328132431c1f70be0ba63128e1940d0f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

328132431c1f70be0ba63128e1940d0f_JaffaCakes118
Size

640KB
MD5

328132431c1f70be0ba63128e1940d0f
SHA1

c8bcff1477ab379725d7f343ed80c34e94a306aa
SHA256

216acf20687398cce9e3eca4d181ee8cea59ae6a7e52bf731ab98817b3bcf287
SHA512

7a5360d8c3e8f04355396b4096f217dc838bbd65c397316c57717266bb98e9182b0b49bcbebc1b38889d152edb43de521d100b835ede1a94def5d09ca97c7c49
SSDEEP

12288:C2v4pIPYJlZKb77MBobrqTULaHlUKxGdwGkj7cmUZ:5h7QaCgLaHlsRkvct

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
328132431c1f70be0ba63128e1940d0f_JaffaCakes118

Files

328132431c1f70be0ba63128e1940d0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b287597a63784183d807932353086256

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
RtlUnwind
HeapFree
HeapAlloc
ExitProcess
HeapReAlloc
TerminateProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
WritePrivateProfileStringW
GetFileTime
GetFileAttributesW
SetErrorMode
InterlockedIncrement
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
LocalAlloc
FileTimeToLocalFileTime
LoadLibraryW
GetModuleFileNameW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
lstrcmpiW
InterlockedDecrement
SetLastError
MulDiv
GlobalLock
GlobalUnlock
FormatMessageW
lstrcpynW
LocalFree
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetModuleHandleA
LoadLibraryA
FreeLibrary
GetModuleHandleW
GetProcAddress
GetVersionExA
GetTempPathA
SetEvent
CreateEventW
CreateDirectoryW
lstrcmpW
ReadFile
GetFileSize
WideCharToMultiByte
FindResourceA
GlobalAlloc
CreateFileW
WriteFile
CloseHandle
GlobalFree
Sleep
LeaveCriticalSection
EnterCriticalSection
CreateThread
GetTempPathW
GetTickCount
FileTimeToSystemTime
lstrlenA
MultiByteToWideChar
WaitForSingleObject
FindResourceW
LoadResource
LockResource
SizeofResource
GetLastError
lstrlenW
lstrcatW
FindFirstFileW
FindNextFileW
FindClose
GetDriveTypeW
lstrcpyW
GetDiskFreeSpaceExW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange

user32

MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
SetRect
IsRectEmpty
CharNextW
ReleaseCapture
SetCapture
LoadCursorW
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
GetMessageW
TranslateMessage
ValidateRect
SetCursor
PostQuitMessage
CharUpperW
wsprintfW
DestroyMenu
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetMenuItemBitmaps
ModifyMenuW
CheckMenuItem
GetMenuCheckMarkDimensions
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
RegisterWindowMessageW
WinHelpW
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
GetFocus
IsWindow
SetFocus
IsChild
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
MessageBoxW
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
PostMessageW
GetMenuItemID
GetMenuItemCount
GetSysColor
AdjustWindowRectEx
EqualRect
GetScrollInfo
PostThreadMessageW
RegisterClipboardFormatW
SetScrollInfo
GetClassInfoW
RegisterClassW
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetWindowLongW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetMenuState
GetWindowPlacement
CopyRect
PtInRect
GetWindow
LoadBitmapW
GetDlgItem
GetSystemMetrics
IsIconic
DrawIcon
GetParent
InvalidateRect
SetTimer
GetSystemMenu
AppendMenuW
GetCursorPos
TrackPopupMenu
LoadIconW
GetWindowRect
LoadMenuW
GetSubMenu
EnableMenuItem
UnregisterClassW
SendMessageW
EnableWindow
RedrawWindow
GetClientRect
GetCapture

gdi32

CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
GetWindowExtEx
GetViewportExtEx
GetStockObject
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateSolidBrush
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
GetDeviceCaps
SetBkColor
SetTextColor
GetClipBox
CreateDCW
CreateDIBitmap
DeleteDC
DeleteObject
StretchBlt
BitBlt
CreateCompatibleDC
GetObjectW
Rectangle

comdlg32

GetSaveFileNameW
GetOpenFileNameW
GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyExW
RegOpenKeyW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
ExtractIconW
ShellExecuteW
DragQueryFileW
DragAcceptFiles

comctl32

ImageList_ReplaceIcon
ord17
ImageList_Destroy
ImageList_Create

shlwapi

PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathFindFileNameW

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc
CoTaskMemFree
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize

oleaut32

OleCreateFontIndirect
SysAllocString
SystemTimeToVariantTime
SafeArrayDestroy
VariantCopy
SysStringLen
SysFreeString
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen

ws2_32

accept
socket
bind
closesocket
ntohl
ntohs
getpeername
inet_ntoa
htonl
select
send
recv
WSACleanup
WSAStartup
htons
listen

wininet

InternetConnectW
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
FtpPutFileW

iphlpapi

GetBestInterface
GetIpAddrTable

Sections

.text
Size: 260KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b287597a63784183d807932353086256

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

wininet

iphlpapi

Sections

.text Size: 260KB - Virtual size: 258KB

.rdata Size: 68KB - Virtual size: 66KB

.data Size: 12KB - Virtual size: 23KB

.rsrc Size: 296KB - Virtual size: 295KB

.text
Size: 260KB - Virtual size: 258KB

.rdata
Size: 68KB - Virtual size: 66KB

.data
Size: 12KB - Virtual size: 23KB

.rsrc
Size: 296KB - Virtual size: 295KB