18f3b618aeb5df400d3931c4f580e135_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

18f3b618aeb5df400d3931c4f580e135_JaffaCakes118
Size

1.1MB
MD5

18f3b618aeb5df400d3931c4f580e135
SHA1

bd8dd089999625287abecd0ff4556f646907022b
SHA256

595f68c14f21b9e9629ac014b6ae380c1d65336889ce79221fdfcb1303119470
SHA512

f51c9fa7cb867c2da5186cd47a1a5162044aa630aec179943d6745f0c74effb47d46190c29e73b2b0f90bd073b51edd6bfc7ab0731e5811944761aa55bdcbe68
SSDEEP

24576:lcOs3P4tNB4Kvv07vv/3IRb6ia2evAOpayizuoenpU:lcO+P4tNB4Kvvgvv/sb6iatAO7oqpU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18f3b618aeb5df400d3931c4f580e135_JaffaCakes118

Files

18f3b618aeb5df400d3931c4f580e135_JaffaCakes118
.exe windows:4 windows x86 arch:x86

038ba2cf229e3523a4231dcd53a4772e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

msvfw32

DrawDibClose
DrawDibOpen
MCIWndCreateA
DrawDibDraw

kernel32

LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetStdHandle
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
SetUnhandledExceptionFilter
GetModuleFileNameA
GetPrivateProfileStringA
LoadLibraryA
FreeLibrary
GetPrivateProfileIntA
GetLastError
Sleep
SetFilePointer
CloseHandle
ReadFile
CreateFileA
WriteFile
GlobalSize
LocalFree
FormatMessageA
MulDiv
lstrcpyA
SizeofResource
LockResource
LoadResource
FindResourceA
GetProcAddress
FreeResource
WritePrivateProfileStringA
GlobalReAlloc
GetFileSize
FindResourceExA
LoadLibraryExA
GetProfileStringA
GetProfileIntA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
HeapSize
GetACP
ExitThread
CreateThread
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
GetSystemTimeAsFileTime
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RaiseException
HeapReAlloc
HeapAlloc
FindNextFileA
HeapFree
GetDriveTypeA
SetCurrentDirectoryA
SetEnvironmentVariableA
CreateDirectoryA
RtlUnwind
GetTickCount
GetCurrentDirectoryA
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
GetCurrentThread
lstrcmpA
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
GetSystemDefaultLangID
FindFirstFileA
FindClose
DeleteFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
lstrcpynA
SetLastError
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetLocaleInfoA

user32

GetSysColorBrush
GetClassNameA
CharNextA
IsZoomed
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
TranslateAcceleratorA
LoadAcceleratorsA
MapDialogRect
SetWindowContextHelpId
ValidateRect
GetCursorPos
ShowOwnedPopups
PostQuitMessage
InflateRect
LoadStringA
CharUpperA
EndPaint
BeginPaint
GetWindowDC
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetFocus
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
SetScrollInfo
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
TrackPopupMenu
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
GetDCEx
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
GetDlgItem
IsWindowEnabled
DefWindowProcA
RegisterClassExA
CreateWindowExA
ShowWindow
DestroyWindow
IsRectEmpty
LoadImageA
SetMenu
MessageBeep
CreateMenu
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
DestroyCursor
EnableMenuItem
AppendMenuA
CreatePopupMenu
DrawFocusRect
PtInRect
ClientToScreen
LockWindowUpdate
ScreenToClient
SetWindowRgn
DrawMenuBar
GetWindowLongA
GrayStringA
DrawTextA
TabbedTextOutA
GetMessageA
CopyAcceleratorTableA
GetNextDlgGroupItem
SetParent
GetMenuItemID
PostThreadMessageA
RedrawWindow
EnumWindows
GetWindowTextA
LookupIconIdFromDirectory
CreateIconFromResourceEx
CreateIconFromResource
DrawIconEx
MessageBoxA
SystemParametersInfoA
RegisterWindowMessageA
LoadIconA
DestroyIcon
MessageBoxExA
GetSysColor
DrawStateA
FrameRect
ReleaseDC
GetDC
EqualRect
PeekMessageA
TranslateMessage
DispatchMessageA
LoadBitmapA
GetDesktopWindow
KillTimer
SetTimer
PostMessageA
CopyRect
OffsetRect
SetRectEmpty
MoveWindow
wsprintfA
UpdateWindow
FillRect
LoadCursorA
GetParent
SetCapture
InvalidateRect
SetRect
SetCursor
ReleaseCapture
SendMessageA
EnableWindow
GetClientRect
GetWindowRect
RegisterClipboardFormatA
IntersectRect
WindowFromPoint
WinHelpA

gdi32

GdiFlush
StretchBlt
SetStretchBltMode
SetDIBColorTable
CreateDIBSection
StretchDIBits
SetDIBitsToDevice
CreatePalette
EnumFontFamiliesExA
AddFontResourceA
RemoveFontResourceA
GetOutlineTextMetricsA
GetFontData
SetBrushOrgEx
SetPixelV
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateRoundRectRgn
CreateFontIndirectA
GetDIBColorTable
GetDIBits
GetSystemPaletteEntries
CreateDCA
GetClipBox
SetTextColor
SetBkColor
PatBlt
CreateRectRgnIndirect
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
UpdateColors
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
SetRectRgn
CombineRgn
GetTextMetricsA
LPtoDP
GetPaletteEntries
GetTextExtentPointA
DeleteObject
CreateHalftonePalette
CreateDIBitmap
GetTextColor
CreatePen
SetPixel
GetPixel
DPtoLP
GetMapMode
GetBkMode
GetBkColor
RealizePalette
GetDeviceCaps
CreateCompatibleBitmap
CreateBitmap
SelectPalette
BitBlt
SelectObject
CreateCompatibleDC
GetObjectA
DeleteDC
GetTextExtentPoint32A
CreateFontA
GetStockObject
CreateSolidBrush

comdlg32

PrintDlgA
CommDlgExtendedError
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA

shell32

DragQueryFileA
DragFinish
FindExecutableA
SHGetPathFromIDListA
SHGetFileInfoA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetMalloc
SHGetDesktopFolder

comctl32

ord17
ImageList_Destroy

oledlg

ord8

ole32

CreateStreamOnHGlobal
CLSIDFromProgID
CoRevokeClassObject
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop

olepro32

ord251
ord253

oleaut32

VariantCopy
SysAllocStringByteLen
SysStringLen
SysAllocString
VariantClear
VariantChangeType
SysAllocStringLen
SysFreeString
VariantTimeToSystemTime

winmm

mciGetErrorStringA
sndPlaySoundA
mixerGetDevCapsA
mixerOpen
mixerGetNumDevs
mixerClose
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetControlDetailsA
mixerSetControlDetails
waveOutClose
mixerGetID
waveOutOpen
mciSendStringA

Sections

.text
Size: 788KB - Virtual size: 785KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

038ba2cf229e3523a4231dcd53a4772e

Headers

File Characteristics

Imports

version

msvfw32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

winmm

Sections

.text Size: 788KB - Virtual size: 785KB

.rdata Size: 136KB - Virtual size: 133KB

.data Size: 44KB - Virtual size: 145KB

.rsrc Size: 168KB - Virtual size: 165KB

.text
Size: 788KB - Virtual size: 785KB

.rdata
Size: 136KB - Virtual size: 133KB

.data
Size: 44KB - Virtual size: 145KB

.rsrc
Size: 168KB - Virtual size: 165KB