f4d498f5f4f5c70439bd128899e1ac81_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f4d498f5f4f5c70439bd128899e1ac81_JaffaCakes118
Size

608KB
MD5

f4d498f5f4f5c70439bd128899e1ac81
SHA1

849ff7422d0a6cabec84523dc91c405ededf9edd
SHA256

b6e84b713c3384f40b9fccbe8c8ae85e6ab94db453412b1975f35ae0541ac278
SHA512

570228b1a38b3eb0577f868df590ec58cdc015c46201b28d5661ec520f14ebeef9860991c53cc662902d72f14a15e3c8ee955e3d047fbc9cf182bf17c58db904
SSDEEP

12288:tc0QbBfIl50Ix7BE2G4c/VbLaoXUJPoAUYAoSBDZs:HR72rDRLaoXoXUYyBFs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4d498f5f4f5c70439bd128899e1ac81_JaffaCakes118

Files

f4d498f5f4f5c70439bd128899e1ac81_JaffaCakes118
.exe windows:4 windows x86 arch:x86

795b6e768fb932896ed98899d5a098cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
RtlUnwind
HeapFree
HeapAlloc
ExitProcess
HeapReAlloc
TerminateProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
WritePrivateProfileStringW
GetFileTime
GetFileAttributesW
SetErrorMode
InterlockedIncrement
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
LocalAlloc
FileTimeToLocalFileTime
LoadLibraryW
GetModuleFileNameW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
lstrcmpiW
InterlockedDecrement
SetLastError
MulDiv
GlobalLock
GlobalUnlock
FormatMessageW
lstrcpynW
LocalFree
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetModuleHandleA
LoadLibraryA
FreeLibrary
GetModuleHandleW
GetProcAddress
GetVersionExA
GetTempPathA
SetEvent
CreateEventW
CreateDirectoryW
lstrcmpW
ReadFile
GetFileSize
WideCharToMultiByte
FindResourceA
GlobalAlloc
CreateFileW
WriteFile
CloseHandle
GlobalFree
Sleep
LeaveCriticalSection
EnterCriticalSection
CreateThread
GetTempPathW
GetTickCount
FileTimeToSystemTime
lstrlenA
MultiByteToWideChar
WaitForSingleObject
FindResourceW
LoadResource
LockResource
SizeofResource
GetLastError
lstrlenW
lstrcatW
FindFirstFileW
FindNextFileW
FindClose
GetDriveTypeW
lstrcpyW
GetDiskFreeSpaceExW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange

user32

MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
SetRect
IsRectEmpty
CharNextW
ReleaseCapture
SetCapture
LoadCursorW
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
GetMessageW
TranslateMessage
ValidateRect
SetCursor
PostQuitMessage
CharUpperW
wsprintfW
DestroyMenu
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetMenuItemBitmaps
ModifyMenuW
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
GetMenuState
RegisterWindowMessageW
GetCapture
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
GetFocus
IsWindow
SetFocus
IsChild
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
MessageBoxW
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
PostMessageW
GetMenuItemID
GetMenuItemCount
GetSysColor
AdjustWindowRectEx
EqualRect
PostThreadMessageW
RegisterClipboardFormatW
GetScrollInfo
SetScrollInfo
GetClassInfoW
RegisterClassW
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetWindowLongW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
CopyRect
PtInRect
GetWindow
GetSystemMetrics
IsIconic
DrawIcon
GetParent
InvalidateRect
SetTimer
GetSystemMenu
AppendMenuW
GetCursorPos
TrackPopupMenu
LoadIconW
GetWindowRect
LoadMenuW
GetSubMenu
EnableMenuItem
UnregisterClassW
SendMessageW
EnableWindow
RedrawWindow
GetClientRect
WinHelpW

gdi32

CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
GetWindowExtEx
GetViewportExtEx
GetStockObject
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateSolidBrush
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
GetDeviceCaps
SetBkColor
SetTextColor
GetClipBox
CreateDCW
CreateDIBitmap
DeleteDC
DeleteObject
StretchBlt
BitBlt
CreateCompatibleDC
GetObjectW
Rectangle

comdlg32

GetSaveFileNameW
GetOpenFileNameW
GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyExW
RegOpenKeyW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
ExtractIconW
ShellExecuteW
DragQueryFileW
DragAcceptFiles

comctl32

ImageList_ReplaceIcon
ord17
ImageList_Destroy
ImageList_Create

shlwapi

PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathFindFileNameW

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc
CoTaskMemFree
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize

oleaut32

OleCreateFontIndirect
SysAllocString
SystemTimeToVariantTime
SafeArrayDestroy
VariantCopy
SysStringLen
SysFreeString
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen

ws2_32

accept
socket
bind
closesocket
ntohl
ntohs
getpeername
inet_ntoa
htonl
select
send
recv
WSACleanup
WSAStartup
htons
listen

wininet

InternetConnectW
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
FtpPutFileW

iphlpapi

GetBestInterface
GetIpAddrTable

Sections

.text
Size: 260KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

795b6e768fb932896ed98899d5a098cd

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

wininet

iphlpapi

Sections

.text Size: 260KB - Virtual size: 257KB

.rdata Size: 68KB - Virtual size: 66KB

.data Size: 12KB - Virtual size: 23KB

.rsrc Size: 264KB - Virtual size: 263KB

.text
Size: 260KB - Virtual size: 257KB

.rdata
Size: 68KB - Virtual size: 66KB

.data
Size: 12KB - Virtual size: 23KB

.rsrc
Size: 264KB - Virtual size: 263KB