01b77d82904490e6d639e7721a09f107_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

01b77d82904490e6d639e7721a09f107_JaffaCakes118
Size

952KB
MD5

01b77d82904490e6d639e7721a09f107
SHA1

cc27c91fe8a29b494984a3e366a5ba76ed234a87
SHA256

e16f3a67f080e3076f40f055193b098aab36e802b3a421c7c4d42f95195cd2a7
SHA512

6e4be5e2923d28fa034e0c4bd08de7dc0b3553fdb0510925b9b308cca6a8a0a987dd6c6ff3fd2ed66a73266180891298344e78a524e2af99a85405d1a8a6fd43
SSDEEP

24576:FILvZmb+BftUIcC0nCW1A3oyUlz9OLoZKXP:uZmb+BftDhsy4yy9tZK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01b77d82904490e6d639e7721a09f107_JaffaCakes118

Files

01b77d82904490e6d639e7721a09f107_JaffaCakes118
.exe windows:4 windows x86 arch:x86

78f08ac2fba345ff97863191c78a2c6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAAccept
WSAConnect
WSARecvFrom
getsockname
recvfrom
sendto
setsockopt
WSARecv
WSASend
select
__WSAFDIsSet
listen
WSASocketA
WSAGetLastError
htons
bind
gethostbyname
socket
WSASendTo
ntohs
shutdown
inet_ntoa
closesocket
ntohl
inet_addr
connect
send
htonl
recv

kernel32

GetThreadLocale
GetFileAttributesA
GetFileTime
SetErrorMode
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
ExitProcess
GetACP
TerminateProcess
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
DuplicateHandle
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
SizeofResource
GlobalFlags
WaitForSingleObject
GlobalAlloc
lstrcmpA
GetCurrentThread
lstrcpynA
MulDiv
SetLastError
FormatMessageA
FileTimeToLocalFileTime
WideCharToMultiByte
InterlockedIncrement
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalDeleteAtom
GetModuleHandleA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
LocalAlloc
LocalFree
HeapAlloc
HeapFree
MultiByteToWideChar
RemoveDirectoryA
CreateEventA
SetEvent
WriteFile
GetTimeZoneInformation
FindFirstFileA
FindNextFileA
FindClose
lstrcatA
lstrlenA
WinExec
TerminateThread
GetModuleFileNameA
CreateFileA
GetFileSize
ReadFile
FileTimeToSystemTime
GetComputerNameA
GetLastError
SleepEx
LoadLibraryA
GetProcAddress
CreateThread
FreeLibrary
GetVersionExA
GetCurrentProcess
DeleteFileA
CloseHandle
lstrcpyA
GetTickCount
GlobalAddAtomA
GlobalFindAtomA
GetLocalTime
CreateDirectoryA
DeleteCriticalSection
InitializeCriticalSection
GetWindowsDirectoryA
GetPrivateProfileIntA
GetLocaleInfoA
Sleep
CreateMailslotA
GetSystemTime
InterlockedDecrement
CopyFileA
EnterCriticalSection
LeaveCriticalSection
WritePrivateProfileStringA
GetPrivateProfileStringA
GetProfileStringA
GetDriveTypeA

user32

GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
GetMessageA
TranslateMessage
ValidateRect
MapDialogRect
GetAsyncKeyState
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
wvsprintfA
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
EnableMenuItem
MoveWindow
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
CopyRect
IsWindowVisible
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
SetRect
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
SetWindowContextHelpId
CallWindowProcA
GetMessageTime
GetMessagePos
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
RegisterClassExA
GetMenuItemCount
GetMenuStringA
GetMenuItemID
ModifyMenuA
LoadStringA
LoadBitmapA
UpdateWindow
PostQuitMessage
FillRect
DefWindowProcA
RegisterClassA
LoadCursorA
CopyIcon
GetDC
ReleaseDC
InflateRect
GetSysColor
InvalidateRect
SetCursor
ReleaseCapture
RedrawWindow
SetCapture
MessageBeep
GetWindow
GetDesktopWindow
GetClassNameA
SetActiveWindow
GetPropA
SetWindowLongA
RemovePropA
GetWindowThreadProcessId
EnumThreadWindows
ExitWindowsEx
ScreenToClient
LoadMenuA
GetSubMenu
CheckMenuItem
GetCursorPos
RegisterHotKey
UnregisterHotKey
DrawIcon
GetSystemMenu
CopyAcceleratorTableA
CharNextA
CharUpperA
GetSysColorBrush
WindowFromPoint
GetMenu
DestroyMenu
AppendMenuA
LoadIconA
LoadImageA
IsIconic
ShowWindow
SetForegroundWindow
GetLastActivePopup
SetWindowTextA
MessageBoxA
wsprintfA
PostMessageA
FindWindowA
GetSystemMetrics
RegisterWindowMessageA
SetTimer
IsWindow
GetWindowRect
GetClientRect
PtInRect
GetKeyState
EnableWindow
GetParent
SendMessageA
UnhookWindowsHookEx
IsWindowUnicode
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
GetForegroundWindow

gdi32

PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
DPtoLP
GetBkColor
LPtoDP
LineTo
MoveToEx
CreateHatchBrush
CreateSolidBrush
CreatePen
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
DeleteObject
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
DeleteDC
PatBlt
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetTextExtentPointA
CreateDIBitmap
GetTextExtentPoint32A
GetObjectA
CreateFontIndirectA
GetTextColor
GetStockObject
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegQueryValueA
RegOpenKeyExA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
DeleteService
QueryServiceStatus
ControlService
RegCreateKeyExA
AdjustTokenPrivileges
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegDeleteValueA
StartServiceA
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
SetServiceStatus
OpenServiceA

shell32

Shell_NotifyIconA
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA

comctl32

ord17
ImageList_Destroy
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA

oledlg

ord8

ole32

CoTaskMemFree
CoTaskMemAlloc
CreateILockBytesOnHGlobal
CLSIDFromProgID
CoInitialize
CoCreateInstance
CoUninitialize
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CLSIDFromString
CoGetClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize

olepro32

ord253

oleaut32

VariantChangeType
SysAllocString
VariantCopy
VariantClear
VariantTimeToSystemTime
SysStringLen
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysFreeString

wininet

InternetOpenUrlA
GetUrlCacheEntryInfoA
HttpAddRequestHeadersA
InternetCloseHandle
InternetReadFile
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
HttpQueryInfoA

wsock32

WSAStartup
WSACleanup

iphlpapi

GetIfTable
GetIpNetTable

rpcrt4

UuidCreate

Sections

.text
Size: 388KB - Virtual size: 387KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 464KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78f08ac2fba345ff97863191c78a2c6a

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

wsock32

iphlpapi

rpcrt4

Sections

.text Size: 388KB - Virtual size: 387KB

.rdata Size: 68KB - Virtual size: 64KB

.data Size: 28KB - Virtual size: 231KB

.rsrc Size: 464KB - Virtual size: 460KB

.text
Size: 388KB - Virtual size: 387KB

.rdata
Size: 68KB - Virtual size: 64KB

.data
Size: 28KB - Virtual size: 231KB

.rsrc
Size: 464KB - Virtual size: 460KB