14f7ebf64175a8370a343910a71326dc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

14f7ebf64175a8370a343910a71326dc_JaffaCakes118
Size

228KB
MD5

14f7ebf64175a8370a343910a71326dc
SHA1

c9104eeca77c195a4f3553bf611f347c09bd8961
SHA256

9a9de1f320f7304f7e5e2dc40731a629c7108fd2a35ecc47a4bed2793c8d0484
SHA512

ed0096b3af2f13e776472846d0aa4ea49bcc1538a27753e69867efa980cedac3c1e307449f8acc434b5a1e34b369723d8e89ef8fdfe8222089c92b5c9e0a5cc7
SSDEEP

3072:aGPrN5LfXSOA5NXwld1k364y3NzlzjH1mSPYiZHUSNFZ0gq8r2ag:pN5LPUnXwdITgH1ZPYa0SrBi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14f7ebf64175a8370a343910a71326dc_JaffaCakes118

Files

14f7ebf64175a8370a343910a71326dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2dbaa7b19d4b1deae31288712ba2151d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
HeapAlloc
HeapFree
RaiseException
TerminateProcess
GetACP
HeapSize
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
GetCommandLineA
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesA
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalFree
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WritePrivateProfileStringA
lstrcmpA
GetCurrentThread
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
GlobalFree
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
MulDiv
GetModuleHandleA
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
lstrcmpiA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
lstrlenA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
lstrcpynA
GetLastError
SetLastError
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
VirtualAlloc

user32

IsDialogMessageA
SetWindowTextA
ShowWindow
IsWindowEnabled
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
CreateDialogIndirectParamA
GetActiveWindow
EndDialog
PostQuitMessage
SetCursor
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
LoadStringA
GetClassNameA
GetSysColorBrush
DestroyMenu
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
IsWindowVisible
GetTopWindow
MessageBoxA
GetParent
GetCapture
LoadIconA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SendMessageA
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
ClientToScreen
CharUpperA
wsprintfA
PostMessageA
EnableWindow
InvalidateRect
UpdateWindow
InvalidateRgn
SetTimer
FillRect
LoadCursorA
GetClientRect
KillTimer
GetSystemMetrics
EqualRect
CopyRect
SendDlgItemMessageA
MapWindowPoints
WinHelpA
GetSysColor
OffsetRect
IntersectRect
PtInRect
SetRect
LoadBitmapA
GetDesktopWindow
GetDC
ReleaseDC
GetPropA
UnregisterClassA

gdi32

GetPixel
GetDIBits
SelectPalette
GetStockObject
PtInRegion
OffsetRgn
CombineRgn
CreateRectRgn
CreateEllipticRgnIndirect
CreateRectRgnIndirect
CreateSolidBrush
FillRgn
DeleteDC
SaveDC
RestoreDC
SelectObject
SetBkColor
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
DeleteObject
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
CreateCompatibleDC
GetDeviceCaps
StretchBlt
GetObjectA
CreateDIBitmap
RealizePalette
CreatePalette

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

shell32

SHGetSpecialFolderPathA

comctl32

ord17

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2dbaa7b19d4b1deae31288712ba2151d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 92KB - Virtual size: 91KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 68KB - Virtual size: 75KB

.rsrc Size: 40KB - Virtual size: 39KB

.text
Size: 92KB - Virtual size: 91KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 68KB - Virtual size: 75KB

.rsrc
Size: 40KB - Virtual size: 39KB