15f21dbc11a65e1efe752fefb2f20a04_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

15f21dbc11a65e1efe752fefb2f20a04_JaffaCakes118
Size

788KB
MD5

15f21dbc11a65e1efe752fefb2f20a04
SHA1

1c0ef336dd9c8419bfc4e341755021f763c62c2d
SHA256

311d4b764051bf3e349da1cb4af914b1adda6c72e414528571e72479a6ce7ab0
SHA512

17c01d73eea7550bff8f0deb05a6a95ae72af6a82c4b31c342d29d9dafa9f7cda481f3a302d11aa16988ed44de02aeab2b25fc1c8341ec9ffc19e43554178108
SSDEEP

12288:r64nFXYcpuEI8IogHSad55vaQRd9M74j:rRFXHp5YtyqrO4j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15f21dbc11a65e1efe752fefb2f20a04_JaffaCakes118

Files

15f21dbc11a65e1efe752fefb2f20a04_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f86a0212ed92c1dd95c05c9867d85bf0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\RSSReader\bootstrap_v1\bootstrap\Release\bootstrap.pdb

Imports

kernel32

GlobalAddAtomW
LoadLibraryW
GetProcAddress
FreeLibrary
ExitProcess
CreateDirectoryW
MultiByteToWideChar
GetLocaleInfoW
Sleep
GetVersionExW
LoadLibraryA
HeapFree
GetProcessHeap
HeapAlloc
OpenProcess
SetEnvironmentVariableA
CompareStringW
CompareStringA
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
GetTimeZoneInformation
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsBadWritePtr
LCMapStringW
LCMapStringA
WriteFile
ReadFile
SetFilePointer
GetFileType
GetCurrentProcess
DuplicateHandle
lstrcpyW
lstrlenW
DeleteCriticalSection
RaiseException
InitializeCriticalSection
GetUserDefaultLangID
GetUserDefaultLCID
FindNextFileW
FindFirstFileW
CopyFileW
GetLastError
TerminateThread
CreateThread
FindResourceExW
GetDiskFreeSpaceExW
LocalFree
FormatMessageW
WideCharToMultiByte
GetExitCodeProcess
WaitForSingleObject
MoveFileW
GetModuleHandleW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
FindResourceW
LoadResource
LockResource
SizeofResource
CloseHandle
VirtualFree
HeapCreate
HeapDestroy
lstrcpynW
SetLastError
EnumResourceLanguagesW
GetVersion
ConvertDefaultLocale
GetModuleFileNameW
GlobalDeleteAtom
GlobalAlloc
lstrcmpW
GlobalLock
GetCurrentThreadId
GetCurrentThread
GlobalFree
FreeResource
GlobalUnlock
MulDiv
DeleteFileW
GetModuleHandleA
GetVersionExA
lstrcatW
lstrlenA
GlobalFindAtomW
InterlockedDecrement
lstrcmpiW
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
FindClose
GetVolumeInformationW
GetFullPathNameW
CreateFileW
LocalAlloc
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
WritePrivateProfileStringW
InterlockedIncrement
GlobalFlags
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesW
GetFileTime
SetErrorMode
GetTickCount
GetStartupInfoW
TerminateProcess
HeapSize
HeapReAlloc
RtlUnwind
SetStdHandle
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA

user32

EnableMenuItem
ModifyMenuW
GetFocus
SetMenuItemBitmaps
ValidateRect
GetCursorPos
IsWindowVisible
TranslateMessage
GetMessageW
CallNextHookEx
SetWindowsHookExW
SetCursor
ScreenToClient
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
CopyRect
PtInRect
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowLongW
CallWindowProcW
DefWindowProcW
GetDlgCtrlID
RegisterClassW
GetClassInfoW
EqualRect
AdjustWindowRectEx
GetMenu
UpdateWindow
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
GetForegroundWindow
GetWindowTextLengthW
IsChild
SetFocus
SendDlgItemMessageA
SendDlgItemMessageW
RemovePropW
GetPropW
SetPropW
GetClassNameW
GetClassLongW
GetClassInfoExW
CreateWindowExW
GetCapture
WinHelpW
RegisterWindowMessageW
wsprintfW
IsDialogMessageW
SetWindowTextW
MoveWindow
ShowWindow
CheckMenuItem
CharUpperW
SetCapture
LoadCursorW
ReleaseCapture
CharNextW
IsRectEmpty
SetRect
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
GetSysColorBrush
DestroyMenu
RegisterClipboardFormatW
PostThreadMessageW
GetNextDlgTabItem
EndDialog
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDlgItem
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
PeekMessageW
PostQuitMessage
MessageBoxW
FindWindowExW
GetWindowTextW
DispatchMessageW
GetWindowThreadProcessId
SendMessageW
LoadIconW
GetSysColor
GetWindowRect
InvalidateRect
LoadImageW
LoadBitmapW
SetForegroundWindow
BringWindowToTop
SetActiveWindow
RedrawWindow
KillTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
FillRect
WindowFromDC
GetKeyState
EnableWindow
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
PostMessageW
UnregisterClassW
GetMenuCheckMarkDimensions
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow

gdi32

GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetDeviceCaps
CreateRectRgnIndirect
GetBkColor
GetRgnBox
GetMapMode
DeleteObject
GetClipBox
CreateCompatibleBitmap
CreateSolidBrush
DeleteDC
GetObjectW
CreateCompatibleDC
SelectObject
CreateFontIndirectW
BitBlt
GetStockObject
SetBkMode
SetTextColor
SetBkColor
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetMapMode
RestoreDC
SaveDC
CreateBitmap
GetTextColor

advapi32

RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW

shell32

ShellExecuteExW
ShellExecuteW

oleaut32

VariantCopy
SysAllocStringLen
SysStringLen
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
VariantInit
VariantChangeType
VariantClear
SysFreeString

comctl32

ord17

shlwapi

PathFindExtensionW
PathFileExistsW
PathIsUNCW
PathFindFileNameW
PathStripToRootW
UrlUnescapeW

oledlg

OleUIBusyW

ws2_32

WSAStartup
WSACleanup

wininet

InternetCloseHandle
HttpSendRequestW
HttpQueryInfoW
InternetReadFile
InternetSetOptionW
InternetCrackUrlW
InternetCanonicalizeUrlW
HttpOpenRequestW
InternetConnectW
InternetOpenW

oleacc

LresultFromObject
CreateStdAccessibleObject

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

comdlg32

GetFileTitleW

ole32

CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoGetClassObject

Sections

.text
Size: 212KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 484KB - Virtual size: 481KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f86a0212ed92c1dd95c05c9867d85bf0

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

oleaut32

comctl32

shlwapi

oledlg

ws2_32

wininet

oleacc

winspool.drv

comdlg32

ole32

Sections

.text Size: 212KB - Virtual size: 209KB

.rdata Size: 76KB - Virtual size: 74KB

.data Size: 12KB - Virtual size: 24KB

.rsrc Size: 484KB - Virtual size: 481KB

.text
Size: 212KB - Virtual size: 209KB

.rdata
Size: 76KB - Virtual size: 74KB

.data
Size: 12KB - Virtual size: 24KB

.rsrc
Size: 484KB - Virtual size: 481KB