8ec363843a850f67ebad036bb4d18efd_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8ec363843a850f67ebad036bb4d18efd_JaffaCakes118
Size

186KB
MD5

8ec363843a850f67ebad036bb4d18efd
SHA1

ac856eb04ca1665b10bed5a1757f193ff56aca02
SHA256

27233293b7a11e9ab8c1bca56a7e415914e1269febb514563e522afd04bc39f8
SHA512

800f15fb824a28860719b2ff329dd9bcd94cf9db26c9617656665564b39d8c116552296656f5c109a697b6afc5658f0ba4688e4803358504000f6150047d6684
SSDEEP

3072:TFFzdn1bwoWwW8BplOd4G5ts0RTy/L1yib5icNisjx3jUiXy:TFFzvwoWw3BXOdl5Ts1yw0s13jU5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ec363843a850f67ebad036bb4d18efd_JaffaCakes118

Files

8ec363843a850f67ebad036bb4d18efd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

11111f709df80d09f41da9375e740ca7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
lstrcpynW
lstrcpyn
lstrcpyW
lstrcpyA
lstrcmpiW
lstrcmpW
lstrcmpA
lstrcatW
WriteProfileSectionA
WritePrivateProfileStringW
WritePrivateProfileSectionW
WriteFile
WriteConsoleW
WriteConsoleOutputAttribute
WideCharToMultiByte
VerifyVersionInfoW
VerSetConditionMask
UnmapViewOfFile
UnhandledExceptionFilter
TlsGetValue
TerminateProcess
SetUnhandledExceptionFilter
SetLastError
SetFilePointer
SetConsoleMode
SetConsoleActiveScreenBuffer
ReadFile
ReadConsoleW
QueueUserAPC
QueryPerformanceCounter
OpenEventA
MultiByteToWideChar
MulDiv
MoveFileW
MoveFileExW
MapViewOfFile
LocalUnlock
LocalLock
LocalFree
LocalAlloc
LoadLibraryW
InterlockedIncrement
InterlockedDecrement
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalFree
GlobalCompact
GlobalAlloc
GetUserDefaultLCID
GetTimeFormatW
GetTimeFormatA
GetTickCount
GetThreadPriorityBoost
GetTempPathW
GetTempFileNameW
GetSystemWindowsDirectoryW
GetSystemTimeAsFileTime
GetSystemDefaultLCID
GetStdHandle
GetStartupInfoW
GetNumberOfConsoleMouseButtons
GetNumberFormatW
GetModuleHandleW
GetLocaleInfoW
GetLastError
GetFileSize
GetDateFormatW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetConsoleMode
GetConsoleDisplayMode
GetComputerNameExW
GetACP
FreeLibrary
FormatMessageW
FindFirstFileA
FileTimeToSystemTime
ExpandEnvironmentStringsW
EnterCriticalSection
DeleteFileW
CreateFileW
CreateFileMappingW
CommConfigDialogW
CloseHandle
ClearCommBreak
VirtualAlloc
GetModuleHandleA
GetProcAddress
LoadLibraryA

user32

SetWindowTextW
SetWindowWord
ShowCaret
ShowScrollBar
SwapMouseButton
SystemParametersInfoA
ToUnicode
TranslateMessage
UnionRect
UpdateLayeredWindow
UpdateWindow
WINNLSEnableIME
WinHelpW
wsprintfW
SetDlgItemTextW
SetCursor
SetCaretPos
SetCapture
SetActiveWindow
SendMessageW
ScrollWindowEx
ScreenToClient
ReplyMessage
ReleaseDC
ReleaseCapture
RegisterDeviceNotificationW
RegisterClipboardFormatW
RegisterClipboardFormatA
RegisterClassExW
PtInRect
PostMessageW
PeekMessageW
OpenClipboard
OffsetRect
OemToCharBuffW
OemKeyScan
MessageBoxW
MessageBoxA
MessageBeep
LoadStringW
LoadMenuW
LoadIconW
LoadCursorW
IsZoomed
IsWindowVisible
IsWindowEnabled
IsWindow
IsMenu
IsIconic
IsCharUpperA
InvertRect
InvalidateRect
IntersectRect
HideCaret
GetWindowTextW
GetWindowRect
GetWindowLongW
GetWindow
GetThreadDesktop
SetWindowLongW
GetSysColor
GetPropA
GetParent
GetMonitorInfoW
GetMessageW
GetMessageTime
GetMenuItemInfoW
GetMenuContextHelpId
GetLastInputInfo
GetKeyboardLayoutList
GetKeyboardLayout
GetDoubleClickTime
GetDlgItemTextW
GetDlgItem
GetDialogBaseUnits
GetDesktopWindow
GetDC
GetCursorPos
GetClipboardData
GetClientRect
GetClassInfoExW
GetClassInfoA
GetCaretBlinkTime
GetCapture
GetAsyncKeyState
GetAncestor
GetActiveWindow
FindWindowW
FillRect
EqualRect
EnumWindowStationsW
EnumDisplayDevicesW
EnumClipboardFormats
EndPaint
EndDialog
EnableWindow
EnableScrollBar
EmptyClipboard
DrawTextExW
DrawMenuBar
DrawIcon
DrawFrameControl
DrawEdge
DlgDirListA
DispatchMessageW
DialogBoxParamW
DestroyCaret
DeleteMenu
DefWindowProcW
DefDlgProcA
DdeFreeDataHandle
DdeCreateStringHandleW
DdeConnect
DdeAbandonTransaction
SetShellWindow
SetScrollInfo
SetRectEmpty
SetRect
SetForegroundWindow
LoadIconA
ActivateKeyboardLayout
BeginPaint
CharNextA
CharNextExA
CharUpperW
ClientToScreen
SetFocus
GetSystemMetrics
SetDoubleClickTime
CloseClipboard
CopyRect
CreateCaret
CreateMenu
CreateWindowExW
SetClipboardData

gdi32

EndDoc
DeleteDC
DeleteColorSpace
EndPage
FillPath
BeginPath
AbortDoc
AddFontResourceTracking
BRUSHOBJ_pvGetRbrush
BitBlt
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateEnhMetaFileW
CreateFontIndirectW
CreatePen
CreatePolygonRgn
Ellipse
EnableEUDC
EngDeleteSemaphore
EngGradientFill
EngStretchBltROP
EnumFontFamiliesW
ExtTextOutA
ExtTextOutW
FillRgn
GdiConvertBitmap
GdiConvertBitmapV5
GdiEndPageEMF
GdiEntry10
GdiEntry12
GdiSetPixelFormat
GetBitmapBits
GetCharABCWidthsFloatA
CreateHalftonePalette
GetCharacterPlacementW
GetClipRgn
GetDIBits
GetEnhMetaFileBits
GetFontData
GetGlyphOutline
GetObjectW
GetRgnBox
GetStockObject
GetTextExtentExPointW
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointW
GetTextFaceW
GetTextMetricsW
GetWindowExtEx
OffsetRgn
PatBlt
PlayEnhMetaFileRecord
PolyTextOutA
RectInRegion
Rectangle
ResetDCW
SelectObject
SetBitmapBits
SetBkColor
SetBrushOrgEx
SetICMProfileA
SetPolyFillMode
SetTextColor
StretchBlt
TranslateCharsetInfo
UnrealizeObject
XLATEOBJ_piVector
DeleteObject
CloseMetaFile
GdiGetBatchLimit
DeleteEnhMetaFile
CreateCompatibleDC
CancelDC
CreatePatternBrush
GdiFlush
AbortPath
CreateSolidBrush
EndPath
DeleteMetaFile
CloseFigure
GetCharABCWidthsFloatW
CloseEnhMetaFile

comdlg32

GetOpenFileNameW
ChooseFontW
GetSaveFileNameW

advapi32

RegDeleteValueW
RegSetValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegEnumValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW

shell32

ShellAboutW
ExtractAssociatedIconW
SHGetDataFromIDListW
Shell_NotifyIconW

ole32

CoTaskMemFree
CoTaskMemAlloc
CoInitializeSecurity
CoInitializeEx
CoCreateInstance
CoUninitialize

shlwapi

StrCmpNW
StrStrIA

msvcrt

__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_ftol
_initterm
_iob
_ltow
_onexit
_stricmp
_strnicmp
_wcmdln
_wcsicmp
_wcsnicmp
_wcsnset
_wsetlocale
_wtoi
calloc
exit
fflush
fprintf
free
localtime
malloc
qsort
realloc
strtok
wcscat
wcschr
wcscpy
wcslen
wcsncmp
wcsrchr
wcsstr
wcstod
wcstok
wcstol
__p__commode
__dllonexit
__CxxFrameHandler
_XcptFilter
_CxxThrowException
__p__fmode

imm32

ImmEnumRegisterWordW
ImmDestroyContext
ImmCreateContext
ImmConfigureIMEW
ImmAssociateContext
ImmGetCompositionStringW
ImmGetConversionStatus
ImmIsIME
ImmRegisterWordW
ImmSetCompositionStringW
ImmSetConversionStatus
ImmEscapeW

Sections

.text
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11111f709df80d09f41da9375e740ca7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

shlwapi

msvcrt

imm32

Sections

.text Size: 134KB - Virtual size: 134KB

.rdata Size: 41KB - Virtual size: 40KB

.data Size: 8KB - Virtual size: 8KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 134KB - Virtual size: 134KB

.rdata
Size: 41KB - Virtual size: 40KB

.data
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 2KB - Virtual size: 1KB