2ff31d78067d6b0f97c60cb1be57e5e9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2ff31d78067d6b0f97c60cb1be57e5e9_JaffaCakes118
Size

372KB
MD5

2ff31d78067d6b0f97c60cb1be57e5e9
SHA1

0c066659db6107f1e8c5bc27a0d98206b5571363
SHA256

d7beb0ea2c9ac98c1fee7751fb6e0686e1c09325a69b8e328028d78870044bc9
SHA512

46a82cd7a0ac568f94049a3ab3a80a1834dd54446bd2742ded8641a4f4632fee85124beae9b8c43d21a05415daf58028f8e7312dbb4f307a542ba01d56a5039a
SSDEEP

6144:kywFEsl0ypZ7O+w4F/V0q4hw5pggpoh/USNYIS/AxNq:wOz4Fsi5pggpohsSeIXxNq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ff31d78067d6b0f97c60cb1be57e5e9_JaffaCakes118

Files

2ff31d78067d6b0f97c60cb1be57e5e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac126c305235ca846230a1bad13992b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
HeapReAlloc
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
TerminateProcess
GetTimeZoneInformation
HeapFree
HeapAlloc
RaiseException
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
GetFileTime
GetFileAttributesA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetThreadLocale
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SizeofResource
GetLastError
GlobalFlags
GetModuleFileNameA
lstrcmpA
GetCurrentThread
FormatMessageA
LocalFree
lstrcpynA
FileTimeToLocalFileTime
FileTimeToSystemTime
VirtualProtect
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedIncrement
InterlockedDecrement
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
MulDiv
GetModuleHandleA
SetLastError
GlobalLock
GlobalUnlock
LockResource
FindResourceA
LoadResource
WritePrivateProfileStringA
CopyFileA
GetVersionExA
lstrcpyA
GetPrivateProfileStringA
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcatA
GlobalAlloc
GlobalFree
GetCurrentDirectoryA
GetFileSize
Sleep
DeviceIoControl
ReadFile
GetCommTimeouts
SetCommTimeouts
CreateFileA
OutputDebugStringA
WriteFile
CloseHandle
LCMapStringA
GetTickCount

user32

GetNextDlgGroupItem
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
GetFocus
SetFocus
AdjustWindowRectEx
IsWindowVisible
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
IntersectRect
CopyAcceleratorTableA
GetWindowPlacement
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
ModifyMenuA
DeleteMenu
GetMenu
EnableMenuItem
DrawIcon
LoadIconA
FindWindowA
IsIconic
ShowWindow
SetForegroundWindow
MessageBoxA
GetDesktopWindow
SetWindowLongA
GetMessagePos
ScreenToClient
LoadStringA
wvsprintfA
wsprintfA
LoadImageA
GetIconInfo
GetDC
CreateIconIndirect
ReleaseDC
FillRect
DrawStateA
OffsetRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
SetRect
GetClientRect
CopyRect
FrameRect
InflateRect
GetSysColor
DrawFocusRect
GetSubMenu
TrackPopupMenuEx
PostMessageA
ClientToScreen
WindowFromPoint
GetActiveWindow
InvalidateRect
CharNextA
SystemParametersInfoA
SetCursor
GetParent
GetNextDlgTabItem
GetWindowLongA
DestroyIcon
DestroyCursor
DestroyMenu
MessageBeep
SendMessageA
EnableWindow
DrawTextA
GetSystemMetrics
LoadBitmapA
GetWindowRect
GetSysColorBrush
LoadCursorA
PtInRect
GetClassNameA
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
GetCursorPos
MapDialogRect
GetAsyncKeyState
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
EndDialog
DispatchMessageA
PeekMessageA

gdi32

SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
IntersectClipRect
MoveToEx
LineTo
OffsetViewportOrgEx
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
PatBlt
GetTextColor
GetBkColor
LPtoDP
SetViewportOrgEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetTextMetricsA
GetPixel
SetPixel
CreateBitmap
SetBkColor
SetTextColor
DeleteDC
CreateCompatibleBitmap
SelectObject
GetStockObject
DeleteObject
CreateFontA
GetObjectA
DPtoLP
CreateCompatibleDC
CreateDIBitmap
GetTextExtentPointA
BitBlt

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteExA

comctl32

_TrackMouseEvent
ord17
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Destroy
ImageList_LoadImageA

oledlg

ord8

ole32

OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoFreeUnusedLibraries
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
SysFreeString
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen

Sections

.text
Size: 208KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac126c305235ca846230a1bad13992b0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 208KB - Virtual size: 206KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 16KB - Virtual size: 34KB

.rsrc Size: 96KB - Virtual size: 94KB

.text
Size: 208KB - Virtual size: 206KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 16KB - Virtual size: 34KB

.rsrc
Size: 96KB - Virtual size: 94KB