1c1b08008c5a1cb59fb220f404e6c521_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1c1b08008c5a1cb59fb220f404e6c521_JaffaCakes118
Size

616KB
MD5

1c1b08008c5a1cb59fb220f404e6c521
SHA1

8e0793d8bd5f264d6ab57897047248735a62095f
SHA256

857597503c3308d49b78bf9248b7dfe05e0f3a1e4d0d86995b80a6e0aa1e889b
SHA512

8f5ca3bef53ce1c5566efd8735a6c3c8eee5404898cd4377a54abe0d512863331ca9147f2b8cc9de01853cac87f2ce56557215ddc986ffcf5dec7bde5da9904e
SSDEEP

12288:7We+dfhqLzUq2jb7HDD7iXIT49JHytrnLTH33XDYRdo:7W/fcLGT7i4T49s9v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c1b08008c5a1cb59fb220f404e6c521_JaffaCakes118

Files

1c1b08008c5a1cb59fb220f404e6c521_JaffaCakes118
.exe windows:4 windows x86 arch:x86

591fc83ae0e091bea88b835ef7f34dbf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

FindTextA
GetOpenFileNameW
FindTextW

wininet

FreeUrlCacheSpaceA
InternetSetCookieW
FtpGetFileW
FtpCommandW
FtpGetFileA

comctl32

ImageList_Duplicate
ImageList_DragLeave
CreatePropertySheetPageA
ImageList_GetImageInfo
InitCommonControlsEx
ImageList_BeginDrag
ImageList_LoadImage
ImageList_GetIcon
ImageList_SetFilter
_TrackMouseEvent
ImageList_Copy
DrawStatusTextA
InitMUILanguage
CreateStatusWindowA
CreateStatusWindow
ImageList_ReplaceIcon
CreatePropertySheetPage
CreateUpDownControl
CreateStatusWindowW
ImageList_DrawEx
DrawStatusText
ImageList_Remove
ImageList_SetOverlayImage
ImageList_GetBkColor

kernel32

GetStdHandle
QueryPerformanceCounter
GetACP
FreeEnvironmentStringsW
WriteConsoleW
GetStartupInfoA
MultiByteToWideChar
GetConsoleMode
GetTimeZoneInformation
GetFileType
IsValidCodePage
IsDebuggerPresent
FlushFileBuffers
GetProcAddress
SetUnhandledExceptionFilter
GetProcessShutdownParameters
FreeLibrary
HeapSize
WriteFile
GetCommandLineA
CompareStringA
GetCPInfo
WideCharToMultiByte
HeapAlloc
Sleep
ExitProcess
GetStringTypeA
GetEnvironmentStringsW
CreateMutexA
SetEnvironmentVariableA
GetCurrentThread
GetDateFormatA
GetModuleFileNameA
GetCurrentProcess
SetHandleCount
WaitForSingleObject
HeapCreate
GetEnvironmentVariableW
GetModuleHandleW
OpenMutexA
HeapDestroy
TerminateProcess
GetTimeFormatA
DeleteCriticalSection
HeapFree
EnumSystemLocalesA
GetOEMCP
GetUserDefaultLCID
GetLastError
GetLocaleInfoW
VirtualQuery
LCMapStringA
InitializeCriticalSectionAndSpinCount
InterlockedIncrement
SetFilePointer
RtlUnwind
InterlockedDecrement
IsValidLocale
FlushConsoleInputBuffer
GetModuleHandleA
CompareStringW
UnhandledExceptionFilter
InterlockedExchange
GlobalHandle
HeapReAlloc
SetStdHandle
GetCurrentThreadId
LCMapStringW
CloseHandle
TlsFree
GetTickCount
LoadLibraryA
GetStartupInfoW
TlsGetValue
ReadFile
VirtualFree
GetSystemTimeAsFileTime
LeaveCriticalSection
TlsAlloc
GetStringTypeW
GetCurrentProcessId
TlsSetValue
GetConsoleOutputCP
EnterCriticalSection
CreateFileA
VirtualAlloc
WriteConsoleA
SetLastError
GetModuleFileNameW
GetCommandLineW
ReadConsoleInputA
GetLocaleInfoA
SetConsoleCtrlHandler
GetConsoleCP

advapi32

RegDeleteKeyW
RegEnumKeyW
StartServiceA
CryptGetHashParam
RegSaveKeyA
RegSetValueA
DuplicateTokenEx
RegQueryMultipleValuesW
CryptDecrypt
CryptDestroyKey
GetUserNameA
RegOpenKeyW
RegConnectRegistryA
CryptSetProvParam
CryptEncrypt
CryptGetKeyParam
CryptSetProviderExA

user32

SetClipboardViewer
InsertMenuItemA
IsChild
GetSysColor
MonitorFromRect
SetParent
EmptyClipboard
GetUserObjectInformationA
ShowCaret
GetKeyNameTextW
CreateMenu
RegisterDeviceNotificationW
GetMessageW
wsprintfW
PostMessageW
CharUpperW
GetActiveWindow
SetThreadDesktop
DrawCaption
CreateDialogParamA
KillTimer
SetTimer
DlgDirListComboBoxW
DefWindowProcA
CheckDlgButton
GetWindowRgn
OpenWindowStationW
DdeCreateStringHandleW
SetCapture
VkKeyScanExW
GetComboBoxInfo
SendMessageW
IsCharAlphaA
CreateWindowExA
GetClipboardFormatNameW
GetForegroundWindow
DrawTextExA
SendDlgItemMessageA
MessageBoxW
SetWindowTextA
DestroyWindow
RegisterClassA
GetNextDlgGroupItem
GetCursor
IsIconic
ShowWindow
GetDesktopWindow
BroadcastSystemMessageA
GetMenuStringW
LoadStringA
LoadCursorFromFileA
GetDCEx
UnionRect
GetWindowTextLengthW
PostMessageA
GetMonitorInfoW
GetKBCodePage
OemToCharBuffW
GetDC
GetWindowContextHelpId
EnumPropsW
InSendMessageEx
MapVirtualKeyA
GetWindowModuleFileNameW
EnumPropsExA
CharPrevW
IsMenu
RegisterClassExA
OpenInputDesktop
AdjustWindowRectEx
CloseWindow
TrackPopupMenuEx
CreateCursor
ScrollWindowEx

Sections

.text
Size: 196KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 252KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

591fc83ae0e091bea88b835ef7f34dbf

Headers

File Characteristics

Imports

comdlg32

wininet

comctl32

kernel32

advapi32

user32

Sections

.text Size: 196KB - Virtual size: 193KB

.rdata Size: 252KB - Virtual size: 249KB

.data Size: 116KB - Virtual size: 134KB

.rsrc Size: 48KB - Virtual size: 46KB

.text
Size: 196KB - Virtual size: 193KB

.rdata
Size: 252KB - Virtual size: 249KB

.data
Size: 116KB - Virtual size: 134KB

.rsrc
Size: 48KB - Virtual size: 46KB