19375dbd0670eec5fb7b148a889f13df_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

19375dbd0670eec5fb7b148a889f13df_JaffaCakes118
Size

796KB
MD5

19375dbd0670eec5fb7b148a889f13df
SHA1

96b622d0188216d34f2cd64b4e7f8381d49725dd
SHA256

6b57537bd84eb93d28a456565ed62e1ff97dd975754e744ab592282d60ace052
SHA512

01e9d6141f46c37ae2a03f9eb3647588d832dce795ad563f6828520b9008de8f20f02da7bf2a496b725480a0455a5d8d75cc783521c5c9c7fa65fbac613a3b1c
SSDEEP

12288:ZBO/xoaGMVxV+LCzaMM2p/SX7EQ5bGa/5kV0Ii1metTEimX2Yvv/IZvN4jZoM:eyLMVQCI2p/5YG85khMm4TEzX2AUb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19375dbd0670eec5fb7b148a889f13df_JaffaCakes118

Files

19375dbd0670eec5fb7b148a889f13df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6f262de94675456cc96af79664a8c7e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\yaz\quohi\eaejtyae\ceepetle\ewov\srs.pdb

Imports

comctl32

ImageList_Draw
InitCommonControlsEx
ImageList_AddMasked
DestroyPropertySheetPage
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_DrawEx
ImageList_GetIconSize

advapi32

OpenSCManagerA
RegCreateKeyExA
RegDeleteValueA
RegEnumKeyA
RegQueryValueExA
RegCloseKey
ControlService
RegOpenKeyExA
RegCreateKeyA
AdjustTokenPrivileges
QueryServiceConfigA
RegOpenKeyA
DeleteService
RegEnumValueA
LookupPrivilegeValueA
OpenThreadToken
OpenServiceA
RegEnumKeyExA
RegSetValueExA
RegDeleteKeyA
StartServiceA
AllocateAndInitializeSid
InitializeSecurityDescriptor
ChangeServiceConfigA

user32

SetRectEmpty
GetCapture
PostQuitMessage
EndDialog
IsRectEmpty
GetDesktopWindow
GetScrollPos
GetClipboardData
SystemParametersInfoA
IntersectRect
SetWindowPos
MapWindowPoints
EndPaint
EnableWindow
GetMenu
GetSysColorBrush
WaitMessage
SetScrollPos
DefFrameProcW
LoadAcceleratorsW
IsWindowVisible
GetDC
SetScrollInfo
DefMDIChildProcW
DestroyMenu
RemoveMenu
IsWindow
SendMessageW
LoadBitmapW
GetWindowRect
ReleaseDC
EnableMenuItem
TrackPopupMenu
GetScrollInfo
WindowFromPoint
LoadMenuW
SetWindowTextW
IsIconic
ShowWindow
SetActiveWindow
TranslateMessage
SetDlgItemInt
UnhookWindowsHookEx
GrayStringW
EqualRect
GetForegroundWindow
TranslateAcceleratorW
GetWindowRgn
AdjustWindowRectEx
PostMessageW
SetTimer
GetClassLongW
IsDialogMessageW
IsChild
FindWindowW
DrawTextW
BeginPaint
CreateWindowExW
ValidateRect
IsClipboardFormatAvailable
PtInRect
ShowScrollBar
SetClassLongW
SetFocus
GetUpdateRect
GetMenuCheckMarkDimensions
UpdateWindow
ScreenToClient
DeferWindowPos
CreatePopupMenu
GetMenuDefaultItem
InflateRect
MessageBoxW
GetDlgItem
DrawEdge
DrawMenuBar
InsertMenuW
DefWindowProcW
InsertMenuItemW
SetMenuItemBitmaps
DispatchMessageW
GetMonitorInfoW
SetDlgItemTextW
CopyAcceleratorTableW
GetWindowPlacement
GetMessageW
DrawFrameControl
GetSubMenu
IsMenu
KillTimer
SetCursor
RegisterClassExW
InvalidateRgn
MoveWindow
DestroyAcceleratorTable
RegisterClassW
InvalidateRect
SetParent
GetSystemMetrics
GetWindowTextLengthW
TranslateMDISysAccel
GetAncestor
LoadImageW
GetMenuStringW
ClientToScreen
SetRect
SetWindowLongW
GetWindowThreadProcessId
SetCapture
DrawFocusRect
WinHelpW
GetParent
TabbedTextOutW
ReleaseCapture
SetMenuDefaultItem
SystemParametersInfoW
CopyRect
GetClientRect
OpenClipboard
GetWindow
ModifyMenuW
OffsetRect
PostThreadMessageW
EndDeferWindowPos
DrawTextExW
MessageBeep
DestroyWindow
GetSysColor
GetDlgCtrlID
CharUpperW
BeginDeferWindowPos
GetCursorPos
GetMenuItemCount
GetFocus
CallWindowProcW
PeekMessageW
DestroyIcon
GetMenuItemInfoW
GetTopWindow
IsZoomed
SendDlgItemMessageW
LoadIconW
LoadCursorW
LockWindowUpdate
GetKeyState
GetMessageTime
ShowOwnedPopups
GetMenuItemID
EmptyClipboard
DrawStateW

shell32

ShellExecuteA
SHBrowseForFolderA
Shell_NotifyIconA
DragAcceptFiles

kernel32

GetOEMCP
LoadLibraryW
RaiseException
CloseHandle
TlsFree
GetCurrentThreadId
GetTickCount
SetLastError
HeapCreate
GetDateFormatA
GetConsoleCP
GetLocaleInfoA
IsValidCodePage
GetTimeFormatA
GetModuleHandleA
WriteFile
GetCurrentProcess
GetStringTypeA
GetConsoleMode
GetStringTypeW
WriteConsoleA
FlushFileBuffers
CompareStringW
InterlockedDecrement
HeapAlloc
QueryPerformanceCounter
GetACP
TlsAlloc
GetModuleFileNameW
GetCommandLineA
GetProcessHeap
EnterCriticalSection
FreeEnvironmentStringsA
InterlockedExchange
GetEnvironmentStringsW
SetEnvironmentVariableA
HeapFree
TerminateProcess
SetStdHandle
GetLastError
SetFilePointer
HeapSize
LCMapStringW
UnhandledExceptionFilter
GetCommandLineW
ExitProcess
GetModuleFileNameA
WideCharToMultiByte
GetTimeZoneInformation
WriteConsoleW
Sleep
CompareStringA
LCMapStringA
InterlockedIncrement
GetProcAddress
HeapReAlloc
GetModuleHandleW
GetSystemTimeAsFileTime
TlsSetValue
GetStartupInfoA
CreateFileA
SetHandleCount
HeapDestroy
GetStdHandle
LeaveCriticalSection
CreateMutexW
VirtualFree
RtlUnwind
VirtualAlloc
TlsGetValue
FreeEnvironmentStringsW
SetUnhandledExceptionFilter
VirtualQuery
MultiByteToWideChar
InitializeCriticalSection
GetCPInfo
GetStartupInfoW
ReadFile
GetConsoleOutputCP
GetCurrentProcessId
DeleteCriticalSection
IsDebuggerPresent
GetFileType
LoadLibraryA
GetEnvironmentStrings
GetVersionExA

ole32

CoFreeUnusedLibraries
CreateOleAdviseHolder
ReadClassStg
CLSIDFromString
OleCreateFromData
ReadFmtUserTypeStg
CoRegisterMessageFilter
OleInitialize
StgCreateDocfileOnILockBytes
CoLockObjectExternal
OleGetClipboard
StgCreateDocfile
OleRegGetUserType
CoRegisterClassObject
StgIsStorageFile
StringFromGUID2
OleCreateStaticFromData
CreateStreamOnHGlobal
OleRun
CoGetClassObject
CreateILockBytesOnHGlobal
CoTreatAsClass
StringFromCLSID
CreateDataAdviseHolder
WriteFmtUserTypeStg
WriteClassStm
WriteClassStg
OleLoad
CoTaskMemFree
OleSetContainedObject
SetConvertStg

gdi32

IntersectClipRect
GetClipBox
SetMapMode
CreatePatternBrush
GetBkColor
SelectClipRgn
CombineRgn
SetDIBits
Polyline
SetStretchBltMode
DPtoLP
ExcludeClipRect
GetBkMode
CreatePolygonRgn
GetPixel
StretchBlt
CreateDCW
CreateCompatibleBitmap
SetROP2
StretchDIBits
MoveToEx
SaveDC
SetPixel
OffsetRgn
SetViewportExtEx
GetTextMetricsA
StartDocW
ExtSelectClipRgn
AbortDoc
GetTextMetricsW
GetDIBits
Ellipse
DeleteDC
PatBlt
GetObjectW
GetTextExtentPoint32W
DeleteObject
CreatePalette
SetTextColor
SetBkMode
CreateRectRgn
ScaleWindowExtEx
GetDeviceCaps
RealizePalette
SelectObject
CreateBrushIndirect
OffsetViewportOrgEx
CreateEllipticRgn
CreateFontIndirectW
CreateDIBSection
Escape
GetStockObject
BitBlt
CreateSolidBrush
LineTo
CreateRectRgnIndirect
ExtTextOutW
Polygon
PtVisible
Rectangle
SetWindowExtEx
RestoreDC
CreatePen
SetBkColor
CreateBitmap
TextOutW
SetTextAlign
ScaleViewportExtEx

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA
ord204
GetPrinterA
SetPrinterA

Sections

.text
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 480KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f262de94675456cc96af79664a8c7e3

Headers

File Characteristics

PDB Paths

Imports

comctl32

advapi32

user32

shell32

kernel32

ole32

gdi32

winspool.drv

Sections

.text Size: 108KB - Virtual size: 106KB

.rdata Size: 480KB - Virtual size: 477KB

.data Size: 112KB - Virtual size: 131KB

.rsrc Size: 92KB - Virtual size: 91KB

.text
Size: 108KB - Virtual size: 106KB

.rdata
Size: 480KB - Virtual size: 477KB

.data
Size: 112KB - Virtual size: 131KB

.rsrc
Size: 92KB - Virtual size: 91KB