978659bcdfe8a7678177bb888c3ce886_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

978659bcdfe8a7678177bb888c3ce886_JaffaCakes118
Size

300KB
MD5

978659bcdfe8a7678177bb888c3ce886
SHA1

2753adcf381e6fb7058cbb65e7426b61cbfde161
SHA256

e1fc35d738fc9dd258a49432b611dde7d512ddbf5ab256a454f7787bc72f02c0
SHA512

14af934d0148ac2740ec618401b503e8d2a29c10b28ce08f1c73ba9e0fce368c62016c5e9a333e0bc191f14da7ea39abc6d7201ae121098884433c4f1d236397
SSDEEP

6144:sgVzdwdBz86eBA5YJGg4CxB9VlzpDJKk:55wdBz83a0G9CxV5d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
978659bcdfe8a7678177bb888c3ce886_JaffaCakes118

Files

978659bcdfe8a7678177bb888c3ce886_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ff55a32a3671a8f1c6b2e01960ad8d6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
HeapAlloc
GetACP
TerminateProcess
HeapReAlloc
HeapSize
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
CompareStringA
CompareStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCommandLineA
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetStartupInfoA
RaiseException
GetSystemTime
GetProfileStringA
GetTimeZoneInformation
SetCurrentDirectoryA
SetEnvironmentVariableA
HeapFree
RtlUnwind
GetCurrentDirectoryA
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GlobalFlags
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
ReadFile
DuplicateHandle
MulDiv
GlobalAlloc
GetCurrentThread
lstrcmpA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
SetLastError
CreateFileA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
FindFirstFileA
FindClose
lstrcpynA
GetFileTime
GetFileSize
WritePrivateProfileStringA
GetPrivateProfileStringA
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
lstrlenA
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GetDiskFreeSpaceA
SetVolumeLabelA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
SetFilePointer
GetLastError
GetTickCount
GetDriveTypeA
GetFileAttributesA
SetFileAttributesA
GlobalMemoryStatus
CloseHandle
GetModuleHandleA
GetProcAddress
GetCurrentProcess
DeleteFileA
GetLocalTime
GetTempPathA
GetModuleFileNameA
GetEnvironmentStrings

user32

PostThreadMessageA
GetCursorPos
LoadStringA
ReleaseDC
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
IsWindowVisible
RegisterClipboardFormatA
MessageBoxA
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
LoadIconA
SendMessageA
EnableWindow
UnregisterClassA
HideCaret
SetCursor
ShowCaret
ExcludeUpdateRgn
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
InvalidateRect
GetTopWindow
GetDlgItem
IsWindowEnabled
CharToOemBuffA
OemToCharBuffA
PostQuitMessage
wsprintfA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetDC
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetParent
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
InflateRect
DestroyMenu
GetSysColorBrush
LoadCursorA
GetDesktopWindow
PtInRect
GetClassNameA
CharUpperA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
MapDialogRect
GetPropA
SetWindowContextHelpId
GetMessageA
TranslateMessage
GetMenu
ValidateRect

gdi32

IntersectClipRect
DeleteObject
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
PatBlt
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetObjectA
GetDeviceCaps
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateFontIndirectA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegQueryValueExA
RegOpenKeyExA
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
GetUserNameA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

comctl32

ImageList_ReplaceIcon
ord17
ImageList_Destroy
ImageList_Create

oledlg

ord8

ole32

OleUninitialize
OleInitialize
CoTaskMemAlloc
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoRegisterMessageFilter
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemFree

olepro32

ord253

oleaut32

VariantCopy
VariantClear
SysAllocStringLen
SysFreeString
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
VariantTimeToSystemTime

ws2_32

closesocket
shutdown
recv
send
gethostbyname
htons
connect
WSAStartup
socket
setsockopt
WSACleanup

Sections

.text
Size: 204KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff55a32a3671a8f1c6b2e01960ad8d6c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

ws2_32

Sections

.text Size: 204KB - Virtual size: 200KB

.rdata Size: 48KB - Virtual size: 46KB

.data Size: 24KB - Virtual size: 40KB

.rsrc Size: 20KB - Virtual size: 17KB

.text
Size: 204KB - Virtual size: 200KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 24KB - Virtual size: 40KB

.rsrc
Size: 20KB - Virtual size: 17KB