1571959c10f397890c1936aa6a44aafd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1571959c10f397890c1936aa6a44aafd_JaffaCakes118
Size

956KB
MD5

1571959c10f397890c1936aa6a44aafd
SHA1

d746c4e02fa4782613a3fa21b0a359c0c6b95794
SHA256

0113fa23b60ebd63f34d077356b453683f9e57c4aae41eb399871ec135c58c06
SHA512

f2b1d8c6976c512ceb5833ffa7e0c3d69c5d249e92cbe4c40f70c2c0bfe31ed4f6923338286f68d43ad02f2de42e0921b6fc4f3394fa69d944d820266df4320d
SSDEEP

12288:o7bNlfiUONJeq3qTmbzqEcH25KFO5zdnwahu8yQMwKr5Zvsq966Tj0x9e:klfiUOLqTmbzGGVdrMwKFRd63x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1571959c10f397890c1936aa6a44aafd_JaffaCakes118

Files

1571959c10f397890c1936aa6a44aafd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d81762e233967d9711475780d171801

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

connect
gethostbyname
gethostbyaddr
inet_addr
socket
send
WSAStartup
WSACleanup
WSAGetLastError
inet_ntoa
WSAIoctl
WSASocketA
ioctlsocket
recv
htons
closesocket
gethostname

kernel32

RaiseException
GetTimeZoneInformation
GetLocalTime
HeapReAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
GetACP
TerminateProcess
HeapSize
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
RtlUnwind
IsBadCodePtr
SetStdHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
GetSystemTimeAsFileTime
GetProfileStringA
InterlockedExchange
GetVersionExA
GetVersion
lstrlenA
lstrlenW
FindResourceExA
SetErrorMode
GetOEMCP
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalFlags
GetCurrentThread
GetDiskFreeSpaceA
GetTempFileNameA
FileTimeToLocalFileTime
GlobalFree
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
IsBadReadPtr
IsBadWritePtr
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
FindFirstFileA
FindClose
MoveFileA
UnlockFile
LockFile
FlushFileBuffers
DuplicateHandle
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpynA
LocalFree
GetCPInfo
LockResource
LoadResource
FindResourceA
lstrcmpiA
GetTickCount
Sleep
GlobalUnlock
GlobalLock
GetStringTypeW
GlobalReAlloc
GlobalAlloc
GetLastError
SetLastError
InterlockedDecrement
InterlockedIncrement
GetLogicalDriveStringsA
GetDriveTypeA
GetDiskFreeSpaceExA
GetSystemInfo
GlobalMemoryStatus
Module32First
Module32Next
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateRemoteThread
GetProcAddress
OpenProcess
HeapAlloc
HeapFree
SetFileAttributesA
IsDebuggerPresent
CreateThread
WaitForSingleObject
GetExitCodeThread
MoveFileExA
SetEvent
CopyFileA
GetFileAttributesA
CreateProcessA
OpenFile
EnumResourceNamesA
GetSystemDirectoryA
lstrcatA
WinExec
CreateEventA
OpenEventA
GetSystemTime
FileTimeToSystemTime
GetFileTime
GetVolumeInformationA
GetComputerNameA
GetFileSize
SetEndOfFile
GetModuleFileNameA
GetWindowsDirectoryA
LoadLibraryA
FormatMessageA
GetCurrentProcess
SetFileTime
CreateDirectoryA
LocalFileTimeToFileTime
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
SetFilePointer
MulDiv
GetTempPathA
DeleteFileA
LoadLibraryExA
FreeLibrary
SizeofResource
CreateFileA
CloseHandle
WriteFile
lstrcpyA
lstrcmpA
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleA

user32

EndDialog
CreateDialogIndirectParamA
LoadStringA
LockWindowUpdate
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
CharUpperA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
CheckRadioButton
CheckDlgButton
GetMessageA
GetActiveWindow
ValidateRect
SendDlgItemMessageA
MapWindowPoints
SetActiveWindow
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetScrollPos
GetTopWindow
WinHelpA
RegisterClassA
SetWindowPlacement
GetDlgItem
GetWindowTextLengthA
GetDlgCtrlID
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowPos
IsIconic
GetWindowPlacement
EndPaint
BeginPaint
GetClassNameA
DestroyMenu
RegisterWindowMessageA
IsMenu
GetMenu
SetMenu
ExitWindowsEx
SetWindowTextA
PeekMessageA
TranslateMessage
DispatchMessageA
DrawIcon
LookupIconIdFromDirectory
CreateIconFromResource
CopyIcon
MessageBeep
PostQuitMessage
MessageBoxA
SetWindowLongA
GetSystemMenu
SetParent
wsprintfA
GetDCEx
GetWindow
BeginDeferWindowPos
EndDeferWindowPos
KillTimer
WindowFromPoint
IsRectEmpty
EqualRect
SetTimer
GetDoubleClickTime
IsWindowVisible
GetKeyState
ShowScrollBar
IsChild
GetWindowTextA
PostMessageA
GetFocus
SetFocus
IntersectRect
DrawFrameControl
DrawFocusRect
RedrawWindow
UpdateWindow
IsWindow
OffsetRect
LoadImageA
EnableWindow
PtInRect
GetWindowLongA
SetCapture
GetCapture
ReleaseCapture
GetClipCursor
GetCursorPos
ClipCursor
SetCursor
ScreenToClient
ClientToScreen
InvertRect
GetParent
GetWindowRect
SendMessageA
InvalidateRect
SetRectEmpty
SetWindowRgn
GetClientRect
InflateRect
GetClassInfoA
DefWindowProcA
LoadCursorA
UnionRect
IsZoomed
ShowOwnedPopups
MapDialogRect
GetAsyncKeyState
GetWindowDC
wvsprintfA
GetMenuStringA
GetSubMenu
GrayStringA
TabbedTextOutA
DeleteMenu
LoadBitmapA
GetSysColorBrush
CreateMenu
CreatePopupMenu
GetMenuItemID
GetMenuState
ModifyMenuA
GetMenuItemCount
InsertMenuA
AppendMenuA
GetSystemMetrics
GetDesktopWindow
GetDC
DrawTextA
ReleaseDC
DrawIconEx
DestroyIcon
SystemParametersInfoA
GetSysColor
CopyRect
FillRect
DrawEdge
SetRect
GetMenuItemInfoA
IsWindowUnicode
CharNextA
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
LoadIconA

gdi32

SetBkMode
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
SetBkColor
CreatePatternBrush
CreateBitmap
SetRectRgn
DPtoLP
StretchDIBits
GetCharWidthA
CreateFontA
EnumFontFamiliesExA
SelectPalette
RestoreDC
SaveDC
CreateRectRgnIndirect
GetBitmapDimensionEx
GetTextColor
EnumFontFamiliesA
RealizePalette
GetBkColor
GetDIBColorTable
CreatePalette
CreateHalftonePalette
GetTextMetricsA
GetStockObject
CreatePolygonRgn
CreateRectRgn
CombineRgn
GetCurrentObject
Escape
ExtTextOutA
TextOutA
RectVisible
PatBlt
PtVisible
GetObjectA
GetPixel
SetPixel
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
Ellipse
GetTextExtentPoint32A
GetTextExtentPoint32W
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontIndirectA
CreateSolidBrush
CreatePen
GetBkMode
GetTextExtentPointA
CreateDIBitmap
GetDeviceCaps

comdlg32

FindTextA
ReplaceTextA
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegEnumValueA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetUserNameA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyExA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyA
RegSetValueA
RegCreateKeyA
RegEnumKeyA
GetFileSecurityA
SetFileSecurityA
RegCloseKey

shell32

DragFinish
SHGetFileInfoA
DragAcceptFiles
ExtractIconA
ShellExecuteA
DragQueryFileA

comctl32

ImageList_GetImageCount
ImageList_GetIcon
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetImageInfo
ImageList_Add
ImageList_Destroy
ImageList_Create
ord17
ImageList_DrawIndirect
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Draw

Sections

.text
Size: 604KB - Virtual size: 601KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d81762e233967d9711475780d171801

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 604KB - Virtual size: 601KB

.rdata Size: 140KB - Virtual size: 136KB

.data Size: 44KB - Virtual size: 64KB

.rsrc Size: 164KB - Virtual size: 163KB

.text
Size: 604KB - Virtual size: 601KB

.rdata
Size: 140KB - Virtual size: 136KB

.data
Size: 44KB - Virtual size: 64KB

.rsrc
Size: 164KB - Virtual size: 163KB