3434389bf5eab1d709a681edec10c105_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3434389bf5eab1d709a681edec10c105_JaffaCakes118
Size

332KB
MD5

3434389bf5eab1d709a681edec10c105
SHA1

24299c64cd042d169273fbb36977c98a573106b6
SHA256

19b9dbcd6acf05f310b30806e765e90a54a72660b63440ae86e5e8c23cd2b690
SHA512

481ee0a27dd724f0505e132eef8705720bb81755b503a006211f309f3d97f5d5b810fd83309e3425d5a111abf6c207d9bbc875c806a0046365c13cf00129985f
SSDEEP

6144:elYqR5/CzOrpGFtOES/dhgfHoA9laQYKSuyjsfQj+7UTH:elYq7rrpyvIdhgfHvl7J7I+7U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3434389bf5eab1d709a681edec10c105_JaffaCakes118

Files

3434389bf5eab1d709a681edec10c105_JaffaCakes118
.exe windows:4 windows x86 arch:x86

50de4fb0bd1e39aa1ad942a92874130b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
CM_Request_Device_EjectA
SetupDiRemoveDevice
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupCopyOEMInfA

shlwapi

PathIsUNCA
PathStripToRootA
PathFindFileNameA
PathFindExtensionA

kernel32

FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
GetTickCount
HeapFree
RtlUnwind
ExitProcess
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
ExitThread
CreateThread
HeapReAlloc
HeapSize
HeapDestroy
SetErrorMode
VirtualFree
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
SetEnvironmentVariableA
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GlobalFlags
InterlockedIncrement
WritePrivateProfileStringA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
InterlockedDecrement
SetLastError
MulDiv
lstrcpynA
GlobalUnlock
GlobalFree
FreeResource
CreateEventA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
GetModuleHandleA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
CompareStringW
CompareStringA
GetVersion
WideCharToMultiByte
MultiByteToWideChar
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
WaitForSingleObject
RemoveDirectoryA
GetWindowsDirectoryA
CreateDirectoryA
GetCurrentDirectoryA
CopyFileA
DeleteFileA
FindFirstFileA
SetFileAttributesA
FindClose
CreateFileA
ReadFile
WriteFile
GetStartupInfoA
CreateProcessA
FormatMessageA
GetPrivateProfileStringA
lstrcmpiA
GetProcAddress
LoadLibraryA
FreeLibrary
OpenProcess
CloseHandle
TerminateProcess
GetLastError
LocalFree
lstrlenA
LocalAlloc
Sleep
OutputDebugStringA
GetVersionExA
FindResourceA
LoadResource
LockResource
SizeofResource
GetModuleFileNameA
HeapCreate

user32

RegisterClipboardFormatA
PostThreadMessageA
DestroyMenu
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
CopyAcceleratorTableA
SetRect
CharNextA
GetSysColorBrush
ReleaseCapture
LoadCursorA
SetCapture
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
wsprintfA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
IsChild
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
UpdateWindow
GetMenu
GetSysColor
AdjustWindowRectEx
EqualRect
GetClassInfoA
RegisterClassA
UnregisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
mouse_event
GetWindowRect
GetSystemMetrics
GetWindowLongA
GetParent
GetWindowTextA
GetClassNameA
SetForegroundWindow
EnumChildWindows
EnumWindows
GetPropA
SendMessageA
MessageBoxA
DrawIcon
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
UnhookWindowsHookEx
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
IsIconic
GetClientRect
SetTimer
KillTimer
EnableWindow
LoadIconA
WaitForInputIdle
CopyRect
IsRectEmpty
PtInRect
InflateRect
DrawEdge
CharUpperA
PostMessageA
PostQuitMessage
SetCursor
IsWindowEnabled
GetLastActivePopup
ValidateRect
GetCursorPos
PeekMessageA
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
CallNextHookEx

gdi32

GetRgnBox
GetMapMode
GetTextColor
GetBkColor
CreateRectRgnIndirect
GetStockObject
ExtSelectClipRgn
GetDeviceCaps
CreateBitmap
DeleteObject
RoundRect
SelectObject
CreateSolidBrush
CreatePen
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SetMapMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
DeleteDC

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegSetValueExA
RegOpenKeyA
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegEnumKeyA
RegQueryValueA
RegCloseKey
RegCreateKeyExA

comctl32

ord17

oledlg

ord8

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
CoRegisterMessageFilter
OleFlushClipboard

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysAllocStringByteLen
OleCreateFontIndirect
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy

Sections

.text
Size: 192KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50de4fb0bd1e39aa1ad942a92874130b

Headers

File Characteristics

Imports

setupapi

shlwapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

oleaut32

Sections

.text Size: 192KB - Virtual size: 190KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 16KB - Virtual size: 28KB

.rsrc Size: 68KB - Virtual size: 67KB

.text
Size: 192KB - Virtual size: 190KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 16KB - Virtual size: 28KB

.rsrc
Size: 68KB - Virtual size: 67KB