0e35a4dda19f46ea519237dd567065cf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0e35a4dda19f46ea519237dd567065cf_JaffaCakes118
Size

829KB
MD5

0e35a4dda19f46ea519237dd567065cf
SHA1

4dc716ef728f76fd1eb5088afd28ea593c1e778a
SHA256

d2bcd787858bd382ebe07000fa705a3adfb6d1640db6c6a229316441d0ff29b3
SHA512

4a6e7b8f9dca66baf7df2b31ca1492dfde980fd1e49e8d312088adb865b17df4c3c0f93af37b0c31a04d3ce75c01abad0ac7cd685f6bd3fd60ab27f8cf7de6c0
SSDEEP

24576:xp3W85eh0kyIcAuMQdhV7sk0GZ+ed7ogcRS8GGVEyCi:S0WyI9uM0h9uGF8gcRS8luyCi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e35a4dda19f46ea519237dd567065cf_JaffaCakes118

Files

0e35a4dda19f46ea519237dd567065cf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7f6de9f0130d3979b420546a650eef3b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GlobalAddAtomA
CompareStringW
LockResource
GetTimeFormatA
HeapFree
TlsGetValue
IsValidCodePage
TlsAlloc
ExitProcess
CloseHandle
GlobalFlags
GetSystemInfo
CompareStringA
InterlockedIncrement
GetLocaleInfoA
LockFile
lstrcmpA
LCMapStringW
FileTimeToLocalFileTime
GetCurrentProcess
GetSystemTimeAsFileTime
GetFullPathNameA
GlobalUnlock
EnumResourceLanguagesA
GetVolumeInformationA
SetUnhandledExceptionFilter
WaitForSingleObject
GetTimeZoneInformation
GetStartupInfoA
GlobalFindAtomA
FreeEnvironmentStringsA
SetThreadPriority
SuspendThread
GetFileSizeEx
GetThreadLocale
GetEnvironmentStringsW
RtlUnwind
QueryPerformanceCounter
GetConsoleCP
InitializeCriticalSection
GlobalHandle
VirtualQuery
InterlockedExchange
LocalReAlloc
GetConsoleOutputCP
GetEnvironmentStrings
CreateThread
lstrlenA
GetACP
WriteConsoleA
CreateEventA
SetHandleCount
LocalAlloc
LocalFree
FindResourceExA
GetCPInfo
MulDiv
SetStdHandle
VirtualAlloc
LoadResource
SetEndOfFile
GetFileAttributesA
GetStringTypeA
ExitThread
HeapAlloc
UnlockFile
GetDateFormatA
LeaveCriticalSection
FormatMessageA
GetModuleHandleW
TerminateProcess
SetLastError
UnhandledExceptionFilter
LCMapStringA
ReadFile
GetCurrentThreadId
FreeLibrary
TlsFree
GetStdHandle
ConvertDefaultLocale
CreateFileA
GetStringTypeW
HeapCreate
ResumeThread
GetLastError
GetModuleFileNameA
GlobalGetAtomNameA
WriteConsoleW
FreeResource
Sleep
GetFileType
DuplicateHandle
FlushFileBuffers
FileTimeToSystemTime
InitializeCriticalSectionAndSpinCount
TlsSetValue
HeapSize
GlobalLock
FindFirstFileA
FindResourceA
WideCharToMultiByte
SetEnvironmentVariableA
SetFilePointer
RaiseException
GetProcAddress
GetCurrentProcessId
WriteFile
GetFileTime
InterlockedDecrement
GlobalDeleteAtom
DeleteFileA
VirtualFree
WritePrivateProfileStringA
SetErrorMode
SizeofResource
GetModuleFileNameW
IsDebuggerPresent
GetDriveTypeA
DeleteCriticalSection
MultiByteToWideChar
GetVersionExA
GlobalReAlloc
GlobalFree
GetCommandLineA
SetEvent
GetTickCount
FreeEnvironmentStringsW
GetConsoleMode
lstrcmpW
HeapReAlloc
GetCurrentDirectoryA
GetCurrentThread
VirtualProtect
ExpandEnvironmentStringsA
GetModuleHandleA
EnterCriticalSection
GetOEMCP
GlobalAlloc
GetFileSize
FindClose

user32

SetWindowTextA
SystemParametersInfoA
GetWindowRect
GetDesktopWindow
SetWindowLongA
SendMessageA
GetClassInfoExA
EnableMenuItem
GetDlgCtrlID
MapWindowPoints
GetLastActivePopup
GetParent
SetCursor
GetClassNameA
GetCapture
InvalidateRect
CallWindowProcA
GetWindowTextA
BeginPaint
EqualRect
GetMessageA
GetNextDlgTabItem
GetWindowTextLengthA
GetSystemMenu
GrayStringA
GetWindowThreadProcessId
CopyAcceleratorTableA
CheckMenuItem
ReleaseCapture
LoadBitmapA
DrawTextA
SetWindowRgn
KillTimer
IsDialogMessageA
IsWindowEnabled
DefWindowProcA
GetMenu
GetSystemMetrics
GetClassLongA
AdjustWindowRectEx
GetMenuItemID
GetKeyState
IntersectRect
CreatePopupMenu
CopyRect
MessageBoxA
RegisterClipboardFormatA
SetWindowPos
CreateDialogIndirectParamA
GetCursorPos
WindowFromPoint
TrackPopupMenu
SetWindowContextHelpId
InvalidateRgn
GetDlgItem
WinHelpA
AppendMenuA
PostMessageA
SetPropA
GetMessagePos
GetActiveWindow
LoadIconA
ReleaseDC
EndDialog
CharUpperA
GetSubMenu
RegisterWindowMessageA
LoadCursorA
ValidateRect
SetCapture
PtInRect
InsertMenuA
RemovePropA
ModifyMenuA
EndPaint
SetForegroundWindow
SetMenuItemBitmaps
PostQuitMessage
DispatchMessageA
GetClientRect
FillRect
GetTopWindow
CallNextHookEx
SetMenu
DrawIcon
GetMenuCheckMarkDimensions
GetWindowDC
GetMenuItemCount
DestroyMenu
GetForegroundWindow
DrawFrameControl
IsWindowVisible
RegisterClassA
DestroyWindow
GetMessageTime
GetAsyncKeyState
SetActiveWindow
PostThreadMessageA
UnhookWindowsHookEx
IsWindow
SetRect
GetSysColorBrush
GetWindowPlacement
IsChild
GetWindow
GetDC
MapDialogRect
EnableWindow
CreateWindowExA
MessageBeep
ScreenToClient
GetClassInfoA
GetPropA
SendDlgItemMessageA
MoveWindow
ClientToScreen
PeekMessageA
SetWindowsHookExA
GetMenuState
IsIconic
GetFocus
TabbedTextOutA
UpdateWindow
CharNextA
GetNextDlgGroupItem
DrawTextExA
ShowWindow
UnregisterClassA
GetWindowLongA
SetTimer
TranslateMessage
IsRectEmpty
RedrawWindow
SetFocus
GetSysColor
OffsetRect

gdi32

SetViewportExtEx
CreatePen
CreateCompatibleDC
CreateFontIndirectA
SetBkMode
GetCurrentPositionEx
PtVisible
GetMapMode
BeginPath
LPtoDP
SelectObject
CreateSolidBrush
RestoreDC
GetClipBox
OffsetViewportOrgEx
DeleteDC
SetTextColor
PathToRegion
StretchBlt
EnumFontFamiliesExA
StrokeAndFillPath
SetViewportOrgEx
SetWindowOrgEx
GetWindowExtEx
SetBkColor
ExtSelectClipRgn
GetObjectA
EndPath
LineTo
GetViewportExtEx
MoveToEx
DPtoLP
SetMapMode
BitBlt
CreateCompatibleBitmap
GetRgnBox
GetTextColor
PolyBezierTo
DeleteObject
Escape
GetBkColor
CreateRectRgnIndirect
ScaleViewportExtEx
SetWindowExtEx
GetStockObject
ScaleWindowExtEx
CreateBitmap
ExtTextOutA
RectVisible
SaveDC
TextOutA
CombineRgn
GetDeviceCaps

comdlg32

GetFileTitleA

advapi32

RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegQueryValueA
RegCreateKeyExA

shell32

ShellExecuteA

ole32

CreateILockBytesOnHGlobal
CLSIDFromProgID
CoGetClassObject
OleInitialize
CLSIDFromString
OleIsCurrentClipboard
CoTaskMemFree
OleUninitialize
CoRevokeClassObject
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CoTaskMemAlloc
CoFreeUnusedLibraries
OleFlushClipboard
StgCreateDocfileOnILockBytes

oleaut32

VariantCopy
SysAllocStringLen
SysStringLen
SafeArrayDestroy
SysAllocStringByteLen
VariantTimeToSystemTime
SysAllocString
SysFreeString
SystemTimeToVariantTime
VariantInit
OleCreateFontIndirect
VariantChangeType
VariantClear

comctl32

ord17

shlwapi

PathStripToRootA
PathFindFileNameA
PathIsUNCA
PathFindExtensionA

winmm

midiDisconnect
midiOutClose
midiInAddBuffer
midiInClose
midiInGetErrorTextA

rpcrt4

UuidCreate

secur32

CompleteAuthToken

oledlg

ord8

Sections

.text
Size: 806KB - Virtual size: 806KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 595KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f6de9f0130d3979b420546a650eef3b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

rpcrt4

secur32

oledlg

Sections

.text Size: 806KB - Virtual size: 806KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 3KB - Virtual size: 595KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 806KB - Virtual size: 806KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 3KB - Virtual size: 595KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 5KB - Virtual size: 5KB