8e64486efdc23a1620ee201a75f3ab71_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8e64486efdc23a1620ee201a75f3ab71_JaffaCakes118
Size

788KB
MD5

8e64486efdc23a1620ee201a75f3ab71
SHA1

c305ba890f66cd0177e37030ba25fffb9777a8d4
SHA256

9f2d16f627b3268c829b8846e109ccfd9038608f362bb8541dee4df992f2faad
SHA512

74ba6d4d92bafd18043c57d0e295521b7eaf6888478c75edb3c361522857dd7e96de92b5be68837d2af0afac15a2ea45d4303f86b2a4272f1b930165410c465a
SSDEEP

12288:r64nFXYcpuEI8Io7HSad55vaQRd9M74j:rRFXHp5YayqrO4j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e64486efdc23a1620ee201a75f3ab71_JaffaCakes118

Files

8e64486efdc23a1620ee201a75f3ab71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f86a0212ed92c1dd95c05c9867d85bf0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\RSSReader\bootstrap_v1\bootstrap\Release\bootstrap.pdb

Imports

kernel32

GlobalAddAtomW
LoadLibraryW
GetProcAddress
FreeLibrary
ExitProcess
CreateDirectoryW
MultiByteToWideChar
GetLocaleInfoW
Sleep
GetVersionExW
LoadLibraryA
HeapFree
GetProcessHeap
HeapAlloc
OpenProcess
SetEnvironmentVariableA
CompareStringW
CompareStringA
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
GetTimeZoneInformation
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsBadWritePtr
LCMapStringW
LCMapStringA
WriteFile
ReadFile
SetFilePointer
GetFileType
GetCurrentProcess
DuplicateHandle
lstrcpyW
lstrlenW
DeleteCriticalSection
RaiseException
InitializeCriticalSection
GetUserDefaultLangID
GetUserDefaultLCID
FindNextFileW
FindFirstFileW
CopyFileW
GetLastError
TerminateThread
CreateThread
FindResourceExW
GetDiskFreeSpaceExW
LocalFree
FormatMessageW
WideCharToMultiByte
GetExitCodeProcess
WaitForSingleObject
MoveFileW
GetModuleHandleW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
FindResourceW
LoadResource
LockResource
SizeofResource
CloseHandle
VirtualFree
HeapCreate
HeapDestroy
lstrcpynW
SetLastError
EnumResourceLanguagesW
GetVersion
ConvertDefaultLocale
GetModuleFileNameW
GlobalDeleteAtom
GlobalAlloc
lstrcmpW
GlobalLock
GetCurrentThreadId
GetCurrentThread
GlobalFree
FreeResource
GlobalUnlock
MulDiv
DeleteFileW
GetModuleHandleA
GetVersionExA
lstrcatW
lstrlenA
GlobalFindAtomW
InterlockedDecrement
lstrcmpiW
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
FindClose
GetVolumeInformationW
GetFullPathNameW
CreateFileW
LocalAlloc
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
WritePrivateProfileStringW
InterlockedIncrement
GlobalFlags
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesW
GetFileTime
SetErrorMode
GetTickCount
GetStartupInfoW
TerminateProcess
HeapSize
HeapReAlloc
RtlUnwind
SetStdHandle
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA

user32

EnableMenuItem
ModifyMenuW
GetFocus
SetMenuItemBitmaps
ValidateRect
GetCursorPos
IsWindowVisible
TranslateMessage
GetMessageW
CallNextHookEx
SetWindowsHookExW
SetCursor
ScreenToClient
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
CopyRect
PtInRect
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowLongW
CallWindowProcW
DefWindowProcW
GetDlgCtrlID
RegisterClassW
GetClassInfoW
EqualRect
AdjustWindowRectEx
GetMenu
UpdateWindow
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
GetForegroundWindow
GetWindowTextLengthW
IsChild
SetFocus
SendDlgItemMessageA
SendDlgItemMessageW
RemovePropW
GetPropW
SetPropW
GetClassNameW
GetClassLongW
GetClassInfoExW
CreateWindowExW
GetCapture
WinHelpW
RegisterWindowMessageW
wsprintfW
IsDialogMessageW
SetWindowTextW
MoveWindow
ShowWindow
CheckMenuItem
CharUpperW
SetCapture
LoadCursorW
ReleaseCapture
CharNextW
IsRectEmpty
SetRect
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
GetSysColorBrush
DestroyMenu
RegisterClipboardFormatW
PostThreadMessageW
GetNextDlgTabItem
EndDialog
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDlgItem
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
PeekMessageW
PostQuitMessage
MessageBoxW
FindWindowExW
GetWindowTextW
DispatchMessageW
GetWindowThreadProcessId
SendMessageW
LoadIconW
GetSysColor
GetWindowRect
InvalidateRect
LoadImageW
LoadBitmapW
SetForegroundWindow
BringWindowToTop
SetActiveWindow
RedrawWindow
KillTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
FillRect
WindowFromDC
GetKeyState
EnableWindow
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
PostMessageW
UnregisterClassW
GetMenuCheckMarkDimensions
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow

gdi32

GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetDeviceCaps
CreateRectRgnIndirect
GetBkColor
GetRgnBox
GetMapMode
DeleteObject
GetClipBox
CreateCompatibleBitmap
CreateSolidBrush
DeleteDC
GetObjectW
CreateCompatibleDC
SelectObject
CreateFontIndirectW
BitBlt
GetStockObject
SetBkMode
SetTextColor
SetBkColor
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetMapMode
RestoreDC
SaveDC
CreateBitmap
GetTextColor

advapi32

RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW

shell32

ShellExecuteExW
ShellExecuteW

oleaut32

VariantCopy
SysAllocStringLen
SysStringLen
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
VariantInit
VariantChangeType
VariantClear
SysFreeString

comctl32

ord17

shlwapi

PathFindExtensionW
PathFileExistsW
PathIsUNCW
PathFindFileNameW
PathStripToRootW
UrlUnescapeW

oledlg

OleUIBusyW

ws2_32

WSAStartup
WSACleanup

wininet

InternetCloseHandle
HttpSendRequestW
HttpQueryInfoW
InternetReadFile
InternetSetOptionW
InternetCrackUrlW
InternetCanonicalizeUrlW
HttpOpenRequestW
InternetConnectW
InternetOpenW

oleacc

LresultFromObject
CreateStdAccessibleObject

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

comdlg32

GetFileTitleW

ole32

CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoGetClassObject

Sections

.text
Size: 212KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 484KB - Virtual size: 481KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f86a0212ed92c1dd95c05c9867d85bf0

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

oleaut32

comctl32

shlwapi

oledlg

ws2_32

wininet

oleacc

winspool.drv

comdlg32

ole32

Sections

.text Size: 212KB - Virtual size: 209KB

.rdata Size: 76KB - Virtual size: 74KB

.data Size: 12KB - Virtual size: 24KB

.rsrc Size: 484KB - Virtual size: 481KB

.text
Size: 212KB - Virtual size: 209KB

.rdata
Size: 76KB - Virtual size: 74KB

.data
Size: 12KB - Virtual size: 24KB

.rsrc
Size: 484KB - Virtual size: 481KB