18a5abb9e365e5283a531a7c0f3f28e9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

18a5abb9e365e5283a531a7c0f3f28e9_JaffaCakes118
Size

1.7MB
MD5

18a5abb9e365e5283a531a7c0f3f28e9
SHA1

0c62bc81a51340720952dffd89cc27ec2c0be9fa
SHA256

4a4bb049d0b2c0a0f229f206bccc6833d848b99a20f7ddb010eedba017227aa0
SHA512

da0485f3b71bde55516cbf8863a4632cdf1d2d24df857ed88faa1ab927090306c8a6f904f4b4bd8a3a23938a1b9b9e91eef4df10aecf90c931453da3a1dffaf5
SSDEEP

24576:L4PIMxKgir/MVm0TuPKas13SBcT5tocAGKUylp3I3TKNYEruV:ES7EdTuPeMsmcAVKKNYErA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18a5abb9e365e5283a531a7c0f3f28e9_JaffaCakes118

Files

18a5abb9e365e5283a531a7c0f3f28e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1e3c206f32dc6f5fc196b42c35fb92ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM

Imports

kernel32

GetFileTime
SetErrorMode
GetVersionExW
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FindNextFileW
RtlUnwind
RaiseException
ExitThread
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
EnumResourceTypesW
EnumResourceNamesW
LocalSize
LoadLibraryExW
LoadLibraryExA
LocalAlloc
GlobalFlags
GetModuleHandleA
SuspendThread
WritePrivateProfileStringW
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedDecrement
FormatMessageW
LocalFree
MulDiv
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
CompareStringW
GetVersionExA
GlobalFree
SetEvent
GetTickCount
ResumeThread
SetThreadPriority
CreateEventW
Process32NextW
GetCurrentProcessId
lstrcmpiW
Process32FirstW
CreateToolhelp32Snapshot
ReadFile
SetFilePointer
GetFileSize
GetModuleFileNameW
IsBadStringPtrA
CreateThread
TerminateThread
GetLocalTime
FindClose
InterlockedExchange
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetSystemDirectoryA
GetWindowsDirectoryA
DeleteFileA
WinExec
GetTempPathA
MoveFileW
Sleep
LoadLibraryA
GetSystemDirectoryW
GetFileAttributesW
TerminateProcess
OpenProcess
lstrcmpW
lstrcpyW
FreeResource
lstrcatW
GetTempPathW
CreateFileW
DeleteFileW
GlobalUnlock
GlobalLock
GlobalAlloc
FindResourceW
ExitProcess
CopyFileA
lstrcpyA
CreateDirectoryA
CloseHandle
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
lstrcmpA
lstrcatA
GetModuleFileNameA
WaitForSingleObject
CreateMutexW
GetVolumeInformationA
GetDriveTypeA
MultiByteToWideChar
lstrlenA
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetLogicalDrives
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetLastError
SetLastError
WideCharToMultiByte
VirtualFree
lstrlenW

user32

SetRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
SetCapture
UnregisterClassW
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
SystemParametersInfoW
DestroyMenu
InflateRect
ReleaseDC
GetDC
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
InvalidateRgn
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
SendMessageW
EnableWindow
LoadIconW
CreatePopupMenu
AppendMenuW
GetWindowRect
CheckMenuItem
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetRectEmpty
LoadMenuW
RegisterClipboardFormatW
GetSystemMenu
DispatchMessageW
GetNextDlgGroupItem
MessageBeep
DestroyIcon
CharUpperW
RegisterWindowMessageW
GetClientRect
SetFocus
IsIconic
GetSystemMetrics
DrawIcon
GetDesktopWindow
IsWindowEnabled
GetActiveWindow
SetActiveWindow
SetParent
wsprintfW
GetSysColor
UpdateWindow
PostThreadMessageW
SetForegroundWindow
GetParent
InvalidateRect
LoadCursorW
SetCursor
CopyRect
GetFocus
UnregisterClassA
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
CreateIconIndirect
CopyIcon
ReleaseCapture
GetDoubleClickTime
SetClassLongW
SetWindowRgn
LoadStringW
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
TrackPopupMenu
GetKeyState
SetScrollPos
GetScrollPos
IsWindowVisible
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
EqualRect
GetScrollInfo
SetScrollInfo
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
DrawStateW
DrawIconEx
SendMessageTimeoutW
DrawFrameControl
DrawEdge
RegisterClassA
DefMDIChildProcW
DefMDIChildProcA
DefDlgProcW
DefDlgProcA
DefFrameProcW
DefFrameProcA
SetTimer
KillTimer
DefWindowProcA
CallWindowProcA
EnableScrollBar
IsWindowUnicode
GetWindowLongA
SetWindowLongA
GetIconInfo
GetWindowPlacement
GetWindow
CreateDialogIndirectParamW
DestroyWindow
DrawAnimatedRects
FindWindowW
GetWindowLongW
GetDlgItem
GetNextDlgTabItem
EndDialog
PostMessageW
IsWindow
EnumWindows
GetWindowThreadProcessId
DrawFocusRect
RedrawWindow
LoadImageW
SetMenuDefaultItem
EnumChildWindows

gdi32

CombineRgn
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
CreateCompatibleBitmap
StretchDIBits
CreatePen
GetObjectType
SelectPalette
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
GetViewportExtEx
CreateRectRgn
DeleteObject
ExcludeClipRect
SetMapMode
SetStretchBltMode
SetBkMode
RestoreDC
SaveDC
ExtTextOutW
BitBlt
CreateCompatibleDC
GetDeviceCaps
PatBlt
GetObjectW
GetStockObject
GetCurrentObject
CreateFontIndirectW
GetTextExtentPoint32W
CreateFontW
SelectClipRgn
CreateSolidBrush
OffsetRgn
GetTextCharsetInfo
StretchBlt
CreateDIBSection
SetBrushOrgEx
CreatePalette
CreateDIBitmap
Polygon
GetDIBits
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
PtVisible
GetWindowExtEx
CreateRectRgnIndirect
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
GetPixel

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueW
RegEnumValueA
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExA
RegSetValueExW
RegQueryValueExW
RegCreateKeyW
RegSetValueExA
RegOpenKeyW
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyA
RegEnumKeyW

shell32

Shell_NotifyIconW
SHAppBarMessage
SHGetSpecialFolderPathW
ShellExecuteW
SHGetSpecialFolderPathA
ShellExecuteA

comctl32

InitCommonControlsEx
_TrackMouseEvent
FlatSB_GetScrollProp
ImageList_GetBkColor
ImageList_GetImageInfo
ImageList_DrawIndirect
ImageList_GetIconSize
ImageList_Destroy

shlwapi

PathFindExtensionW
PathIsUNCW
PathStripToRootW
PathFindFileNameW
StrStrW

oledlg

OleUIBusyW

ole32

CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SystemTimeToVariantTime
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysFreeString
SysStringLen
SysAllocStringByteLen
SysStringByteLen
OleCreateFontIndirect
SafeArrayDestroy
SysAllocString
VariantCopy
LoadTypeLi
VariantTimeToSystemTime

urlmon

UrlMkSetSessionOption

gdiplus

GdiplusShutdown
GdipDisposeImage
GdipAlloc
GdipFree
GdipCloneImage
GdipCreateBitmapFromStream
GdiplusStartup
GdipCreateHBITMAPFromBitmap

psapi

GetModuleFileNameExA
GetModuleFileNameExW
EnumProcessModules
EnumProcesses

wininet

InternetGetConnectedState

dnsapi

DnsQuery_W

crypt32

CertCloseStore

imagehlp

ImageDirectoryEntryToData

Sections

.text
Size: 571KB - Virtual size: 570KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 279KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 597KB - Virtual size: 615KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 264KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1e3c206f32dc6f5fc196b42c35fb92ac

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

gdiplus

psapi

wininet

dnsapi

crypt32

imagehlp

Sections

.text Size: 571KB - Virtual size: 570KB

.rdata Size: 279KB - Virtual size: 278KB

.data Size: 597KB - Virtual size: 615KB

.rsrc Size: 264KB - Virtual size: 268KB

.text
Size: 571KB - Virtual size: 570KB

.rdata
Size: 279KB - Virtual size: 278KB

.data
Size: 597KB - Virtual size: 615KB

.rsrc
Size: 264KB - Virtual size: 268KB