f2367bb5f8c55817b315ea8a853d7158_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f2367bb5f8c55817b315ea8a853d7158_JaffaCakes118
Size

740KB
MD5

f2367bb5f8c55817b315ea8a853d7158
SHA1

f97ec3525de5e637143e48e49943766e4c49cc8a
SHA256

8f1de75ecd9b735795c63a626a84119199e229df0063547c12557b991e1b63f3
SHA512

1a05a6affd7e07c37178bb964fd7c1025ca9cf2418b7f4ae59baeb0a55dd1d6bc90cc0093bd57a9fc0cd0f57da47329aefbd1bdf3b25d2665c5a4fe7515d4f97
SSDEEP

12288:sxjTR27lA08QMJn1eH+xJ1QJcXO/mMHN92zLyBz2MxkDjpCz/chkgpj9xS:sRUAj1M+2lBoyx9oCzUhl7S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2367bb5f8c55817b315ea8a853d7158_JaffaCakes118

Files

f2367bb5f8c55817b315ea8a853d7158_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a738e858b36d3af7f4060bd5d949b24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

h:\vcytgem\efakvnj\awlsgim\vtoiao\horposohag\ejl.pdb

Imports

ole32

CreateStreamOnHGlobal
ReleaseStgMedium
OleGetClipboard
OleCreate
CoGetMalloc
OleQueryLinkFromData
CoGetClassObject
CoTaskMemAlloc
OleCreateLinkFromData
StgOpenStorage
OleCreateFromFile
StgCreateDocfile
OleSetMenuDescriptor
OleRegGetMiscStatus
OleQueryCreateFromData
OleSave
CoDisconnectObject
CreateOleAdviseHolder
OleCreateLinkToFile
CLSIDFromProgID
OleRegEnumVerbs
OleGetIconOfClass
CoRegisterClassObject
CoTaskMemFree
CreateDataAdviseHolder
OleInitialize
GetRunningObjectTable
OleUninitialize
OleRegGetUserType
CoLockObjectExternal
OleFlushClipboard
CoRevokeClassObject

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

GetModuleFileNameA
TlsAlloc
GetLastError
GetEnvironmentStringsW
ResetEvent
LoadLibraryA
FindResourceA
RaiseException
FreeEnvironmentStringsA
ExitProcess
GetStringTypeExA
WaitForSingleObject
DuplicateHandle
GetCurrentDirectoryA
LoadLibraryW
GetFileAttributesW
IsBadCodePtr
GetStringTypeW
InterlockedExchange
GetEnvironmentStrings
InitializeCriticalSection
GetFileType
SetErrorMode
GetOEMCP
GetACP
SetLastError
HeapCreate
VirtualFree
RemoveDirectoryA
HeapDestroy
MultiByteToWideChar
SetEnvironmentVariableA
GetLocaleInfoA
EnterCriticalSection
CloseHandle
GetSystemTimeAsFileTime
GetProcessHeap
HeapFree
GetCommandLineA
LCMapStringA
LoadResource
GetUserDefaultLangID
FileTimeToLocalFileTime
VirtualAlloc
WriteFile
DeleteFileA
CreateProcessA
CopyFileA
IsValidLocale
GetCurrentProcess
HeapAlloc
TerminateProcess
InterlockedIncrement
TlsGetValue
CreateFileA
SetFileAttributesA
GlobalFree
SetHandleCount
ReadFile
IsDBCSLeadByte
LeaveCriticalSection
GetThreadLocale
GetCurrentProcessId
SystemTimeToFileTime
GetEnvironmentVariableA
GlobalSize
GetStartupInfoA
FreeLibrary
GetCurrentThreadId
TerminateThread
SetStdHandle
GetLocalTime
GetCPInfo
HeapSize
LCMapStringW
GetFileAttributesA
FindNextFileA
SuspendThread
lstrlenA
lstrcpynA
CreateFileMappingA
UnhandledExceptionFilter
lstrcmpiA
LockResource
CreateMutexA
FlushFileBuffers
GetSystemInfo
lstrlenW
CreateDirectoryA
GlobalReAlloc
DeleteCriticalSection
GetTickCount
GetFullPathNameA
SetCurrentDirectoryA
GetModuleHandleA
GetSystemTime
RtlUnwind
HeapReAlloc
lstrcatA
SetFileTime
GetStringTypeA
GlobalLock
UnmapViewOfFile
InterlockedDecrement
TlsSetValue
GetTimeZoneInformation
SetUnhandledExceptionFilter
CompareStringW
GetProcAddress
FreeEnvironmentStringsW
SetEvent
CreateThread
LocalFree
GetSystemDirectoryA
ReleaseMutex
FlushInstructionCache
lstrcmpA
CompareStringA
GetVersion
GetDateFormatA
QueryPerformanceCounter
GetStdHandle
SetFilePointer
FormatMessageA
CompareFileTime
VirtualQuery
WideCharToMultiByte

shell32

ShellExecuteA
DragQueryFileA
SHAppBarMessage
SHGetFileInfoA
DragFinish
ExtractIconA
ExtractIconExA
SHGetDesktopFolder

oleaut32

LoadTypeLi

gdi32

RestoreDC
GetStockObject
GetTextFaceA
GetDIBits
EndPath
LineTo
GetTextColor
GetWindowOrgEx
StartPage
GetDeviceCaps
SetWindowExtEx
RealizePalette
CreateDIBitmap
SetViewportExtEx
SetRectRgn
GetClipRgn
StrokePath
StretchBlt
PlayEnhMetaFile
Ellipse
SetPolyFillMode
BeginPath
GetDCOrgEx
CombineRgn
DeleteObject
PtVisible
UnrealizeObject
GetCurrentObject
CreatePen
CreatePalette
SetPaletteEntries
CreateICA
MaskBlt
CreateBitmap
CreateRoundRectRgn
CreateFontIndirectA
Rectangle
SaveDC
TextOutA
ExtSelectClipRgn
CreateDCA
GetBitmapBits
IntersectClipRect
DPtoLP
EndDoc
Polygon
Polyline
GetPaletteEntries
GetRgnBox
CreateHatchBrush
ExtFloodFill
GetPixel
CreatePatternBrush
Arc
SetTextColor
GetCharWidthA
Pie
DeleteDC
SetBkMode
SelectObject
CreatePolygonRgn
SetROP2
SetTextAlign
CreateFontA
RectVisible
EndPage
GetNearestColor
SelectPalette
GetWindowExtEx
SetStretchBltMode
GetPolyFillMode
GetBkMode
GetStretchBltMode
SetBkColor
CreateCompatibleDC
SetPixel
GetNearestPaletteIndex
FillPath
BitBlt
CreateRectRgn
GetObjectA
StretchDIBits

user32

RegisterClassA
GetParent
SetCapture
PostQuitMessage
LoadIconA
DestroyWindow
IsWindow
DefWindowProcA
GetLastActivePopup
SetRect
IntersectRect
EnableMenuItem
LoadStringA
GetMessageA
GetSysColor
CreateWindowExA
LoadBitmapA
DestroyMenu
CloseClipboard
DeferWindowPos
MapWindowPoints
GetWindowThreadProcessId
GetClassNameA
MessageBoxA
GetDesktopWindow
RegisterClassExA
ShowWindow
DispatchMessageA
MapDialogRect
DestroyIcon
LoadCursorA
IsIconic

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 472KB - Virtual size: 470KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a738e858b36d3af7f4060bd5d949b24

Headers

File Characteristics

PDB Paths

Imports

ole32

version

kernel32

shell32

oleaut32

gdi32

user32

Sections

.text Size: 76KB - Virtual size: 74KB

.rdata Size: 472KB - Virtual size: 470KB

.data Size: 108KB - Virtual size: 105KB

.rsrc Size: 80KB - Virtual size: 78KB

.text
Size: 76KB - Virtual size: 74KB

.rdata
Size: 472KB - Virtual size: 470KB

.data
Size: 108KB - Virtual size: 105KB

.rsrc
Size: 80KB - Virtual size: 78KB