2481be888de3f0bc11a2fcb52ab13646_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2481be888de3f0bc11a2fcb52ab13646_JaffaCakes118
Size

451KB
MD5

2481be888de3f0bc11a2fcb52ab13646
SHA1

e915c4425f10c8db4cf1901147731cb1519d052d
SHA256

9998b52ece92cfb71731ca7ded6607e0f90fcffee056902d2d8c31227cdcf721
SHA512

9a20530b00709d7f770b65d1cd975576ef25332ed1f56df7ff3e34e418c434914b94c092acde05d88f099c3f5b6658a2d4e8cf0eea1a1b1c37ab08d21c942aea
SSDEEP

6144:C+ypfcZxVanYLd0VvenBzQmKdztKRE5HsUVApvmIPb/h2mwltE284IYYSWFuOr:3ypfcZxsnYLd7QNvxjIPkT84/Y3FL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2481be888de3f0bc11a2fcb52ab13646_JaffaCakes118

Files

2481be888de3f0bc11a2fcb52ab13646_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f67d1f0614eb91002e102431d1481d99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadBitmapA
GetWindowRect
EnableWindow
EndDialog
PostMessageA
PostQuitMessage
ShowWindow
SetWindowPlacement
CreateWindowExA
DestroyWindow
GetWindowLongA
SetWindowLongA
SetFocus
InsertMenuItemA
GetClassInfoW
GetClassInfoA
DialogBoxParamW
DialogBoxParamA
GetWindowTextLengthW
GetWindowTextW
GetWindowTextLengthA
GetWindowTextA
SetWindowTextW
SetWindowTextA
CreateWindowExW
RegisterClassW
RegisterClassA
SendMessageW
LoadStringW
LoadStringA
AppendMenuW
SendMessageA
InsertMenuItemW
SetMenuItemInfoA
SetMenuItemInfoW
GetMenuItemInfoA
GetMenuItemInfoW
CharPrevA
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
CharLowerW
CharLowerA
CharUpperW
CharUpperA
CheckDlgButton
KillTimer
wsprintfA
SetDlgItemTextA
IsDlgButtonChecked
ClientToScreen
GetCursorPos
AppendMenuA
TrackPopupMenuEx
ScreenToClient
IsWindowEnabled
ChildWindowFromPointEx
WindowFromPoint
RegisterClipboardFormatA
SetWindowLongW
InvalidateRect
UpdateWindow
SetTimer
MapVirtualKeyA
CallWindowProcW
CallWindowProcA
GetParent
GetKeyState
GetSubMenu
CreatePopupMenu
RemoveMenu
CheckMenuRadioItem
CheckMenuItem
GetMenuItemCount
GetMenu
LoadMenuA
SetMenu
DrawMenuBar
DestroyMenu
GetDlgItem
MoveWindow
IsZoomed
GetClientRect
MessageBoxW
ReleaseCapture
SetCapture
GetCapture
DefWindowProcW
DefWindowProcA
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
DispatchMessageA
LoadIconA
LoadCursorA
GetWindowPlacement

oleaut32

SysStringByteLen
VariantCopy
VariantClear
SysFreeString
SysAllocString

advapi32

GetUserNameW
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA
RegSetValueExW
RegQueryValueExA
RegCreateKeyExA
RegQueryValueExW

shell32

SHChangeNotify
ShellExecuteExA
SHGetDesktopFolder
SHGetPathFromIDListA
SHBrowseForFolderA
SHFileOperationA
SHGetMalloc
SHGetFileInfoA
SHGetSpecialFolderLocation
ShellExecuteA

ole32

CoTaskMemAlloc
CoTaskMemFree
OleUninitialize
OleInitialize
RegisterDragDrop
RevokeDragDrop
DoDragDrop
CoUninitialize
CoInitialize
CoCreateInstance

comctl32

CreateStatusWindowW
ord17
InitCommonControlsEx
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
PropertySheetW
PropertySheetA
CreateToolbarEx

mpr

WNetOpenEnumA
WNetCloseEnum
WNetEnumResourceA
WNetEnumResourceW
WNetGetResourceParentA
WNetGetResourceParentW
WNetGetResourceInformationA
WNetGetResourceInformationW
WNetAddConnection2A
WNetAddConnection2W
WNetOpenEnumW

gdi32

DeleteObject

comdlg32

GetOpenFileNameA
GetOpenFileNameW

msvcrt

wcscpy
__dllonexit
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
rand
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
?terminate@@YAXXZ
__CxxFrameHandler
_CxxThrowException
memcmp
_purecall
memset
memmove
memcpy
_wcsicmp
wcslen
malloc
free
srand
_onexit

kernel32

SetEndOfFile
WriteFile
SetFilePointer
GetFileSize
CreateFileA
GetLogicalDriveStringsW
GetLogicalDriveStringsA
FindFirstChangeNotificationW
FindFirstChangeNotificationA
FindCloseChangeNotification
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindClose
GetTempFileNameW
GetTempFileNameA
GetTempPathW
GetTempPathA
GetCurrentDirectoryW
GetFullPathNameW
GetFullPathNameA
DeleteFileW
DeleteFileA
CreateDirectoryW
CreateDirectoryA
MoveFileW
RemoveDirectoryW
SetFileAttributesW
MoveFileA
RemoveDirectoryA
SetFileAttributesA
SetLastError
CreateFileW
SetFileTime
GetWindowsDirectoryW
GetWindowsDirectoryA
ReadFile
GetDiskFreeSpaceA
FormatMessageW
FormatMessageA
LocalFree
GetModuleFileNameW
GetModuleFileNameA
LoadLibraryW
GetVolumeInformationA
LoadLibraryExA
WideCharToMultiByte
MultiByteToWideChar
GetCurrentProcess
SetPriorityClass
lstrcatA
lstrlenA
GetTickCount
FileTimeToLocalFileTime
WaitForMultipleObjects
Sleep
CreateProcessA
CreateProcessW
CloseHandle
CompareFileTime
GlobalAlloc
GlobalFree
GlobalSize
GlobalLock
GlobalUnlock
GetSystemDefaultLangID
GetUserDefaultLangID
AreFileApisANSI
GetModuleHandleW
GetModuleHandleA
CopyFileA
WaitForSingleObject
FindNextChangeNotification
GetCompressedFileSizeW
GetDriveTypeA
GetCommandLineW
GetVersionExA
LoadLibraryA
FileTimeToSystemTime
HeapFree
GetProcessHeap
HeapAlloc
FileTimeToDosDateTime
SystemTimeToFileTime
GetSystemTime
GetStdHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
FreeLibrary
GetProcAddress
DeleteCriticalSection
GetLastError
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
GetVolumeInformationW
CreateEventA
VirtualAlloc
VirtualFree
SetEvent
InitializeCriticalSection
GetStartupInfoA
DeviceIoControl

Sections

.text
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f67d1f0614eb91002e102431d1481d99

Headers

File Characteristics

Imports

user32

oleaut32

advapi32

shell32

ole32

comctl32

mpr

gdi32

comdlg32

msvcrt

kernel32

Sections

.text Size: 266KB - Virtual size: 266KB

.rdata Size: 59KB - Virtual size: 59KB

.data Size: 9KB - Virtual size: 18KB

.rsrc Size: 115KB - Virtual size: 116KB

.text
Size: 266KB - Virtual size: 266KB

.rdata
Size: 59KB - Virtual size: 59KB

.data
Size: 9KB - Virtual size: 18KB

.rsrc
Size: 115KB - Virtual size: 116KB