22ab155281714d029346c354f93d1738_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

22ab155281714d029346c354f93d1738_JaffaCakes118
Size

608KB
MD5

22ab155281714d029346c354f93d1738
SHA1

625d23889d5528a53c201de1dffa1bdce2046be8
SHA256

caa0f7d4c011a38139872ffaefd21eb38bad71cbf097622335298d1a7db32edc
SHA512

56ac0498384818d5d9b3bb531306c965225841166677350237c855a0e13c2ff6303a2ff6d5e77f9345f3d3c13fe3c07e5c7f8761a2522a9e2852470ed1cedd52
SSDEEP

12288:/1qMebj5rfUiRz0h0wiZFJE8wYcL8UGOwUdTFm0B+2eEZPwtZhN7GrTxNQf6jrjm:Q1YGOzhm0B+nEZP47+T3QIYP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22ab155281714d029346c354f93d1738_JaffaCakes118

Files

22ab155281714d029346c354f93d1738_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb8246c0253b42a09c8336203a6e5275

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetOpenUrlA
InternetSetOptionA
InternetQueryOptionA
HttpSendRequestA
InternetCloseHandle
HttpOpenRequestA
InternetConnectA
HttpQueryInfoA
InternetReadFile
InternetSetFilePointer
InternetOpenA

ws2_32

WSACloseEvent
WSARecvFrom
WSAResetEvent
inet_addr
gethostbyname
inet_ntoa
shutdown
closesocket
WSACreateEvent
WSASocketA
setsockopt
WSAGetLastError
WSASendTo
WSASetEvent
WSAWaitForMultipleEvents

kernel32

lstrlenA
Sleep
CloseHandle
GetCurrentThreadId
CreateThread
SetEvent
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
LockResource
LoadResource
FindResourceA
SetLastError
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
lstrcmpA
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
GetModuleFileNameA
EnterCriticalSection
ReadFile
GetFileSize
CreateFileA
WriteFile
CreateDirectoryA
GetSystemTime
GetCurrentProcessId
OutputDebugStringA
SetFilePointer
GetTickCount
CreateEventA
WaitForMultipleObjectsEx
TerminateThread
WaitForSingleObject
GlobalFree
GlobalHandle
ResetEvent
WaitForMultipleObjects
SetWaitableTimer
CreateWaitableTimerA
ResumeThread
FreeResource
SizeofResource
SetFileAttributesA
DeleteFileA
OpenEventA
FindClose
FindNextFileA
GetFileAttributesA
RemoveDirectoryA
FindFirstFileA
CreateProcessA
SetEndOfFile
GetDriveTypeA
GetLogicalDriveStringsA
GetDiskFreeSpaceExA
CopyFileA
GetCommandLineA
GetModuleHandleA
FreeLibrary
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
lstrcpynW
GetTempFileNameA
GetTempPathA
LocalFree
lstrcpyA
GetProcAddress
LoadLibraryA
FlushFileBuffers
SetErrorMode
SetUnhandledExceptionFilter
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapSize
HeapReAlloc
HeapDestroy
lstrcmpiA
lstrlenW
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
ExitProcess
GetSystemTimeAsFileTime
ExitThread
GetStartupInfoA
HeapCreate
VirtualFree
IsBadWritePtr
TerminateProcess
QueryPerformanceCounter
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
RtlUnwind
LCMapStringA
LCMapStringW
GetOEMCP
GetCPInfo
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
DebugBreak
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetStdHandle
FindResourceExA

user32

DispatchMessageA
EnableWindow
PostThreadMessageA
TranslateAcceleratorA
GetWindowTextLengthA
GetWindowTextA
GetClassInfoExA
wsprintfA
RegisterClassExA
CreateAcceleratorTableA
CharNextA
GetClassNameA
RedrawWindow
SetFocus
GetFocus
IsChild
InvalidateRgn
FillRect
SetCapture
ReleaseCapture
GetDesktopWindow
DestroyAcceleratorTable
CreateWindowExA
MapDialogRect
SetWindowContextHelpId
RegisterWindowMessageA
LoadStringA
LoadBitmapA
SetWindowRgn
GetDC
DrawFocusRect
SetCursor
InvalidateRect
MessageBoxA
GetForegroundWindow
CallWindowProcA
GetWindowThreadProcessId
GetSysColor
DefWindowProcA
PostMessageA
PtInRect
LoadIconA
PostQuitMessage
GetParent
GetWindow
GetWindowRect
SystemParametersInfoA
GetClientRect
MapWindowPoints
SendDlgItemMessageA
RemoveMenu
CreatePopupMenu
GetMenuItemCount
AppendMenuA
DestroyMenu
MessageBeep
LoadStringW
TrackPopupMenuEx
SetMenuDefaultItem
GetMenuItemInfoA
SetMenuItemInfoA
LoadMenuA
LoadAcceleratorsA
LoadImageA
GetWindowDC
ValidateRect
DrawTextA
GetActiveWindow
DialogBoxIndirectParamA
IsDialogMessageA
SetForegroundWindow
KillTimer
MoveWindow
SetTimer
EndDialog
CreateDialogIndirectParamA
LoadCursorA
AttachThreadInput
IsWindowEnabled
ShowWindow
ScreenToClient
SetWindowPos
SetWindowTextA
GetWindowLongA
SetWindowLongA
DestroyWindow
BeginPaint
EndPaint
PeekMessageA
GetMessageA
GetDlgItem
TranslateMessage
IsWindow
SendMessageA
UnregisterClassA
ReleaseDC

gdi32

SetBkMode
CreatePen
MoveToEx
LineTo
CombineRgn
CreateRectRgn
GetClipRgn
SelectClipRgn
SetBkColor
SetTextColor
CreateSolidBrush
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetStockObject
GetObjectA
GetDeviceCaps
GetDIBits
CreateFontA
DeleteDC
DeleteObject

advapi32

RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey

shell32

SHGetSpecialFolderPathA

ole32

CreateStreamOnHGlobal
StringFromGUID2
CoTaskMemAlloc
OleLockRunning
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
OleInitialize
OleUninitialize
CoInitialize
CoUninitialize
CoTaskMemFree
CoTaskMemRealloc

oleaut32

SafeArrayLock
VarUI4FromStr
SysAllocStringByteLen
DispCallFunc
SafeArrayCreate
SafeArrayRedim
SafeArrayDestroy
SysFreeString
SafeArrayUnlock
SafeArrayGetUBound
SafeArrayGetLBound
OleLoadPicture
LoadTypeLi
LoadRegTypeLi
VariantInit
VariantClear
OleCreateFontIndirect
SysStringByteLen
SysAllocString
SysStringLen
SysAllocStringLen

shlwapi

PathFileExistsA

comctl32

ImageList_Destroy
_TrackMouseEvent
ImageList_DrawEx
ImageList_Add
ImageList_Create
ImageList_GetIconSize
ImageList_Draw
ImageList_AddMasked
InitCommonControlsEx

msimg32

TransparentBlt

setupapi

SetupInstallFileA

Sections

.text
Size: 300KB - Virtual size: 297KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb8246c0253b42a09c8336203a6e5275

Headers

File Characteristics

Imports

wininet

ws2_32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

setupapi

Sections

.text Size: 300KB - Virtual size: 297KB

.rdata Size: 68KB - Virtual size: 65KB

.data Size: 16KB - Virtual size: 22KB

.rsrc Size: 220KB - Virtual size: 216KB

.text
Size: 300KB - Virtual size: 297KB

.rdata
Size: 68KB - Virtual size: 65KB

.data
Size: 16KB - Virtual size: 22KB

.rsrc
Size: 220KB - Virtual size: 216KB