2be66025290454286d72eeb661a7f5a3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2be66025290454286d72eeb661a7f5a3_JaffaCakes118
Size

54KB
MD5

2be66025290454286d72eeb661a7f5a3
SHA1

a508769db2971a2423a9571ebf14f4800db6ffe6
SHA256

9d9a536604dcf57fdb56cd561598fb91540ff49c739875e67ba7c5d49d76fc1d
SHA512

9a4453405b054a10e41aeb91299f1bf5250390d59918d85021a121fc05f8e10d4870009bf42930cfcc473bd81360f1afa85dd4d68a64db51f28e3934e21bf625
SSDEEP

768:cHx78ja0cZng3a2MJi4HN86eeXYjkhHa8fhpnuU0ZcjARA+LpEILREIRLob7DgP3:cGjX8i4HM9j18DrCcMZN9zSI8F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2be66025290454286d72eeb661a7f5a3_JaffaCakes118

Files

2be66025290454286d72eeb661a7f5a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4dbb072a2678968041070b0e4691a4e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
GetSystemTime
FileTimeToSystemTime
LocalFree
LoadLibraryA
VirtualQuery
FoldStringW
GetTempPathA
DisableThreadLibraryCalls
GetProcAddress
GetFileAttributesW
FindClose
GetLocaleInfoA
FindResourceW
GetStartupInfoA
lstrlenA
GetLocalTime
GlobalLock
lstrcpynW
GetTimeFormatW
lstrcmpW
GetUserDefaultUILanguage
lstrcmpiW
GetDateFormatW
FindFirstFileW
RtlUnwind
GetTickCount
CreateEventW
FreeEnvironmentStringsW
GetLastError
SetStdHandle
LocalLock
ResumeThread
FlushFileBuffers
ReadFile
UnhandledExceptionFilter
GetCurrentProcessId
InterlockedCompareExchange
HeapCreate
GetLocaleInfoW
GlobalFree
DeleteCriticalSection
SetEnvironmentVariableA
OpenMutexA
GetCurrentProcess
TerminateProcess
GetFileInformationByHandle
LeaveCriticalSection
GetTempFileNameA
ExitProcess
GetProcessHeap
CreateProcessW
GetVersion
OutputDebugStringW
FindResourceExW
SetLastError
CloseHandle
GetFileType
GetFileSize
lstrlenW
TlsAlloc
LocalUnlock
WriteFile
UnmapViewOfFile
GlobalUnlock
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
FreeLibrary
MultiByteToWideChar
VirtualProtect
GetModuleHandleW
GetStdHandle
WideCharToMultiByte
FormatMessageW
Sleep
VirtualFree
GetUserDefaultLCID
SizeofResource
TlsGetValue
SetErrorMode
CreateThread
GetSystemInfo
MapViewOfFile
CreateEventA
CreateFileW
GetCommandLineA
HeapAlloc
LocalReAlloc
CompareStringW
GetEnvironmentVariableW
GetACP
LocalSize
DeleteFileW
lstrcatW
CreateFileMappingW
GetSystemTimeAsFileTime
GetDateFormatA
InterlockedDecrement
MulDiv
LocalAlloc
GetModuleHandleA
GetCommandLineW
SetEndOfFile
SetUnhandledExceptionFilter
InterlockedIncrement
CreateFileA
CreateMutexA
QueryPerformanceCounter
GetEnvironmentStrings
GetModuleFileNameA

advapi32

RegSetValueExW
RegCreateKeyW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
IsTextUnicode

gdi32

SetViewportExtEx
EndPage
GetTextExtentPoint32W
GetObjectW
CreateFontIndirectW
StartDocW
SelectObject
StartPage
SetAbortProc
SetBkMode
SetMapMode
GetTextFaceW
SetWindowExtEx
EndDoc
TextOutW
GetDeviceCaps
AbortDoc
CreateDCW
DeleteObject
LPtoDP
DeleteDC
GetStockObject
EnumFontsW
GetTextMetricsW

user32

SetWindowPlacement
GetDlgItemTextW
GetMenuState
DialogBoxParamW
DestroyWindow
GetMenu
GetSubMenu
LoadCursorW
TranslateMessage
GetMessageTime
SetScrollPos
PtInRect
SetCursor
WinHelpW
EndDialog
ShowWindow
SetActiveWindow
InvalidateRect
CallNextHookEx
UpdateWindow
ChildWindowFromPoint
DeleteMenu
LoadStringW
TranslateAcceleratorW
GetWindowLongW
GetParent
SetFocus
UnhookWinEvent
GetKeyboardLayout
CreateWindowExW
DrawIconEx
PostQuitMessage
OffsetRect
MessageBeep
GetFocus
SetWinEventHook
GetClientRect
CharUpperW
DrawTextExW
GetMessageW
LoadImageW
FindWindowA
CheckMenuItem
GetDlgCtrlID
RegisterWindowMessageA
GetForegroundWindow
SetWindowLongW
MoveWindow
SendMessageW
SendMessageA
LoadAcceleratorsW
DestroyMenu
EnableMenuItem
GetWindowPlacement
ReleaseDC
GetDC
GetMessagePos
PostMessageW
DispatchMessageW
EnableWindow
IsClipboardFormatAvailable
DefWindowProcW
MessageBoxW
GetSystemMenu
UnhookWindowsHookEx
ScreenToClient
CharLowerW
RegisterWindowMessageW
RegisterClassExW
GetWindowTextW
IsDialogMessageW
EnumThreadWindows
CharNextW
IsIconic
CreateDialogParamW
DestroyIcon
BringWindowToTop
PeekMessageW
GetDesktopWindow
GetWindowLongA
GetSystemMetrics
SendDlgItemMessageW
CloseClipboard
wsprintfW
LoadIconW
SetWindowTextW
OpenClipboard
GetDlgItem
SetRect
SetPropA
GetCursorPos
SetDlgItemTextW

shell32

ShellAboutW
DragFinish
DragAcceptFiles
DragQueryFileW

msvcrt

_unlock
memcpy
__set_app_type
_callnewh
_cexit
_controlfp
??3@YAXPAX@Z
_initterm
_adjust_fdiv
fprintf
qsort
wcsncpy
__setusermatherr
memset
__getmainargs
__p__commode
iswctype
localtime
_snwprintf
_c_exit
__p__fmode
exit
time
_exit
_CxxThrowException
iswdigit
_wcsicmp
wcsncmp
__dllonexit
_XcptFilter
_acmdln
??0exception@@QAE@ABV0@@Z
_wtol

comdlg32

GetOpenFileNameW
CommDlgExtendedError
ReplaceTextW
PrintDlgExW
GetSaveFileNameW
GetFileTitleW
FindTextW
PageSetupDlgW
ChooseFontW

winspool.drv

GetPrinterDriverW
ClosePrinter
OpenPrinterW

comctl32

CreateStatusWindowW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4dbb072a2678968041070b0e4691a4e0

Headers

File Characteristics

Imports

kernel32

advapi32

gdi32

user32

shell32

msvcrt

comdlg32

winspool.drv

comctl32

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 35KB - Virtual size: 35KB

.data Size: 7KB - Virtual size: 36KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 35KB - Virtual size: 35KB

.data
Size: 7KB - Virtual size: 36KB

.rsrc
Size: 2KB - Virtual size: 1KB