2707fdafce4bc2af33a205a457993530_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2707fdafce4bc2af33a205a457993530_JaffaCakes118
Size

8.3MB
MD5

2707fdafce4bc2af33a205a457993530
SHA1

7df3b58c13b846f0a430e67657b52f967da5f263
SHA256

6040663a11788c422ce4b2b58232b5d6ab15937b57409a1c7ac3b36511cac956
SHA512

9ecf79ae2fae1594a891f198f987a92173ae8be5f01e6fe1c225c75c8af16ad334a01de425d79457197166dc931a64c0c9248b2986d3c526ec2770f8d9e7147d
SSDEEP

196608:RykUFVL6XXwETYzmgXCJ5Utcdx5JRumvmryHqNH:JE9jETY1XKU6X5JYmM08

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2707fdafce4bc2af33a205a457993530_JaffaCakes118

Files

2707fdafce4bc2af33a205a457993530_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb92d231a58969fdf08d5d49be1f285b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cli_lp

SetActivationModeLP
StorePhoneActivationCodeLP
StorePhoneActivationCode1LP
SetLicenseTypeLP
ShowPackageInformationLP
SetProductInfo1LP
SetProductInfo2LP
SetMessagesHeaderLP
LPEndApplication
EraseLicenseLP
SetAutoValidateLP
SetMessagesFileName
GetModeLP
ActivateLP
SetProductVersionIdLP
GetDaysLeftLP
LPIsExpired
GetActivationModeLP
GetPINActivationCodeLP
GetLicenseTypeLP
Reactivate1LP
Reactivate2LP
Reactivate3LP
CheckInternetConnectionLP
SetLicenseFilePathLP
SetKeyFilePathLP
GetLicenseProductInfoLP
GetLicenseModuleInfoLP
SetTrialDaysLP
SetActivationServiceURL
ActivateWithDialogLP
ActivateWithTrialDialogsLP
SetModeLP
GetAutoValidateLP
LPIsActivated
IsOnlineActivatedLP
SetMainWindow
ValidateLicenseLP
LoadStringLP
Activate1LP
GetMessagesHeaderLP

kernel32

SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
GlobalFlags
GetCPInfo
GetOEMCP
WritePrivateProfileStringA
GetCurrentDirectoryA
RtlUnwind
RaiseException
HeapFree
HeapAlloc
SetCurrentDirectoryA
SetEnvironmentVariableA
GetDriveTypeA
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
SetStdHandle
GetFileType
HeapSize
UnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetACP
HeapDestroy
HeapCreate
VirtualFree
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SizeofResource
LockResource
LoadResource
FindResourceA
WideCharToMultiByte
GetLastError
ExitThread
TerminateProcess
SleepEx
Sleep
CloseHandle
ExitProcess
DeleteFileA
GetExitCodeProcess
WaitForSingleObject
CreateThread
CreateProcessA
GetModuleFileNameA
GetModuleHandleA
CreateFileA
GetTempFileNameA
GetTempPathA
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExpandEnvironmentStringsA
InterlockedExchange
GetVersion
CompareStringA
CompareStringW
lstrlenA
SetUnhandledExceptionFilter
FileTimeToSystemTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
GetTickCount
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
lstrcmpW
GetVersionExA
FreeResource
GetProcAddress
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
LoadLibraryA
MoveFileA
GetCurrentProcessId
GetCurrentThreadId
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv

user32

GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
UnregisterClassA
LoadCursorA
GetSysColorBrush
CharNextA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetCursor
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
InvalidateRgn
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
DefWindowProcA
CallWindowProcA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetNextDlgTabItem
EndDialog
GetWindowTextA
GetFocus
SetWindowPos
SetFocus
MoveWindow
GetWindowThreadProcessId
MessageBoxA
IsWindow
EnumWindows
ShowWindow
EnableWindow
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableA
ReleaseCapture
SetCapture
UnhookWindowsHookEx
DestroyMenu
DrawIcon
SendMessageA
IsIconic
GetClientRect
LoadIconA
GetSystemMetrics
CharUpperA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
ValidateRect
GetCursorPos
PeekMessageA
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
CallNextHookEx
SetWindowsHookExA
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
GetWindow
RegisterClassA

gdi32

SetMapMode
DeleteObject
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
RestoreDC
SaveDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shlwapi

PathIsUNCA
PathFindExtensionA
PathStripToRootA
PathFindFileNameA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoDisconnectObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromProgID

oleaut32

VariantClear
SysStringLen
SysFreeString
SysAllocStringByteLen
VariantChangeType
VariantInit
OleCreateFontIndirect
SysAllocString
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
LoadTypeLi
SysAllocStringLen

Sections

.text
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8.0MB - Virtual size: 8.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb92d231a58969fdf08d5d49be1f285b

Headers

File Characteristics

Imports

cli_lp

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 248KB - Virtual size: 244KB

.rdata Size: 64KB - Virtual size: 61KB

.data Size: 24KB - Virtual size: 38KB

.rsrc Size: 8.0MB - Virtual size: 8.0MB

.text
Size: 248KB - Virtual size: 244KB

.rdata
Size: 64KB - Virtual size: 61KB

.data
Size: 24KB - Virtual size: 38KB

.rsrc
Size: 8.0MB - Virtual size: 8.0MB