ecb2f4483cb025c180363185685f3e28_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ecb2f4483cb025c180363185685f3e28_JaffaCakes118
Size

460KB
MD5

ecb2f4483cb025c180363185685f3e28
SHA1

9af19a788ad4cf28e410289e84d24b0a48080e54
SHA256

eb78ea8a95ae4e0b40737f03608ab02e5c49ec1a9c67e32e54a6a27a9ad995bb
SHA512

3a4c3eae16e745bcb6072cfd6efb98a352feb5cdd768dbccc5342db32042d44d113bb5c6bb29e42a45358c02093c1bbb3e44388f464ce6c85f9ac3e542c9a613
SSDEEP

12288:2HQypT6oiKpsoQEX6npbWdhlG8dj6h5PZDeCcq/qybjJVLesH7uCicrPYyr2ac8R:2HQypT6oiKpsoQEX6npbWdhlG8dj6rcI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecb2f4483cb025c180363185685f3e28_JaffaCakes118

Files

ecb2f4483cb025c180363185685f3e28_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6aeefc612e58a3beaa47c456a910042

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
lstrlenA
GetTempPathA
GetTempFileNameA
lstrcpyA
GetPrivateProfileStringA
GetModuleFileNameA
LoadLibraryA
WaitForSingleObject
SetEvent
ResetEvent
CreateEventA
FormatMessageA
LocalFree
GetLastError
GetProfileStringA
GetVersionExA
lstrcpynA
GetTickCount
CopyFileA
GlobalReAlloc
WritePrivateProfileStringA
GetPrivateProfileIntA
CreateFileA
ReadFile
CloseHandle
_llseek
GlobalAlloc
GlobalLock
_hread
GlobalHandle
GlobalUnlock
GlobalFree
MultiByteToWideChar
FindResourceA
SizeofResource
LoadResource
LockResource
_hwrite
FreeResource
SystemTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTimeZoneInformation
GetWindowsDirectoryA
_lopen
_lcreat
_lread
_lwrite
_lclose
lstrcatA
lstrcmpiA
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
HeapSize
GetCurrentProcess
TerminateProcess
WriteFile
GetLocalTime
GetSystemTime
HeapValidate
HeapReAlloc
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
CreateDirectoryA
RemoveDirectoryA
FindClose
FindFirstFileA
HeapAlloc
HeapFree
RtlUnwind
DeleteFileA
GetFileAttributesA
SetFileAttributesA
WideCharToMultiByte
RaiseException
InterlockedExchange
LocalAlloc
GetEnvironmentStrings
GetProcAddress
SetHandleCount
GetStdHandle
GetFileType
WinExec
CompareStringA
SetFilePointer
SetUnhandledExceptionFilter
SetStdHandle
FlushFileBuffers
IsBadReadPtr
IsBadCodePtr
GetCPInfo
SetEndOfFile
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetStringTypeA
GetStringTypeW

user32

LoadAcceleratorsA
SetWindowsHookA
OffsetRect
GetSystemMetrics
GetMessageA
RegisterClassA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
UnhookWindowsHook
LoadStringA
ShowWindow
GetWindowRect
MoveWindow
SendDlgItemMessageA
SetWindowTextA
GetWindow
GetDlgItemTextA
CharLowerA
SetDlgItemTextA
GetDlgItemInt
PostQuitMessage
IsZoomed
GetWindowPlacement
PtInRect
CheckDlgButton
SetDlgItemInt
InvalidateRect
LoadIconA
GetDlgItem
EndDialog
CopyRect
SetWindowPos
CreateWindowExA
SetWindowLongA
GetParent
GetWindowLongA
SetRect
DrawTextA
BeginPaint
GetPropA
RemovePropA
SetPropA
GetClassNameA
GetKeyState
IsDialogMessageA
GetFocus
IsWindowEnabled
EmptyClipboard
SetClipboardData
EndPaint
GetMenu
GetSubMenu
EnableWindow
UpdateWindow
DialogBoxParamA
MessageBoxA
SendMessageA
SetRectEmpty
DefWindowProcA
IsIconic
IsDlgButtonChecked
CheckRadioButton
LoadBitmapA
CloseClipboard
SetTimer
KillTimer
GetScrollRange
CharUpperBuffA
GetScrollInfo
LoadCursorA
SetCursor
GetCapture
GetClientRect
IsWindowVisible
WinHelpA
InvertRect
EnableScrollBar
SetActiveWindow
ReleaseCapture
SetCapture
ClientToScreen
GetDesktopWindow
PeekMessageA
CreateDialogParamA
GetScrollPos
ScrollWindow
SetScrollPos
GetDC
ReleaseDC
InflateRect
DrawTextExA
GetCursor
DestroyWindow
IsRectEmpty
SetScrollRange
DestroyCursor
GetWindowTextA
IsCharAlphaA
CharUpperA
IsCharAlphaNumericA
IsCharLowerA
IsCharUpperA
CallWindowProcA
GetCursorPos
ScreenToClient
GetSysColor
GetWindowTextLengthA
FillRect
wsprintfA
GetActiveWindow
PostMessageA
CallNextHookEx
CheckMenuItem
GetMenuItemCount
GetMenuItemInfoA
EnableMenuItem
MessageBeep
SetFocus
IsWindow
OpenClipboard
DrawMenuBar
SetMenu
wsprintfW

gdi32

SetBkMode
BitBlt
SelectObject
CreateCompatibleDC
GetStockObject
DeleteObject
GetObjectA
TextOutA
SetBkColor
SetTextColor
SetTextAlign
CreatePalette
CreateFontIndirectA
SetWindowOrgEx
CreateSolidBrush
SetRectRgn
ExtTextOutA
SelectClipRgn
CreateRectRgn
GetTextExtentPointA
GetTextMetricsA
PatBlt
CreatePatternBrush
CreateBitmap
SetViewportOrgEx
GetWindowOrgEx
LPtoDP
SetViewportExtEx
GetWindowExtEx
SetMapMode
GetDeviceCaps
EnumFontFamiliesA
CreatePen
RealizePalette
SelectPalette
LineTo
MoveToEx
CreateFontA
GetCharWidthA
CreateICA
EndPage
StartPage
StartDocA
EndDoc
AbortDoc
DeleteDC
CreateDCA
GetTextAlign

winspool.drv

OpenPrinterA
DeviceCapabilitiesA
GetPrinterA
ClosePrinter
DocumentPropertiesA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
PrintDlgA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHChangeNotify
ShellExecuteA

ole32

CoCreateInstance
CoInitialize
OleSetMenuDescriptor
StgCreateDocfile
CoUninitialize

rpcrt4

UuidToStringA
RpcStringFreeA

comctl32

InitCommonControlsEx
CreateToolbarEx

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 216KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b6aeefc612e58a3beaa47c456a910042

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

rpcrt4

comctl32

version

Sections

.text Size: 216KB - Virtual size: 213KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 36KB - Virtual size: 49KB

.rsrc Size: 96KB - Virtual size: 92KB

.text
Size: 216KB - Virtual size: 213KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 36KB - Virtual size: 49KB

.rsrc
Size: 96KB - Virtual size: 92KB