167940504d528e2aa93251949c28f41d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

167940504d528e2aa93251949c28f41d_JaffaCakes118
Size

596KB
MD5

167940504d528e2aa93251949c28f41d
SHA1

2151cafcca12eea595cd6fb1c9e9ed736ec3968b
SHA256

4cb7082fbbdd25d054d9bb9b98b3343ad91944f77c02d297a3a1722515ccd664
SHA512

334dc1f6f70baa11a55d3c9cb9876e474ee8901cb13b5825308a9fe7f4872555f7f2d5b3a2fd4f220abd05dd746dd9ce5979ecab9483839765c1fcdcdf43fbae
SSDEEP

12288:BCsQ60m4puPFgnZt4mu2a9buyzRGeDuUlT65dBlQ6FWLoU:kEN6uNbBRGK65CoU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
167940504d528e2aa93251949c28f41d_JaffaCakes118

Files

167940504d528e2aa93251949c28f41d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c4e4209d40f45e8fcd169eb35313257

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

userenv

GetProfilesDirectoryA

kernel32

GetCurrentProcessId
GetThreadLocale
ReadFile
SetFilePointer
SetEndOfFile
InterlockedIncrement
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ExitProcess
HeapReAlloc
VirtualAlloc
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
HeapSize
SetStdHandle
GetFileType
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStdHandle
VirtualFree
HeapDestroy
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
InterlockedDecrement
GetModuleFileNameW
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
FreeResource
GlobalLock
GlobalUnlock
OpenMutexA
CreateMutexA
GetUserDefaultLangID
GetStartupInfoA
CreateProcessA
GetExitCodeProcess
WaitForSingleObject
TerminateProcess
CreateDirectoryA
FlushFileBuffers
GlobalAlloc
GlobalFree
HeapFree
GetProcessHeap
HeapAlloc
GetSystemDirectoryA
GetShortPathNameA
GetFileTime
CompareFileTime
WritePrivateProfileStringA
lstrcmpA
GetTempPathA
GetDriveTypeA
LocalAlloc
Sleep
GetLocaleInfoA
FormatMessageA
LocalFree
GetSystemDefaultLangID
InitializeCriticalSection
GetFileSize
DeleteCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
WriteFile
OutputDebugStringA
CreateFileA
GetEnvironmentVariableA
CompareStringW
CompareStringA
GetVersion
InterlockedExchange
GetVersionExA
SetFileAttributesA
DeleteFileA
RemoveDirectoryA
FindResourceExA
SetLastError
GetCommandLineA
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetPrivateProfileStringA
CloseHandle
GetCurrentDirectoryA
lstrlenA
MulDiv
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThreadId
GetTickCount
GetModuleHandleA
GetModuleFileNameA
GetFullPathNameA
GetFileAttributesA
GetProcAddress
GetCurrentProcess
FreeLibrary
LoadLibraryA
MultiByteToWideChar
GetLastError
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
FindResourceA
LoadResource
LockResource
SizeofResource
IsDebuggerPresent

user32

UnregisterClassA
DestroyMenu
LoadCursorA
GetSysColorBrush
SetCursor
GetMessageA
GetCursorPos
ValidateRect
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ShowWindow
IsDialogMessageA
IsDlgButtonChecked
CheckDlgButton
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetFocus
GetForegroundWindow
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetWindowTextLengthA
GetWindowTextA
GetParent
GetWindow
SetFocus
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
IsWindow
WaitForInputIdle
MsgWaitForMultipleObjects
PostQuitMessage
GetWindowThreadProcessId
SetWindowTextA
GetSystemMetrics
MessageBoxA
EnumWindows
GetClassNameA
FindWindowA
GetDlgItem
GetDesktopWindow
GetWindowRect
IsIconic
LoadBitmapA
GetWindowLongA
GetMessagePos
GetDC
SetWindowLongA
ReleaseDC
PeekMessageA
TranslateMessage
DispatchMessageA
PostMessageA
SendMessageA
RegisterWindowMessageA
LoadIconA
EnableWindow
GetMenuCheckMarkDimensions

gdi32

DeleteDC
GetStockObject
CreateSolidBrush
DeleteObject
SetMapMode
SetBkMode
RestoreDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateFontA
GetLayout
SetLayout
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
StretchBlt
BitBlt
GetObjectA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueA
RegEnumKeyA
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetValueExA
RegCreateKeyExA
RegOpenKeyA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA

shlwapi

PathFindFileNameA
PathFindExtensionA

oleaut32

VariantChangeType
VariantInit
VariantClear
OleLoadPicturePath

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PACK
Size: 144KB - Virtual size: 380KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0c4e4209d40f45e8fcd169eb35313257

Headers

File Characteristics

Imports

version

userenv

kernel32

user32

gdi32

winspool.drv

advapi32

shlwapi

oleaut32

Sections

.text Size: 256KB - Virtual size: 255KB

.rdata Size: 68KB - Virtual size: 66KB

.data Size: 12KB - Virtual size: 89KB

.rsrc Size: 112KB - Virtual size: 109KB

PACK Size: 144KB - Virtual size: 380KB

.text
Size: 256KB - Virtual size: 255KB

.rdata
Size: 68KB - Virtual size: 66KB

.data
Size: 12KB - Virtual size: 89KB

.rsrc
Size: 112KB - Virtual size: 109KB

PACK
Size: 144KB - Virtual size: 380KB