19adab9f2edc084491c6327d01f51551_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

19adab9f2edc084491c6327d01f51551_JaffaCakes118
Size

116KB
MD5

19adab9f2edc084491c6327d01f51551
SHA1

20a7011f0060c7de0043eb073b453f5ece1a1167
SHA256

be92ebe8f662da2654a93743f7f48e11165f3487e309d9799e8438d6ea7f31bc
SHA512

b416b1adc1753c1558ff79bc6ab8e8c79b3b0f8519cf7747006c2ca5dd0ef288d9cc9f6040ebdac3b35b22a30db03dcbccc13f147a45d4588fe79da991f8a560
SSDEEP

1536:gbqFW0vb2dlWulDGd0GFuTzqd5EGWEX0vOqUmdhJpC6NNQcQB4oHk9U8pnG:gEb2dlWIDJKzGuEvODqljQcNoHk9xE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19adab9f2edc084491c6327d01f51551_JaffaCakes118

Files

19adab9f2edc084491c6327d01f51551_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa51c8c94fe81cbe1a79bdb59e5986fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetVersion
GetCurrentThreadId
GetProcessVersion
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeLibrary
LoadLibraryA
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
GetOEMCP
GetCurrentProcess
CreateFileA
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetTimeZoneInformation
GetSystemTime
RtlUnwind
GetCommandLineA
ExitProcess
RaiseException
HeapSize
HeapReAlloc
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalHandle
TlsAlloc
LocalFree
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
GlobalFlags
lstrcmpA
lstrcmpiA
lstrcpynA
GetLastError
GlobalLock
GlobalUnlock
GetModuleHandleA
GetProcAddress
SetLastError
HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameA
DeleteFileA
OpenProcess
TerminateProcess
lstrcatA
lstrlenA
GlobalFree
CreateToolhelp32Snapshot
Process32First
Process32Next
GetLogicalDriveStringsA
CreatePipe
GetStartupInfoA
CreateProcessA
CloseHandle
ReadFile
GetLocalTime
GetSystemDirectoryA
GlobalAlloc
Sleep
ExitThread
CreateThread
WaitForSingleObject

user32

DispatchMessageA
LoadCursorA
GetSysColorBrush
GetSysColor
GetWindowPlacement
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
MapWindowPoints
PostMessageA
LoadIconA
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
PostQuitMessage
DestroyMenu
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
LoadStringA
GetLastActivePopup
MessageBoxA
SetFocus
EnableWindow
IsWindowEnabled
SetWindowPos
SetWindowLongA
GetDlgItem
UnhookWindowsHookEx
GetFocus
GetParent
SendMessageA
GetWindowTextA
SetWindowTextA
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetWindowLongA
GetClassNameA
GrayStringA
DrawTextA
ReleaseDC
GetDC
ClientToScreen
GetSystemMetrics
TabbedTextOutA

gdi32

SetWindowExtEx
ScaleWindowExtEx
GetClipBox
ScaleViewportExtEx
SetViewportExtEx
GetObjectA
CreateDCA
GetDIBits
BitBlt
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject
GetDeviceCaps
GetBitmapBits
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
RestoreDC
GetStockObject
CreateCompatibleBitmap
SaveDC
CreateBitmap
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SetBkColor

advapi32

GetUserNameA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyExA

shell32

ShellExecuteA

comctl32

ord17

ws2_32

htons
connect
WSAStartup
setsockopt
socket
send
recv
gethostbyname
inet_ntoa
closesocket
gethostname
inet_addr

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

aa51c8c94fe81cbe1a79bdb59e5986fc

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

comctl32

ws2_32

winspool.drv

Sections

.text Size: 80KB - Virtual size: 77KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 16KB - Virtual size: 27KB

.text
Size: 80KB - Virtual size: 77KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 16KB - Virtual size: 27KB