fc084191e3a9fec81b7967a3ce4dd83c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fc084191e3a9fec81b7967a3ce4dd83c_JaffaCakes118
Size

816KB
MD5

fc084191e3a9fec81b7967a3ce4dd83c
SHA1

41c260e8b483044622839743a7847fdfdab89979
SHA256

8a44835f59c781857c8b1828973d7b5f4fe84c2bc675bad07312d35632762c8d
SHA512

01d1c616bdc70f71cd98327d70c121b368edb86086cb69d40502ed934104490dd1e1ff4d924840760d6ac013671ea60809045c6e28ff93ea7f28dae9efaa5240
SSDEEP

24576:+gfFAHds799C/rnjjUafpVMUXfnuvVLte:+gO9s7srn0KtX2Bt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc084191e3a9fec81b7967a3ce4dd83c_JaffaCakes118

Files

fc084191e3a9fec81b7967a3ce4dd83c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7cf63a7ec960fcb66b637000839e11e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntExA

kernel32

RtlUnwind
RaiseException
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
HeapSize
GetACP
GetTimeZoneInformation
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
HeapReAlloc
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapFree
HeapAlloc
FileTimeToLocalFileTime
SetErrorMode
GetFileTime
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GlobalFlags
GetCurrentThread
lstrcmpA
MulDiv
SetLastError
LocalFree
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
FreeLibrary
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GlobalLock
GlobalUnlock
FileTimeToSystemTime
lstrcpynA
CompareFileTime
lstrcpyA
lstrlenA
GetLocalTime
GetSystemInfo
PostQueuedCompletionStatus
TerminateThread
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSection
GetLastError
CreateIoCompletionPort
GetQueuedCompletionStatus
EnterCriticalSection
LeaveCriticalSection
GlobalFree
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
Sleep
GetModuleHandleA
OpenFile
GetFileSize
ReadFile
VirtualProtect
SystemTimeToFileTime
CreateThread
GetTickCount
GetProcAddress
FindResourceA
SizeofResource
LoadResource
GlobalAlloc
LockResource
GetCurrentDirectoryA
DeleteFileA
CreateFileA
WriteFile
CloseHandle
GetModuleFileNameA
lstrcatA
GetFileAttributesA
FreeEnvironmentStringsW

user32

SetRect
GetDCEx
LockWindowUpdate
SetParent
DestroyMenu
GetSysColorBrush
GetDesktopWindow
GetClassNameA
SetRectEmpty
PostQuitMessage
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetMessageA
TranslateMessage
ValidateRect
CharUpperA
wvsprintfA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
IsWindowVisible
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
IntersectRect
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
IsIconic
PostMessageA
DrawIcon
LoadIconA
RedrawWindow
ReleaseDC
GetDC
InflateRect
GetIconInfo
SetWindowRgn
DrawIconEx
wsprintfA
ChildWindowFromPointEx
KillTimer
SetTimer
ScreenToClient
ClientToScreen
FillRect
OffsetRect
CopyRect
WindowFromPoint
GetSystemMetrics
GetWindowRect
SystemParametersInfoA
GetDlgCtrlID
LoadStringA
IsChild
SetFocus
GetCursorPos
GetSysColor
IsWindow
LoadCursorA
GetParent
SetCapture
InvalidateRect
GetClientRect
PtInRect
SetCursor
SetWindowLongA
ReleaseCapture
SendMessageA
EnableWindow
MessageBoxA
GetMenuItemCount
UnregisterClassA

gdi32

GetDeviceCaps
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetRectRgn
StretchDIBits
CreateCompatibleDC
CreateCompatibleBitmap
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
SelectObject
RestoreDC
SaveDC
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
GetObjectA
GetStockObject
DeleteDC
CreateRectRgnIndirect
PatBlt
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
FrameRgn
FillRgn
CreateRoundRectRgn
CreatePolygonRgn
CreateRectRgn
CombineRgn
DeleteObject
GetTextMetricsA
GetTextExtentPoint32A
Rectangle
Polygon
CreateSolidBrush
CreateFontIndirectA
SetWindowExtEx

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA

shell32

ShellExecuteA

comctl32

ImageList_ReplaceIcon
ord17
ImageList_Destroy
ImageList_Create

ws2_32

WSASend
WSAAccept
setsockopt
WSAIoctl
getpeername
htonl
shutdown
recv
send
WSAGetLastError
inet_addr
WSASocketA
gethostname
WSARecv
bind
listen
accept
inet_ntoa
WSACleanup
closesocket
select
connect
htons
gethostbyname
ioctlsocket
socket
WSAStartup

Sections

.text
Size: 192KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 556KB - Virtual size: 553KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zkxgakt
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7cf63a7ec960fcb66b637000839e11e1

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ws2_32

Sections

.text Size: 192KB - Virtual size: 188KB

.rdata Size: 44KB - Virtual size: 40KB

.data Size: 20KB - Virtual size: 33KB

.rsrc Size: 556KB - Virtual size: 553KB

zkxgakt Size: - Virtual size: 4KB

.text
Size: 192KB - Virtual size: 188KB

.rdata
Size: 44KB - Virtual size: 40KB

.data
Size: 20KB - Virtual size: 33KB

.rsrc
Size: 556KB - Virtual size: 553KB

zkxgakt
Size: - Virtual size: 4KB