031a6a48e1a0deb24f0b64bfae914697_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

031a6a48e1a0deb24f0b64bfae914697_JaffaCakes118
Size

544KB
MD5

031a6a48e1a0deb24f0b64bfae914697
SHA1

8d2c7394865811159be9f0364f2c3cc4655c0837
SHA256

51decda19b3bc2b8d756dba8ac4fec42ff9a8ec4f16ec2ee9ae399680b81e7e4
SHA512

3cae40d01e7839a9fea95d6dc1555ad5faf4b0e705e7b3adf07abfe8df736ab3594af82f6684de559a01501651b0040b00cadf407b3ff78530100151eba6dd89
SSDEEP

6144:iqt+0lJg1oVPj37AdaJirA4oxF4EfvNB3hTWEH:iqt+gJgKPjrAdzrA4ovvZWE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
031a6a48e1a0deb24f0b64bfae914697_JaffaCakes118

Files

031a6a48e1a0deb24f0b64bfae914697_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cdeb0402e15ecf38fbc132000293a3b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

sndPlaySoundA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

kernel32

GetTickCount
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapAlloc
HeapFree
CreateThread
ExitThread
RaiseException
TerminateProcess
HeapSize
HeapReAlloc
GetACP
SetStdHandle
GetFileType
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
FileTimeToLocalFileTime
CompareStringA
CompareStringW
SetEnvironmentVariableA
DeleteCriticalSection
ReleaseMutex
GetLastError
CreateMutexA
GetWindowsDirectoryA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
lstrcpynA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetTempPathA
FreeLibrary
SetLastError
InterlockedIncrement
InterlockedDecrement
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
WaitForSingleObject
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThreadId
SuspendThread
CreateEventA
LoadResource
FindResourceA
FileTimeToSystemTime
SetErrorMode
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
SizeofResource
GlobalFlags
GetProcessVersion
GetFileTime
LockResource
GlobalFree
GlobalUnlock
GlobalLock
GetProfileStringA
GetFileSize
GetFileAttributesA
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
FormatMessageA
LocalFree
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GlobalAlloc
GetProcAddress
lstrcmpA
GetCurrentThread
GetModuleFileNameA
GetThreadLocale
MulDiv
LoadLibraryA
GetVersion
lstrcatA
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA

user32

LoadStringA
GetClassNameA
PtInRect
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
CharNextA
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetDC
ClientToScreen
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
GetDesktopWindow
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetDlgItem
IsWindowEnabled
UnhookWindowsHookEx
GetMessageA
TranslateMessage
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
SetWindowsHookExA
PeekMessageA
DispatchMessageA
SetCursor
GetWindowDC
DestroyMenu
MapDialogRect
SetWindowContextHelpId
CharUpperA
PostQuitMessage
InflateRect
ReleaseDC
CopyRect
RedrawWindow
LoadCursorA
GetSysColorBrush
FlashWindow
InvalidateRect
wsprintfA
FindWindowA
SystemParametersInfoA
LoadMenuA
GetSubMenu
GetCursorPos
EnableMenuItem
TrackPopupMenu
IsIconic
GetSystemMetrics
DrawIcon
LoadImageA
DestroyIcon
LoadIconA
SendMessageA
PostMessageA
DrawTextA
GetClientRect
SetWindowRgn
SetRect
SetForegroundWindow
EnableWindow
LoadBitmapA
KillTimer
SetTimer
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
GetMenuItemID

gdi32

SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteDC
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
GetMapMode
PatBlt
DPtoLP
LPtoDP
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
CreateRoundRectRgn
GetObjectA
CreateFontIndirectA
CreateCompatibleDC
GetTextExtentPointA
CreateDIBitmap
BitBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA

shell32

Shell_NotifyIconA
ShellExecuteA

comctl32

_TrackMouseEvent
ord17

oledlg

ord8

ole32

CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CLSIDFromProgID
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysAllocStringByteLen
SysStringLen
VariantCopy
VariantTimeToSystemTime
SysAllocString
VariantClear
VariantChangeType
SysAllocStringLen
SysFreeString

wsock32

ioctlsocket
bind
htons
htonl
closesocket
gethostbyname
recv
send
WSAAsyncSelect
inet_ntoa
accept
recvfrom
sendto
connect
WSASetLastError
WSAStartup
WSACleanup
ntohl
WSAGetLastError
socket

wininet

InternetCanonicalizeUrlA
InternetGetLastResponseInfoA
HttpQueryInfoA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetQueryOptionA
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
InternetCrackUrlA

Sections

.text
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 296KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cdeb0402e15ecf38fbc132000293a3b4

Headers

File Characteristics

Imports

winmm

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

wininet

Sections

.text Size: 184KB - Virtual size: 182KB

.rdata Size: 48KB - Virtual size: 46KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 296KB - Virtual size: 292KB

.text
Size: 184KB - Virtual size: 182KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 296KB - Virtual size: 292KB