0c8b5e529a3dc8289eb7cdc9a6472bfc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0c8b5e529a3dc8289eb7cdc9a6472bfc_JaffaCakes118
Size

198KB
MD5

0c8b5e529a3dc8289eb7cdc9a6472bfc
SHA1

d3675f31dfefd60992220c3842296b2ec45f116d
SHA256

268ebf249ddfe7970f58f7ac5d8e777552470e94011e456fb9b384447f43b77c
SHA512

c6e05b2787e6abcfb48ff98b28b15d1b6898e0dfb1da3dce4c6947cb2c2f1ea254948d3e971d2fa9151664407fdee15e6dbd02761c2ed840b9d7f4428462f2aa
SSDEEP

3072:AkijEcpOL6u8Olon6GC2jYCpBvaSElkMlP/TUbuAMeaG8a5:APjEckL6cQ6GscBvabl1ltNa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c8b5e529a3dc8289eb7cdc9a6472bfc_JaffaCakes118

Files

0c8b5e529a3dc8289eb7cdc9a6472bfc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4d412291f30fcc74fff3081819c833b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadMenuA
GetParent
GetSubMenu
TrackPopupMenu
GetDlgItemTextA
SetDlgItemInt
GetDlgItemInt
PostMessageA
GetDialogBaseUnits
SetWindowTextA
IsWindowVisible
SystemParametersInfoA
UnhookWindowsHookEx
SetWindowsHookExA
DialogBoxParamA
CreateWindowExA
RegisterClassA
GetClassInfoA
GetWindowLongA
SetClipboardData
EmptyClipboard
OpenClipboard
GetFocus
GetDlgItem
AppendMenuA
ShowWindow
SetWindowPos
GetClientRect
GetTopWindow
CreateDialogParamA
GetWindowRect
GetSystemMenu
DestroyWindow
ReleaseDC
GetDC
GetWindow
CheckMenuItem
DestroyIcon
LoadCursorA
GetCursorPos
DestroyMenu
SendMessageA
wsprintfA
EndDialog
CloseClipboard
wvsprintfA
MessageBeep
SetDlgItemTextA
MapDialogRect
InvalidateRect
MoveWindow
SetCursor
SetTimer
SendDlgItemMessageA
KillTimer
SetForegroundWindow
LoadIconA
ChildWindowFromPoint
GetWindowTextA
SetWindowLongA
MessageBoxA
UnregisterClassA
SetClassLongA
DefWindowProcA
IsWindow
GetSystemMetrics
EnableWindow
CallWindowProcA
FindWindowA

shell32

SHBrowseForFolderA
ShellExecuteA
DragQueryFileA
DragAcceptFiles
DragFinish
Shell_NotifyIconA
SHGetPathFromIDListA

gdi32

GetTextExtentPoint32A
LPtoDP

comdlg32

GetOpenFileNameA

advapi32

RegCloseKey
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
DeregisterEventSource
ReportEventA
RegisterEventSourceA
RegDeleteKeyA

ws2_32

closesocket
getservbyname
socket
sendto
setsockopt
htons
htonl
inet_addr
ntohl
recvfrom
listen
WSASetLastError
inet_ntoa
gethostname
send
gethostbyname
WSAAsyncSelect
ntohs
WSACleanup
WSAStartup
bind
recv
WSAGetLastError
connect
WSACreateEvent
WSAEventSelect
WSACloseEvent
getsockname
select
accept

comctl32

InitCommonControlsEx

iphlpapi

GetIpNetTable
SendARP
DeleteIpNetEntry

kernel32

SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCurrentDirectoryW
PeekNamedPipe
GetFileInformationByHandle
MultiByteToWideChar
LCMapStringW
IsProcessorFeaturePresent
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
InitializeCriticalSectionAndSpinCount
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
GetTimeZoneInformation
WideCharToMultiByte
HeapCreate
ExitProcess
GetProcAddress
InterlockedDecrement
GetModuleHandleW
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
DecodePointer
DeleteCriticalSection
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineA
FindFirstFileExA
QueryPerformanceCounter
GetCurrentProcessId
GetConsoleCP
GetConsoleMode
SetStdHandle
GetStringTypeW
GetDriveTypeA
GetModuleFileNameW
GetStdHandle
GetFileType
WriteConsoleW
HeapReAlloc
HeapAlloc
HeapFree
ResumeThread
ExitThread
GetDriveTypeW
GetSystemTimeAsFileTime
GlobalAlloc
GlobalLock
GlobalUnlock
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatA
FindNextFileA
FindClose
WritePrivateProfileStringA
GetPrivateProfileStringA
OutputDebugStringA
FormatMessageA
LocalFree
SetLastError
SetThreadPriority
CreateThread
SetEndOfFile
GetProcessHeap
HeapSize
CreateFileW
IsDebuggerPresent
SetProcessWorkingSetSize
CreateFileA
SetFilePointer
lstrlenA
WriteFile
Sleep
FlushFileBuffers
GetLocalTime
CloseHandle
GetFileSize
lstrcmpA
GetTickCount
GetLastError
GetCurrentThreadId
lstrcpyA
lstrcpynA
lstrcatA
SetEnvironmentVariableA
GetEnvironmentVariableA
GetCurrentProcess
CompareStringW
CreateMutexA
ReleaseMutex
GetFullPathNameA
CreateProcessA
WaitForSingleObject
lstrcmpiA
ResetEvent
GetModuleFileNameA
GetCurrentDirectoryA
GetSystemTime
SetEvent
CreateEventA
WaitForMultipleObjects
GetFileAttributesA
CreateSemaphoreA
ReadFile
ReleaseSemaphore
SetCurrentDirectoryA
DeleteFileA

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4d412291f30fcc74fff3081819c833b5

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

gdi32

comdlg32

advapi32

ws2_32

comctl32

iphlpapi

kernel32

Sections

.text Size: 128KB - Virtual size: 127KB

.rdata Size: 27KB - Virtual size: 27KB

.data Size: 11KB - Virtual size: 101KB

.rsrc Size: 14KB - Virtual size: 13KB

.reloc Size: 16KB - Virtual size: 16KB

.text
Size: 128KB - Virtual size: 127KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 11KB - Virtual size: 101KB

.rsrc
Size: 14KB - Virtual size: 13KB

.reloc
Size: 16KB - Virtual size: 16KB