add27cd5aa697b1f32f800789f71c9c2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

add27cd5aa697b1f32f800789f71c9c2_JaffaCakes118
Size

336KB
MD5

add27cd5aa697b1f32f800789f71c9c2
SHA1

fc1c626a0b3b2e6374dc6ed43d76392541ff7b2c
SHA256

184040912b37d8f4d94f70d5a135aab593a0257996b3baf96615e65e8fd3a53e
SHA512

ec235a1b2216e45b599f756cc1e772b6c892db2c65ed4f767ba2d4b587d9768dc4dbab7cc7146b5cc77ffdf132e0f077f3681b35022c636dd2f25e112f2c116a
SSDEEP

6144:H6RABINtOofnGFxg9930Rgr35LvHdv9cObVSa6frUnPxC:HyABIN8oIg9FP+OGYnPY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
add27cd5aa697b1f32f800789f71c9c2_JaffaCakes118

Files

add27cd5aa697b1f32f800789f71c9c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f2193d7669f8b564e1c8245ffef08f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
TerminateProcess
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
RtlUnwind
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetShortPathNameA
CreateFileA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
FormatMessageA
LocalFree
InterlockedDecrement
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
CloseHandle
GetCurrentThread
GlobalAlloc
GetModuleFileNameA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
GlobalFree
FreeResource
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
lstrcatA
lstrcmpW
lstrcpynA
GlobalGetAtomNameA
GlobalAddAtomA
FindResourceA
LoadResource
LockResource
SizeofResource
GlobalLock
GlobalUnlock
MulDiv
GetModuleHandleA
SetLastError
lstrcmpA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetStringTypeExA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreateFileMappingW
MapViewOfFile
LoadLibraryA
QueryPerformanceCounter
GetProcAddress

user32

GetSysColorBrush
GetMenuStringA
InsertMenuA
KillTimer
SetTimer
SetWindowRgn
DrawIcon
FindWindowA
GetMessageA
TranslateMessage
ValidateRect
ShowOwnedPopups
PostQuitMessage
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetCursorPos
DestroyCursor
SetCursorPos
RedrawWindow
InflateRect
SetWindowTextA
IsDialogMessageA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
IsChild
GetWindowTextA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
MessageBoxA
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
GetClientRect
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
RegisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
PtInRect
RegisterWindowMessageA
wsprintfA
LoadMenuA
DestroyMenu
GetClassNameA
SetWindowPos
WinHelpA
SetFocus
GetActiveWindow
EqualRect
GetDlgItem
SetWindowLongA
GetKeyState
GetDlgCtrlID
GetMenu
GetCapture
UpdateWindow
EnableWindow
CharLowerA
SetCursor
SetCapture
LoadCursorA
ReleaseCapture
CharUpperA
LoadBitmapA
GetMenuCheckMarkDimensions
CheckMenuItem
UnpackDDElParam
ReuseDDElParam
LoadIconA
GetClassInfoA
PeekMessageA
LoadAcceleratorsA
SetActiveWindow
IsWindowVisible
InvalidateRect
IsIconic
InsertMenuItemA
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreatePopupMenu
DestroyIcon
DeleteMenu
IntersectRect
OffsetRect
SetRectEmpty
CopyRect
GetLastActivePopup
BringWindowToTop
PostMessageA
SetMenu
ShowWindow
GetWindowLongA
IsWindow
GetDesktopWindow
ShowScrollBar
GetMenuItemInfoA
EnableMenuItem
GetMenuState
ModifyMenuA
SendMessageA
GetParent
GetFocus
SetMenuItemBitmaps
UnregisterClassA
FillRect
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ScreenToClient
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
GetWindow
IsWindowEnabled
TranslateAcceleratorA
GetSysColor
EndPaint
BeginPaint
GetTopWindow

gdi32

CreateSolidBrush
CreateCompatibleBitmap
PatBlt
CreateEllipticRgn
LPtoDP
Ellipse
CreateFontIndirectA
GetDeviceCaps
GetTextExtentPoint32A
GetStockObject
CreateCompatibleDC
CreatePatternBrush
DeleteDC
Escape
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
DPtoLP
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
BitBlt
GetObjectA
DeleteObject
MoveToEx
LineTo
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateBitmap
SetPixel
SelectObject

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
RegCreateKeyA
RegCloseKey
GetFileSecurityA

shell32

DragFinish
DragQueryFileA
ExtractIconA
SHGetFileInfoA
DragAcceptFiles

comctl32

ImageList_Draw
ImageList_GetImageInfo
ord17
ImageList_Destroy

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f2193d7669f8b564e1c8245ffef08f4

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleaut32

Sections

.text Size: 172KB - Virtual size: 168KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 76KB - Virtual size: 87KB

.rsrc Size: 40KB - Virtual size: 39KB

.text
Size: 172KB - Virtual size: 168KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 76KB - Virtual size: 87KB

.rsrc
Size: 40KB - Virtual size: 39KB