ed12598b2d0fef5d17497223c7565e90_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ed12598b2d0fef5d17497223c7565e90_JaffaCakes118
Size

152KB
MD5

ed12598b2d0fef5d17497223c7565e90
SHA1

fff36281eb3c24422a81d8b50dd8eae8d1abd417
SHA256

c2508b4ddcb67c2bb5ac2eb078bb294a59e8c45cf253d042ca31196b0620b807
SHA512

7c32e7f00e73bc5b32465d53795df8381f1c948bdd7a7a05916c02793ede4460bde6657e22f755bafb657b4da2521f1e9128856864753ffef002567476c96389
SSDEEP

3072:soGIm4Q7L0CPbqwQ0aszNc8SQRqnJfQdL4Sa5N+9y/OzH:soGIvQ7RJQF8SQgt8s55N+ac

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed12598b2d0fef5d17497223c7565e90_JaffaCakes118

Files

ed12598b2d0fef5d17497223c7565e90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19383de84b5129447de59c229a3d7e53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
InterlockedDecrement
lstrcmpiA
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
GetSystemInfo
GetVersionExA
HeapCreate
InitializeCriticalSection
GetLastError
CreateDirectoryA
GetFileAttributesA
GetWindowsDirectoryA
GetProcAddress
DeleteFileA
CopyFileA
ReleaseMutex
GetTickCount
DeleteCriticalSection
GetLocalTime
MultiByteToWideChar
MoveFileExA
GetVersion
FlushInstructionCache
GetCurrentProcess
InterlockedIncrement
lstrlenW
WideCharToMultiByte
HeapValidate
LoadLibraryA
CreateMutexA
FreeLibrary
HeapReAlloc
Sleep
GetThreadLocale
GetStartupInfoA
ExitProcess
GetCommandLineA
DebugBreak
GetCurrentThreadId
SetFilePointer
WriteFile
SetEndOfFile
GetFileSize
GetProcessHeap
HeapAlloc
ReadFile
HeapFree
lstrcpyA
lstrcpynA
CompareStringA
CreateFileA
GetFileTime
FileTimeToSystemTime
lstrcmpA
CloseHandle
lstrcatA
SystemTimeToFileTime
CompareFileTime
FindResourceA
SizeofResource
LoadResource
LockResource
lstrlenA
HeapDestroy
RtlUnwind

advapi32

RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA

comctl32

ord17

gdi32

BitBlt
GetObjectA
DeleteObject
DeleteDC
GetBkMode
CreateSolidBrush
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
SetTextColor
SetBkMode
CreateFontIndirectA
GetStockObject

ole32

CLSIDFromProgID
OleLockRunning
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CreateStreamOnHGlobal
CLSIDFromString
CoCreateInstance
CoInitialize
OleInitialize
OleUninitialize
CoUninitialize

oleaut32

DispCallFunc
OleLoadPicture
SysAllocString
LoadRegTypeLi
SysStringLen
VariantClear
SysAllocStringLen
VariantInit
SysFreeString
OleCreateFontIndirect

shell32

SHAppBarMessage
Shell_NotifyIconA
ExtractIconA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
SHFileOperationA

urlmon

URLDownloadToCacheFileA

user32

CreateWindowExA
DefWindowProcA
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
CallWindowProcA
GetSysColor
SetFocus
IsChild
GetFocus
ReleaseDC
EndPaint
BeginPaint
RedrawWindow
GetClassNameA
CreateAcceleratorTableA
ReleaseCapture
SetCapture
InvalidateRgn
SetDlgItemTextA
CharUpperA
DialogBoxParamA
EndDialog
IsDlgButtonChecked
EnableWindow
GetDlgItemTextA
PostMessageA
LoadStringA
DestroyIcon
TrackPopupMenuEx
SetForegroundWindow
GetSubMenu
SetWindowLongA
CheckDlgButton
EnumWindows
IsWindowEnabled
IsWindowVisible
FindWindowA
SetMenuDefaultItem
TrackPopupMenu
DestroyMenu
GetActiveWindow
MessageBoxA
ShowWindow
GetClientRect
GetSysColorBrush
GetWindowRect
ScreenToClient
KillTimer
IsWindow
GetDC
FillRect
InvalidateRect
GetClassInfoExA
LoadCursorA
RegisterClassExA
GetWindowLongA
GetParent
GetWindow
AppendMenuA
MapWindowPoints
SetWindowPos
GetDesktopWindow
UpdateWindow
wsprintfA
CharNextA
RegisterWindowMessageA
IsDialogMessageA
PostQuitMessage
DestroyWindow
CreateDialogParamA
SetTimer
GetDlgItem
CharLowerBuffA
PeekMessageA
GetMessageA
TranslateMessage
LoadIconA
SendMessageA
DispatchMessageA
GetCursorPos
LoadMenuA
CreatePopupMenu
SystemParametersInfoA

wininet

DeleteUrlCacheEntry

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19383de84b5129447de59c229a3d7e53

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

gdi32

ole32

oleaut32

shell32

urlmon

user32

wininet

Sections

.text Size: 68KB - Virtual size: 66KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 8KB - Virtual size: 17KB

.CRT Size: 4KB - Virtual size: 8B

.rsrc Size: 60KB - Virtual size: 58KB

.text
Size: 68KB - Virtual size: 66KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 8KB - Virtual size: 17KB

.CRT
Size: 4KB - Virtual size: 8B

.rsrc
Size: 60KB - Virtual size: 58KB