8a655bb8d4917e5d92d2bc8f225430f3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8a655bb8d4917e5d92d2bc8f225430f3_JaffaCakes118
Size

385KB
MD5

8a655bb8d4917e5d92d2bc8f225430f3
SHA1

e586d2d63bf88212d48096b04f541d042481d3ba
SHA256

54fe1f963a267e867f0041c883503a1a94728fa277b267142958a9651b2b0566
SHA512

3397cf93dc2a14c3d1be95fab3511a475f26da4f50889ce7d1cce246005206fcc600f90ce8a40a1604bfe7878d4064d6428e9350fb79e41c57725813c6dac9c2
SSDEEP

6144:MWfVZsLKQP77AXXFODfiFnfTDLNYNLJXpQXQUGst:MWcLKawXXA7oxYNLJX+XQUGst

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a655bb8d4917e5d92d2bc8f225430f3_JaffaCakes118

Files

8a655bb8d4917e5d92d2bc8f225430f3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b1515181bb0f3b001f18be087234516f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ExitProcess
Sleep
HeapReAlloc
GetConsoleCP
HeapCreate
RtlUnwind
GetStartupInfoA
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
LocalFree
GetSystemInfo
GetModuleHandleW
VirtualProtect
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetCurrentProcessId
CloseHandle
GetVersionExA
_lopen
GetCurrentThreadId
DeleteCriticalSection
EnumSystemGeoID
LoadLibraryExA
GetModuleHandleA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
_lread
GetModuleFileNameA
DeviceIoControl
LockResource
LocalAlloc
GetConsoleScreenBufferInfo
LoadLibraryA
EnterCriticalSection
LocalLock
VirtualAlloc
GetProcAddress
lstrcmpiA
SetLastError
GetLastError
GetStdHandle
RaiseException
FlushInstructionCache
lstrlenW
MultiByteToWideChar
ReadFile
IsDBCSLeadByte
LeaveCriticalSection
CreateEventA
SizeofResource
WideCharToMultiByte
GlobalAlloc
FindResourceExA
InitializeCriticalSection
WriteFile
_lclose
WaitForSingleObject
GlobalLock
GetConsoleMode
GetCurrentProcess
InterlockedDecrement
_lwrite
InterlockedIncrement
GlobalAddAtomA
LoadResource
FreeLibrary
_llseek
lstrlenA
lstrcmpA
FindResourceA
CreateFileA
VirtualQuery
LocalUnlock

user32

IsChild
GetClassInfoExA
SetCapture
KillTimer
DrawTextA
GetKeyState
GetSubMenu
DrawIconEx
LoadStringA
CopyImage
GetFocus
IsClipboardFormatAvailable
GetParent
TrackMouseEvent
LoadMenuA
CallNextHookEx
GetMenuDefaultItem
MessageBeep
DefFrameProcA
IsWindowEnabled
WindowFromPoint
CharNextA
GetClientRect
SetFocus
GetWindowTextLengthA
SendMessageA
DrawEdge
SetRectEmpty
RegisterWindowMessageA
BeginPaint
PtInRect
GetMonitorInfoA
GetIconInfo
FillRect
GetCapture
DrawFocusRect
TranslateMessage
LockWindowUpdate
ShowCursor
InflateRect
GetMenu
OffsetRect
TrackPopupMenuEx
RegisterClipboardFormatA
GetWindowDC
TrackPopupMenu
SendDlgItemMessageA
PostQuitMessage
MonitorFromPoint
RegisterClassExA
InsertMenuItemA
SetActiveWindow
SetRect
CheckMenuRadioItem
SetWindowLongA
MessageBoxA
InvalidateRect
BringWindowToTop
CharLowerA
GetWindowLongA
CreateWindowExA
IsMenu
GetWindowRect
ScreenToClient
SetTimer
GetSystemMenu
GetDCEx
PeekMessageA
ReleaseDC
EnableMenuItem
TranslateAcceleratorA
MonitorFromWindow
GetDlgItem
EndDialog
EndPaint
DefWindowProcA
SetWindowsHookExA
RedrawWindow
GetSysColor
ClientToScreen
DestroyWindow
SetCursor
GetMessageA
SetWindowPos
GetCursorPos
GetDC
GetClassNameA
GetMenuItemInfoA
LoadStringW
GetMenuStringA
LoadAcceleratorsA
ShowWindow
SetMenu
CreatePopupMenu
GetSysColorBrush
FrameRect
IsDlgButtonChecked
DrawMenuBar
GetActiveWindow
AppendMenuA
GetMenuItemCount
IsWindow
PostMessageA
RemoveMenu
DispatchMessageA
SetMenuDefaultItem
AdjustWindowRectEx
UnhookWindowsHookEx
DefMDIChildProcA
SystemParametersInfoA
ReleaseCapture
BeginDeferWindowPos
GetSystemMetrics
IsWindowVisible
SetWindowTextA
LoadImageA
MapWindowPoints
UpdateWindow
CallWindowProcA
DestroyMenu
SetMenuItemInfoA
LoadCursorA
DialogBoxParamA
DrawFrameControl
ModifyMenuA
TranslateMDISysAccel
GetMessagePos
GetWindowThreadProcessId
RegisterClassA
GetWindow
GetClassLongA
GetMenuItemID
UnregisterClassA

gdi32

CreateHatchBrush
SetTextColor
SetViewportOrgEx
PatBlt
DeleteDC
BitBlt
MoveToEx
CreateEllipticRgn
CreateDIBSection
CreateFontIndirectA
GetDeviceCaps
SetBrushOrgEx
GetDIBits
GetCurrentObject
SetBkColor
CreateBitmap
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
CombineRgn
CreateCompatibleBitmap
Ellipse
CreateRectRgn
CreatePatternBrush
SetTextJustification
GetTextMetricsA
SetTextAlign
GetObjectA
GetViewportOrgEx
CreateSolidBrush
GetStockObject

comdlg32

ChooseColorA
GetOpenFileNameA

advapi32

RegCloseKey
RegSetValueExA
RegDeleteKeyA
RegEnumKeyExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteValueA
CryptGetKeyParam
CryptDecrypt

ole32

CoUninitialize
CLSIDFromString
StringFromGUID2
GetHGlobalFromStream
CoCreateInstance
StringFromCLSID
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoInitialize

oleaut32

VarUI4FromStr

shlwapi

PathSearchAndQualifyW
PathSkipRootA
StrCmpNIA
PathRenameExtensionW

comctl32

ImageList_Draw
ImageList_Destroy
ImageList_DrawIndirect
ord17
ImageList_LoadImageA
InitCommonControlsEx
ord6
ImageList_GetImageCount

opengl32

glOrtho
glMatrixMode
glViewport
glLoadIdentity

pdh

PdhConnectMachineW
PdhBrowseCountersA
PdhCollectQueryData
PdhComputeCounterStatistics
PdhGetFormattedCounterValue

glu32

gluLookAt

winhttp

WinHttpSendRequest

setupapi

SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces

urlmon

URLDownloadToFileA

tapi32

lineSetupTransferA

Sections

.text
Size: 203KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b1515181bb0f3b001f18be087234516f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

oleaut32

shlwapi

comctl32

opengl32

pdh

glu32

winhttp

setupapi

urlmon

tapi32

Sections

.text Size: 203KB - Virtual size: 202KB

.rdata Size: 57KB - Virtual size: 56KB

.data Size: 66KB - Virtual size: 74KB

.rsrc Size: 44KB - Virtual size: 43KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 203KB - Virtual size: 202KB

.rdata
Size: 57KB - Virtual size: 56KB

.data
Size: 66KB - Virtual size: 74KB

.rsrc
Size: 44KB - Virtual size: 43KB

.reloc
Size: 14KB - Virtual size: 13KB