846aecee1507ca837a398d6785f58dec_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

846aecee1507ca837a398d6785f58dec_JaffaCakes118
Size

143KB
MD5

846aecee1507ca837a398d6785f58dec
SHA1

a5f9befa1cdb40453a770e5f61742a4418b21bd9
SHA256

de3381a6656154781aa408eae9bd017d6a6240d53be93851a4e994122fad4b7d
SHA512

492a8ed8718fa109d735e50bd73bb65819b100b020163b4325baa025d2f746cb06587be06c38b7195b36697ce4f9789b91f7d9471e7acb646545b8d68f9fb431
SSDEEP

3072:7ekZM0tvNcLvtln3pPECQezFYsCp3qzX6Ja:FFqrn39scmp33a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
846aecee1507ca837a398d6785f58dec_JaffaCakes118

Files

846aecee1507ca837a398d6785f58dec_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c7342c90ee9bfe5e9d07efcc800cf2a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadCursorW
SetWindowTextW
LoadBitmapW
ExitWindowsEx
BringWindowToTop
GetSubMenu
LoadIconW
GetMenuItemID
GetMenuState
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetParent
SendMessageW
GetWindowThreadProcessId
MapDialogRect
SetWindowContextHelpId
GetWindow
PostQuitMessage
RegisterClassExW
GetMenuItemCount
SetFocus
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
SetActiveWindow
GetMessageTime
GetMessagePos
MapWindowPoints
UpdateWindow
GetMenu
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CallWindowProcW
SystemParametersInfoA
IsIconic
GetWindowPlacement
MessageBeep
IsChild
GetTopWindow
GetNextDlgTabItem
GetNextDlgGroupItem
ReleaseCapture
GetDesktopWindow
SetCapture
GetClientRect
GetWindowRect
SetCursor
SetRect
IsRectEmpty
CopyAcceleratorTableW
OffsetRect
PtInRect
CharNextW
GetFocus
CreateWindowExW
MoveWindow
GetDlgCtrlID
IsWindow
IsDialogMessageW
SendDlgItemMessageW
GetDlgItem
CharUpperW
SetWindowsHookExW
CallNextHookEx
GetActiveWindow
GetKeyState
GetCursorPos
GetWindowTextW
GetSysColorBrush
UnhookWindowsHookEx
IntersectRect
CopyRect
GetSysColor
GetWindowDC
GetDC
ClientToScreen
RegisterClipboardFormatW
InvalidateRgn
MessageBoxW
LoadStringW
RedrawWindow
GetSystemMetrics
DrawStateW
PostThreadMessageW
InvalidateRect
SystemParametersInfoW
EndPaint
ReleaseDC
DrawTextW
BeginPaint
SetForegroundWindow
DestroyMenu
EndDialog
CreateDialogIndirectParamW
UnregisterClassA
EqualRect
ShowWindow
SetWindowPos
IsWindowVisible
ValidateRect
DefWindowProcW
GetWindowLongW
DestroyWindow
DispatchMessageW
TranslateMessage
GetMessageW
PostMessageW
PeekMessageW
SetWindowLongW
GrayStringW
DrawTextExW
TabbedTextOutW

comdlg32

GetFileTitleW

shell32

SHGetFolderPathW
ShellExecuteW

oledlg

OleUIBusyW

ole32

CoRegisterMessageFilter
OleFlushClipboard
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
CoTaskMemAlloc
OleIsCurrentClipboard
CoRevokeClassObject
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoTaskMemFree
StgCreateDocfileOnILockBytes

advapi32

AllocateAndInitializeSid
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegDeleteKeyW
RegSetValueExW
FreeSid
CheckTokenMembership
AdjustTokenPrivileges
RegQueryValueExW
OpenProcessToken
RegOpenKeyW
RegEnumKeyW
RegQueryValueW
RegOpenKeyExW
LookupPrivilegeValueW

gdi32

GetWindowExtEx
GetViewportExtEx
GetClipBox
SetMapMode
SetBkColor
RestoreDC
PtVisible
GetDeviceCaps
GetObjectW
SetBkMode
GetStockObject
DeleteObject
SetTextColor
SelectObject
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateBitmap
ScaleViewportExtEx
DPtoLP
GetTextColor
GetBkColor
GetMapMode
CreateRectRgnIndirect
CreateFontIndirectW
SaveDC
GetRgnBox

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathAddBackslashW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

kernel32

VirtualFree
QueryPerformanceCounter
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
SetEnvironmentVariableW
CreateFileA
GetCurrentDirectoryA
GetDriveTypeA
SetFilePointer
GetExitCodeProcess
CreatePipe
GetFileAttributesA
CreateProcessA
MoveFileA
DeleteFileA
GetLogicalDriveStringsW
ResetEvent
FormatMessageA
GetThreadLocale
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
HeapCreate
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
CompareStringA
lstrcmpW
GlobalDeleteAtom
SetErrorMode
GetModuleHandleW
FreeResource
GetCurrentProcessId
lstrlenA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
MulDiv
SetLastError
GetExitCodeThread
GetDriveTypeW
WideCharToMultiByte
HeapDestroy
GetStartupInfoA
CreateEventW
SetEvent
GetVersionExW
GetModuleHandleA
GetCurrentProcess
GetProcAddress
LoadLibraryExW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetLocaleInfoW
GetSystemDefaultLCID
GetEnvironmentVariableW
GetCommandLineW
CreateDirectoryW
RemoveDirectoryW
GetSystemDirectoryW
GetWindowsDirectoryW
GetTempPathW
GetCurrentDirectoryW
GetDiskFreeSpaceExW
GetFullPathNameW
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
FlushFileBuffers
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
VirtualQuery
GetSystemInfo
VirtualProtect
HeapSize
GetFileType
SetStdHandle
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
ExitProcess
GetSystemTimeAsFileTime
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
RtlUnwind
RaiseException
GetLocaleInfoA
GetACP
GetTickCount
GlobalFlags
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GetFileTime
GetVolumeInformationW
DuplicateHandle
GetFileSize
UnlockFile
LockFile
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
FindClose
CopyFileW
DeleteFileW
SetFileAttributesW
GetFileAttributesW
MultiByteToWideChar
SetEndOfFile
LoadLibraryW
FreeLibrary
CreateFileW
BeginUpdateResourceW
VirtualAlloc
SizeofResource
LCMapStringW
LockResource
LoadResource
FindResourceW
Sleep
GetLastError
GetModuleFileNameW
CloseHandle
WaitForSingleObject
CreateThread
SetCurrentDirectoryW
GetSystemDefaultLangID
GetUserDefaultLCID
GetCurrentThreadId
ReleaseMutex
CreateMutexW
FindResourceExW
SetFilePointerEx
ReadFile
WriteFile
EndUpdateResourceW
UpdateResourceW

Sections

.text
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c7342c90ee9bfe5e9d07efcc800cf2a5

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

oledlg

ole32

advapi32

gdi32

shlwapi

winspool.drv

kernel32

Sections

.text Size: 83KB - Virtual size: 82KB

.rdata Size: 21KB - Virtual size: 20KB

.data Size: 5KB - Virtual size: 4.6MB

.rsrc Size: 33KB - Virtual size: 32KB

.text
Size: 83KB - Virtual size: 82KB

.rdata
Size: 21KB - Virtual size: 20KB

.data
Size: 5KB - Virtual size: 4.6MB

.rsrc
Size: 33KB - Virtual size: 32KB