1667de971152869037f89743c83cea6a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1667de971152869037f89743c83cea6a_JaffaCakes118
Size

262KB
MD5

1667de971152869037f89743c83cea6a
SHA1

5a0f76b027843580205be947d6565de25cbd08f6
SHA256

4840b33a899a251d96bf8e542f1f12cefbce756d7ca1debab527602ba79c20f6
SHA512

6cca70e195e369d88449cf9daef206055bf0602e4105204ac54f543e4431bb2003922b1c03b0863cd2290274081c05b636a566f6aeda9f03e4a9d761e8346484
SSDEEP

6144:s0ZOChoItgRq5/ZOoscTJ22SMYD893ah:sYFeIio5hecU2SM+89

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1667de971152869037f89743c83cea6a_JaffaCakes118

Files

1667de971152869037f89743c83cea6a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae1ee75bca4710982e83c532d347b7c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalFree
GlobalHandle
GlobalReAlloc
HeapAlloc
InitializeCriticalSection
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LocalReAlloc
LockResource
QueryPerformanceCounter
GetVersion
SetErrorMode
SetFileAttributesW
SetFilePointer
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsFree
TlsGetValue
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualFree
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringW
lstrcmpA
lstrcmpW
lstrlenW
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetStringTypeA
GetProcessPriorityBoost
GetProcessHeap
GetOEMCP
GetModuleHandleA
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileTime
GetFileSize
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetConsoleMode
GetCommandLineA
GetCPInfo
GetBinaryTypeW
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FindResourceW
FindClose
FileTimeToLocalFileTime
EnumSystemLocalesA
DuplicateHandle
CreateHardLinkA
CreateFileW
CreateFileA
CreateDirectoryW
ConvertDefaultLocale
CompareStringW
ReadFile
CloseHandle

user32

GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
GrayStringW
IntersectRect
InvalidateRect
InvalidateRgn
IsChild
IsDialogMessageW
IsIconic
IsWindow
IsWindowEnabled
IsWindowVisible
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxW
ModifyMenuW
OffsetRect
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PtInRect
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemovePropW
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCapture
SetFocus
SetForegroundWindow
SetMenuItemBitmaps
SetRect
SetWindowContextHelpId
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoA
TabbedTextOutW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
GetSysColorBrush
UpdateWindow
ValidateRect
WinHelpW
BeginPaint
CallNextHookEx
CharNextW
CharUpperW
ClientToScreen
CopyAcceleratorTableW
GetWindowRect
CopyRect
CreateWindowExW
DefWindowProcW
DestroyMenu
DestroyWindow
DispatchMessageW
DrawTextExW
GetSysColor
GetSubMenu
GetQueueStatus
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetActiveWindow
EqualRect
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
GetWindowDC
GetWindow
GetTopWindow
UnregisterClassW
GetSystemMetrics

comdlg32

PageSetupDlgA
GetFileTitleW
ChooseFontW
dwLBSubclass

wininet

HttpSendRequestW
GetUrlCacheEntryInfoExW
GetUrlCacheGroupAttributeA
HttpOpenRequestW
GetUrlCacheEntryInfoW
InternetGetLastResponseInfoW
InternetReadFile
InternetOpenW

gdi32

TextOutW
StartPage
SetViewportOrgEx
SetViewportExtEx
SetTextColor
SetMapMode
SetBkColor
SelectObject
OffsetViewportOrgEx
GetWindowExtEx
CreateBitmap
GetTextColor
GetStockObject
GetMapMode
GetDeviceCaps
GetClipBox
ExtTextOutW
ExtSelectClipRgn
Escape
DeleteObject
CreateSolidBrush
CreateRectRgnIndirect
CreateFontIndirectW
CreateCompatibleDC
GetViewportExtEx

advapi32

RegSetValueExW
RegQueryValueW
RegOpenKeyW
RegOpenKeyExW
RegEnumKeyW
RegCloseKey
OpenTraceW
GetTrusteeTypeW
ElfRegisterEventSourceW
RegisterEventSourceW

shell32

SHGetSpecialFolderPathW
SHGetSettings
SHGetFolderPathW
ShellExecuteW

winspool.drv

OpenPrinterW
GetPrintProcessorDirectoryW
EnumPrinterDataW
DocumentPropertiesW
ClosePrinter

oleaut32

SafeArrayDestroy
SysAllocString
SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
VarDecFromBool
VarR8Pow
VariantChangeType
VariantClear
VariantCopy
VariantInit
VariantTimeToSystemTime
OleCreateFontIndirect

Sections

.text
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 146KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae1ee75bca4710982e83c532d347b7c4

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

wininet

gdi32

advapi32

shell32

winspool.drv

oleaut32

Sections

.text Size: 53KB - Virtual size: 56KB

.rdata Size: 146KB - Virtual size: 148KB

.data Size: 34KB - Virtual size: 152KB

.idata Size: 7KB - Virtual size: 7KB

.rsrc Size: 21KB - Virtual size: 23KB

.text
Size: 53KB - Virtual size: 56KB

.rdata
Size: 146KB - Virtual size: 148KB

.data
Size: 34KB - Virtual size: 152KB

.idata
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 21KB - Virtual size: 23KB