b144119fa5c6d075f630cdf70cc9d58a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b144119fa5c6d075f630cdf70cc9d58a_JaffaCakes118
Size

1.3MB
MD5

b144119fa5c6d075f630cdf70cc9d58a
SHA1

ebe7de346ed3ba081bbb3c4c1c62cf2407f0575e
SHA256

3c7f26970b9267c1dcdd581f8883e8f3f0da8c554d740bac39f90334b6890916
SHA512

54960be5a7f72801928998d41dd5fe5be58d957669a0557e29a81f3b698df268bc9838c4a28af46e71e456a3f8d7899c1622a021b24c42c707f61890a65f37ec
SSDEEP

24576:Njz1ggks66ms2mjq1q2+QPBJssTwZ+W22y0yR7AM5Y9Qhh1fCt4P61w9FuPfgsMb:LvFOfr8NMCNHbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b144119fa5c6d075f630cdf70cc9d58a_JaffaCakes118

Files

b144119fa5c6d075f630cdf70cc9d58a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

da9a093715ad510eb87620b45d553347

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetTickCount
CompareStringA
GetVersionExA
MulDiv
CreateFileA
GetFileSize
UnmapViewOfFile
MapViewOfFileEx
SetEvent
CreateEventA
EnumSystemCodePagesW
CreateFileMappingA
GetModuleHandleA
GetProcessHeap
SetEndOfFile
GetLocaleInfoW
CompareStringW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetACP
FlushFileBuffers
GetCurrentDirectoryA
GlobalAlloc
GetFileType
SetHandleCount
GetConsoleMode
GetConsoleCP
SetLastError
TlsFree
GetModuleFileNameA
VirtualAlloc
VirtualFree
HeapCreate
LCMapStringW
LCMapStringA
GetCPInfo
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
ExitThread
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
GetDriveTypeA
FindClose
FindNextFileA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
InitializeCriticalSection
MultiByteToWideChar
QueryPerformanceFrequency
GlobalLock
Sleep
QueryPerformanceCounter
TlsAlloc
TlsSetValue
TlsGetValue
CreateThread
GetCurrentThreadId
GetCurrentThread
SetThreadPriority
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
SetEnvironmentVariableA
GetEnvironmentVariableA
AttachConsole
GetStdHandle
WriteConsoleW
OutputDebugStringW
ExitProcess
GetSystemPowerStatus
LoadLibraryW
FreeLibrary
GetModuleHandleW
GetFileSizeEx
CreateFileW
ReadFile
WriteFile
SetFilePointerEx
SetErrorMode
SetFilePointer
lstrcatW
lstrlenW
GetModuleFileNameW
CreateDirectoryW
LoadLibraryA
GetProcAddress
GetSystemInfo
GlobalMemoryStatusEx
GetLastError
FormatMessageW
CloseHandle
CreateSemaphoreW
ReleaseSemaphore
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
GetFullPathNameA
InterlockedExchange

user32

SetClassLongA
GetDlgItem
DefWindowProcA
SetWindowsHookExA
GetSysColor
IsDlgButtonChecked
AppendMenuA
DispatchMessageA
UnhookWindowsHookEx
DeferWindowPos
BeginDeferWindowPos
GetSystemMetrics
SetWindowTextA
LoadImageA
MapWindowPoints
UpdateWindow
FindWindowA
GetDlgItemTextA
DialogBoxParamA
EnableMenuItem
CreateWindowExA
GetWindowLongA
MessageBoxA
SetWindowLongA
OffsetRect
GetScrollRange
SendMessageA
GetWindowTextLengthA
GetDesktopWindow
DispatchMessageW
GetWindowDC
FindWindowW
UnregisterDeviceNotification
FillRect
wsprintfA
CallNextHookEx
LoadStringA
CreateWindowExW
RegisterDeviceNotificationW
GetRawInputDeviceInfoA
PeekMessageW
RegisterClassExW
TranslateMessage
UnregisterClassW
GetMessageW
DestroyWindow
SetClipboardData
GetClipboardSequenceNumber
OpenClipboard
EmptyClipboard
GetClipboardData
IsClipboardFormatAvailable
CloseClipboard
IsRectEmpty
CallWindowProcW
ValidateRect
GetPropW
ToUnicode
RegisterClassW
AdjustWindowRectEx
ClipCursor
GetCursorPos
GetWindowLongW
GetAsyncKeyState
GetMenu
GetKeyboardState
EndDeferWindowPos
GetDialogBaseUnits
GetClassLongA
MoveWindow
GetWindowTextLengthW
GetFocus
TrackMouseEvent
SetPropW
GetWindowTextW
DrawIconEx
DrawTextA
GetRawInputDeviceList
SendDlgItemMessageA
PostQuitMessage
SetActiveWindow
GetSystemMenu
DefWindowProcW
GetUpdateRect
GetClassInfoW
GetClientRect
GetKeyState
LoadImageW
SetWindowLongW
CreateIconFromResource
IsIconic
GetRawInputData
SetWindowPos
ShowWindow
SendMessageW
SetWindowTextW
SetWindowRgn
LoadCursorW
GetDoubleClickTime
CreateIconIndirect
SetCursorPos
RegisterRawInputDevices
DestroyIcon
EnumDisplayDevicesW
ChangeDisplaySettingsExW
EnumDisplaySettingsW
DrawTextW
DialogBoxIndirectParamW
GetDC
SystemParametersInfoW
ReleaseDC
EndDialog
SystemParametersInfoA
MapVirtualKeyW
GetKeyboardLayout
ClientToScreen
SetCursor
ScreenToClient
GetWindowRect
GetMessageA

gdi32

CreateCompatibleBitmap
SelectObject
DeleteObject
GetDIBits
CreateDIBSection
DeleteDC
BitBlt
CreateSolidBrush
SetTextColor
GetDeviceCaps
CreateFontIndirectW
GetTextMetricsW
CreateDCW
CreateBitmap
SwapBuffers
SetPixelFormat
ChoosePixelFormat
DescribePixelFormat
GetPixelFormat
CreateRectRgn
CombineRgn
SetDeviceGammaRamp
GetDeviceGammaRamp
GetObjectA
SetTextJustification
CreateRoundRectRgn
StretchDIBits
OffsetRgn
SelectClipRgn
GetCurrentObject
CreateFontA
FrameRgn
MoveToEx
CreateCompatibleDC

shell32

DragFinish
DragQueryFileW
DragAcceptFiles
SHGetMalloc
SHGetSpecialFolderLocation
SHGetFileInfoA
SHCreateShellItem
SHGetFolderPathW

ole32

CoCreateInstance
CoInitializeEx
CoUninitialize
CreateStreamOnHGlobal

oleaut32

SysFreeString

odbc32

ord75

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

gdiplus

GdipFree
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipSaveImageToStream
GdipCreateBitmapFromStream
GdipDisposeImage

winmm

timeEndPeriod
waveOutClose
waveOutGetDevCapsW
timeGetTime
waveOutWrite
timeBeginPeriod
waveOutGetErrorTextW
waveInOpen
waveInGetNumDevs
waveOutUnprepareHeader
waveOutOpen
waveOutGetNumDevs
waveOutPrepareHeader
waveInGetDevCapsW
waveInClose

imm32

ImmGetIMEFileNameA
ImmReleaseContext
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmGetCandidateListW
ImmAssociateContext
ImmNotifyIME
ImmGetContext

shlwapi

PathFileExistsW
SHAutoComplete

msacm32

acmDriverOpen

netapi32

NetShareGetInfo
NetServerGetInfo
NetApiBufferFree

wininet

FtpSetCurrentDirectoryA
InternetConnectA
InternetCloseHandle
InternetOpenA

iphlpapi

CreateIpNetEntry

winscard

SCardEndTransaction

Sections

.text
Size: 836KB - Virtual size: 835KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 203KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da9a093715ad510eb87620b45d553347

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

odbc32

version

gdiplus

winmm

imm32

shlwapi

msacm32

netapi32

wininet

iphlpapi

winscard

Sections

.text Size: 836KB - Virtual size: 835KB

.rdata Size: 98KB - Virtual size: 98KB

.data Size: 203KB - Virtual size: 237KB

.rsrc Size: 144KB - Virtual size: 143KB

.reloc Size: 41KB - Virtual size: 41KB

.text
Size: 836KB - Virtual size: 835KB

.rdata
Size: 98KB - Virtual size: 98KB

.data
Size: 203KB - Virtual size: 237KB

.rsrc
Size: 144KB - Virtual size: 143KB

.reloc
Size: 41KB - Virtual size: 41KB