21a58fd26732e15eb365b2baac904266_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

21a58fd26732e15eb365b2baac904266_JaffaCakes118
Size

388KB
MD5

21a58fd26732e15eb365b2baac904266
SHA1

bf4ae3d62c217bb396807ddd0e94c016b2495d41
SHA256

970972b557bb60562cc8a3b835f2107d420f94ec07e5e1aab36f04759fc8667a
SHA512

4e10667431edf4957bdab87c45308216c0948dfb72f3e3d1c3eff146647e0f178606a085f678f6fd7c2cf28ceac41076f3e1cf72e430b9569b85957dd0db483e
SSDEEP

12288://u7aiLzzqacX9SB+F5yXz8tkRiGG04A0SV6QgKZESsK://LSE5yD8tkR204Al63JSv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21a58fd26732e15eb365b2baac904266_JaffaCakes118

Files

21a58fd26732e15eb365b2baac904266_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ed9602e4b1a256df2de8d5aa3247eac5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyA
RegCloseKey
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegDeleteKeyA

comctl32

ord14
ord15
ord17
ord13

comdlg32

ChooseFontA
ChooseColorA
GetSaveFileNameA
GetOpenFileNameA

gdi32

SetBkMode
SetTextAlign
CreatePalette
DeleteDC
GetTextExtentPoint32A
CreateCompatibleDC
CreateFontIndirectA
DeleteObject
TextOutA
SetBkColor
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
SelectObject
GetTextExtentExPointA
SetMapMode
GetDeviceCaps
SetPaletteEntries
CreateBitmap
RealizePalette
SelectPalette
UnrealizeObject
GetPixel
ExtTextOutA
CreatePen
LineTo
CreateCompatibleBitmap
TranslateCharsetInfo
GetTextMetricsA
CreateFontA
UpdateColors
ExcludeClipRect
IntersectClipRect
Polyline
MoveToEx
ExtTextOutW
SetPixel
GetCharWidthA
GetCharWidthW
GetCharWidth32W
GetCharWidth32A

imm32

ImmGetContext
ImmSetCompositionWindow
ImmReleaseContext
ImmSetCompositionFontA
ImmGetCompositionStringW

shell32

ShellExecuteA

user32

LoadIconA
SetScrollInfo
CreateCaret
LoadCursorA
DeleteMenu
InsertMenuA
SetCursor
PostQuitMessage
IsZoomed
GetKeyboardState
TrackPopupMenu
PostMessageA
EnableMenuItem
GetSystemMenu
DestroyCaret
GetMessageTime
ShowCursor
SetCaretPos
ToAsciiEx
SetKeyboardState
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
RegisterClipboardFormatA
GetClipboardData
FlashWindow
CheckMenuItem
DefDlgProcA
CreatePopupMenu
AppendMenuA
CreateMenu
GetMenuItemCount
GetKeyboardLayout
SetForegroundWindow
UpdateWindow
GetMessageA
SetTimer
KillTimer
IsWindow
DispatchMessageA
PeekMessageA
HideCaret
ShowCaret
WaitMessage
IsIconic
GetParent
GetWindowLongA
ReleaseCapture
GetDoubleClickTime
GetDesktopWindow
MoveWindow
CreateDialogParamA
EndDialog
EnableWindow
DialogBoxParamA
SetActiveWindow
GetWindowPlacement
SetWindowPlacement
MessageBoxA
SetFocus
GetDlgItem
CheckDlgButton
CheckRadioButton
WinHelpA
RegisterWindowMessageA
DrawEdge
GetDlgItemTextA
SetDlgItemTextA
SetCapture
IsDlgButtonChecked
SendDlgItemMessageA
SetWindowLongA
MessageBeep
GetDC
ReleaseDC
MapDialogRect
GetCaretBlinkTime
DestroyWindow
BeginPaint
GetClientRect
GetWindowTextLengthA
GetWindowTextA
EndPaint
SetWindowPos
InvalidateRect
DefWindowProcA
RegisterClassA
GetSysColor
SystemParametersInfoA
GetWindowRect
CreateWindowExA
ShowWindow
SetWindowTextA
SendMessageA
FindWindowA
GetForegroundWindow
GetCapture
GetClipboardOwner
GetQueueStatus
GetCursorPos
TranslateMessage
GetSystemMetrics
IsDialogMessageA

winmm

PlaySoundA

winspool.drv

OpenPrinterA
WritePrinter
EndPagePrinter
StartDocPrinterA
EndDocPrinter
ClosePrinter
StartPagePrinter
EnumPrintersA

kernel32

SetEndOfFile
SetEnvironmentVariableA
CompareStringA
CompareStringW
HeapCreate
IsDBCSLeadByteEx
LCMapStringA
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
GetStringTypeW
GetStringTypeA
GetVersion
GetCommandLineA
GetStartupInfoA
DeleteFileA
GetLastError
TerminateProcess
ExitProcess
HeapFree
HeapReAlloc
HeapAlloc
GetLocalTime
GetTimeZoneInformation
WriteFile
GetEnvironmentVariableA
CreateFileA
ReadFile
FreeLibrary
LoadLibraryA
GetVersionExA
Beep
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
CreateProcessA
GetLocaleInfoA
GetModuleFileNameA
lstrcpyA
MulDiv
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
GetCPInfo
GetOEMCP
GetACP
GetCurrentThreadId
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
GetTickCount
QueryPerformanceCounter
GlobalMemoryStatus
GetCurrentThread
GetThreadTimes
GetCurrentProcess
GetProcessTimes
HeapDestroy
GetSystemTime
GetSystemTimeAdjustment
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetModuleHandleA
GetProcAddress
FreeEnvironmentStringsW
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetFilePointer
SetStdHandle

Sections

.text
Size: 268KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 40KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed9602e4b1a256df2de8d5aa3247eac5

Headers

File Characteristics

Imports

advapi32

comctl32

comdlg32

gdi32

imm32

shell32

user32

winmm

winspool.drv

kernel32

Sections

.text Size: 268KB - Virtual size: 266KB

.rdata Size: 40KB - Virtual size: 37KB

.data Size: 40KB - Virtual size: 61KB

.rsrc Size: 36KB - Virtual size: 49KB

.text
Size: 268KB - Virtual size: 266KB

.rdata
Size: 40KB - Virtual size: 37KB

.data
Size: 40KB - Virtual size: 61KB

.rsrc
Size: 36KB - Virtual size: 49KB