6e40077a

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

advapi32

setupapi

kernel32

msi

shell32

samlib

gdi32

Sections

.text Size: 1KB - Virtual size: 1KB

.data Size: 415KB - Virtual size: 944KB

.reloc Size: 512B - Virtual size: 44B

.rsrc Size: 32KB - Virtual size: 31KB

.idata Size: 10KB - Virtual size: 9KB

.rdata Size: 4KB - Virtual size: 4KB

.text
Size: 1KB - Virtual size: 1KB

.data
Size: 415KB - Virtual size: 944KB

.reloc
Size: 512B - Virtual size: 44B

.rsrc
Size: 32KB - Virtual size: 31KB

.idata
Size: 10KB - Virtual size: 9KB

.rdata
Size: 4KB - Virtual size: 4KB