38dec2e114134f11d9b870ee721e4921_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

38dec2e114134f11d9b870ee721e4921_JaffaCakes118
Size

437KB
MD5

38dec2e114134f11d9b870ee721e4921
SHA1

e935d4c1bee1f8d02f8659aa0333a6a128d99c21
SHA256

b02065a9c96a9629a2c1437ae25cd48ef0b154a7a81158797d8b2af8be7b1e94
SHA512

bc81583614ad11bf090570e688438d7e1bf78853ec657517c8daef73c062a1847b2c582d2b6df0374c01c53ed7d1d8d0aa85b083e6a9a130dbfb9779d8718baa
SSDEEP

6144:PSH+JO+YoMBBKRDrRwATNUf0nzsKFfd+uWXSGFFMvhePLPqycwmt:U+JyoMBB0/2ATesnLtcCGrPLPqycVt

Score

1^/10

Malware Config

Signatures

Files

38dec2e114134f11d9b870ee721e4921_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1463f00010867bafd7e84c181198e72f

Code Sign

01
Certificate

Issuer

O=Limited Function Inc.,ST=Bored Stubborn,C=AL,1.2.840.113549.1.9.1=#0c116c696d69746564407961686f6f2e636f6d

Not Before

16/07/2018, 00:22

Not After

15/07/2020, 00:22

Subject

O=Human Resources,ST=Border Control,C=BS,1.2.840.113549.1.9.1=#0c1868756d616e7265736f7572636573407961686f6f2e636f6d

ea:3e:d0:60:0e:4a:94:10:fa:ac:59:8b:bf:04:32:e7:21:b6:67:fd
Signer

Actual PE Digest

ea:3e:d0:60:0e:4a:94:10:fa:ac:59:8b:bf:04:32:e7:21:b6:67:fd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
RaiseException
HeapAlloc
HeapFree
TerminateProcess
CreateThread
ExitThread
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
GetStartupInfoA
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
RtlUnwind
GetProfileStringA
FileTimeToLocalFileTime
FileTimeToSystemTime
WritePrivateProfileStringA
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
SizeofResource
GlobalFlags
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
GlobalAlloc
lstrcmpA
GetCurrentThread
GetModuleFileNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
lstrcpynA
MultiByteToWideChar
GetTickCount
InterlockedIncrement
LocalFree
lstrlenA
WideCharToMultiByte
InterlockedDecrement
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
LeaveCriticalSection
WaitForSingleObject
Sleep
InitializeCriticalSection
EnterCriticalSection
SetEvent
DeleteCriticalSection
VirtualFree

user32

ShowWindow
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
wvsprintfA
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
DestroyMenu
CharUpperA
PostQuitMessage
SetCursor
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
InflateRect
GetClassNameA
LoadCursorA
GetSysColorBrush
LoadStringA
PostMessageA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
IsWindowVisible
GetTopWindow
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetWindowLongA
SetWindowLongA
GetActiveWindow
GetCapture
InvalidateRect
UpdateWindow
PtInRect
CopyRect
GetMenu
SetRect
GetParent
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
ReleaseCapture
SetCapture
IntersectRect
GetSysColor
FillRect
IsIconic
GetSystemMetrics
GetClientRect
GetUpdateRect
SetWindowTextA
IsDialogMessageA
OffsetRect
SendMessageA
SetTimer
LoadIconA
MessageBoxA
EnableWindow
LoadMenuA
EnableMenuItem
ClientToScreen
GetSubMenu
DrawIcon
IsWindowUnicode
TrackPopupMenu

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
DeleteObject
GetDeviceCaps
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
SetBkMode
GetStockObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreatePen
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
GetTextExtentPointA
BitBlt

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA

shell32

ShellExecuteA

comctl32

ord17

Sections

Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1463f00010867bafd7e84c181198e72f

Code Sign

01Certificate

ea:3e:d0:60:0e:4a:94:10:fa:ac:59:8b:bf:04:32:e7:21:b6:67:fdSigner

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

Size: 152KB - Virtual size: 152KB

Size: 32KB - Virtual size: 32KB

Size: 8KB - Virtual size: 32KB

Size: 240KB - Virtual size: 240KB

01
Certificate

ea:3e:d0:60:0e:4a:94:10:fa:ac:59:8b:bf:04:32:e7:21:b6:67:fd
Signer