20d2ea26c9444583e126e714dedbb1b0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

20d2ea26c9444583e126e714dedbb1b0_JaffaCakes118
Size

316KB
MD5

20d2ea26c9444583e126e714dedbb1b0
SHA1

7b1c6d880c277bc0bb9b55d5712bc53d6c261859
SHA256

b10163c5ee752aa4b660094015bb936163ac590dd362016e9f3b5b405509138b
SHA512

352065eb2530dfa4bcc054bf28e332a6235e658ef89f4dadf0a81646cc8f189eb7f8406bb692da1ab78c277237837a17cacd83d8a019e1a750a8f20494f48045
SSDEEP

6144:N76z7wmWeyqZTMqjvf3OkeQJ71AGqzy/++cFUYgEvVBMzQ:N+/PLyqZJzvOG1nqzyWAYZ6z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20d2ea26c9444583e126e714dedbb1b0_JaffaCakes118

Files

20d2ea26c9444583e126e714dedbb1b0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dd33f29fe9839e435e4c8b1fceed5205

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetUserDefaultLCID
MoveFileA
InterlockedDecrement
lstrlenW
DeleteCriticalSection
SetEnvironmentVariableA
InterlockedIncrement
TlsFree
GlobalHandle
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
GetLastError
FindResourceA
LoadResource
FreeLibrary
WideCharToMultiByte
GetModuleFileNameA
GetShortPathNameA
SetConsoleCtrlHandler
SetEnvironmentVariableW
CompareStringW
CompareStringA
IsBadCodePtr
IsBadReadPtr
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
SetHandleCount
IsBadWritePtr
VirtualAlloc
FatalAppExitA
VirtualFree
HeapCreate
GetSystemTime
GetTimeZoneInformation
GetACP
HeapSize
ExitThread
CreateThread
TerminateProcess
ExitProcess
GetFileType
SetStdHandle
RaiseException
GetCommandLineA
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentDirectoryA
SetFileAttributesA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetFileAttributesA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
DeleteFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
DuplicateHandle
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
MulDiv
GetUserDefaultLangID
LocalReAlloc
TlsSetValue
GlobalReAlloc
lstrlenA
GetStdHandle
TlsAlloc
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
lstrcmpA
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GlobalLock
GlobalUnlock
LockResource
RemoveDirectoryA
LocalAlloc
GetCurrentThread
GetCurrentProcess
CreateProcessA
WaitForSingleObject
SetErrorMode
SetLastError
Sleep
GetPrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
WritePrivateProfileStringA
CopyFileA
GetVolumeInformationA
WritePrivateProfileStructA
FormatMessageA
GetSystemDefaultLangID
WriteFile
HeapAlloc
HeapReAlloc
GetProcessHeap
HeapFree
FindNextFileA
FindClose
LocalFree
GetVersionExA
FindFirstFileA
OpenEventA
CreateEventA
CreateFileA
CloseHandle
CreateDirectoryA
GetPrivateProfileStructA
GlobalFree
GlobalAlloc
GetComputerNameA
lstrcatA
lstrcpyA
LoadLibraryA
GetTimeFormatA
GetDateFormatA
GetLocalTime
SizeofResource
InitializeCriticalSection
GetLocaleInfoW
LeaveCriticalSection
HeapDestroy
EnterCriticalSection
GetProcAddress
MultiByteToWideChar

user32

GetTopWindow
RegisterClipboardFormatA
ShowWindow
GetDlgItem
GetParent
SendDlgItemMessageA
SetDlgItemTextA
LoadIconA
SetForegroundWindow
PostMessageA
GetDesktopWindow
ReleaseDC
GetDC
LoadStringA
SystemParametersInfoA
DefWindowProcA
GetDlgCtrlID
SetWindowTextA
SetFocus
IsWindowEnabled
DestroyWindow
CreateDialogIndirectParamA
GetSystemMetrics
IsWindow
SetActiveWindow
GetActiveWindow
EndDialog
GetNextDlgTabItem
GetClientRect
CopyRect
GetWindowRect
GetWindowPlacement
IsIconic
IntersectRect
OffsetRect
RegisterWindowMessageA
SetWindowPos
GetWindow
GetForegroundWindow
GetLastActivePopup
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
GetKeyState
GetWindowTextA
GetWindowTextLengthA
SetWindowPlacement
TrackPopupMenu
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
wsprintfA
WinHelpA
GetCapture
IsChild
MessageBoxA
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
IsWindowVisible
EndDeferWindowPos
GetWindowLongA
BeginDeferWindowPos
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
GetFocus
GetSysColor
MapWindowPoints
UpdateWindow
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
MoveWindow
wvsprintfA
CharToOemA
OemToCharA
PostQuitMessage
ShowOwnedPopups
SetCursor
GetCursorPos
ValidateRect
GetMessageA
UnregisterClassA
GetClassNameA
PtInRect
ClientToScreen
GetDialogBaseUnits
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
InflateRect
LoadCursorA
GetSysColorBrush
SetWindowLongA
DestroyMenu
CharUpperA
InsertMenuA
DeleteMenu
GetMenuStringA
CharNextA
PeekMessageA
SendMessageA
DispatchMessageA
TranslateMessage
EnableWindow

gdi32

CreateSolidBrush
DPtoLP
CombineRgn
SetRectRgn
GetMapMode
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateDIBPatternBrushPt
CreatePatternBrush
CreateHatchBrush
CreateFontIndirectA
ExtCreatePen
CreatePen
GetWindowExtEx
GetViewportExtEx
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
RestoreDC
SaveDC
StartDocA
DeleteDC
GetStockObject
SelectObject
GetTextMetricsA
GetTextExtentPoint32A
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CreateRectRgnIndirect
PatBlt
DeleteObject
GetDeviceCaps

comdlg32

GetFileTitleA

advapi32

LookupAccountNameA
EnumDependentServicesA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
LookupAccountSidA
FreeSid
AllocateAndInitializeSid
RegOpenKeyA
GetSidLengthRequired
InitializeSid
GetSidSubAuthority
OpenThreadToken
OpenProcessToken
GetTokenInformation
EqualSid
SetFileSecurityA
OpenSCManagerA
StartServiceA
ControlService
QueryServiceStatus
GetServiceDisplayNameA
OpenServiceA
CloseServiceHandle
RegQueryValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl

shell32

SHFileOperationA
SHGetFileInfoA
DragAcceptFiles
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA

comctl32

CreatePropertySheetPageA
DestroyPropertySheetPage
PropertySheetA
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Merge
ImageList_Read
ImageList_Write

ole32

CoCreateInstance
CoInitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateStreamOnHGlobal
CoDisconnectObject

Sections

.text
Size: 101KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 200KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd33f29fe9839e435e4c8b1fceed5205

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

comctl32

ole32

Sections

.text Size: 101KB - Virtual size: 103KB

.data Size: 200KB - Virtual size: 268KB

.rsrc Size: 7KB - Virtual size: 7KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 101KB - Virtual size: 103KB

.data
Size: 200KB - Virtual size: 268KB

.rsrc
Size: 7KB - Virtual size: 7KB

.reloc
Size: 6KB - Virtual size: 6KB