6313964963b4091ee8b6699234041173_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

6313964963b4091ee8b6699234041173_JaffaCakes118
Size

596KB
MD5

6313964963b4091ee8b6699234041173
SHA1

76f5dc306b781808c7c7903fca302073b2c5fef7
SHA256

67cda97e97e32f358b42f2546eb5f9e8b1273f857dea2effca381d1974d9b498
SHA512

262bf3faf6bdda4180664d030444802f4703b6733fddfaad18201e6c136051f35822e57ca08e6afee40310e997446681fa8195eacde471ae3e08763ffef70d43
SSDEEP

12288:zG010b+sx/rXfjqeVBbGZw50QnXmxDKdiyqB:8brx/7We/asmtKG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
6313964963b4091ee8b6699234041173_JaffaCakes118

Files

6313964963b4091ee8b6699234041173_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2534dba18eeb7a60b961d0c3ffad471

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
IsBadWritePtr
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
VirtualFree
HeapCreate
HeapDestroy
HeapSize
GetVersionExA
TerminateProcess
HeapReAlloc
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapFree
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc
RtlUnwind
SetErrorMode
LocalFileTimeToFileTime
GetCurrentDirectoryA
FileTimeToLocalFileTime
lstrcpynW
SystemTimeToFileTime
FileTimeToSystemTime
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetShortPathNameA
CreateFileA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
GetTickCount
CloseHandle
GetCurrentThread
GetModuleFileNameA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrcmpA
InterlockedIncrement
SetLastError
GlobalFree
CopyFileA
MulDiv
GlobalSize
GlobalAlloc
FormatMessageA
LocalFree
InterlockedDecrement
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
FreeResource
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
lstrcmpW
GetModuleHandleA
GlobalLock
GlobalUnlock
GlobalGetAtomNameA
GlobalAddAtomA
lstrcpynA
lstrcatA
LoadLibraryA
GetLastError
lstrlenA
lstrcmpiA
GetStringTypeExA
lstrlenW
CompareStringA
CompareStringW
MultiByteToWideChar
GetVersion
GetModuleHandleW
LoadLibraryW
GetProcAddress
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetSystemTimeAsFileTime

user32

GetNextDlgGroupItem
PostThreadMessageA
FindWindowA
DrawIcon
SetWindowRgn
SetTimer
KillTimer
GetDCEx
LockWindowUpdate
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetSystemMenu
IsZoomed
GetMenuItemInfoA
InflateRect
FillRect
LoadCursorA
DestroyCursor
SetParent
DeleteMenu
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
GetMessageA
TranslateMessage
GetCursorPos
ShowOwnedPopups
PostQuitMessage
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
InSendMessage
CopyAcceleratorTableA
SendNotifyMessageA
IsRectEmpty
CountClipboardFormats
IsClipboardFormatAvailable
SetCapture
SetRect
MessageBeep
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
IsChild
GetWindowTextLengthA
InvalidateRgn
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ScreenToClient
DeferWindowPos
GetScrollInfo
SetScrollInfo
RegisterClassA
UnregisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
PtInRect
RegisterWindowMessageA
DestroyMenu
GetClassNameA
GetSysColor
WinHelpA
SetFocus
MessageBoxA
UpdateWindow
EnableWindow
GetSubMenu
LoadMenuA
ClientToScreen
GetParent
CharUpperA
CloseClipboard
GetClipboardData
CopyRect
OffsetRect
GetFocus
EqualRect
GetDlgItem
GetKeyState
GetDlgCtrlID
UnpackDDElParam
ReuseDDElParam
LoadIconA
GetClassInfoA
SetCursor
PeekMessageA
GetCapture
ReleaseCapture
LoadAcceleratorsA
SetActiveWindow
IsWindowVisible
CharNextA
DestroyIcon
WindowFromPoint
IsIconic
InsertMenuItemA
CreatePopupMenu
IntersectRect
SetRectEmpty
GetLastActivePopup
SetMenu
ShowWindow
GetDesktopWindow
GetWindow
IsWindowEnabled
wsprintfA
CreateMenu
GetTabbedTextExtentA
GetSysColorBrush
GetWindowTextA
SendMessageA
PostMessageA
GetClientRect
GetDC
InvalidateRect
ValidateRect
ShowScrollBar
OpenClipboard
DefFrameProcA
GetMenu
DefMDIChildProcA
GetMenuItemID
GetMenuItemCount
DrawMenuBar
GetActiveWindow
BringWindowToTop
CreateWindowExA
TranslateMDISysAccel
TranslateAcceleratorA
IsWindow
SetWindowLongA
GetWindowLongA
SetWindowPos
RedrawWindow
AdjustWindowRectEx
ReleaseDC

gdi32

ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
CreateSolidBrush
SetViewportExtEx
SetRectRgn
CombineRgn
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
CreateEllipticRgn
LPtoDP
Ellipse
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
PtVisible
GetPixel
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetStretchBltMode
SetROP2
CreateRectRgnIndirect
GetObjectA
SetBkMode
RestoreDC
SaveDC
CreateFontA
GetCharWidthA
DeleteObject
StretchDIBits
GetTextMetricsA
SelectObject
ExtTextOutA
DeleteDC
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
StartDocA
PatBlt
Rectangle
GetViewportOrgEx
CreatePen
GetWindowExtEx
GetWindowOrgEx
ScaleWindowExtEx
DPtoLP
CreateDCA
CopyMetaFileA
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetTextExtentPoint32A
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontIndirectA
GetStockObject
SetPolyFillMode

comdlg32

FindTextA
ReplaceTextA
ChooseFontA
GetFileTitleA
CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA

winspool.drv

OpenPrinterA
GetJobA
ClosePrinter
DocumentPropertiesA

advapi32

GetFileSecurityA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegSetValueA
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
SetFileSecurityW
SetFileSecurityA
RegQueryValueA

shell32

DragQueryFileA
DragAcceptFiles
ExtractIconA
SHGetFileInfoA
DragFinish

comctl32

ImageList_Draw
ImageList_GetImageInfo
ord17
ImageList_Destroy

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord3
ord5
ord4
ord11
ord8
ord1

ole32

CreateGenericComposite
StgOpenStorageOnILockBytes
GetHGlobalFromILockBytes
OleRun
OleIsRunning
OleSetMenuDescriptor
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
CreateFileMoniker
CLSIDFromProgID
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleRegEnumVerbs
OleRegGetMiscStatus
CoDisconnectObject
GetRunningObjectTable
CoLockObjectExternal
OleGetClipboard
CreateItemMoniker
OleFlushClipboard
CoGetClassObject
CoRevokeClassObject
CoRegisterMessageFilter
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
StgCreateDocfileOnILockBytes
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
OleGetIconOfClass
OleLoad
OleCreate
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleLockRunning
OleSetContainedObject
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
OleSave
OleIsCurrentClipboard
CreateILockBytesOnHGlobal

oleaut32

VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
SysAllocString
OleCreateFontIndirect

Sections

.text
Size: 352KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 188KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d2534dba18eeb7a60b961d0c3ffad471

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 352KB - Virtual size: 348KB

.rdata Size: 188KB - Virtual size: 184KB

.data Size: 12KB - Virtual size: 25KB

.rsrc Size: 40KB - Virtual size: 36KB

.text
Size: 352KB - Virtual size: 348KB

.rdata
Size: 188KB - Virtual size: 184KB

.data
Size: 12KB - Virtual size: 25KB

.rsrc
Size: 40KB - Virtual size: 36KB