eb23f6d5f47d50e1e7765d8623d12672_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

eb23f6d5f47d50e1e7765d8623d12672_JaffaCakes118
Size

1.4MB
MD5

eb23f6d5f47d50e1e7765d8623d12672
SHA1

872ede1f73d7d1adaabb0bdce36039b3ea79e40f
SHA256

dd531d66c9bdb0f4ebc305988a9541ba4a82e8fa407d39c87a15c41a5dbd7fe1
SHA512

ca54621251e6a377e541118e0041df51de26a889a01d04ed6ff5d1c50d4fcb218a0e9386cad8d5b49e79f46ac03b82f539038f8a09596f83562382789d646f6e
SSDEEP

24576:IFomentICnpbmlo/0TC6TadJ0dQ6ns1964pX/vo15i:6omemop7/0sJ0dQQ4pHovi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb23f6d5f47d50e1e7765d8623d12672_JaffaCakes118

Files

eb23f6d5f47d50e1e7765d8623d12672_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3dd342b3a1c5b3fd600ad368e6eb3d1a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindNextFileW
RemoveDirectoryW
MoveFileW
SetCommState
GetCommState
SetupComm
PurgeComm
lstrlenW
SetTimeZoneInformation
FindFirstFileW
GetTimeFormatW
GetUserDefaultLCID
MulDiv
GetThreadTimes
GlobalMemoryStatus
ClearCommError
SetCommTimeouts
GetFileInformationByHandle
GetStartupInfoW
FormatMessageW
GetFileAttributesW
CreateDirectoryW
CreateProcessW
ExitProcess
GetProcAddress
SetEndOfFile
DeleteFileW
SetEvent
WaitForMultipleObjects
WaitForSingleObject
Sleep
GetCurrentThread
SetThreadPriority
InterlockedDecrement
ResetEvent
CreateThread
CreateEventW
GetSystemTime
SetSystemTime
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LoadResource
LockResource
SizeofResource
FindResourceW
LoadLibraryW
GetUserDefaultLangID
GetModuleHandleW
WideCharToMultiByte
ReadFile
MultiByteToWideChar
OutputDebugStringW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetTickCount
CompareStringW
GetCurrentProcessId
CreateToolhelp32Snapshot
Module32FirstW
CloseHandle
Module32NextW
IsDebuggerPresent
CreateFileW
GetFileSize
WriteFile
SetFilePointer
GetLocalTime
GetLocaleInfoW
GetModuleFileNameW
GetDateFormatW
GetLastError
GetTimeZoneInformation

user32

GetDlgItemInt
EndDeferWindowPos
DrawIcon
GetFocus
GetSysColorBrush
SetWindowLongW
GetDlgItem
EnableWindow
SetFocus
DrawFrameControl
DrawMenuBar
DrawFocusRect
InflateRect
GetSysColor
SetDlgItemInt
GetParent
SendMessageW
GetDlgItemTextW
SetDlgItemTextW
GetWindowRect
BeginDeferWindowPos
GetWindow
GetClassNameW
GetWindowLongW
GetClientRect
MapWindowPoints
DeferWindowPos
CallWindowProcW
SetWindowTextW
FillRect
GetMessagePos
DestroyIcon
AppendMenuW
GetSubMenu
CreateIconIndirect
DrawIconEx
LoadImageW
CopyIcon
LoadStringW
DialogBoxParamW
DrawTextW
LoadMenuW
LoadIconW
LoadBitmapW
PostMessageW
SetCursor
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
ShowWindow
IsWindow
CreateWindowExW
RegisterClassExW
SetForegroundWindow
FindWindowW
SetTimer
CheckMenuRadioItem
ReleaseCapture
SetCapture
GetScrollInfo
SetScrollInfo
PtInRect
OffsetRect
ReleaseDC
GetDC
ClientToScreen
TrackPopupMenuEx
CreatePopupMenu
DestroyMenu
GetMenuItemCount
ModifyMenuW
SetMenu
AdjustWindowRectEx
SetWindowPos
DeleteMenu
RemoveMenu
GetMenuItemInfoW
SetMenuItemInfoW
CheckMenuItem
EnableMenuItem
CharNextW
CharLowerW
MessageBoxW
GetWindowTextW
SendDlgItemMessageW
EndDialog
CheckRadioButton
PeekMessageW
IsDialogMessageW
ScreenToClient
DestroyWindow
BeginPaint
EndPaint
DefWindowProcW
PostQuitMessage
InvalidateRect
UpdateWindow
CreateDialogParamW
KillTimer

gdi32

SetPixel
GetTextExtentPointW
SetStretchBltMode
SetBrushOrgEx
RestoreDC
GetCurrentObject
CreatePatternBrush
LineTo
MoveToEx
SaveDC
SetDIBitsToDevice
Ellipse
Polygon
SetTextColor
CreateCompatibleBitmap
BitBlt
DeleteDC
GetDeviceCaps
GetObjectW
CreateCompatibleDC
StretchBlt
CreateFontIndirectW
GetStockObject
SetROP2
SetBkMode
SetBkColor
Polyline
CreatePen
SelectObject
DeleteObject
SetViewportOrgEx
Rectangle
CreateSolidBrush

comdlg32

GetSaveFileNameW
ChooseColorW
GetOpenFileNameW

advapi32

RegEnumKeyExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegDeleteKeyW
RegSetValueExW
RegDeleteValueW
RegEnumValueW
RegOpenKeyExW

shell32

ShellExecuteExW
SHGetSpecialFolderPathW
SHChangeNotify
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW

ole32

CoCreateInstance
CoSetProxyBlanket
CoInitialize
CoUninitialize
CoInitializeSecurity

oleaut32

SysFreeString
VariantClear
VariantChangeType
VariantTimeToSystemTime
SysStringLen
SystemTimeToVariantTime
SysAllocString

comctl32

ImageList_Create
ImageList_Destroy
ImageList_Add
ImageList_GetIcon
ImageList_LoadImageW
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_SetBkColor
InitCommonControlsEx
PropertySheetW
ImageList_Draw
CreateToolbarEx

msimg32

TransparentBlt

winmm

waveOutReset
waveOutUnprepareHeader
waveOutClose
waveOutOpen
waveOutWrite
PlaySoundW
waveOutPrepareHeader

wininet

InternetCloseHandle
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
InternetQueryDataAvailable
InternetReadFile

msvcrtd

wcsncat
memchr
fmod
acos
memmove
memcmp
wcschr
strncmp
_lrotl
malloc
free
_vsnprintf
exp
atan
tan
pow
asin
log
vswprintf
labs
sprintf
strlen
_except_handler3
atan2
sin
cos
sqrt
_vsnwprintf
strchr
memcpy
_purecall
floor
fabs
wcstok
_stricmp
_ftol
abs
qsort
wcsrchr
wcscmp
wcscpy
wcsncmp
wcsncpy
??2@YAPAXI@Z
memset
__CxxFrameHandler
_CrtDbgReport
wcslen
_chkesp
swprintf
wcscat
_wcsicmp
_wcsnicmp
_strnicmp
strcat
strcpy
_itoa
?terminate@@YAXXZ
__dllonexit
_onexit
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_wtoi
_hypot
__p__fmode
__set_app_type
_controlfp
strcmp

shlwapi

PathParseIconLocationW
PathFindFileNameW
PathRenameExtensionW
PathStripPathW

Sections

.text
Size: 852KB - Virtual size: 849KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 440KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3dd342b3a1c5b3fd600ad368e6eb3d1a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

msimg32

winmm

wininet

msvcrtd

shlwapi

Sections

.text Size: 852KB - Virtual size: 849KB

.rdata Size: 44KB - Virtual size: 41KB

.data Size: 88KB - Virtual size: 106KB

.idata Size: 12KB - Virtual size: 10KB

.rsrc Size: 440KB - Virtual size: 440KB

.reloc Size: 40KB - Virtual size: 39KB

.text
Size: 852KB - Virtual size: 849KB

.rdata
Size: 44KB - Virtual size: 41KB

.data
Size: 88KB - Virtual size: 106KB

.idata
Size: 12KB - Virtual size: 10KB

.rsrc
Size: 440KB - Virtual size: 440KB

.reloc
Size: 40KB - Virtual size: 39KB