06cbe9328a7811fc004ce218fe1bae09_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

06cbe9328a7811fc004ce218fe1bae09_JaffaCakes118
Size

204KB
MD5

06cbe9328a7811fc004ce218fe1bae09
SHA1

619fe5d47e3cb806ea8a303118a6ccd56f4a0f23
SHA256

dec3759483d41c526378301319084893370b23a582e5549b07c91b9adeff5e65
SHA512

9da628c7d3f5f47ad8e3c6710942781726820d58ddc847e72d70c5f5965c806a2331da278e2377150a3f169458ec9030b02804261cb59fe8eba822d3ec4bcf08
SSDEEP

3072:Qwm3WHdXB6PWT9agKqIIUqY8YZ3OvhwkK3w8KreLUJGtrMOYD:Ql3WBBJ9vKqFNY8YAvh12LM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06cbe9328a7811fc004ce218fe1bae09_JaffaCakes118

Files

06cbe9328a7811fc004ce218fe1bae09_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e288603cff64d7971743d682f0810d3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumWindows
RegisterClassExA
LoadIconA
UpdateWindow
TabbedTextOutA
DrawTextA
DrawTextExA
SendMessageA
GetWindowThreadProcessId
DispatchMessageA
TranslateMessage
LoadCursorA
GetMessageA
GrayStringA
CreateWindowExA
DialogBoxParamA
BeginPaint
PostQuitMessage
DefWindowProcA
DestroyWindow
EnableWindow
GetDlgItem
SetDlgItemTextA
EndDialog
GetDlgItemTextA
SetFocus
DestroyIcon
LoadImageA
SetMenuDefaultItem
DestroyMenu
GetSubMenu
LoadMenuA
PostMessageA
TrackPopupMenu
SetForegroundWindow
GetCursorPos
CheckMenuItem
EnableMenuItem
DeleteMenu
SystemParametersInfoA
GetWindowRect
RegisterWindowMessageA
GetMenuItemCount
GetMenuItemID
GetMenuState
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
UnhookWindowsHookEx
MessageBoxA
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
GetWindowTextA
SetWindowTextA
PtInRect
GetClassNameA
GetDlgCtrlID
GetWindow
ClientToScreen
GetFocus
UnregisterClassA
ValidateRect
PeekMessageA
GetKeyState
CallNextHookEx
SetWindowsHookExA
IsWindow
SetWindowLongA
SetWindowPos
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetWindowPlacement
IsIconic
CallWindowProcA
CopyRect
AdjustWindowRectEx
RegisterClassA
GetClassInfoA
GetClassInfoExA
GetMenu
GetClientRect
MapWindowPoints
GetMessagePos
GetMessageTime
GetTopWindow
GetForegroundWindow
RemovePropA
GetPropA
SetPropA
GetClassLongA
GetCapture
WinHelpA

ole32

CoInitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

InterlockedIncrement
InterlockedDecrement
GetModuleFileNameA
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalGetAtomNameA
lstrcmpA
GetThreadLocale
FileTimeToSystemTime
GlobalFlags
ResumeThread
GetCurrentThreadId
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GetLocaleInfoA
GetModuleHandleA
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetCurrentProcess
FindClose
FindFirstFileA
GetFullPathNameA
CreateFileA
FileTimeToLocalFileTime
RtlUnwind
VirtualAlloc
HeapAlloc
HeapFree
GetDriveTypeA
ExitThread
CreateThread
HeapReAlloc
GetLocalTime
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
HeapSize
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
GetACP
IsValidCodePage
Sleep
GetStdHandle
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
MoveFileA
CreateDirectoryA
InitializeCriticalSection
TerminateProcess
GetCurrentProcessId
LoadLibraryA
GetProcAddress
CloseHandle
FreeLibrary
OpenProcess
GetLastError
DeleteFileA
FormatMessageA
LocalFree
GetPrivateProfileStringA
lstrlenA
WideCharToMultiByte
CompareStringA
CompareStringW
MultiByteToWideChar
InterlockedExchange
GetVersion

gdi32

GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
ExtTextOutA
TextOutA
RectVisible
PtVisible
SelectObject
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
DeleteObject
GetDeviceCaps
Escape

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA

shell32

Shell_NotifyIconA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc

oleaut32

VariantInit
VariantChangeType
VariantClear

oleacc

CreateStdAccessibleObject
LresultFromObject

Exports

Exports

InitLogger
Log

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e288603cff64d7971743d682f0810d3f

Headers

File Characteristics

Imports

user32

ole32

version

kernel32

gdi32

winspool.drv

advapi32

shell32

oleaut32

oleacc

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 136KB

.rdata Size: 32KB - Virtual size: 29KB

.data Size: 8KB - Virtual size: 23KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 140KB - Virtual size: 136KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 8KB - Virtual size: 23KB

.rsrc
Size: 20KB - Virtual size: 19KB