320c8360771301d803482499dfaafcf2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

320c8360771301d803482499dfaafcf2_JaffaCakes118
Size

892KB
MD5

320c8360771301d803482499dfaafcf2
SHA1

fefad8c0afacda2160728931ce30f7085c8904e5
SHA256

d7ed54c32e5dcf01c3069003920eb9802fb94fce38f7053c57d972ba982cfe8b
SHA512

a137fb1117367f3d6b3d01a041fc9645f9471a162931325d9dca64f7601580dd91f2dd0283e7f2e0e02553204f3408f23c5ba279d915682730013238241880d0
SSDEEP

12288:7dX2RpQ6kTGlYyfz7C9WBLTnbjPiCjmnTE7F3FlVBnbGjI794Og0V5:Ug7fyfz7C9GqCeTYHb7p55

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
320c8360771301d803482499dfaafcf2_JaffaCakes118

Files

320c8360771301d803482499dfaafcf2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9917e89bde3fa7f5e950e023721ccdb9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFlags
WritePrivateProfileStringW
SetErrorMode
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
HeapReAlloc
GetSystemTimeAsFileTime
RtlUnwind
HeapSize
VirtualProtect
VirtualAlloc
VirtualQuery
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
TlsFree
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetCurrentDirectoryA
GetDriveTypeA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
FindResourceExA
FindResourceA
FileTimeToDosDateTime
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetFullPathNameW
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetFileAttributesW
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
InterlockedDecrement
GetThreadLocale
InterlockedIncrement
GetModuleHandleA
GetCurrentProcessId
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
GetSystemInfo
GetVolumeInformationW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
GetTempFileNameW
CreateThread
SetThreadPriority
ExitProcess
TerminateThread
FreeLibrary
RaiseException
GetTickCount
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
GetComputerNameW
GetTempPathW
GetCurrentProcess
ReadFile
GetFileSize
lstrcpyW
CreateFileW
lstrcatW
WriteFile
SetFilePointer
GetLocalTime
GetVersionExW
DeleteFileW
CreateDirectoryW
CopyFileW
MulDiv
Sleep
RemoveDirectoryW
CreateMutexW
OpenMutexW
CloseHandle
GetModuleHandleW
LoadLibraryW
GetProcAddress
SetLastError
FindFirstFileW
FindClose
FindNextFileW
GetModuleFileNameW
MultiByteToWideChar
lstrlenA
SizeofResource
LoadResource
FindResourceW
lstrlenW
LockResource
GetLastError
WideCharToMultiByte

user32

PostThreadMessageW
RegisterClipboardFormatW
MessageBeep
UnregisterClassW
InvalidateRgn
IsRectEmpty
CopyAcceleratorTableW
LoadCursorW
GetSysColorBrush
CharUpperW
DestroyMenu
SetCursor
SetWindowContextHelpId
MapDialogRect
GetMessageW
TranslateMessage
ValidateRect
PostQuitMessage
GetCursorPos
WindowFromPoint
CharNextW
EndPaint
BeginPaint
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
GetWindowThreadProcessId
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
CreateDialogIndirectParamW
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
TrackPopupMenu
GetMenu
UnregisterClassA
CreateWindowExW
SendMessageW
GetWindowTextLengthW
MessageBoxW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetWindowLongW
SetWindowLongW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetMenuItemID
GetSubMenu
GetActiveWindow
EnableMenuItem
CheckMenuItem
CreatePopupMenu
GetWindow
wvsprintfW
wsprintfW
GetClassNameW
SetWindowPos
GetWindowTextW
DestroyWindow
EnableWindow
SetRect
LoadImageW
SetForegroundWindow
GetWindowRect
FrameRect
InflateRect
ReleaseDC
DrawStateW
GetSystemMetrics
GetWindowDC
GetClientRect
GetParent
PtInRect
GetCapture
CopyRect
SetCapture
GetForegroundWindow
InvalidateRect
ReleaseCapture
IsWindowVisible
DestroyIcon
DrawIconEx
PostMessageW
GetNextDlgGroupItem
IsWindow
IsCharAlphaW
SetTimer
IsIconic
DrawIcon
KillTimer
GetKeyState
UpdateWindow
IsZoomed
DrawTextW
GetDC
GetDesktopWindow
DrawEdge
GetMenuState
GetMenuItemCount
AppendMenuW
FillRect

gdi32

GetTextColor
CreateRectRgnIndirect
GetMapMode
GetRgnBox
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
CreateFontW
MoveToEx
LineTo
SetMapMode
RestoreDC
SaveDC
CreateBitmap
GetObjectW
SetTextColor
GetClipBox
CreateFontIndirectW
GetStockObject
GetBkColor
CreatePen
CreateSolidBrush
SelectObject
DeleteDC
SetBkMode
SetBkColor
DeleteObject
EndDoc
EndPage
StartPage
GetDeviceCaps
StartDocW
SetPixel
BitBlt
RoundRect
CreateCompatibleDC
CreateBrushIndirect
CreateCompatibleBitmap
GetTextExtentPoint32W
TextOutW

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueW
RegEnumKeyW
RegOpenKeyW
RegSetValueExW
OpenProcessToken
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW

shell32

ShellExecuteW
SHGetFolderPathW
SHFileOperationW

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsA
PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
StrToIntExW

oledlg

OleUIBusyW

ole32

CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
CoRegisterMessageFilter
OleFlushClipboard
CoInitialize
CoUninitialize
CoCreateInstance
OleIsCurrentClipboard

oleaut32

SafeArrayDestroy
SysFreeString
VariantInit
VariantClear
SysAllocString
SysStringLen
VariantChangeType
SysAllocStringLen
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
VariantCopy

urlmon

URLDownloadToFileW

wsock32

getservbyname
send
recv
select
closesocket
shutdown
connect
socket
gethostbyname
ioctlsocket
htons
WSAGetLastError
WSACleanup
WSAStartup

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

wininet

InternetCloseHandle
FtpPutFileW
InternetConnectW
InternetOpenW

wpcap

pcap_findalldevs
pcap_freealldevs

Sections

.text
Size: 484KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 248KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9917e89bde3fa7f5e950e023721ccdb9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

wsock32

version

wininet

wpcap

Sections

.text Size: 484KB - Virtual size: 480KB

.rdata Size: 140KB - Virtual size: 137KB

.data Size: 16KB - Virtual size: 28KB

.rsrc Size: 248KB - Virtual size: 245KB

.text
Size: 484KB - Virtual size: 480KB

.rdata
Size: 140KB - Virtual size: 137KB

.data
Size: 16KB - Virtual size: 28KB

.rsrc
Size: 248KB - Virtual size: 245KB