efe994bdc7159d1bdd7fd63900ce6f2c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

efe994bdc7159d1bdd7fd63900ce6f2c_JaffaCakes118
Size

6.9MB
MD5

efe994bdc7159d1bdd7fd63900ce6f2c
SHA1

d00f861b5c1b3e124100fe9c02f02a7b22a0cc16
SHA256

10fd509934cf0ea4146777880bbed8281692fe2c0260a2f4fecadfc2e719b1de
SHA512

811ae644d24168c484809109f7c946bd3d48778408b1c477dd1ac5a5c3463dac759bad05d033ab3b6c846414d5e0c780b4a2514862d68736fe6cf6783cf6004a
SSDEEP

49152:AU/H2cdBYfZXa9sz6D+ERMXVeBFVDFWHGnbEUeGyFpc/XjcvpIRMXVJgBFVDFWHF://jdm8sz4+ERMXVPFZneXjkKRMXVJ9F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efe994bdc7159d1bdd7fd63900ce6f2c_JaffaCakes118

Files

efe994bdc7159d1bdd7fd63900ce6f2c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

16880932845d11599e2a3bd1e281a46e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipDeleteBrush
GdipCloneBrush
GdipFree
GdipAlloc
GdipCreateFromHDC
GdipDeleteGraphics
GdipReleaseDC
GdipSetTextRenderingHint
GdipDrawString
GdipDrawImageRectI
GdipCreateSolidFill
GdipDrawImageRectRectI
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipCreateFont
GdipCloneFont
GdipDeleteFont
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipDisposeImage
GdipCloneImage
GdipDrawImagePointRectI
GdiplusStartup
GdipGetImageWidth
GdipGetImageHeight
GdiplusShutdown

imagehlp

CheckSumMappedFile

wininet

HttpQueryInfoW
InternetOpenW
InternetCloseHandle
InternetSetOptionW
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetOpenUrlW
InternetReadFile

kernel32

SetCurrentDirectoryW
GetCurrentDirectoryW
SearchPathW
GetTickCount
MulDiv
GlobalFree
SetLastError
GetVersionExA
lstrcmpW
LoadLibraryA
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GetCurrentThreadId
GetModuleHandleA
FileTimeToLocalFileTime
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
DuplicateHandle
GetVolumeInformationW
InterlockedExchange
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
GetFullPathNameW
InterlockedDecrement
InterlockedIncrement
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
SetErrorMode
GetStartupInfoW
RtlUnwind
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
ExitProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
CreateFileA
SetEnvironmentVariableA
GetLongPathNameW
MoveFileW
GetSystemDirectoryW
GetWindowsDirectoryW
GetDriveTypeW
RemoveDirectoryW
SetFileAttributesW
SetEndOfFile
SetFileTime
FindNextFileW
GetTempPathW
GetCurrentProcessId
OpenProcess
FreeResource
lstrcpyW
GetShortPathNameW
CreateDirectoryW
GetFileTime
FileTimeToSystemTime
LocalFree
SetFilePointerEx
GlobalAlloc
GlobalLock
GlobalUnlock
ReadFile
lstrcpynW
FreeLibrary
CreateProcessW
WaitForSingleObject
GetTempFileNameW
MoveFileExW
DeleteFileW
GetVersion
GetProcessHeap
HeapAlloc
HeapFree
CreateFileMappingW
MapViewOfFile
IsBadReadPtr
UnmapViewOfFile
lstrcatW
Sleep
CopyFileW
CreateFileW
GetFileSize
CloseHandle
SetFilePointer
WriteFile
GetFileAttributesW
FindFirstFileW
FindClose
GetModuleFileNameW
LoadLibraryW
GetVersionExW
GetModuleHandleW
GetProcAddress
GetCurrentProcess
LoadResource
LockResource
SizeofResource
FindResourceW
GetLastError
FormatMessageW
GetACP
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
lstrlenA
WritePrivateProfileStringW
GetPrivateProfileStringW

user32

MoveWindow
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
ClientToScreen
GetWindowDC
CharUpperW
ValidateRect
SetCursor
GetWindowThreadProcessId
RegisterClipboardFormatW
MapDialogRect
SetWindowContextHelpId
DestroyMenu
GetSysColorBrush
SetCapture
ReleaseCapture
PostThreadMessageW
CharNextW
CopyAcceleratorTableW
SetRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
UnregisterClassW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetForegroundWindow
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
TrackPopupMenu
GetKeyState
UnregisterClassA
SetForegroundWindow
IsWindowVisible
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuItemID
GetMenuItemCount
LoadIconW
GetParent
InvalidateRect
GetClientRect
IsIconic
GetSystemMenu
LoadMenuW
GetSubMenu
AppendMenuW
DrawIcon
IsRectEmpty
LoadCursorW
SetClassLongW
GetWindowTextW
GetClassNameW
GetWindow
SetWindowPos
IsWindow
PtInRect
CopyRect
SendMessageW
FindWindowW
FindWindowExW
PostMessageW
BeginPaint
EndPaint
GetDlgItem
SetWindowTextW
DestroyWindow
CreateDialogParamW
ShowWindow
UpdateWindow
GetMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
GetCursorPos
LoadCursorFromFileW
CopyIcon
SetSystemCursor
PostQuitMessage
GetWindowLongW
SetWindowLongW
UpdateLayeredWindow
GetDC
ReleaseDC
GetSystemMetrics
wsprintfW
EnableWindow
ExitWindowsEx
MessageBoxW
GetWindowRect

gdi32

GetClipBox
SetBkColor
GetObjectW
CreateBitmap
SaveDC
RestoreDC
SetMapMode
ExtSelectClipRgn
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
CreateDCW
BitBlt
GetStockObject
CreatePen
CreateFontIndirectW
SetBkMode
TextOutW
SetTextColor
MoveToEx
LineTo
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC
ScaleWindowExtEx
ExtTextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
SetWindowExtEx

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegCloseKey
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
GetUserNameW
RegCreateKeyExW
AdjustTokenPrivileges
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
OpenProcessToken
LookupPrivilegeValueW

shell32

ShellExecuteW
SHFileOperationW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetFolderPathW

comctl32

InitCommonControlsEx

shlwapi

PathStripToRootW
PathFileExistsW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW

oledlg

OleUIBusyW

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysFreeString
SysStringLen
SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantCopy

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 540KB - Virtual size: 538KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16880932845d11599e2a3bd1e281a46e

Headers

File Characteristics

Imports

gdiplus

imagehlp

wininet

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

version

Sections

.text Size: 540KB - Virtual size: 538KB

.rdata Size: 132KB - Virtual size: 131KB

.data Size: 16KB - Virtual size: 30KB

.rsrc Size: 60KB - Virtual size: 59KB

.text
Size: 540KB - Virtual size: 538KB

.rdata
Size: 132KB - Virtual size: 131KB

.data
Size: 16KB - Virtual size: 30KB

.rsrc
Size: 60KB - Virtual size: 59KB