371ce993fa95513e6d40e3fabcc4ccaa_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

371ce993fa95513e6d40e3fabcc4ccaa_JaffaCakes118
Size

277KB
MD5

371ce993fa95513e6d40e3fabcc4ccaa
SHA1

a5d6c086f2e0eee34b1e4135fb6105c2c06b6472
SHA256

9ad0c610c902cc1c613bb507d1e51b2a21aee8f30f985c65cd7a118f5a517b81
SHA512

264c46dc35a16647150bc7dedb51755e95cacc1e906764d376ab86c3a997c02eb3755b50c0421d42cc829cdbe8538ec3e7996dc6a3e0fefd11eaf2489cb47e95
SSDEEP

6144:aHE+/rmwVmuBJsTKPO0KtwyX5LnXDByaFQ3j8K1V:aHAw0uBlatwELnTBo8K1V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
371ce993fa95513e6d40e3fabcc4ccaa_JaffaCakes118

Files

371ce993fa95513e6d40e3fabcc4ccaa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a31ea0aa52c98f57a652b069a4b78e1b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

comctl32

InitCommonControlsEx

kernel32

GetModuleHandleA
ExitProcess
GetCommandLineA
LocalFree
LocalAlloc
WriteFile
SetFilePointer
CreateFileA
FormatMessageA
LoadLibraryA
SetErrorMode
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
lstrlenA
ResetEvent
CloseHandle
CreateEventA
GetTickCount
OutputDebugStringA
InterlockedExchange
RaiseException
SizeofResource
LockResource
LoadResource
FindResourceA
lstrcpyA
FlushInstructionCache
GetCurrentProcess
GetProcAddress
FreeLibrary
GetCurrentThreadId
CreateProcessA
GetSystemPowerStatus
SetLastError
SetEvent
DeleteFileA
Sleep
GetLastError
InterlockedDecrement
lstrcmpiA
GetCurrentThread
InterlockedIncrement
IsDBCSLeadByte
LoadLibraryExA

user32

GetWindowLongA
SendMessageA
MoveWindow
GetWindowRect
GetClientRect
ScreenToClient
ShowWindow
GetDlgItemTextA
SetDlgItemTextA
GetDlgItem
SetWindowPos
MapWindowPoints
SystemParametersInfoA
GetWindow
GetParent
wsprintfA
DefWindowProcA
LoadImageA
GetSystemMetrics
EndDialog
RegisterWindowMessageA
IsWindow
SetWindowLongA
BringWindowToTop
SetTimer
KillTimer
SetFocus
GetClassInfoExA
LoadCursorA
DestroyWindow
MessageBeep
RegisterClassExA
DestroyMenu
LoadMenuA
CreateWindowExA
PostThreadMessageA
DialogBoxParamA
CreateDialogParamA
PostMessageA
RegisterDeviceNotificationA
UnregisterDeviceNotification
DispatchMessageA
GetMessageA
CharNextA
LoadStringA
UnregisterClassA
MessageBoxA
FindWindowA
CallWindowProcA
SetMenuItemInfoA
GetMenuItemInfoA
GetMenuItemCount
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
GetClassNameA
SetRect
RegisterClassA
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
IsIconic
MsgWaitForMultipleObjects
PostQuitMessage
PeekMessageA

advapi32

RegDeleteKeyA
RegNotifyChangeKeyValue
RegQueryValueExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
OpenThreadToken
OpenProcessToken
RegEnumKeyExA
GetTokenInformation
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSid
GetLengthSid
CopySid
SetServiceStatus
RegisterEventSourceA
ReportEventA
DeregisterEventSource
ControlService
DeleteService
CreateServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
RegQueryInfoKeyA
RegCreateKeyExA
RegDeleteValueA
RegEnumValueA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetValueExA
RegOpenKeyExA
RegCloseKey

ole32

CoInitializeSecurity
StringFromGUID2
CoTaskMemFree
CoRegisterClassObject
ProgIDFromCLSID
CoTaskMemRealloc
CoTaskMemAlloc
CoMarshalInterThreadInterfaceInStream
CLSIDFromString
CoGetInterfaceAndReleaseStream
CoUninitialize
CoInitialize
CoCreateInstance
CoRevokeClassObject

oleaut32

SysStringByteLen
VarBstrCmp
VariantInit
VariantClear
LoadRegTypeLi
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
DispCallFunc
SetErrorInfo
CreateErrorInfo
SysAllocString
SysAllocStringLen
SysStringLen
VarBstrCat
SysFreeString
SysAllocStringByteLen

msvcp80

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcr80

_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_except_handler4_common
?terminate@@YAXXZ
memmove_s
_chdrive
_chdir
_getcwd
toupper
_itoa_s
calloc
__setusermatherr
puts
strcat_s
wcsncpy_s
strcpy_s
_mbsnbcpy_s
_wcsicmp
memcmp
_resetstkoflw
malloc
_recalloc
sprintf_s
memcpy_s
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_beginthreadex
_endthreadex
strlen
atol
??2@YAPAXI@Z
memset
??_V@YAXPAX@Z
__CxxFrameHandler3
_purecall
_CxxThrowException
free
_mbsstr
??3@YAXPAX@Z
_controlfp_s
_invoke_watson
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
vsprintf_s

Exports

Exports

?COMWndProc@@YGJPAUHWND__@@IIJ@Z

Sections

.text
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a31ea0aa52c98f57a652b069a4b78e1b

Headers

File Characteristics

Imports

version

comctl32

kernel32

user32

advapi32

ole32

oleaut32

msvcp80

msvcr80

Exports

Exports

Sections

.text Size: 104KB - Virtual size: 100KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 8KB - Virtual size: 8KB

.rsrc Size: 120KB - Virtual size: 120KB

.text
Size: 104KB - Virtual size: 100KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 120KB - Virtual size: 120KB