1c23305b8f68a2619eff84801b462466_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1c23305b8f68a2619eff84801b462466_JaffaCakes118
Size

2.5MB
MD5

1c23305b8f68a2619eff84801b462466
SHA1

dc6baec9d902bda521b8fdd03158b57b2216bde0
SHA256

e6195c2dcbbacbd6584f34eda4ec8505d07c28a2471c908e9a833b68cacdcc63
SHA512

fb907b0c72ed04b2d1c8451c3fd59b4e997cee962bcbe6cf5415848ceeb2d5b3b1daa7dc5a36374d411f8d71ca339062f019481c3ecd528293958b3dbc080a48
SSDEEP

49152:Cf+bsXZ7PPPeRZGPPPPcoPPPP0YBPPPxC5626x6Eqj5VWO83HhV:CespPPPeTGPPPPcoPPPP0YBPPPxC562G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c23305b8f68a2619eff84801b462466_JaffaCakes118

Files

1c23305b8f68a2619eff84801b462466_JaffaCakes118
.exe windows:4 windows x86 arch:x86

466aa45ad3e6cd8963087511312de6e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA
DragFinish
DragQueryFileA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetSpecialFolderPathA
SHGetFolderPathA

shlwapi

PathFindOnPathA
PathGetDriveNumberA
PathRemoveFileSpecA
PathAppendA
PathFileExistsA
PathMatchSpecA
PathIsURLA
PathIsUNCA
PathFindFileNameA
PathFindExtensionA
PathStripToRootA

wininet

InternetGetCookieA
InternetCloseHandle
InternetCrackUrlA
InternetOpenA
InternetConnectA
HttpOpenRequestA
InternetQueryOptionA
InternetSetOptionA
HttpSendRequestA
InternetSetCookieA

iphlpapi

GetAdaptersInfo

kernel32

GetFileAttributesA
GetFileTime
VirtualProtect
LocalAlloc
GlobalReAlloc
GlobalHandle
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
InterlockedIncrement
GetCPInfo
GetOEMCP
FileTimeToLocalFileTime
GetCurrentDirectoryA
SetErrorMode
GetTickCount
RtlUnwind
RaiseException
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
ExitThread
CreateThread
GetStartupInfoA
ExitProcess
HeapReAlloc
TerminateProcess
HeapSize
GetTimeZoneInformation
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
GetSystemInfo
VirtualQuery
UnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetEnvironmentVariableA
GetLocaleInfoW
FileTimeToSystemTime
GetFullPathNameA
GetCurrentProcess
DuplicateHandle
UnlockFile
LockFile
FlushFileBuffers
SuspendThread
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
MulDiv
SetLastError
InterlockedDecrement
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetLogicalDriveStringsA
lstrcpynA
TerminateThread
CreateEventA
GetCurrentThreadId
SetEvent
ResetEvent
WaitForSingleObject
GetDriveTypeA
GetLogicalDrives
GetVolumeInformationA
GetModuleHandleA
GetModuleFileNameA
CreateDirectoryA
Sleep
GetWindowsDirectoryA
lstrcatA
GetComputerNameA
WritePrivateProfileStringA
GetCommandLineA
CreateMutexA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcmpA
GetDateFormatA
GetTimeFormatA
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
GetEnvironmentVariableA
UnmapViewOfFile
GetFileSize
CreateFileMappingA
MapViewOfFileEx
CompareStringW
CompareStringA
GetVersion
lstrcmpiA
LoadLibraryA
GetProcAddress
FreeLibrary
GetLocalTime
SetEndOfFile
FormatMessageA
LocalFree
lstrlenA
MultiByteToWideChar
SetCurrentDirectoryA
FindFirstFileA
FindClose
lstrcpyA
FindNextFileA
GetLastError
DeleteFileA
CreateFileA
ReadFile
SetFilePointer
WriteFile
CloseHandle
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange

user32

SetWindowContextHelpId
GetSysColorBrush
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
MapDialogRect
GetMessageA
TranslateMessage
ValidateRect
ShowOwnedPopups
WindowFromPoint
PostQuitMessage
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
BringWindowToTop
SetMenu
TranslateAcceleratorA
DestroyMenu
GetMenuItemInfoA
wsprintfA
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
GetWindowDC
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
IsWindowEnabled
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
MessageBoxA
SetScrollPos
GetScrollPos
UpdateWindow
GetMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
EqualRect
DeferWindowPos
SetScrollInfo
RegisterClassA
UnregisterClassA
GetDlgCtrlID
CallWindowProcA
IntersectRect
GetWindowPlacement
GetWindow
SystemParametersInfoA
MessageBeep
DestroyCursor
MoveWindow
SetRect
TrackMouseEvent
CopyIcon
EnableMenuItem
GetClassNameA
FindWindowExA
SetWindowPos
LoadIconA
KillTimer
SetTimer
GetSystemMenu
AppendMenuA
DrawIcon
EnumWindows
SetForegroundWindow
IsIconic
ShowWindow
SendMessageTimeoutA
GetKeyState
GetClipCursor
ClipCursor
GetSystemMetrics
SetCursor
GetClassInfoA
DefWindowProcA
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadCursorA
GetCapture
ScreenToClient
ClientToScreen
InvertRect
SetRectEmpty
GetSysColor
EnableWindow
LoadBitmapA
SendMessageA
InflateRect
FillRect
PostMessageA
SetWindowRgn
GetWindowRect
GetClientRect
GetDC
ReleaseDC
InvalidateRect
InvalidateRgn
IsWindowVisible
GetFocus
GetParent
GetDlgItem
IsWindow
CheckMenuItem
GetSubMenu
LoadMenuA
TrackPopupMenu
GetCursorPos
CopyRect
IsRectEmpty
SetWindowLongA
GetWindowLongA
OffsetRect
SetCapture
ReleaseCapture
CharUpperA
FindWindowA
DrawStateA
PtInRect
RedrawWindow
GetForegroundWindow

gdi32

ExtSelectClipRgn
CreatePatternBrush
GetDeviceCaps
CreatePen
GetMapMode
DPtoLP
GetBkColor
GetTextColor
GetRgnBox
CreateFontA
Rectangle
GetTextMetricsA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetCurrentObject
FillRgn
CreatePolygonRgn
CreateFontIndirectA
CreateSolidBrush
GetStockObject
GetObjectA
DeleteDC
SetPixel
GetPixel
GetBitmapDimensionEx
SelectObject
SetRectRgn
PtInRegion
DeleteObject
GetTextExtentPoint32A
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateRoundRectRgn
RoundRect
CombineRgn
CreateRectRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
MoveToEx
LineTo
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateRectRgnIndirect
CreateBitmap
SetBkColor
SetTextColor
GetClipBox

advapi32

RegSetValueExA
RegOpenKeyExA
RegSetValueA
RegDeleteValueA
RegQueryValueExA
RegCreateKeyExA
GetUserNameA
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey

comctl32

ImageList_AddMasked
ImageList_GetImageInfo
ord17
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Draw
ImageList_DrawIndirect

oledlg

ord8

ole32

CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromString

oleaut32

VarUdateFromDate
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen
SysAllocStringByteLen
VariantCopy
VarBstrFromDate
SafeArrayDestroy
SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
SysFreeString

urlmon

URLOpenBlockingStreamA

oleacc

LresultFromObject
CreateStdAccessibleObject

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

comdlg32

GetFileTitleA

Sections

.text
Size: 524KB - Virtual size: 522KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

466aa45ad3e6cd8963087511312de6e7

Headers

File Characteristics

Imports

shell32

shlwapi

wininet

iphlpapi

kernel32

user32

gdi32

advapi32

comctl32

oledlg

ole32

oleaut32

urlmon

oleacc

winspool.drv

comdlg32

Sections

.text Size: 524KB - Virtual size: 522KB

.rdata Size: 120KB - Virtual size: 117KB

.data Size: 12KB - Virtual size: 27KB

.rsrc Size: 1.9MB - Virtual size: 1.9MB

.text
Size: 524KB - Virtual size: 522KB

.rdata
Size: 120KB - Virtual size: 117KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 1.9MB - Virtual size: 1.9MB