2c5c3787ecc4e3c65eb82b9493d5c343_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2c5c3787ecc4e3c65eb82b9493d5c343_JaffaCakes118
Size

269KB
MD5

2c5c3787ecc4e3c65eb82b9493d5c343
SHA1

ea4a8dd1367fe2547eb188e5a6ba73010cc23fc7
SHA256

1412972e5cd4173ba38a543a4373fc9a916c35ef9b8cb4e781c3853ba1a561ce
SHA512

bf5245b488d24d73b87800a5225d10d9786df4522eb776de10b93827dd837e384a3209dd2a7702ccfb35ecea2b9ee5b25eb2134144d16c9200d3445c56541512
SSDEEP

6144:YbTTaP4Y+h94DoHcfWFzsoQMA2ubuL6M44c:qag/NHcfkX1ubd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c5c3787ecc4e3c65eb82b9493d5c343_JaffaCakes118

Files

2c5c3787ecc4e3c65eb82b9493d5c343_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5573e9b240ce8a403c093a151e5d8d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW

user32

IsIconic
DispatchMessageW
DrawTextExW
DrawTextW
AdjustWindowRectEx
BeginPaint
CallNextHookEx
CallWindowProcW
CharNextW
CharUpperW
CheckMenuItem
ClientToScreen
CopyAcceleratorTableW
CopyRect
CreateDialogIndirectParamW
CreateWindowExW
DefWindowProcW
DestroyMenu
EnableMenuItem
EnableWindow
EndDialog
EndPaint
EqualRect
GetActiveWindow
GetCapture
WinHelpW
ValidateRect
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TabbedTextOutW
SystemParametersInfoA
ShowWindow
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowLongW
SetWindowContextHelpId
SetRect
SetPropW
SetMenuItemBitmaps
SetForegroundWindow
SetFocus
SetCapture
SetActiveWindow
SendMessageW
SendDlgItemMessageW
SendDlgItemMessageA
ScreenToClient
RemovePropW
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageW
OffsetRect
MoveWindow
MessageBoxW
MessageBeep
MapWindowPoints
MapDialogRect
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
GetClassInfoExW
IsDialogMessageW
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
InSendMessage
GrayStringW
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetWindow
GetTopWindow
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetSubMenu
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
DestroyWindow

wininet

HttpSendRequestW
InternetCloseHandle
InternetConnectW
InternetGetLastResponseInfoW
InternetOpenW
InternetReadFile

ole32

CoGetClassObject
CoInitializeEx
CoRegisterMessageFilter
CoRevokeClassObject
CoTaskMemAlloc
CoFreeUnusedLibraries
CoUninitialize
CreateILockBytesOnHGlobal
HENHMETAFILE_UserUnmarshal
OleFlushClipboard
OleInitialize
OleIsCurrentClipboard
CoTaskMemFree
CLSIDFromProgID
StgOpenStorageOnILockBytes

oledlg

OleUIBusyW

gdi32

SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
SetTextColor
SetMapMode
SetBkMode
SelectObject
ScaleWindowExtEx
SaveDC
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetTextColor
StretchBlt
GetRgnBox
GetObjectW
GetMapMode
GetDeviceCaps
GetClipBox
GetCharABCWidthsA
GetBkColor
ExtTextOutW
Escape
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreateFontIndirectW
CreateCompatibleDC
CreateBitmap
GetStockObject
TextOutW
OffsetViewportOrgEx
ScaleViewportExtEx

shell32

SHGetFolderPathW
ShellExecuteW

comctl32

InitCommonControlsEx

advapi32

RegOpenKeyW
RegOpenKeyExW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
OpenEncryptedFileRawW
RegSetValueExW
RegQueryValueExW

oleaut32

OleCreateFontIndirect
SafeArrayDestroy
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
SystemTimeToVariantTime
VariantChangeType
VariantClear
VariantTimeToSystemTime
VariantInit
VariantCopy

kernel32

LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsValidCodePage
IsDebuggerPresent
IsDBCSLeadByteEx
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalFree
GlobalFlags
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVolumeInformationW
GetVersionExA
GetVersion
GetUserDefaultLCID
GetTimeZoneInformation
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemInfo
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileType
LoadLibraryW
GetFileAttributesW
GetEnvironmentStringsW
GetEnvironmentStringsA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetCommandLineA
GetCPInfo
GetACP
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushFileBuffers
FindResourceW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
ExitProcess
EnumSystemLocalesA
EnumResourceLanguagesW
EnterCriticalSection
DuplicateHandle
DeleteCriticalSection
CreateFileW
CreateFileA
CreateDirectoryW
ConvertDefaultLocale
CompareStringW
CompareStringA
CloseHandle
lstrlenW
lstrlenA
lstrcmpW
lstrcmpA
WritePrivateProfileStringW
WriteFile
WriteConsoleW
WriteConsoleA
WideCharToMultiByte
VirtualQuery
VirtualProtect
VirtualFree
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadFile
RtlUnwind
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
UnlockFile
GetFileSize

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

Exports

Exports

PDFPortGetVersion
PDFPortInitialize
PDFPortTerminate

Sections

.text
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5573e9b240ce8a403c093a151e5d8d1

Headers

File Characteristics

Imports

shlwapi

user32

wininet

ole32

oledlg

gdi32

shell32

comctl32

advapi32

oleaut32

kernel32

comdlg32

winspool.drv

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 60KB

.rdata Size: 136KB - Virtual size: 140KB

.data Size: 43KB - Virtual size: 156KB

.idata Size: 9KB - Virtual size: 11KB

.rsrc Size: 21KB - Virtual size: 23KB

.text
Size: 57KB - Virtual size: 60KB

.rdata
Size: 136KB - Virtual size: 140KB

.data
Size: 43KB - Virtual size: 156KB

.idata
Size: 9KB - Virtual size: 11KB

.rsrc
Size: 21KB - Virtual size: 23KB