17bfd642bbeaa9ebc75facba6bae07a7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

17bfd642bbeaa9ebc75facba6bae07a7_JaffaCakes118
Size

972KB
MD5

17bfd642bbeaa9ebc75facba6bae07a7
SHA1

e515fd3295b5b9803fa4850ccd54cf6c662e2738
SHA256

24db2570c6b2a9bfbf1bd8206fbe832c98aeabc138ce8742f659d84d9aa06f11
SHA512

5b60d6489343d5299855b1bf8c2f88486781d7fca2f42852f78a683140096fa723ff204c1b63ad379faf754ddf5e0da6a40facab2e02d318de8060af1f114e50
SSDEEP

12288:iJBufT8OyWbsCQ6JiZ3g+11+Oyf9uaKvu2DqDmX/VooqJEYEX:MBur8O68gPgrKvuYqDmPVo/EX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17bfd642bbeaa9ebc75facba6bae07a7_JaffaCakes118

Files

17bfd642bbeaa9ebc75facba6bae07a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

faaa86d9a88806b88ccaaa6c1a3ec38b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

ICOpen
ICClose
ICGetInfo

msacm32

acmFormatTagDetailsA
acmDriverEnum
acmDriverDetailsA
acmDriverClose
acmDriverOpen

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

GetDriverModuleHandle
OpenDriver
CloseDriver

kernel32

lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeResource
GlobalReAlloc
lstrcmpA
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
LocalAlloc
TlsGetValue
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
GetThreadLocale
GetFileTime
FlushFileBuffers
LockFile
UnlockFile
ResumeThread
GetVolumeInformationA
GetFullPathNameA
SetErrorMode
RtlUnwind
HeapFree
HeapAlloc
ExitThread
RaiseException
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
ExitProcess
HeapReAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
GetStdHandle
LCMapStringA
LCMapStringW
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetModuleFileNameW
GlobalFree
MulDiv
GetCurrentThread
GetACP
GetModuleHandleA
CreateThread
GetCurrentThreadId
GetCurrentProcess
DuplicateHandle
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
DeleteFileA
FindFirstFileA
FindClose
SearchPathA
FormatMessageA
LocalFree
CompareStringW
CompareStringA
GetVersion
InterlockedExchange
IsBadWritePtr
OpenProcess
IsBadCodePtr
SetLastError
GetWindowsDirectoryA
FreeLibrary
lstrcatA
WinExec
MultiByteToWideChar
CreateProcessA
GetCommandLineW
Sleep
GetUserDefaultLangID
FileTimeToLocalFileTime
FileTimeToSystemTime
SetFilePointer
SetThreadPriority
GetLastError
GetOverlappedResult
VirtualAlloc
CreateFileW
VirtualFree
GetTickCount
GetFileAttributesA
GetVersionExA
GetCurrentProcessId
CreateEventA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
lstrlenA
GlobalAlloc
lstrcpyA
GlobalLock
GlobalUnlock
GetFileSize
ReadFile
CreateFileA
WriteFile
CloseHandle
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
SetEndOfFile

user32

IsWindowEnabled
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
GetDesktopWindow
TabbedTextOutA
DrawTextExA
GrayStringA
GetWindowDC
BeginPaint
EndPaint
DestroyMenu
PostQuitMessage
GetWindowThreadProcessId
GetSysColorBrush
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetTopWindow
DestroyWindow
GetMessageTime
MapWindowPoints
TrackPopupMenu
GetScrollRange
GetScrollPos
SetForegroundWindow
UpdateWindow
CreateWindowExA
GetClassInfoExA
RegisterClassA
GetScrollInfo
SetScrollInfo
SetWindowPlacement
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
ValidateRect
UnhookWindowsHookEx
GetMenuState
ShowWindow
SetWindowRgn
IsZoomed
RemovePropA
CallWindowProcA
IsMenu
AdjustWindowRectEx
GetMenu
GetClassNameA
BeginDeferWindowPos
EndDeferWindowPos
DeferWindowPos
GetWindowRgn
EqualRect
DispatchMessageA
RegisterWindowMessageA
PeekMessageA
DrawFocusRect
GetActiveWindow
UnregisterClassA
GetClassInfoA
DefWindowProcA
GetCapture
IsRectEmpty
CharUpperA
IsCharAlphaA
IsCharAlphaNumericA
SetLastErrorEx
WindowFromPoint
ClientToScreen
SetWindowLongA
LoadCursorA
CopyIcon
MessageBeep
ReleaseCapture
SetCapture
ReleaseDC
GetDC
GetWindowRect
InflateRect
PtInRect
SetCursor
DrawTextA
FillRect
GetKeyState
GetSystemMetrics
IsIconic
EnableWindow
SendMessageA
GetCursorPos
LoadBitmapA
GetClientRect
GetSysColor
InvalidateRect
HideCaret
CloseClipboard
GetMenuItemID
GetMenuItemCount
DrawIcon
TranslateAcceleratorA
MapDialogRect
GetSystemMenu
AppendMenuA
SetFocus
IsWindowVisible
GetDlgCtrlID
LoadStringA
LoadIconA
GetMessagePos
GetParent
LoadImageA
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
SendDlgItemMessageA
WinHelpA
SetPropA
GetClassLongA
OpenClipboard
SetClipboardData
EmptyClipboard
EnableMenuItem
GetSubMenu
LoadMenuA
ScreenToClient
PostMessageA
SetTimer
GetDlgItem
LoadAcceleratorsA
MessageBoxA
wsprintfA
CopyRect
GetFocus
IsWindow
GetWindowLongA
CheckMenuItem
KillTimer
GetPropA

gdi32

GetObjectA
GetTextMetricsA
PatBlt
CreatePatternBrush
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
CreateFontIndirectA
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
CreateRectRgnIndirect
GetTextExtentPoint32A
GetDIBits
CreateSolidBrush
SelectObject
Rectangle
MoveToEx
LineTo
CreateDIBSection
DeleteObject
BitBlt
CreateCompatibleDC
ScaleViewportExtEx
CreatePen
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CombineRgn
DPtoLP
OffsetRgn
SetRectRgn
CreateRectRgn
GetTextExtentExPointA
GetCharWidthA
GetWindowOrgEx

comdlg32

GetSaveFileNameA
GetOpenFileNameW
GetFileTitleA
GetOpenFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyA
RegSetValueA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueA
RegDeleteValueA
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegEnumKeyA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
CommandLineToArgvW
ShellExecuteW
DragQueryFileA
ShellExecuteA
SHChangeNotify
DragFinish

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
SHRegGetPathA
PathIsUNCA

ole32

CLSIDFromString
CoTaskMemFree
CoUninitialize
StringFromGUID2
CoFreeUnusedLibraries
CoCreateInstance
CoInitialize
CreateItemMoniker
GetRunningObjectTable
StringFromCLSID

oleaut32

VariantInit
VariantChangeType
OleCreatePropertyFrame
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
SysFreeString

Sections

.text
Size: 472KB - Virtual size: 469KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 32KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.trdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

faaa86d9a88806b88ccaaa6c1a3ec38b

Headers

File Characteristics

Imports

msvfw32

msacm32

version

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

Sections

.text Size: 472KB - Virtual size: 469KB

.rdata Size: 116KB - Virtual size: 113KB

.data Size: 32KB - Virtual size: 49KB

.rsrc Size: 280KB - Virtual size: 279KB

.trdata Size: 68KB - Virtual size: 68KB

.text
Size: 472KB - Virtual size: 469KB

.rdata
Size: 116KB - Virtual size: 113KB

.data
Size: 32KB - Virtual size: 49KB

.rsrc
Size: 280KB - Virtual size: 279KB

.trdata
Size: 68KB - Virtual size: 68KB