095311c8c50b6cd94a15a5caf1600f6e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

095311c8c50b6cd94a15a5caf1600f6e_JaffaCakes118
Size

811KB
MD5

095311c8c50b6cd94a15a5caf1600f6e
SHA1

79b5086a507b46e13bc49e9be34cd65eaa39b696
SHA256

e2da6750aaffce6fb5e3ea65e4c70a2ef1533ea1f4984f9df81433c713dfc526
SHA512

840f586029863868abffefecf5b7bd55ac4f3090a22466b84a3620f41dca36d706ebe0b56c48bf299f9fa02189b1441bc9616574bffc97ee0e861567adc78af9
SSDEEP

24576:d4v6XEpGtVgt/HW/BaZBCitVXw7ERKrd1:d4wEgIQar/c7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
095311c8c50b6cd94a15a5caf1600f6e_JaffaCakes118

Files

095311c8c50b6cd94a15a5caf1600f6e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fd356cefe4e2dda00842487ebbf5af07

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
SetEvent
GetSystemDirectoryA
GetLastError
GetCurrentProcess
LockFile
SetLastError
TerminateProcess
CreateEventA
lstrlenA
SetFilePointer
FreeLibrary
LeaveCriticalSection
HeapFree
FormatMessageA
GetVersion
CloseHandle
GlobalHandle
FileTimeToSystemTime
ExitProcess
GetStdHandle
GetOEMCP
GlobalFlags
WaitForSingleObject
CompareStringA
UnhandledExceptionFilter
lstrcpynA
HeapDestroy
HeapCreate
lstrcmpA
lstrcmpiA
FindResourceA
GlobalFree
FindClose
CreateMutexA
SetUnhandledExceptionFilter
GetProfileStringA
LocalAlloc
GlobalLock
InitializeCriticalSection
SetErrorMode
VirtualAlloc
GetPrivateProfileStringA
IsBadWritePtr
LoadLibraryA
GetFileTime
GetLocalTime
MultiByteToWideChar
LockResource
TlsGetValue
FindFirstFileA
WinExec
TlsSetValue
LCMapStringW
SetStdHandle
GetACP
TlsAlloc
LCMapStringA
DeleteCriticalSection
TlsFree
VirtualProtect
GlobalUnlock
SetHandleCount
ResumeThread
CompareStringW
SizeofResource
GlobalDeleteAtom
GetFullPathNameA
GetCurrentThread
InterlockedDecrement
GetFileSize
IsBadCodePtr
GlobalFindAtomA
InterlockedIncrement
GlobalGetAtomNameA
GetThreadLocale
EnterCriticalSection
lstrcatA
GlobalAlloc
SetEndOfFile
FreeEnvironmentStringsA
CreateFileA
GetModuleFileNameA
HeapAlloc
GetModuleHandleA
GlobalReAlloc
HeapSize
GetFileType
LoadResource
GetTickCount
LocalFree
GetProcessVersion
GetStringTypeA
GetSystemDefaultLangID
Sleep
GetEnvironmentStrings
GetTimeZoneInformation
MulDiv
GlobalAddAtomA
ExitThread
SuspendThread
ReadFile
GetFileAttributesA
WideCharToMultiByte
FreeEnvironmentStringsW
GetStartupInfoA
lstrcpyA
UnlockFile
GetStringTypeW
GetEnvironmentStringsW
GetCurrentThreadId
RaiseException
GetCommandLineA
GetVersionExA
FlushFileBuffers
CreateThread
DuplicateHandle
RtlUnwind
LocalReAlloc
GetCPInfo
SetEnvironmentVariableA
IsBadReadPtr
WriteFile
GetProcAddress
WritePrivateProfileStringA
VirtualFree
HeapReAlloc
GetVolumeInformationA
SetThreadPriority

user32

GetPropA
SetFocus
SetWindowsHookExA
wsprintfA
InvalidateRect
LoadBitmapA
PostQuitMessage
EnableWindow
SetRect
GetWindow
GetWindowRect
GetDlgItem
GetWindowPlacement
SetCursor
IsIconic
GetDlgCtrlID
GrayStringA
PostMessageA
InflateRect
OffsetRect
CreateWindowExA
IntersectRect
SetForegroundWindow
GetWindowTextLengthA
PeekMessageA
GetSysColorBrush
RegisterClassA
PtInRect
TranslateMessage
IsWindow
MessageBoxA
CallWindowProcA
ModifyMenuA
GetWindowLongA
GetSysColor
GetMessagePos
SetCapture
GetClassNameA
GetClassInfoA
MapWindowPoints
SetMenuItemBitmaps
DrawFocusRect
LoadStringA
RemovePropA
DrawTextA
GetMenuItemCount
CheckMenuItem
ValidateRect
SetActiveWindow
GetWindowDC
GetCapture
PostThreadMessageA
GetNextDlgGroupItem
UnhookWindowsHookEx
SetWindowPos
ReleaseDC
EndPaint
ExcludeUpdateRgn
RegisterWindowMessageA
AdjustWindowRectEx
GetWindowTextA
GetActiveWindow
SendDlgItemMessageA
IsWindowEnabled
WinHelpA
IsWindowUnicode
TabbedTextOutA
GetKeyState
MapDialogRect
DrawIcon
SetWindowLongA
CharUpperA
MoveWindow
SendMessageA
MessageBeep
GetParent
GetLastActivePopup
GetClientRect
EnableMenuItem
SetWindowRgn
GetNextDlgTabItem
CopyRect
DispatchMessageA
CopyAcceleratorTableA
DestroyMenu
TrackPopupMenu
GetTopWindow
IsWindowVisible
KillTimer
ScreenToClient
UnregisterClassA
GetCursorPos
HideCaret
SystemParametersInfoA
ShowWindow
GetMenuState
ReleaseCapture
GetSubMenu
BeginPaint
SetWindowTextA
GetDesktopWindow
ShowCaret
IsChild
DestroyWindow
GetMenu
LoadCursorA
GetForegroundWindow
SetMenuDefaultItem
DefWindowProcA
GetSystemMetrics
GetMessageA
ClientToScreen
GetFocus
GetMessageTime
IsDialogMessageA
UpdateWindow
DefDlgProcA
GetMenuCheckMarkDimensions
EndDialog
GetMenuItemID
SetPropA
LoadIconA
GetDC
CallNextHookEx
CreateDialogIndirectParamA
GetClassLongA
CharNextA
SetWindowContextHelpId
RegisterClipboardFormatA
SetTimer

gdi32

TextOutA
BitBlt
ExtCreateRegion
DPtoLP
DeleteDC
GetObjectA
DeleteObject
SetViewportExtEx
SelectObject
GetTextColor
PatBlt
ExtTextOutA
LPtoDP
Escape
SaveDC
GetClipBox
GetMapMode
PtVisible
RestoreDC
CreateCompatibleBitmap
CreateDIBSection
CombineRgn
SetTextColor
GetViewportExtEx
GetDeviceCaps
SetBkMode
GetTextExtentPointA
CreateSolidBrush
CreateCompatibleDC
ScaleViewportExtEx
ScaleWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
GetStockObject
RectVisible
GetBkColor
SetBkColor
IntersectClipRect
CreateDIBitmap
CreateBitmap
SetWindowExtEx
SetMapMode
GetWindowExtEx

comdlg32

GetFileTitleA

advapi32

OpenServiceA
RegOpenKeyExA
RegCloseKey
CloseServiceHandle
RegCreateKeyExA
QueryServiceStatus
ControlService
RegSetValueExA
OpenSCManagerA
StartServiceA
RegQueryValueExA
RegDeleteValueA

shell32

Shell_NotifyIconA
ShellExecuteA

ole32

CoTaskMemAlloc
OleFlushClipboard
CoRevokeClassObject
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
OleUninitialize
CoFreeUnusedLibraries
CLSIDFromString
CoTaskMemFree
CoRegisterMessageFilter
CLSIDFromProgID
OleInitialize

oleaut32

VariantClear
SysAllocString
OleCreateFontIndirect
VariantCopy
VariantChangeType
SysAllocStringByteLen
SysFreeString
SysStringLen
VariantTimeToSystemTime
SysAllocStringLen

comctl32

ord17

netapi32

NetApiBufferSize

oledlg

ord8

msvcrt

exit

Sections

.text
Size: 729KB - Virtual size: 729KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bbbb
Size: 512B - Virtual size: 157B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dddd
Size: - Virtual size: 5.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aaaa
Size: 512B - Virtual size: 139B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.eeee
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd356cefe4e2dda00842487ebbf5af07

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

netapi32

oledlg

msvcrt

Sections

.text Size: 729KB - Virtual size: 729KB

.bbbb Size: 512B - Virtual size: 157B

.dddd Size: - Virtual size: 5.3MB

.rdata Size: 51KB - Virtual size: 51KB

.data Size: 512B - Virtual size: 840B

.aaaa Size: 512B - Virtual size: 139B

.eeee Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 8B

.tls Size: 512B - Virtual size: 57B

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 729KB - Virtual size: 729KB

.bbbb
Size: 512B - Virtual size: 157B

.dddd
Size: - Virtual size: 5.3MB

.rdata
Size: 51KB - Virtual size: 51KB

.data
Size: 512B - Virtual size: 840B

.aaaa
Size: 512B - Virtual size: 139B

.eeee
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 8B

.tls
Size: 512B - Virtual size: 57B

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 9KB - Virtual size: 9KB