3853f7523181b1d6531e8892f5e6dfac_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3853f7523181b1d6531e8892f5e6dfac_JaffaCakes118
Size

228KB
MD5

3853f7523181b1d6531e8892f5e6dfac
SHA1

e34ec10078dfbaa3cc58ae92a7bda49d13f86840
SHA256

96e0ceb9293b1f1442f3331f9c6a25fb79c2df24381c494c8afaf0b95de7974f
SHA512

f8b1abd058392dc32b10c17000b2110f82955d54e9710f6f9e5fe1d569d788608afd5d69608d3b39344724caa0ae3ee58f495ea035ab3f3dc4511b5f30e0a004
SSDEEP

3072:8ZWweNqHyUEUjn2Utnc9YrWNZ5rDEJadu1hmOMyvdueFR3Wd6QzbqgogAQnfGT:89eSEUj+Yro5QHPweKbn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3853f7523181b1d6531e8892f5e6dfac_JaffaCakes118

Files

3853f7523181b1d6531e8892f5e6dfac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17a352cb2f9cf34e9ed2496ea43efa24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetErrorMode
GetFileTime
RtlUnwind
GetStartupInfoA
GetCommandLineA
RaiseException
GetTickCount
ExitProcess
TerminateProcess
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapFree
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
FindNextFileA
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetCurrentDirectoryA
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileSize
GetFileAttributesA
GetCPInfo
GetOEMCP
TlsGetValue
GetProcessVersion
GlobalFlags
EnterCriticalSection
LocalReAlloc
TlsSetValue
TlsFree
GlobalReAlloc
LeaveCriticalSection
TlsAlloc
GlobalHandle
DeleteCriticalSection
FileTimeToLocalFileTime
InitializeCriticalSection
LocalAlloc
LocalFree
FileTimeToSystemTime
FormatMessageA
InterlockedIncrement
WideCharToMultiByte
InterlockedDecrement
GetThreadLocale
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
WritePrivateProfileStringA
GetVersionExA
GetLogicalDrives
GetDriveTypeA
RemoveDirectoryA
CreateDirectoryA
GetLocalTime
DeleteFileA
CopyFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
MultiByteToWideChar
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
lstrcpynA
lstrlenA
CloseHandle
GetModuleFileNameA
GlobalAlloc
lstrcmpA
GetCurrentThread
GlobalFree
GlobalLock
GlobalUnlock
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
VirtualFree
SetUnhandledExceptionFilter
GetEnvironmentStringsW
SetHandleCount
SetFileAttributesA

user32

PtInRect
LoadStringA
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
InvalidateRect
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
DestroyMenu
GetDesktopWindow
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
ShowOwnedPopups
PostQuitMessage
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
GetNextDlgTabItem
IsWindowEnabled
GetClassNameA
GetSysColorBrush
SetWindowTextA
IsDialogMessageA
LoadIconA
PostMessageA
UpdateWindow
SendDlgItemMessageA
BringWindowToTop
GetSysColor
PeekMessageA
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetParent
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
CharUpperA
ShowWindow
MoveWindow
MapWindowPoints
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SendMessageA
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
SetTimer
EnableWindow
LoadCursorA
GetFocus
DispatchMessageA
EnableMenuItem
UnregisterClassA

gdi32

DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetViewportExtEx
SetMapMode
SelectObject
RestoreDC
GetStockObject
DeleteDC
SaveDC
GetObjectA
SetBkColor
CreateBitmap
SetTextColor
GetClipBox

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA

shell32

DragFinish
DragQueryFileA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
CoRegisterMessageFilter
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize

olepro32

ord253

oleaut32

SysFreeString
SysStringLen
SysAllocStringByteLen
VariantChangeType
SysAllocString
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ifc
Size: 1B - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

17a352cb2f9cf34e9ed2496ea43efa24

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 144KB - Virtual size: 140KB

.rdata Size: 40KB - Virtual size: 37KB

.data Size: 20KB - Virtual size: 31KB

.rsrc Size: 20KB - Virtual size: 19KB

.ifc Size: 1B - Virtual size: 64KB

.text
Size: 144KB - Virtual size: 140KB

.rdata
Size: 40KB - Virtual size: 37KB

.data
Size: 20KB - Virtual size: 31KB

.rsrc
Size: 20KB - Virtual size: 19KB

.ifc
Size: 1B - Virtual size: 64KB