16949d5d4c4f8db6efb9479e2e4ccf93_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

16949d5d4c4f8db6efb9479e2e4ccf93_JaffaCakes118
Size

440KB
MD5

16949d5d4c4f8db6efb9479e2e4ccf93
SHA1

6458ddc9cb9a5ecd9636df34127a9e2528995d41
SHA256

7436303b8bc20c8a37096164d71500110e03b9cd6944e9cce32706d235080fa4
SHA512

2e9d1bd407b71a9443293e9c28a9f9fde5a1b3bae3a12e8ad2d1f42660df6f8272a700437973037008492ac86fc84ee1642a3bf83a8e1aa208de55f1fa6ba496
SSDEEP

12288:NGErXeClOq28I/ut/y5S7h8HwOjZsK1UWu:NGEruCAqNI/mh8HwcsK1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16949d5d4c4f8db6efb9479e2e4ccf93_JaffaCakes118

Files

16949d5d4c4f8db6efb9479e2e4ccf93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7b09660b67ab4222fa33c2331ac82a71

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\fvs\sjo\nejwwoo\fuaetone\bg

Imports

comdlg32

PageSetupDlgA

wininet

FtpOpenFileW
FtpFindFirstFileA
InternetShowSecurityInfoByURLA
FtpGetFileW
DeleteUrlCacheEntryW
InternetSetOptionExW
FtpGetFileSize
InternetCanonicalizeUrlW
InternetSetDialStateW

user32

EnumDesktopsW
GetAltTabInfo
ChangeClipboardChain
AppendMenuA
MessageBoxA
EnumDisplayMonitors
BlockInput
KillTimer
ChangeMenuW
PostMessageA
DispatchMessageW
LoadKeyboardLayoutW
DdeSetUserHandle
GetCaretBlinkTime
SendMessageW
LoadMenuIndirectA
DdeCreateStringHandleW
ChangeDisplaySettingsA
GetWindowLongW
SetDlgItemTextW
TileChildWindows
RegisterClassExA
GetClassInfoA
LoadCursorA
MapDialogRect
InsertMenuW
DdeDisconnectList
CreateWindowExA
IsDialogMessage
ModifyMenuA
SetWindowPos
EnumChildWindows
GetSysColor
LoadMenuA
LockWindowUpdate
UnregisterClassA
CreateIconFromResourceEx
GetClipboardFormatNameA
EqualRect
DestroyCaret
DdeUninitialize
FindWindowA
DialogBoxParamW
DestroyWindow
ShowWindow
GetKeyboardLayoutNameW
SetWindowWord
RegisterClassA
DdeGetData
CopyRect
MapWindowPoints
EndTask
GetWindowRgn
CallMsgFilter
DefWindowProcW
ScreenToClient
PeekMessageA
IsCharUpperW
ValidateRgn
SetCaretBlinkTime
LoadStringA
OemToCharBuffW
wsprintfW
SetPropW
DragDetect
LoadKeyboardLayoutA
OpenClipboard
DefFrameProcW
InflateRect
BringWindowToTop
GetScrollInfo
NotifyWinEvent
LookupIconIdFromDirectory

kernel32

GetProfileSectionW
VirtualQuery
HeapCreate
WriteProfileStringA
lstrcpynA
GetStartupInfoA
InitializeCriticalSection
GetVersionExA
GetACP
LoadLibraryA
CompareStringW
FreeEnvironmentStringsA
GetProcAddress
GetLocaleInfoA
GetModuleHandleA
TlsAlloc
SetLastError
SetConsoleTitleW
ReadConsoleInputA
GetStdHandle
LoadLibraryExA
LCMapStringA
GetMailslotInfo
GetProcessShutdownParameters
GetCurrentProcessId
DeleteCriticalSection
EnumDateFormatsA
GetCPInfo
EnterCriticalSection
TlsSetValue
GetCurrentThreadId
FindResourceExA
GetSystemTimeAsFileTime
RtlUnwind
GetLastError
OpenEventA
SetConsoleCursorInfo
GetThreadLocale
WritePrivateProfileStructA
GetFileType
SetLocaleInfoA
GetTimeZoneInformation
GetUserDefaultLangID
QueryPerformanceCounter
GetSystemInfo
GetFullPathNameA
HeapAlloc
GetTimeFormatA
VirtualProtect
GetEnvironmentStringsW
GetStringTypeA
HeapSize
CreateDirectoryA
SetConsoleScreenBufferSize
CompareStringA
EnumResourceLanguagesA
InterlockedDecrement
TlsGetValue
WriteFile
GetPrivateProfileStringA
MultiByteToWideChar
SetConsoleActiveScreenBuffer
VirtualAlloc
GetDateFormatA
LCMapStringW
GlobalReAlloc
GetVolumeInformationA
UnlockFile
OutputDebugStringA
GetCurrentThread
CreatePipe
GetDiskFreeSpaceA
VirtualQueryEx
CopyFileA
GetCurrentProcess
GetTickCount
TerminateProcess
GetLocaleInfoW
IsValidCodePage
TlsFree
FreeEnvironmentStringsW
lstrcmpiW
GetLogicalDriveStringsA
lstrlenA
GetModuleFileNameA
FindNextFileW
ExitProcess
GetOEMCP
GetPrivateProfileSectionA
CreateFileW
GetEnvironmentStrings
HeapReAlloc
IsBadWritePtr
ReadFile
CloseHandle
VirtualFreeEx
SetStdHandle
LocalCompact
InterlockedExchange
GetFileAttributesA
HeapDestroy
OpenMutexA
lstrcmpi
CreateMutexA
DosDateTimeToFileTime
VirtualFree
IsValidLocale
LocalLock
SetHandleCount
SetEnvironmentVariableA
GetUserDefaultLCID
SetFilePointer
HeapFree
EnumSystemLocalesA
WideCharToMultiByte
GetCommandLineA
LeaveCriticalSection
lstrcpyn
WaitNamedPipeW
ReadConsoleOutputCharacterW
MoveFileExW
GetStringTypeW
SetCriticalSectionSpinCount
FlushFileBuffers
UnhandledExceptionFilter
GetNamedPipeInfo

comctl32

ImageList_EndDrag
ImageList_Draw
CreatePropertySheetPageA
GetEffectiveClientRect
ImageList_AddIcon
ImageList_GetFlags
InitMUILanguage
ImageList_DragMove
ImageList_SetBkColor
ImageList_GetImageCount
ImageList_Add
CreateStatusWindowW
InitCommonControlsEx
DrawInsert
_TrackMouseEvent

Sections

.text
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b09660b67ab4222fa33c2331ac82a71

Headers

File Characteristics

PDB Paths

Imports

comdlg32

wininet

user32

kernel32

comctl32

Sections

.text Size: 184KB - Virtual size: 180KB

.rdata Size: 68KB - Virtual size: 66KB

.data Size: 96KB - Virtual size: 102KB

.rsrc Size: 88KB - Virtual size: 87KB

.text
Size: 184KB - Virtual size: 180KB

.rdata
Size: 68KB - Virtual size: 66KB

.data
Size: 96KB - Virtual size: 102KB

.rsrc
Size: 88KB - Virtual size: 87KB