7c229f5310ecc00fe8a70225c6abd824_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7c229f5310ecc00fe8a70225c6abd824_JaffaCakes118
Size

948KB
MD5

7c229f5310ecc00fe8a70225c6abd824
SHA1

98ea8e5a985a8fc686d7b8cba031f35cb1a23d62
SHA256

98d84e350b4040748b697d94e55e49ffec5e300bf361f3d381853a222cf32e81
SHA512

c333589dd34214d1934a7db5ec13ac85c04155e85ce5bfd4f465b3d0bdcd33aff9bdb50fc7dcea27536b6dd7ef0dd424df4927b8f9735f6fa2dd30e81ae17d90
SSDEEP

24576:mCBKnPj5K2vbt1z+cxfF61XT8qrwoKiePdwDUb:ObnRrfF61XT8qwielRb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c229f5310ecc00fe8a70225c6abd824_JaffaCakes118

Files

7c229f5310ecc00fe8a70225c6abd824_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b171352e97f834affeb367fa89d4bbdd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW
SetPriorityClass
lstrcpynW
GetVolumeInformationW
DeviceIoControl
GetLocaleInfoW
CloseHandle
CreateFileW
VerLanguageNameW
GetModuleFileNameW
lstrlenA
WriteConsoleW
SetStdHandle
ReadConsoleW
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
OutputDebugStringW
LCMapStringW
HeapReAlloc
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetTickCount
LocalFree
SetLastError
CreateDirectoryW
GetLastError
SetFilePointer
GetFileAttributesW
SetFileAttributesW
DeleteFileW
GetEnvironmentVariableW
FindFirstFileW
FindNextFileW
FindClose
RemoveDirectoryW
GetFileSize
ReadFile
WriteFile
SearchPathW
GetLongPathNameW
WideCharToMultiByte
MultiByteToWideChar
ExitProcess
SetUnhandledExceptionFilter
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
TerminateProcess
GetVersionExW
LocalAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateMutexW
WaitForSingleObject
ReleaseMutex
RaiseException
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
DecodePointer
GetShortPathNameW
OpenProcess
GetProcessVersion
CreateProcessW
HeapAlloc
GetProcessHeap
HeapFree
GetExitCodeProcess
lstrcmpiW
lstrlenW
lstrcpyW
lstrcatW
GetExitCodeThread
FreeLibrary
InterlockedDecrement
CopyFileW
InterlockedIncrement
CreateThread
Sleep
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetFileTime
SetFileTime
SetEndOfFile
TerminateThread
GlobalAlloc
GlobalFree
CreateEventW
GetHandleInformation
SetEvent
ResetEvent
CreateFileA
lstrcpyA
SystemTimeToFileTime
GetTimeZoneInformation
LoadLibraryExW
CheckRemoteDebuggerPresent
ExpandEnvironmentStringsW
EncodePointer
GetCommandLineW
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
RtlUnwind
GetModuleHandleExW
HeapSize
GetStdHandle
GetFileType
GetStartupInfoW
QueryPerformanceCounter
UnhandledExceptionFilter
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree

user32

LoadCursorW
RegisterClassExW
GetDesktopWindow
DestroyWindow
GetWindow
InvalidateRect
KillTimer
MoveWindow
SetTimer
DefWindowProcW
CreateWindowExW
SetWindowLongW
UpdateWindow
SetActiveWindow
SetFocus
CallWindowProcW
SetCapture
GetCapture
ReleaseCapture
SetWindowTextW
EnableMenuItem
GetSystemMenu
GetKeyboardLayoutList
GetMessageW
TranslateMessage
DispatchMessageW
wsprintfW
PostQuitMessage
GetWindowLongW
SystemParametersInfoW
GetWindowTextW
GetParent
EnumWindows
GetClassNameW
ClientToScreen
GetClientRect
PostMessageW
LoadIconW
LoadImageW
GetSystemMetrics
DestroyIcon
FindWindowW
GetWindowRect
IsWindow
GetWindowThreadProcessId
ShowWindow
GetShellWindow
UnregisterClassW
MessageBoxW
SetWindowPos

oleaut32

SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayUnaccessData
SafeArrayCreate
SafeArrayDestroy
SafeArrayAccessData
VariantChangeType
VariantCopy
SysAllocStringLen
VariantClear
SysStringLen
VariantInit
SysFreeString
SysAllocString

userenv

ExpandEnvironmentStringsForUserW

rpcrt4

UuidToStringW
RpcStringFreeW
UuidCreateSequential

urlmon

ObtainUserAgentString

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

iphlpapi

GetAdaptersInfo

netapi32

NetApiBufferFree
NetWkstaTransportEnum

shlwapi

PathAddBackslashW
PathAddExtensionW
SHDeleteKeyW
PathStripPathW
PathRemoveFileSpecW
AssocQueryStringW

ws2_32

WSACleanup
WSAStartup
gethostbyname

wininet

InternetGetConnectedState
InternetCanonicalizeUrlW
InternetAutodial
InternetCheckConnectionW
InternetQueryOptionW
HttpQueryInfoA
InternetWriteFile
HttpQueryInfoW
InternetSetOptionW
InternetCrackUrlW
InternetCreateUrlW
InternetOpenW
InternetCloseHandle
InternetSetStatusCallbackW
InternetReadFileExA
InternetConnectW
InternetAttemptConnect
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
HttpSendRequestExW
HttpEndRequestW
HttpAddRequestHeadersA
InternetReadFile

advapi32

RegConnectRegistryW
GetTokenInformation
GetSidSubAuthority
GetSidSubAuthorityCount
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
RegOpenKeyExW
RegCloseKey
AllocateAndInitializeSid
EqualSid
FreeSid
RegDeleteValueW
RegEnumKeyExW
RegQueryValueExW
RegSetValueExW
RegQueryInfoKeyW
RegCreateKeyW
OpenProcessToken

shell32

SHGetFolderPathW
ShellExecuteW
CommandLineToArgvW
ord165
Shell_NotifyIconW

ole32

CoSetProxyBlanket
CoInitializeSecurity
CoCreateInstance
OleUninitialize
CoInitialize
CoUninitialize
CoInitializeEx
OleSetContainedObject
OleCreate
OleInitialize

Sections

.text
Size: 521KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b171352e97f834affeb367fa89d4bbdd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

oleaut32

userenv

rpcrt4

urlmon

version

iphlpapi

netapi32

shlwapi

ws2_32

wininet

advapi32

shell32

ole32

Sections

.text Size: 521KB - Virtual size: 520KB

.rdata Size: 212KB - Virtual size: 211KB

.data Size: 17KB - Virtual size: 84KB

.rsrc Size: 28KB - Virtual size: 27KB

.reloc Size: 50KB - Virtual size: 50KB

.text
Size: 521KB - Virtual size: 520KB

.rdata
Size: 212KB - Virtual size: 211KB

.data
Size: 17KB - Virtual size: 84KB

.rsrc
Size: 28KB - Virtual size: 27KB

.reloc
Size: 50KB - Virtual size: 50KB