17fb6a2fbfc53fb94a9c289d1d4ba9d2_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

17fb6a2fbfc53fb94a9c289d1d4ba9d2_JaffaCakes118
Size

776KB
MD5

17fb6a2fbfc53fb94a9c289d1d4ba9d2
SHA1

58a1c39ca7630fcfa2ed19ada37780afbe7bad3a
SHA256

7cadd8dfcb664b7e9a38eaadf3359e8c0982cb380d98dee5cd12be96f077b895
SHA512

12b7f45f7d651630d65711a0e8a8170714fd297d0be394c10ba7121bcd24d2af63dd052e334c3986a76bda5739ae8416e9db4f8778a6009a1952dc57a04c43a9
SSDEEP

12288:opE6r9xOz9KmZrGS4LLufZZxtlG4D1SdusGMGD6/kZ14IjgiLW9wwsNT:36r9xgKmI/ufZZxtlG4D9D6/kZ5J3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17fb6a2fbfc53fb94a9c289d1d4ba9d2_JaffaCakes118

Files

17fb6a2fbfc53fb94a9c289d1d4ba9d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a5a356dda50c1c586841b26180c7e2df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pcengine

Scan
GetScanCurrentCount
GetScanCurrentPos
Engine2
Init2
Quarantine_Create
Quarantine
QuarantinePow
Repair
AdRepair
AdFailedRepair
Quarantine_Close
GetRestartAVmon
SetKeepDay
GetQuarantineKeepDay
Quarantine_RestoreInit
GetRestoreCount
Quarantine_Restore
QuarantineView
ClearCookie
ClearIECache
ClearSiteVisitedLog
ClearAutoForm
ClearHistory
ClearRecycleBin
ClearWinTemp
ClearTemp
ClearRecent
ClearMediaPlayLog
ClearRunList
ClearSearchInternet
ClearSearchPictureAndMusicAndVideo
ClearSearchComputerAndPeople
ClearSearchFileFolder
Release

kernel32

InterlockedDecrement
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeLibrary
LoadLibraryA
LocalFree
FormatMessageA
FileTimeToLocalFileTime
SetLastError
DuplicateHandle
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFullPathNameA
GetThreadLocale
GetFileTime
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
LeaveCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
SetEnvironmentVariableA
GetDriveTypeA
CreateThread
ExitThread
RaiseException
HeapFree
HeapAlloc
GetStartupInfoA
GetTimeZoneInformation
GetSystemTime
GetACP
SetStdHandle
GetFileType
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetEnvironmentVariableA
InterlockedIncrement
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
CompareStringA
CompareStringW
SetThreadPriority
GetProfileStringA
InterlockedExchange
ExitProcess
GetLastError
CreateMutexA
lstrcmpiA
GetVersionExA
WinExec
Sleep
CloseHandle
WaitForSingleObject
TerminateProcess
GetExitCodeProcess
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
SuspendThread
CreateProcessA
GetModuleFileNameA
WritePrivateProfileStringA
GetPrivateProfileIntA
FindClose
FindFirstFileA
GetWindowsDirectoryA
CreateDirectoryA
MultiByteToWideChar
GetFileSize
CreateFileA
GetProcAddress
GetModuleHandleA
ResumeThread
InitializeCriticalSection
GetCommandLineA
GetVolumeInformationA
CreateEventA
GlobalFree
MulDiv
GlobalUnlock
GlobalLock
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
GetCurrentThreadId
GetTickCount
UnmapViewOfFile
FileTimeToSystemTime
WriteFile
SetFileTime
GetFileAttributesA
LocalFileTimeToFileTime
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
SetFilePointer
lstrcatA
lstrlenW
lstrlenA
GetPrivateProfileStringA
lstrcpynA
IsBadReadPtr
IsBadWritePtr
GetVersion
GetLocaleInfoA
SetFileAttributesA
RemoveDirectoryA
GetTempPathA
GlobalReAlloc
lstrcpyA
ReleaseSemaphore
CreateSemaphoreA
GetCurrentProcess
GetLocalTime
EnterCriticalSection
DeleteCriticalSection
WideCharToMultiByte
DeleteFileA
FindNextFileA
SetEvent
ResetEvent
FindResourceA
LoadResource
SizeofResource
LockResource
GlobalAlloc
HeapDestroy

user32

CharUpperA
EndPaint
BeginPaint
GetWindowDC
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
IntersectRect
GetWindowPlacement
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
EnableMenuItem
GetNextDlgTabItem
GetMessageA
GetActiveWindow
CallNextHookEx
ValidateRect
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
PostQuitMessage
EnableWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
LoadIconA
LoadBitmapA
GetDesktopWindow
ReleaseCapture
SetCapture
GrayStringA
DrawTextA
TabbedTextOutA
GetFocus
PtInRect
DrawFrameControl
DrawFocusRect
GetKeyState
UpdateWindow
RedrawWindow
SetActiveWindow
SystemParametersInfoA
GetSysColorBrush
WindowFromPoint
LoadStringA
PostThreadMessageA
RegisterClipboardFormatA
GetClassNameA
ModifyMenuA
GetMenuItemCount
GetMenuItemID
SetMenuDefaultItem
IsWindow
RegisterWindowMessageA
OffsetRect
SetParent
ClientToScreen
GetParent
TrackPopupMenu
wsprintfA
DestroyMenu
LoadImageA
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
CreateDialogIndirectParamA
DispatchMessageA
TranslateMessage
PeekMessageA
SetTimer
LoadMenuA
SendMessageA
InvalidateRect
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
FindWindowA
SetCursor
LoadCursorA
ScreenToClient
GetCursorPos
PostMessageA
GetWindowRect
KillTimer
CheckMenuItem
GetMenuStringA
GetSubMenu
IsWindowVisible
SetForegroundWindow
InsertMenuA
RemoveMenu
MessageBoxA
GetForegroundWindow
SetWindowRgn
SetWindowLongA
ExitWindowsEx
InflateRect
FrameRect
IsRectEmpty
CopyRect
GetSysColor
FillRect
GetDC
ReleaseDC
SetRect
GetWindowLongA
GetClassLongA

gdi32

SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
RestoreDC
GetViewportExtEx
GetWindowExtEx
LPtoDP
DPtoLP
PatBlt
GetMapMode
GetTextColor
GetBkColor
SaveDC
SetBkColor
SetTextColor
GetClipBox
Escape
TextOutA
RectVisible
PtVisible
Rectangle
ExtTextOutA
CreateFontIndirectA
GetStockObject
GetTextExtentPoint32A
CreatePen
RoundRect
CreateFontA
CreateBitmap
StretchBlt
CreateDIBSection
GetObjectA
CreateSolidBrush
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
DeleteObject
GetDeviceCaps
CreateDIBitmap
GetTextExtentPointA
CreateRoundRectRgn

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

shell32

SHGetDesktopFolder
SHGetSpecialFolderPathA
SHGetFileInfoA
SHGetPathFromIDListA
SHGetMalloc
Shell_NotifyIconA
ShellExecuteA

comctl32

ord17
_TrackMouseEvent
FlatSB_EnableScrollBar
InitializeFlatSB
ImageList_GetIconSize
ImageList_Draw
ImageList_DrawEx
ImageList_Destroy
ImageList_LoadImageA

oledlg

ord8

ole32

CoTaskMemAlloc
CoTaskMemFree
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromProgID
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoInitializeEx
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CLSIDFromString

olepro32

ord253
ord251

oleaut32

SysFreeString
SysAllocString
VariantClear
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy
SysAllocStringByteLen
VariantChangeType
SysStringLen
VariantTimeToSystemTime

shlwapi

PathFileExistsA

wininet

HttpOpenRequestA
InternetReadFile
InternetGetConnectedState
HttpSendRequestA
InternetConnectA
InternetOpenA

Sections

.text
Size: 576KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a5a356dda50c1c586841b26180c7e2df

Headers

File Characteristics

Imports

pcengine

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

shlwapi

wininet

Sections

.text Size: 576KB - Virtual size: 572KB

.rdata Size: 120KB - Virtual size: 119KB

.data Size: 36KB - Virtual size: 143KB

.rsrc Size: 40KB - Virtual size: 39KB

.text
Size: 576KB - Virtual size: 572KB

.rdata
Size: 120KB - Virtual size: 119KB

.data
Size: 36KB - Virtual size: 143KB

.rsrc
Size: 40KB - Virtual size: 39KB