5c5493386b7c20bc9ed674116ef8301f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5c5493386b7c20bc9ed674116ef8301f_JaffaCakes118
Size

440KB
MD5

5c5493386b7c20bc9ed674116ef8301f
SHA1

5b6cca55105414af760339bea2bf200f6915b342
SHA256

328a32bf73b1049c29f46b64e0b21d81a2acf668c715e1b09b3a3c4f1439ca19
SHA512

d5e56efa637250a474d5b87b837cd3d8266053607d72b700fd949b1afcc31f47b2070317dff5c76c76d448a281de704c907ce0ea0a6d93f04b402545163f547c
SSDEEP

6144:n4E+SzWjtInn/Y+Ntws/0ztR2GrfbnsCN9BGzZGU3vFI0RQ:zWj+/NHszH2ufbnsCNCtGkFFy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c5493386b7c20bc9ed674116ef8301f_JaffaCakes118

Files

5c5493386b7c20bc9ed674116ef8301f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

89cce77bfaecd8da228a9d8b4337f126

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
FreeEnvironmentStringsW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
GetCurrentThreadId
VirtualFree
HeapCreate
HeapDestroy
GetTimeZoneInformation
HeapSize
HeapReAlloc
TerminateProcess
GetACP
RaiseException
HeapFree
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapAlloc
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcpyW
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetOEMCP
GetCPInfo
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetProcessVersion
CopyFileA
GlobalSize
FormatMessageA
LocalFree
CloseHandle
GetModuleFileNameA
GetCurrentThread
GlobalAlloc
GlobalFree
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
lstrlenW
WideCharToMultiByte
InterlockedDecrement
lstrcmpA
InterlockedIncrement
SetLastError
MulDiv
GetTickCount
GetProfileIntA
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
lstrcmpiA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
lstrcatA
lstrcpyA
GlobalLock
lstrcpynA
GlobalUnlock
GlobalGetAtomNameA
GlobalAddAtomA
GetVersion
lstrlenA
MultiByteToWideChar

user32

wvsprintfA
IsZoomed
InsertMenuA
GetMenuStringA
RemoveMenu
GetSysColorBrush
GetClassNameA
LoadStringA
GetDCEx
LockWindowUpdate
InvertRect
GetTabbedTextExtentA
CharUpperA
DestroyIcon
SetCursorPos
RedrawWindow
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
DefFrameProcA
WindowFromDC
InSendMessage
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
FindWindowA
FillRect
DestroyCursor
GetSystemMenu
DeleteMenu
AppendMenuA
IsRectEmpty
SetParent
SetRect
KillTimer
SetTimer
PtInRect
GetDC
ReleaseDC
ClipCursor
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
DeferWindowPos
GetClientRect
BeginDeferWindowPos
RegisterClipboardFormatA
ScrollWindow
GetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
IsChild
RegisterClassA
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
OffsetRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
BringWindowToTop
IsWindowVisible
IsIconic
EqualRect
GetDlgItem
SetWindowLongA
wsprintfA
GetKeyState
SetWindowPos
GetDlgCtrlID
GetMenuItemCount
GetSubMenu
GetMenuItemID
UnpackDDElParam
ReuseDDElParam
SetActiveWindow
WinHelpA
SetMenu
GetMenu
LoadIconA
GetClassInfoA
LoadMenuA
SetFocus
ShowWindow
IsWindow
GetWindow
IsWindowEnabled
TranslateAcceleratorA
LoadAcceleratorsA
RegisterWindowMessageA
GetMessageA
DispatchMessageA
TranslateMessage
ScreenToClient
ClientToScreen
GetWindowLongA
WindowFromPoint
GetActiveWindow
GetWindowThreadProcessId
GetDesktopWindow
ValidateRect
ShowOwnedPopups
PostQuitMessage
EndDialog
EndDeferWindowPos
CreateDialogIndirectParamA
SetCursor
PostMessageA
GetCursorPos
WaitMessage
LoadCursorA
SendMessageA
GetFocus
GetLastActivePopup
CreateMenu
CopyAcceleratorTableA
CopyRect
GetParent
PostThreadMessageA
PeekMessageA
DestroyMenu
LoadStringW
UpdateWindow
SetRectEmpty
InvalidateRect
GetCapture
ReleaseCapture
SetCapture
InflateRect
IntersectRect
EnableWindow
SetScrollInfo
UnregisterClassA

gdi32

MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
DeleteMetaFile
CloseMetaFile
CreateMetaFileA
GetMapMode
SetRectRgn
CombineRgn
CreateRectRgnIndirect
GetTextExtentPoint32A
CopyMetaFileA
UnrealizeObject
BitBlt
GetBkColor
GetNearestColor
GetTextColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
RestoreDC
SaveDC
CreateDCA
SetAbortProc
StartDocA
StartPage
EndPage
EndDoc
AbortDoc
GetViewportOrgEx
Rectangle
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
Escape
LPtoDP
GetStockObject
PatBlt
CreateFontA
GetCharWidthA
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
StretchDIBits
DeleteDC
SetBrushOrgEx
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreatePen
GetDeviceCaps
GetTextMetricsA
CreateFontIndirectA
DPtoLP
SetBkMode

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
CommDlgExtendedError
PrintDlgA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyA
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegSetValueA
RegDeleteKeyA
RegCloseKey
RegEnumKeyA
RegQueryValueA
GetFileSecurityA
SetFileSecurityA
RegOpenKeyExA
RegQueryValueExA

shell32

SHGetFileInfoA
DragQueryFileA
DragFinish
ExtractIconA

comctl32

ord17

oledlg

ord8

ole32

OleUninitialize
CoFreeUnusedLibraries
OleDuplicateData
CoTaskMemAlloc
CreateBindCtx
StringFromCLSID
OleLockRunning
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
OleInitialize
CoRegisterMessageFilter
CreateOleAdviseHolder
CreateGenericComposite
CreateItemMoniker
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
CoTaskMemFree
ReleaseStgMedium
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetMalloc
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
CoDisconnectObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CoRevokeClassObject
CoRegisterClassObject
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
OleIsRunning
OleRun
WriteClassStg
GetRunningObjectTable
CreateFileMoniker
CreateDataAdviseHolder

oleaut32

SysFreeString
SysStringByteLen

Exports

Exports

fVmdCCcDvcPBxed

Sections

.text
Size: 252KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

89cce77bfaecd8da228a9d8b4337f126

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

Exports

Exports

Sections

.text Size: 252KB - Virtual size: 250KB

.rdata Size: 76KB - Virtual size: 72KB

.data Size: 72KB - Virtual size: 82KB

.rsrc Size: 36KB - Virtual size: 34KB

.text
Size: 252KB - Virtual size: 250KB

.rdata
Size: 76KB - Virtual size: 72KB

.data
Size: 72KB - Virtual size: 82KB

.rsrc
Size: 36KB - Virtual size: 34KB