08635f5792625136c9fc3cf183dabfed_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

08635f5792625136c9fc3cf183dabfed_JaffaCakes118
Size

343KB
MD5

08635f5792625136c9fc3cf183dabfed
SHA1

99755dfba5f7ef4befc215a1295b62f7eb27c514
SHA256

f9107f2149c9b4fa724e1bdfe665a4aea34b6c8c0c39840bca2e38d21b68cbe4
SHA512

e9af7e8f8adf385ce3b05e0ede5f81a17b1c053e65c97d7cccf78dcc7b6d62175a7a486b0a00f99dd6723251135aca39b0d982fee06e1b5b901cbd2bbe5d7eda
SSDEEP

6144:U9hLqbRHtjSCy2PsMM2RYilf+jqiAMxipwDPIulq:n9tmCyIu22isjWGKwkulq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08635f5792625136c9fc3cf183dabfed_JaffaCakes118

Files

08635f5792625136c9fc3cf183dabfed_JaffaCakes118
.exe windows:5 windows x86 arch:x86

47068a0142e4d3cce4d4d67d6ff76cef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_wtol
_wsplitpath
_CxxThrowException
??2@YAPAXI@Z
malloc
realloc
__CxxFrameHandler
wcstok
??3@YAXPAX@Z
vswprintf
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
_adjust_fdiv
_initterm
free
_purecall
_wopen
strlen
_errno
_snwprintf
wcscmp
_close
_wtoi
wcscat
wcslen
wcschr
wcscpy
_write

iphlpapi

GetAdaptersInfo
GetIpAddrTable

winmm

mixerGetControlDetailsA
timeGetTime

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
CreateDataAdviseHolder
OleLoadFromStream
WriteClassStm
OleSaveToStream
CreateOleAdviseHolder

gdi32

CreatePen
SetViewportOrgEx
SetWindowOrgEx
SetMapMode
CreateBrushIndirect
CreateCompatibleDC
SaveDC
DeleteObject
ExtCreatePen
LPtoDP
GetDeviceCaps
CreateDCW
CreateRectRgnIndirect
GetPixel
DeleteMetaFile
CloseMetaFile
SetWindowExtEx
CreateMetaFileW
DeleteDC
RestoreDC
CreateCompatibleBitmap
Rectangle
BitBlt
SetTextAlign
GetStockObject
TextOutW

user32

CallWindowProcW
GetWindowLongW
SetWindowLongW
IntersectRect
EqualRect
OffsetRect
LoadBitmapA
LoadIconA
SetWindowRgn
RegisterClassExA
SetTimer
GetDC
GetClipboardOwner
ReleaseDC
UnionRect
PtInRect
GetDoubleClickTime
SetFocus
DefWindowProcW
DestroyWindow
TranslateMessage
MapVirtualKeyW
GetWindowRect
DefWindowProcA
GetParent
CreateWindowExA
GetForegroundWindow
ShowWindow
GetCursor
GetProcessDefaultLayout
GetActiveWindow
CreateWindowExW
GetClassInfoExW
LoadCursorW
LoadCursorA
SendMessageA
wsprintfW
RegisterClassExW
GetFocus
IsChild
BeginPaint
GetClipboardViewer
EndPaint
wsprintfA
GetCaretBlinkTime
UnregisterClassA
CharNextW
KillTimer
PostMessageW
GetClientRect
MoveWindow
InvalidateRect
DestroyAcceleratorTable
GetCapture
GetSysColor
GetKeyState
LoadStringW
SetWindowPos
IsWindow

kernel32

OutputDebugStringW
SetCurrentDirectoryA
GetSystemDirectoryW
GetThreadLocale
LCMapStringW
CreateEventW
SetFilePointer
CreateThread
FindClose
GetAtomNameA
GetModuleHandleA
GetComputerNameExW
SetEvent
WideCharToMultiByte
CreateMutexW
WaitForSingleObject
GetVersionExA
CloseHandle
ExitThread
GetACP
VirtualAlloc
VirtualFree
LoadLibraryA
HeapAlloc
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
GlobalAlloc
GlobalLock
GetStdHandle
FindResourceA
GetCommandLineW
GlobalUnlock
GetShortPathNameW
LoadLibraryExW
GetLastError
FindResourceW
GetComputerNameW
ReadFile
LoadResource
SizeofResource
lstrlenA
LoadLibraryW
FindAtomA
GetStartupInfoA
FindResourceExW
GetProcAddress
DebugBreak
Sleep
CreateProcessW
IsDebuggerPresent
SetLastError
GetTickCount
GlobalMemoryStatusEx
LocalAlloc
LocalFree
GetSystemDefaultLangID
GetVersion
AreFileApisANSI
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
GetProcessHeap
OutputDebugStringA
InterlockedCompareExchange
OpenSemaphoreA
HeapCreate
FreeLibrary
DisableThreadLibraryCalls
GetModuleFileNameW
GetUserDefaultLCID
lstrcatW
HeapDestroy
TlsSetValue
lstrcpynW
lstrcmpiW
FindResourceExA
GetConsoleCP
DeleteCriticalSection
InitializeCriticalSection
GetSystemDefaultLCID
lstrcpyW
MultiByteToWideChar
lstrlenW
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
GlobalFree
DeleteFileA
GetLogicalDrives
CreateSemaphoreA
GetConsoleOutputCP
InterlockedDecrement
InterlockedIncrement

advapi32

CryptHashData
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegEnumValueA
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegOpenKeyExA
RegEnumKeyExA
RegEnumKeyExW
RegQueryValueExW
CryptReleaseContext
CryptAcquireContextW
CryptCreateHash
RegDeleteKeyW
CryptGetHashParam
CryptDestroyHash

secur32

GetUserNameExW

msvcp60

??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ

Sections

.text
Size: 98KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 207KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 66KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47068a0142e4d3cce4d4d67d6ff76cef

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

iphlpapi

winmm

ole32

gdi32

user32

kernel32

advapi32

secur32

msvcp60

Sections

.text Size: 98KB - Virtual size: 96KB

.data Size: 207KB - Virtual size: 208KB

.bss Size: - Virtual size: 66KB

.tls Size: 1KB - Virtual size: 1KB

.rsrc Size: 30KB - Virtual size: 30KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 98KB - Virtual size: 96KB

.data
Size: 207KB - Virtual size: 208KB

.bss
Size: - Virtual size: 66KB

.tls
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 30KB - Virtual size: 30KB

.reloc
Size: 5KB - Virtual size: 4KB