27c840a46d18cd24e4311003ede96041_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

27c840a46d18cd24e4311003ede96041_JaffaCakes118
Size

872KB
MD5

27c840a46d18cd24e4311003ede96041
SHA1

a14acbfcb9239481911a0b19d81981fdc34ff3dd
SHA256

46aab3baebffba3037e35abbb8e8cc02b8358b4b9829c2ce964ac8d2dfa75777
SHA512

1092c6b0079ef9547a92bd5781e67b0003727faf705c53ba37269400befceb2f78f0136df6bebb5456ded1a74eada7296c151ba0791a84de08476bbdffc43ff0
SSDEEP

24576:cOZoMj061yFCLSay7Xg0PPuN4ZTMKM6tYr:c8oM061Z+Xg42SZT86tG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27c840a46d18cd24e4311003ede96041_JaffaCakes118

Files

27c840a46d18cd24e4311003ede96041_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bb924edf5d34f1bbee061512cb363295

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
GetCPInfo
IsDebuggerPresent
InterlockedDecrement
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsGetValue
TlsSetValue
DecodePointer
GetModuleHandleW
SetLastError
GetCurrentThreadId
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetStringTypeW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
HeapFree
ExitProcess
Sleep
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
LoadLibraryW
RtlUnwind
GetProcAddress
GetLastError
HeapCreate
GlobalAlloc
HeapAlloc
SetUnhandledExceptionFilter
MulDiv

user32

ShowCaret
UnregisterClassA
RedrawWindow
EmptyClipboard
CharUpperBuffW
GetKeyNameTextA
MapVirtualKeyA
DestroyWindow
ModifyMenuA
SetClassLongA
CreateWindowExW
GetLastActivePopup
DrawTextA
GetClassInfoW
CharUpperBuffA
GetForegroundWindow
EnableScrollBar
DefWindowProcA
IsWindowEnabled
GetCaretPos
WaitForInputIdle
FindWindowA
GetClassInfoA
SetTimer
FlashWindow
DeferWindowPos
GetWindow
CheckMenuItem
EnumThreadWindows
HideCaret
SetForegroundWindow
CreateIcon
SetRect
RegisterClassW
PtInRect
DrawTextExA
ClientToScreen
SetFocus
IntersectRect
GetSubMenu
GetClipboardFormatNameA
EnumWindows
InvalidateRect
SetMenuItemInfoA
LoadBitmapA
CharNextW
IsClipboardFormatAvailable
SetActiveWindow
PeekMessageA
GetWindowDC
DestroyCursor
DrawEdge
CreateMenu
GetIconInfo
TabbedTextOutA
GetClipboardData
DefMDIChildProcA
CreateWindowExA
DialogBoxParamA
DrawMenuBar
TranslateMessage
CallWindowProcA
EnableWindow
ShowWindow
SystemParametersInfoA
ReleaseDC
ValidateRect
SetKeyboardState
RegisterWindowMessageA
CallNextHookEx
EqualRect
UpdateWindow
GetScrollInfo
DrawIcon
EndPaint
IsZoomed
EndDeferWindowPos
DispatchMessageA
DefWindowProcW
GetTopWindow
GetWindowTextLengthW
DestroyCaret
FrameRect
GetKeyboardLayout
GetPropA
DeleteMenu
BringWindowToTop
IsCharAlphaA
InvalidateRgn
GetScrollRange
SetWindowTextW
MoveWindow
SetMenu
UnhookWindowsHookEx
MessageBeep
GetMessageA
DefFrameProcA
BeginDeferWindowPos
LoadCursorA
GetMenuCheckMarkDimensions
DrawCaption
IsWindow
GetAsyncKeyState
ToUnicode
CloseClipboard
PostMessageA
DrawTextW
RegisterClipboardFormatA
WindowFromPoint
OffsetRect
GetScrollPos
IsWindowVisible
GetMessageTime
CallWindowProcW
OpenClipboard
ToAscii
GetActiveWindow
IsChild
LoadKeyboardLayoutA
CreateDialogParamA
GetKeyState
SendNotifyMessageA
OemToCharA
GetMenuItemCount
GetKeyboardLayoutList
WinHelpA
GetMenuItemID
GetWindowTextA
ScrollWindow
ChildWindowFromPoint
GetSysColor
GetCapture
PostThreadMessageA
SetWindowRgn
GetMenuState
EnableMenuItem
DestroyIcon
SetParent
RemoveMenu
SetClipboardData
CharNextA
GetDlgItem
CreateCaret
BeginPaint
GetTabbedTextExtentA
MapWindowPoints
GetDoubleClickTime
RemovePropA
TrackPopupMenu
RegisterClassA
SetWindowPos
ActivateKeyboardLayout
CharLowerBuffA
LoadIconA
GetMessagePos
EndDialog
SetWindowsHookExA
ScreenToClient
TranslateMDISysAccel
GetSystemMetrics
GetMenu
GetCursorPos
IsIconic
CharUpperA
SetScrollInfo
DestroyMenu
GetCursor
DrawFrameControl
SendMessageW
InsertMenuItemA
InsertMenuA
GetUpdateRect
GetDesktopWindow
SetCapture
SendDlgItemMessageA
GetWindowThreadProcessId
EnumClipboardFormats
WaitMessage
GetWindowLongA
SetWindowLongW
GetMenuItemInfoA
InflateRect
FindWindowExA
LoadCursorFromFileA
DrawTextExW
ShowOwnedPopups
IsWindowUnicode
SetCursor
CreatePopupMenu
GetSystemMenu
SetWindowTextA
SetWindowPlacement
SendMessageTimeoutA
ReleaseCapture
GetClassNameA
IsCharAlphaNumericA
DrawIconEx
CopyImage
GetSysColorBrush
mouse_event
SetWindowLongA
PostQuitMessage
InvertRect
SubtractRect
CopyRect
AdjustWindowRectEx
SetScrollPos
LockWindowUpdate
WindowFromDC
IsDialogMessageA
SetScrollRange
GetFocus
CharLowerA
IsRectEmpty
UnionRect
wsprintfA
GetParent
MessageBoxA
GetDCEx
SendMessageA
MsgWaitForMultipleObjects
FillRect
ShowCursor
GetMenuStringA
GetDC
GetMenuItemRect
DrawFocusRect
SetRectEmpty
CharPrevW
GetWindowPlacement
SetCaretPos
ScrollWindowEx
ScrollDC
SetPropA
GetKeyboardState
GetClientRect
KillTimer
GetWindowRgn
GetWindowTextW
GetWindowRect
ShowScrollBar

gdi32

GetRandomRgn

comdlg32

GetSaveFileNameA
ChooseFontA
PrintDlgA
GetOpenFileNameA
ChooseColorA

advapi32

RegEnumValueA
RegQueryValueA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyA
RegCloseKey
RegQueryInfoKeyA
RegSetValueExA
RegDeleteKeyA
RegFlushKey
RegOpenKeyExA
RegDeleteValueA
GetUserNameA
RegCreateKeyExA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder

ole32

OleUninitialize
OleInitialize

oleaut32

VarCmp
OleLoadPicture

comctl32

ImageList_Read
ImageList_DragShowNolock
ImageList_Write
ImageList_DrawEx
ImageList_DragEnter
ImageList_GetDragImage
ImageList_Add
ImageList_GetIcon
ImageList_SetIconSize
ImageList_GetBkColor
ImageList_SetDragCursorImage
ImageList_GetIconSize
ord17
ImageList_SetBkColor
ImageList_DragLeave
ImageList_Draw
ImageList_Destroy
ImageList_EndDrag
ImageList_DragMove
ImageList_GetImageCount
ImageList_Replace
ImageList_ReplaceIcon
ImageList_Remove
ImageList_Create
ImageList_BeginDrag
ImageList_GetImageInfo
ImageList_LoadImageA

winmm

timeEndPeriod
mciSendCommandA
mciGetErrorStringA
timeBeginPeriod
timeGetTime

msimg32

AlphaBlend

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

wsock32

WSAStartup
gethostbyname
recvfrom
select
listen
connect
WSACleanup
getsockname
getsockopt
setsockopt
WSAAsyncSelect
socket
closesocket
accept
ioctlsocket
htons
inet_ntoa
sendto
gethostname
bind

mpr

WNetGetUniversalNameA
WNetGetConnectionA
WNetEnumResourceA
WNetOpenEnumA
WNetCloseEnum

imm32

ImmSetCompositionFontA
ImmGetCompositionStringA
ImmGetCompositionStringW
ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

ws2_32

WSARecv
WSAGetOverlappedResult
WSAEventSelect
WSAStringToAddressA
WSASocketA
WSAAddressToStringA
WSASend

wldap32

ord315

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.wert
Size: 1024B - Virtual size: 1015B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zert
Size: 690KB - Virtual size: 689KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb924edf5d34f1bbee061512cb363295

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

winmm

msimg32

version

wsock32

mpr

imm32

ws2_32

wldap32

Sections

.text Size: 62KB - Virtual size: 61KB

.wert Size: 1024B - Virtual size: 1015B

.rdata Size: 54KB - Virtual size: 54KB

.data Size: 29KB - Virtual size: 5.6MB

.zert Size: 690KB - Virtual size: 689KB

.tls Size: 512B - Virtual size: 57B

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 20KB - Virtual size: 19KB

.text
Size: 62KB - Virtual size: 61KB

.wert
Size: 1024B - Virtual size: 1015B

.rdata
Size: 54KB - Virtual size: 54KB

.data
Size: 29KB - Virtual size: 5.6MB

.zert
Size: 690KB - Virtual size: 689KB

.tls
Size: 512B - Virtual size: 57B

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 20KB - Virtual size: 19KB