31de0031ebcc2924093efcf5460511b2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

31de0031ebcc2924093efcf5460511b2_JaffaCakes118
Size

350KB
MD5

31de0031ebcc2924093efcf5460511b2
SHA1

209a02e16bf50791f9667e999195db82b7003f51
SHA256

584b726234668c45f64d953020f570479dae2befba1351741af18ca9913252b9
SHA512

80977ae85623295ad5f5b33683851013e4c766acc2ca870335933ad18c2b0afbadb018e6385f16f563563c79c77f8f88b13441caf0eaf0911a1ece94c9e6b3e7
SSDEEP

6144:K0jHAeNE5icZyFBTSikwTHH1tnCy89jlzBBi:K2CEFoiJTCXA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31de0031ebcc2924093efcf5460511b2_JaffaCakes118

Files

31de0031ebcc2924093efcf5460511b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a5b77a4c6657bbf0af2f8ad0333ec456

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
RaiseException
HeapReAlloc
HeapSize
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CreateThread
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
TerminateProcess
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapAlloc
TerminateThread
ExpandEnvironmentStringsA
GetTempPathA
GetSystemDirectoryA
CreateDirectoryA
GetProfileStringA
HeapFree
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
FindFirstFileA
FindClose
MoveFileA
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
GetLastError
SetLastError
WritePrivateProfileStringA
GetPrivateProfileStringA
GlobalFlags
MulDiv
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
TlsAlloc
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
FormatMessageA
LocalFree
SuspendThread
SetThreadPriority
ResumeThread
CloseHandle
GetModuleFileNameA
GlobalDeleteAtom
lstrcmpiA
GetCurrentThread
Sleep
WideCharToMultiByte
EnumResourceNamesA
FindResourceExA
SizeofResource
lstrcmpA
GlobalLock
GlobalUnlock
LoadLibraryExA
lstrlenA
MultiByteToWideChar
lstrlenW
GlobalAlloc
InitializeCriticalSection
FlushInstructionCache
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
FindResourceA
LoadResource
LockResource
GlobalHandle
GlobalFree
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
GetProcAddress
GetCurrentProcess
OutputDebugStringA
DeleteCriticalSection
HeapDestroy
LocalAlloc
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
InterlockedExchangeAdd

user32

CopyRect
GetTopWindow
GetCapture
WinHelpA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgCtrlID
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
OffsetRect
IntersectRect
IsIconic
GetWindowPlacement
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
UnhookWindowsHookEx
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
EnableMenuItem
GetMessageA
ScreenToClient
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
SetCursor
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetWindowRect
SystemParametersInfoA
AdjustWindowRectEx
SendDlgItemMessageA
MapWindowPoints
ShowWindow
UpdateWindow
EnableWindow
KillTimer
SetTimer
PostMessageA
LoadIconA
InvalidateRgn
InvalidateRect
SetCapture
ReleaseCapture
wsprintfA
CreateWindowExA
CreateAcceleratorTableA
IsDialogMessageA
InflateRect
GetDesktopWindow
RedrawWindow
DestroyWindow
IsWindow
GetParent
GetClassNameA
SetWindowPos
GetFocus
IsChild
SetFocus
GetDC
ReleaseDC
BeginPaint
TranslateMessage
DestroyMenu
LoadStringA
GetSysColorBrush
GrayStringA
DrawTextA
TabbedTextOutA
GetWindowDC
ClientToScreen
PtInRect
MapDialogRect
GetAsyncKeyState
CheckMenuItem
MessageBoxA
DialogBoxIndirectParamA
GetActiveWindow
SetWindowLongA
RegisterClassExA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
GetClientRect
FillRect
EndPaint
GetDlgItem
SendMessageA
GetSysColor
CallWindowProcA
GetWindowLongA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
GetWindow
DefWindowProcA
RegisterWindowMessageA
GetClassInfoExA
LoadCursorA
IsWindowUnicode
CharNextA
DefDlgProcA
GetClassInfoA

gdi32

SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
SaveDC
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
EnumFontFamiliesExA
PatBlt
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetStockObject
GetObjectA
GetDeviceCaps
CreateSolidBrush
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
RestoreDC
GetTextExtentPointA
CreateDIBitmap
SelectObject
DeleteDC
BitBlt

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
OpenSCManagerA
OpenServiceA
QueryServiceConfigA
ChangeServiceConfigA
CloseServiceHandle

shell32

ShellExecuteExA
ShellExecuteA

comctl32

DestroyPropertySheetPage
PropertySheetA
ord17
CreatePropertySheetPageA

ole32

CLSIDFromProgID
CoCreateInstance
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
OleLockRunning
CLSIDFromString

olepro32

ord253

oleaut32

VariantClear
LoadRegTypeLi
SysStringLen
SysAllocString
SysAllocStringLen
SysFreeString
GetErrorInfo

wininet

InternetReadFile
HttpSendRequestA
HttpOpenRequestA
InternetOpenA
InternetConnectA
HttpQueryInfoA
InternetOpenUrlA
InternetCloseHandle
InternetSetOptionA

msi

ord65
ord172

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

shlwapi

PathRemoveFileSpecA
PathCombineA
PathIsDirectoryA
PathRemoveExtensionA
PathStripPathA
PathFindFileNameA
PathFileExistsA

Sections

.text
Size: 240KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a5b77a4c6657bbf0af2f8ad0333ec456

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

ole32

olepro32

oleaut32

wininet

msi

version

shlwapi

Sections

.text Size: 240KB - Virtual size: 237KB

.rdata Size: 48KB - Virtual size: 46KB

.data Size: 28KB - Virtual size: 45KB

.rsrc Size: 56KB - Virtual size: 52KB

.text
Size: 240KB - Virtual size: 237KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 28KB - Virtual size: 45KB

.rsrc
Size: 56KB - Virtual size: 52KB