847d017e883b57c848cc2cf55f04c168_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

847d017e883b57c848cc2cf55f04c168_JaffaCakes118
Size

492KB
MD5

847d017e883b57c848cc2cf55f04c168
SHA1

a9485fbb4b87e375e5bfb2d43535c8ad942b5c23
SHA256

c59184f1d8a0b5da7d480c723fc8e29aaeb1017dec934a0c6822a2068a4df1e1
SHA512

a30acd4c16138cef5dd88b85751a7c9e3d90b3c48c48fb52ca9b73e9efc5662808bcd0e245fb4d05c8c8f48a6b65bc61dcea5ef2fb57c9f21c24d98d29da147d
SSDEEP

12288:mn8Kiw13yXFMDEZpXsRaI2QQlF+kzZZgZ:mntiwlqM08RaIjwZZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
847d017e883b57c848cc2cf55f04c168_JaffaCakes118

Files

847d017e883b57c848cc2cf55f04c168_JaffaCakes118
.exe windows:4 windows x86 arch:x86

818e3b143efc38894bd4f8e430ecc41e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetStdHandle
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
InterlockedExchange
HeapSize
HeapReAlloc
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
SetErrorMode
lstrcpynW
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetShortPathNameA
CreateFileA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
GetCurrentDirectoryA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
CloseHandle
InterlockedIncrement
GetCurrentThread
GetModuleFileNameA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
lstrcmpA
GetProfileIntA
GetTickCount
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
GlobalGetAtomNameA
GlobalAddAtomA
GetModuleHandleA
GetProcAddress
FreeResource
SetLastError
GlobalFree
CopyFileA
FindResourceA
LoadResource
LockResource
SizeofResource
MulDiv
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
GetCurrentThreadId
GetStringTypeExA
CompareStringW
CompareStringA
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetTimeZoneInformation

user32

DestroyIcon
GetTabbedTextExtentA
DestroyCursor
SetCursorPos
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
WindowFromDC
InSendMessage
RegisterClipboardFormatA
ValidateRect
ShowOwnedPopups
PostQuitMessage
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
IsZoomed
RedrawWindow
TranslateMDISysAccel
DrawMenuBar
DefFrameProcA
SetParent
GetSystemMenu
DeleteMenu
IsRectEmpty
KillTimer
SetTimer
SetRect
ClipCursor
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
LockWindowUpdate
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetClientRect
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
RegisterClassA
UnregisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
RegisterWindowMessageA
wsprintfA
LoadMenuA
GetClassNameA
SetWindowPos
WinHelpA
SetFocus
EqualRect
GetDlgItem
GetKeyState
GetDlgCtrlID
GetMenu
UnpackDDElParam
ReuseDDElParam
LoadIconA
GetClassInfoA
LoadAcceleratorsA
SetActiveWindow
IsWindowVisible
CharUpperA
EnableWindow
UpdateWindow
LoadStringW
MessageBoxA
SetRectEmpty
InflateRect
IntersectRect
InvalidateRect
GetCapture
SetCapture
IsIconic
InsertMenuItemA
CreatePopupMenu
OffsetRect
BringWindowToTop
SetMenu
ShowWindow
GetWindow
IsWindowEnabled
TranslateAcceleratorA
IsWindow
GetWindowRect
PtInRect
SetWindowLongA
GetSystemMetrics
GetDCEx
GetSysColor
GetDC
ReleaseDC
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
WaitMessage
GetMenuItemInfoA
GetSysColorBrush
SetWindowRgn
DrawIcon
TrackPopupMenu
FindWindowA
ReleaseCapture
DestroyMenu
PeekMessageA
CopyAcceleratorTableA
CreateMenu
CopyRect
GetParent
PostThreadMessageA
GetWindowLongA
ClientToScreen
SendMessageA
ScreenToClient
PostMessageA
GetActiveWindow
WindowFromPoint
GetLastActivePopup
GetFocus
LoadCursorA
SetCursor
GetDesktopWindow
GetWindowThreadProcessId
GetCursorPos
TranslateMessage
DispatchMessageA
GetMessageA
DefMDIChildProcA

gdi32

CreatePatternBrush
GetStockObject
CreateSolidBrush
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
StartPage
EndPage
GetCurrentPositionEx
AbortDoc
EndDoc
PatBlt
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
GetViewportOrgEx
Rectangle
CreateEllipticRgn
Ellipse
UnrealizeObject
GetWindowOrgEx
GetTextAlign
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetTextFaceA
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
StartDocA
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetAbortProc
CreatePen
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetTextExtentPoint32A
GetBkColor
SetBrushOrgEx
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetObjectA
CreateFontA
GetCharWidthA
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
StretchDIBits
DeleteDC
CreateDCA
CopyMetaFileA
GetTextMetricsA
LPtoDP
DPtoLP
CreateFontIndirectA
GetDeviceCaps

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
CommDlgExtendedError
PrintDlgA

winspool.drv

GetJobA
OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegDeleteValueA
RegSetValueA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

DragQueryFileA
ExtractIconA
SHGetFileInfoA
DragFinish

comctl32

ImageList_Draw
ImageList_GetImageInfo
ord17
ImageList_Destroy

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

OleIsRunning
CreateFileMoniker
GetRunningObjectTable
OleRun
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
OleLockRunning
CoGetMalloc
OleUninitialize
CoRevokeClassObject
CoRegisterClassObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
CreateBindCtx
StringFromCLSID
OleRegGetUserType
WriteClassStg
CoTaskMemFree
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CreateGenericComposite
CreateItemMoniker
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CreateDataAdviseHolder
CreateOleAdviseHolder
CoDisconnectObject
OleRegGetMiscStatus
OleRegEnumVerbs
OleInitialize
CoFreeUnusedLibraries

oleaut32

SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysFreeString
SysStringByteLen

Sections

.text
Size: 284KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

818e3b143efc38894bd4f8e430ecc41e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 284KB - Virtual size: 280KB

.rdata Size: 84KB - Virtual size: 81KB

.data Size: 16KB - Virtual size: 26KB

.rsrc Size: 104KB - Virtual size: 102KB

.text
Size: 284KB - Virtual size: 280KB

.rdata
Size: 84KB - Virtual size: 81KB

.data
Size: 16KB - Virtual size: 26KB

.rsrc
Size: 104KB - Virtual size: 102KB