1766c0c136598c5b1968dbad3ecec3ad_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1766c0c136598c5b1968dbad3ecec3ad_JaffaCakes118
Size

488KB
MD5

1766c0c136598c5b1968dbad3ecec3ad
SHA1

f77c7455cdb85126a18acbe10c7aa56fc83282f5
SHA256

407c13835b6f1e037485325fb479b60e3ba2bd0052037d20af16e66c21a41fb8
SHA512

75c1d642218cc9f39c386ded2163abee001460d6d9d5a28090d40f9f32365f3fca385e8d69b80dc9b693023d6986b9017be2941c1d2fd1dfa793a32963a34e2e
SSDEEP

6144:uiYuA63fpARdksQdSo27Z+xeYHKrpgh8cS9q8rbUQz0GgJuIgFKhp0pV8QpSOrzE:Ydu2RdkJOV+xeCGahuqSbIJ6gsSOrI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1766c0c136598c5b1968dbad3ecec3ad_JaffaCakes118

Files

1766c0c136598c5b1968dbad3ecec3ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

779714f7ec8efc425dcf3250ca25f59b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

netapi32

Netbios

kernel32

SetFileTime
SetFileAttributesA
lstrlenW
GlobalSize
CopyFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
SetErrorMode
RtlUnwind
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
Sleep
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
RaiseException
SetStdHandle
GetFileType
ExitThread
HeapReAlloc
HeapSize
GetACP
HeapDestroy
HeapCreate
SystemTimeToFileTime
VirtualAlloc
IsBadWritePtr
FatalAppExitA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
SetUnhandledExceptionFilter
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetConsoleCtrlHandler
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetShortPathNameA
GetProfileStringA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
GetOEMCP
GetCPInfo
GetProcessVersion
SizeofResource
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
lstrcpynA
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
MulDiv
SetLastError
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GlobalUnlock
VirtualProtect
FindResourceA
LoadResource
LockResource
GlobalFree
FormatMessageA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
CreateThread
GetExitCodeThread
LoadLibraryA
GetProcAddress
FreeLibrary
GetEnvironmentVariableA
DeleteFileA
GetModuleFileNameA
GetUserDefaultLangID
GetModuleHandleA
LoadLibraryExA
LocalAlloc
LocalFree
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GetCurrentThread
GetLastError
GlobalMemoryStatus
GetSystemInfo
GetVersionExA
GetTempPathA
GetFileAttributesA
GetCurrentProcess
GetComputerNameA
VirtualFree

user32

WaitMessage
GetWindowThreadProcessId
WindowFromPoint
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
GetDlgItemInt
CheckRadioButton
CheckDlgButton
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
ReleaseCapture
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
GetDialogBaseUnits
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
IsWindow
CreateDialogIndirectParamA
DestroyWindow
MapDialogRect
SetWindowPos
ShowWindow
GetCapture
GetActiveWindow
SetActiveWindow
GetAsyncKeyState
PostMessageA
EnableWindow
GetFocus
MessageBoxA
UnregisterClassA
HideCaret
GetWindowLongA
SetFocus
GetDlgItem
IsWindowEnabled
OemToCharA
CharToOemA
IsIconic
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuA
LoadBitmapA
GetWindowRect
ReleaseDC
GetWindow
LoadIconA
GetParent
GetClientRect
GetDC
SetCapture
RemoveMenu
CharUpperA
GetSysColorBrush
SetWindowsHookExA
LoadCursorA
SendMessageA
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
InflateRect
CharNextA
IsWindowUnicode
PostQuitMessage
GetMenuStringA
DeleteMenu
InsertMenuA
PtInRect
GetClassNameA
DestroyMenu
GetDesktopWindow
GetMessageA
ValidateRect
GetCursorPos
SetCursor
ShowOwnedPopups
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
LoadStringA
wvsprintfA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
MoveWindow
SetWindowTextA
GetDlgItemTextA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
RemovePropA
SetDlgItemInt
IsDialogMessageA

gdi32

OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
DeleteObject
GetClipRgn
CreateRectRgn
SetWindowOrgEx
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextMetricsA
CreateFontIndirectA
CopyMetaFileA
CreateDCA
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
GetStockObject
SelectObject
RestoreDC
SaveDC
StartDocA
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
SelectClipPath
CreateDIBitmap
PatBlt
GetTextExtentPointA
BitBlt
CreateCompatibleDC
GetTextExtentPoint32A

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
GetTokenInformation
OpenProcessToken
FreeSid
RegSetValueA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
LookupAccountSidA
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
OpenThreadToken
AllocateAndInitializeSid
EqualSid

shell32

DragFinish
SHGetFileInfoA
DragAcceptFiles
ShellExecuteExA
DragQueryFileA

comctl32

DestroyPropertySheetPage
CreatePropertySheetPageA
PropertySheetA
ord17

ole32

ReadFmtUserTypeStg
ReadClassStg
CoTreatAsClass
ReleaseStgMedium
CoTaskMemAlloc
OleRegGetUserType
CoDisconnectObject
CoCreateInstance
OleRun
CLSIDFromString
CLSIDFromProgID
StringFromCLSID
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
CoTaskMemFree
OleDuplicateData

oleaut32

SafeArrayAllocData
VarBstrFromDate
VarDateFromStr
VarBstrFromCy
VarCyFromStr
SysStringByteLen
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysReAllocStringLen
SysAllocStringLen
VariantCopy
SysAllocStringByteLen
SysStringLen
SysAllocString
VariantClear
SysFreeString
VariantChangeType
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
LoadTypeLi
SafeArrayCopy

wininet

InternetGetLastResponseInfoA
GopherFindFirstFileA
InternetFindNextFileA
FtpFindFirstFileA
HttpQueryInfoA
HttpSendRequestExA
HttpEndRequestA
HttpSendRequestA
HttpAddRequestHeadersA
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetSetOptionExA
InternetSetStatusCallback
InternetSetCookieA
InternetGetCookieA
InternetSetFilePointer
InternetWriteFile
InternetReadFile
InternetQueryDataAvailable
InternetConnectA
FtpDeleteFileA
FtpRenameFileA
FtpCreateDirectoryA
FtpRemoveDirectoryA
FtpSetCurrentDirectoryA
FtpGetCurrentDirectoryA
FtpOpenFileA
FtpPutFileA
FtpGetFileA
GopherCreateLocatorA
GopherGetAttributeA
GopherOpenFileA
HttpOpenRequestA
InternetErrorDlg

Exports

Exports

?su_getSWShipState@@YAHXZ
?su_getTaggedDateCode@@YAIXZ
?su_getTaggedExpireDate@@YAJXZ
?su_getTaggedRevCode@@YAIXZ
?su_getTaggedServicePack@@YAAAVCString@@AAV1@@Z
?su_getVerSuffix@@YAAAVCString@@AAV1@@Z

Sections

.text
Size: 300KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

779714f7ec8efc425dcf3250ca25f59b

Headers

File Characteristics

Imports

netapi32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

wininet

Exports

Exports

Sections

.text Size: 300KB - Virtual size: 296KB

.rdata Size: 60KB - Virtual size: 58KB

.data Size: 28KB - Virtual size: 42KB

.rsrc Size: 96KB - Virtual size: 96KB

.text
Size: 300KB - Virtual size: 296KB

.rdata
Size: 60KB - Virtual size: 58KB

.data
Size: 28KB - Virtual size: 42KB

.rsrc
Size: 96KB - Virtual size: 96KB