104bd37a4103c505c9a8d8eae212972e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

104bd37a4103c505c9a8d8eae212972e_JaffaCakes118
Size

1.1MB
MD5

104bd37a4103c505c9a8d8eae212972e
SHA1

46fe9df73f373e5f6f9687bbb58aca165a2c3c44
SHA256

d02f776550b480ac25892863d2bf37db6b0dba42d5833b568597d9bb7b50bb25
SHA512

419a6b166d4ac12edb99068e84fc9725ff2b509106c594376338c4630da1454aa5dcddbf177d9329dcc5d603c3321c4c18f527ad28a39c570cf4e46ce31af8db
SSDEEP

6144:eHDCUmOuPsHA0Pp6AdHGU/3nJpKRXFK926XcP+F7wjOKokg7FEbgSk1aMVrksf5j:yymBwm5P0p8wrb9z+kS0ZcGiiKGk46

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
104bd37a4103c505c9a8d8eae212972e_JaffaCakes118

Files

104bd37a4103c505c9a8d8eae212972e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a60b6146a682283bb584d866f767faf0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
UnmapViewOfFile
OpenMutexW
MapViewOfFileEx
GetTempPathW
ReleaseMutex
VirtualAlloc
VirtualFree
DeleteFileW
CopyFileW
TerminateProcess
GetSystemDirectoryW
InterlockedExchange
Sleep
lstrcpynW
GetShortPathNameW
ResetEvent
SetEvent
CreateMutexW
CreateEventW
FreeLibrary
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
GetCurrentProcessId
GetPrivateProfileIntW
FlushInstructionCache
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringW
DebugBreak
LoadLibraryW
GetProcAddress
GetModuleFileNameA
WriteFile
CreateFileA
GetFileSize
OpenProcess
FindFirstFileW
FindClose
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameW
GetCurrentProcess
WaitForSingleObject
WritePrivateProfileStringW
GetPrivateProfileStringW
GetLongPathNameW
CreateFileW
ReadFile
SetFilePointer
CloseHandle
lstrlenA
lstrcmpiW
GetModuleHandleW
lstrlenW
InterlockedIncrement
InterlockedDecrement
GetVersionExW
GetLastError
CreateFileMappingW
GetStartupInfoW

user32

UpdateWindow
InvalidateRect
GetCapture
CallWindowProcW
SetCapture
IsWindowEnabled
GetClientRect
DrawFocusRect
SendMessageW
DestroyWindow
IsWindow
GetWindowTextW
PostMessageW
FindWindowW
WaitForInputIdle
CharNextW
SystemParametersInfoW
SetTimer
GetDlgCtrlID
GetParent
ReleaseCapture
ClientToScreen
GetWindowRect
PtInRect
KillTimer
DrawEdge
GetSystemMetrics
GetWindowTextLengthW
EndPaint
BeginPaint
SetWindowPos
AdjustWindowRectEx
GetMenu
SetWindowLongW
GetWindowLongW
CreateWindowExW
ShowWindow
SetForegroundWindow
LoadImageW
GetWindowThreadProcessId
DrawIconEx
DrawTextW
DefWindowProcW
InflateRect
SetRect
CopyRect
ReleaseDC
GetDC
SetDlgItemTextW
ExitWindowsEx
LoadStringW
wvsprintfW
DialogBoxParamW
GetActiveWindow
RegisterClassW
GetClassInfoW
GetDlgItem
SetWindowTextW
MapWindowPoints
GetWindow
EndDialog
LoadBitmapW
EnableWindow
LoadIconW
ScreenToClient
MoveWindow
FillRect
OffsetRect
FrameRect
GetScrollInfo
GetSubMenu
LoadMenuW
SetScrollPos
ScrollWindowEx
SetScrollInfo
TrackPopupMenu
DestroyMenu
GetSysColor
CreateDialogParamW
IsWindowVisible
GetClassInfoExW
wsprintfW
RegisterClassExW
EqualRect
LoadCursorW
SetCursor
DestroyIcon
GetDlgItemTextW
SetFocus

gdi32

ExtTextOutW
StretchBlt
DeleteDC
SetBkColor
CreateCompatibleBitmap
SetViewportOrgEx
BitBlt
CreateSolidBrush
GetTextMetricsW
SetPixel
GetPixel
CreateFontIndirectW
GetObjectW
LineTo
MoveToEx
CreatePen
Rectangle
CreateCompatibleDC
DeleteObject
SelectObject
SetBkMode
CreateFontW
SetTextColor

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

LookupPrivilegeValueW
AdjustTokenPrivileges
OpenSCManagerW
OpenServiceW
CloseServiceHandle
QueryServiceStatus
OpenProcessToken
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

ExtractIconExW
SHGetPathFromIDListW
DragAcceptFiles
DragQueryFileW
ShellExecuteExW
SHGetSpecialFolderPathW
SHBrowseForFolderW

ole32

CoTaskMemFree
CoCreateInstance
StringFromCLSID
CoCreateGuid
CoUninitialize
CoInitialize

oleaut32

DispCallFunc
VariantClear
SysAllocString
SysStringLen
SysFreeString

comctl32

ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_Create
ImageList_Add
InitCommonControlsEx
ImageList_Destroy
ImageList_GetIconSize
_TrackMouseEvent
ImageList_Draw
ImageList_AddMasked

shlwapi

StrCmpNIW
PathCombineW
PathFileExistsW
PathAppendW
SHGetValueW
StrCpyNW
SHSetValueW
PathFindFileNameW
StrStrIW
PathRemoveFileSpecW
PathIsDirectoryW
PathStripToRootW
StrCmpIW
StrChrW
PathFindExtensionW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

wininet

InternetGetConnectedState

msvcrt

_vsnwprintf
_except_handler3
_controlfp
??1type_info@@UAE@XZ
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
_XcptFilter
_exit
_CxxThrowException
wcsrchr
wcscmp
exit
_vsnprintf
iswdigit
wcslen
memmove
iswspace
strncat
_strlwr
_beginthreadex
isalnum
_wcsicmp
??2@YAPAXI@Z
wcschr
malloc
free
_wtoi
__CxxFrameHandler

iphlpapi

GetAdaptersInfo

netapi32

Netbios

psapi

GetProcessMemoryInfo

urlmon

URLDownloadToFileW

atl

ord48
ord40
ord42

Sections

.text
Size: 344KB - Virtual size: 343KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WYCao
Size: 695KB - Virtual size: 708KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a60b6146a682283bb584d866f767faf0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

version

wininet

msvcrt

iphlpapi

netapi32

psapi

urlmon

atl

Sections

.text Size: 344KB - Virtual size: 343KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 16KB - Virtual size: 18KB

.WYCao Size: 695KB - Virtual size: 708KB

.text
Size: 344KB - Virtual size: 343KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 16KB - Virtual size: 18KB

.WYCao
Size: 695KB - Virtual size: 708KB