fe6f6fdbeb68fc8c7e5551ffca05fd76_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fe6f6fdbeb68fc8c7e5551ffca05fd76_JaffaCakes118
Size

172KB
MD5

fe6f6fdbeb68fc8c7e5551ffca05fd76
SHA1

195039f2382fe75c39c899fb052ea6b64ed090ea
SHA256

ea8acebe358cd605df94eb20d8e73b546d7581ac9d33613a01687f061a0dbe7a
SHA512

4c5d0b6ee4fe9fefdd0b9e36d034fccb8394d26cea3915fc7fd3114ec7fb19fb0141a495575480bee2bfc0a190de7f7c622520df6ef7e3f610c815911dfba046
SSDEEP

3072:Q35GfK9S3q/bt9P7BFs3ZYK0wrxL80ZakRFgKPxutIqLupki9Ds/r:YGnazt9P7BFs5/rJikfTuteST

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe6f6fdbeb68fc8c7e5551ffca05fd76_JaffaCakes118

Files

fe6f6fdbeb68fc8c7e5551ffca05fd76_JaffaCakes118
.exe windows:4 windows x86 arch:x86

197da2ce884fdc61a9f1ef3de57fee75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToSystemTime
FileTimeToLocalFileTime
SetErrorMode
GetCommandLineA
ExitProcess
TerminateProcess
HeapFree
RtlUnwind
GetStartupInfoA
HeapSize
GetACP
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapAlloc
HeapDestroy
RaiseException
VirtualFree
HeapReAlloc
GetFileSize
CreateFileA
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
CloseHandle
GetModuleFileNameA
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GlobalUnlock
GetProfileStringA
GetFileTime
GetOEMCP
GetFileAttributesA
SizeofResource
SetLastError
GetCPInfo
GetProcessVersion
WritePrivateProfileStringA
MulDiv
GlobalFlags
TlsSetValue
TlsGetValue
LocalReAlloc
LeaveCriticalSection
EnterCriticalSection
GlobalReAlloc
DeleteCriticalSection
TlsFree
GlobalHandle
LocalFree
TlsAlloc
InitializeCriticalSection
LocalAlloc
lstrcpynA
GetFullPathNameA
FindClose
GetVolumeInformationA
FindFirstFileA
SetEndOfFile
FlushFileBuffers
UnlockFile
LockFile
ReadFile
SetFilePointer
WriteFile
GetCurrentProcess
DuplicateHandle
GlobalLock
GetLastError
GlobalFree
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
VirtualAlloc
IsBadWritePtr
GetFileType
HeapCreate

user32

GetMenuItemID
CopyRect
GetClientRect
ScreenToClient
AdjustWindowRectEx
IsWindow
SetActiveWindow
GetSysColor
MapWindowPoints
UpdateWindow
LoadIconA
CreateDialogIndirectParamA
EndDialog
CharUpperA
LoadCursorA
ClientToScreen
GetClassNameA
PtInRect
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetSysColorBrush
DestroyMenu
InvalidateRect
GetTopWindow
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
OffsetRect
IntersectRect
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
RegisterWindowMessageA
LoadStringA
SetFocus
ShowWindow
SetWindowPos
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
GetSubMenu
DestroyWindow
IsWindowEnabled
GetWindowLongA
EnableWindow
SetCursor
SendMessageA
PostQuitMessage
PostMessageA
MessageBoxA
SetWindowLongA
SystemParametersInfoA
DrawFocusRect
ExcludeUpdateRgn
InflateRect
HideCaret
UnregisterClassA
IsWindowUnicode
CharNextA
DefDlgProcA
ShowCaret

gdi32

SetTextColor
GetObjectA
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
GetClipBox
GetDeviceCaps
CreateSolidBrush
RectVisible
TextOutA
PtVisible
Escape
ExtTextOutA
CreateCompatibleDC
BitBlt
CreateDIBitmap
PatBlt
CreateBitmap
GetTextExtentPointA
SetBkColor

comdlg32

PrintDlgA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA

comctl32

ord17

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

197da2ce884fdc61a9f1ef3de57fee75

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

Sections

.text Size: 88KB - Virtual size: 85KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 12KB - Virtual size: 11KB

.rsrc Size: 40KB - Virtual size: 40KB

.text
Size: 88KB - Virtual size: 85KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 40KB - Virtual size: 40KB