194fb0a050cdda4da57016f7d6825fbb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

194fb0a050cdda4da57016f7d6825fbb_JaffaCakes118
Size

665KB
MD5

194fb0a050cdda4da57016f7d6825fbb
SHA1

1caae83ee6ee6b654f55eca66ccae3356fa09f8d
SHA256

9ffb01e6157e4ed9bf06c2cd8b137e40f54757d458dc04c23c99e0e0d8d028e3
SHA512

4f3dd9cf5bfcfefbea0fd1448dee3b12213f5aa9b4ee2d7ab6a8a265f19099ccd060aeba5b693862a1730beea46e658be14faef44f715f25b8819a6183b8747f
SSDEEP

12288:ELS9h0/vWNnsVWkv9CpdBoADl+lbuk492hdUUmio8I:Fh0mNns0ppvDlZ9mUPixI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
194fb0a050cdda4da57016f7d6825fbb_JaffaCakes118

Files

194fb0a050cdda4da57016f7d6825fbb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e77a7a2316c240e9703fd054526c3e45

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

kernel32

lstrlenW
MultiByteToWideChar
MulDiv
HeapAlloc
FlushInstructionCache
GetCurrentProcess
WideCharToMultiByte
GetModuleFileNameA
GetCurrentThreadId
lstrcmpiA
GetSystemDefaultLangID
FreeLibrary
GetProcAddress
LoadLibraryA
CreateDirectoryA
DeleteFileA
MoveFileA
InterlockedIncrement
InterlockedDecrement
GetModuleHandleA
SizeofResource
LoadLibraryExA
IsDBCSLeadByte
GlobalFree
GlobalHandle
GetCommandLineA
ReadFile
CreateProcessA
GetSystemInfo
GetEnvironmentVariableA
LocalFree
GetTickCount
GetCurrentProcessId
GetSystemDirectoryA
FindClose
FindFirstFileA
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetExitCodeProcess
GetUserDefaultLangID
GetShortPathNameA
GetWindowsDirectoryA
CompareStringW
FindResourceA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
GetTimeZoneInformation
GetCPInfo
GetOEMCP
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
SetUnhandledExceptionFilter
HeapSize
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
TerminateProcess
ExitProcess
HeapReAlloc
VirtualQuery
VirtualAlloc
VirtualProtect
RtlUnwind
GetSystemTimeAsFileTime
LoadResource
LockResource
GlobalAlloc
GlobalLock
GlobalUnlock
CreateEventA
CreateThread
SetLastError
GetTempPathA
SetEvent
lstrcpynA
lstrcmpA
lstrcpyA
lstrlenA
SetEnvironmentVariableA
lstrcatA
CreateFileA
GetFileSize
GetFileTime
FileTimeToSystemTime
GetLastError
Sleep
SystemTimeToFileTime
CompareFileTime
SetFilePointer
SetEndOfFile
WriteFile
CloseHandle
WaitForSingleObject
GetProcessHeap
HeapFree
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CompareStringA

user32

RedrawWindow
IsChild
GetClassNameA
GetParent
CharNextA
GetFocus
IsWindow
CreateAcceleratorTableA
UnregisterClassA
GetClassInfoExA
DispatchMessageA
DispatchMessageW
TranslateMessage
GetMessageA
GetMessageW
IsWindowUnicode
MsgWaitForMultipleObjects
SetTimer
KillTimer
EnableWindow
GetDlgItem
MessageBoxA
SetWindowTextA
LoadStringA
PostMessageA
RegisterClassExA
RegisterWindowMessageA
GetWindowTextA
GetWindowTextLengthA
SetForegroundWindow
SystemParametersInfoA
SendDlgItemMessageA
DialogBoxParamA
GetActiveWindow
DialogBoxIndirectParamA
PeekMessageA
wsprintfA
SetCursor
LoadCursorA
PtInRect
GetWindowRect
GetCursorPos
EndDialog
GetClientRect
LoadBitmapA
MapWindowPoints
GetDlgCtrlID
DestroyWindow
SetWindowLongA
GetWindowLongA
SetWindowPos
SetWindowContextHelpId
MapDialogRect
GetWindow
CreateWindowExA
SendMessageA
DestroyAcceleratorTable
SetFocus
BeginPaint
EndPaint
GetSysColor
DefWindowProcA
CallWindowProcA
GetDesktopWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
FillRect
SetCapture
ReleaseCapture

gdi32

CreateFontIndirectA
DPtoLP
GetDeviceCaps
SetWindowOrgEx
SetViewportOrgEx
ModifyWorldTransform
SetGraphicsMode
SaveDC
DeleteDC
DeleteObject
GetStockObject
SetBkMode
StretchBlt
CreateCompatibleDC
GetObjectA
SetTextColor
SelectObject
CreateSolidBrush
CreateCompatibleBitmap
RestoreDC
BitBlt

advapi32

RegOpenKeyExA
RegEnumKeyA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptCreateHash
CryptReleaseContext
CryptHashData
CryptGetHashParam
CryptDestroyHash
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA

ole32

StringFromGUID2
CreateStreamOnHGlobal
CoInitializeSecurity
StringFromCLSID
CoInitialize
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
OleUninitialize
OleInitialize
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
CoTaskMemAlloc

oleaut32

LoadTypeLi
LoadRegTypeLi
VariantInit
VariantClear
OleCreateFontIndirect
SysStringByteLen
SysAllocString
SysStringLen
SysAllocStringLen
SysFreeString
VarUI4FromStr

urlmon

URLDownloadToFileA
IsValidURL

wintrust

WinVerifyTrust

wininet

InternetOpenA
InternetCrackUrlA
InternetConnectA
HttpOpenRequestA
InternetTimeFromSystemTime
HttpAddRequestHeadersA
HttpSendRequestA
HttpQueryInfoA
InternetTimeToSystemTime
InternetReadFile
InternetCloseHandle
InternetErrorDlg

version

GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 120KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 500KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e77a7a2316c240e9703fd054526c3e45

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

urlmon

wintrust

wininet

version

Sections

.text Size: 120KB - Virtual size: 117KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 8KB - Virtual size: 15KB

.rsrc Size: 500KB - Virtual size: 500KB

.text
Size: 120KB - Virtual size: 117KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 8KB - Virtual size: 15KB

.rsrc
Size: 500KB - Virtual size: 500KB