38724cb35fbd11b784e3627085a79e3b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

38724cb35fbd11b784e3627085a79e3b_JaffaCakes118
Size

301KB
MD5

38724cb35fbd11b784e3627085a79e3b
SHA1

9f64e8385f5b3c79e37d9cde37a59eb7e2bfb9c0
SHA256

5bceaf236baa0dceeddcfacf24e5f11a48c9f0ecc9c1a98b14fa56d4f52ec82d
SHA512

e5586323d26735a3792ef9892db1888b04b86b1decd5f7060e8bac4e5a07afacc0e14f0133363c04f2bdc177f24439ad2fa7b1a15f005a0bef8ca29a2b99111b
SSDEEP

6144:HvipXAggjwL8pKl4xYVdcC37TFxS4LbD4oYLG57Z76VOf7U0x:K1AggjwLD+C77TDKGoG7U0x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38724cb35fbd11b784e3627085a79e3b_JaffaCakes118

Files

38724cb35fbd11b784e3627085a79e3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87749002dbff8a209ab80f9a00303b42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetStartupInfoA
RtlUnwind
HeapFree
ExitProcess
HeapAlloc
TerminateProcess
GetTickCount
HeapSize
GetTimeZoneInformation
RaiseException
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
SetErrorMode
GetEnvironmentStringsW
SetHandleCount
HeapReAlloc
GetACP
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetEnvironmentStrings
GetProcessVersion
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetStringTypeExA
GetFileSize
GetShortPathNameA
FindClose
GetVolumeInformationA
FindFirstFileA
SetEndOfFile
DeleteFileA
MoveFileA
FlushFileBuffers
UnlockFile
LockFile
ReadFile
SetFilePointer
WriteFile
DuplicateHandle
CreateFileA
GetCurrentProcess
GetThreadLocale
GetOEMCP
GetCPInfo
GetStdHandle
GetCurrentDirectoryA
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SetLastError
GlobalFlags
MulDiv
GlobalSize
GlobalReAlloc
FormatMessageA
LocalFree
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
lstrcpynA
GetFileAttributesA
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalAddAtomA
CloseHandle
SetUnhandledExceptionFilter
GetStringTypeA
GetFileType
HeapDestroy
LoadResource

user32

GetMenuStringA
GetSysColorBrush
DestroyIcon
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetDC
ReleaseDC
ClientToScreen
PtInRect
GetClassNameA
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
DestroyMenu
GetDesktopWindow
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
InvalidateRect
LoadIconA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
GetTopWindow
IsChild
GetCapture
LoadStringA
LoadCursorA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
DrawTextA
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
OffsetRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
MapDialogRect
GetWindow
SetWindowContextHelpId
UnhookWindowsHookEx
wsprintfA
SetFocus
ShowWindow
SetWindowPos
MoveWindow
SetWindowLongA
GetDlgCtrlID
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetMessageA
TranslateMessage
DispatchMessageA
DeleteMenu
InsertMenuA
GrayStringA
GetClassInfoA
WinHelpA
GetMessagePos
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
MessageBoxA
SetCursor
ShowOwnedPopups
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
SendMessageA
PostMessageA
PostQuitMessage
EnableWindow
UpdateWindow
GetMessageTime
UnregisterClassA

gdi32

GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
ScaleWindowExtEx
SetViewportExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
SetMapMode
SetViewportOrgEx
RestoreDC
SaveDC
DeleteDC
GetStockObject
SelectObject
GetDeviceCaps
DeleteObject
SetBkColor
SetTextColor
GetObjectA
GetClipBox
CreateBitmap
SetWindowExtEx

comdlg32

GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
GetFileSecurityA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
RegCreateKeyA
RegSetValueA

shell32

SHGetFileInfoA
ExtractIconA
DragQueryFileA
DragFinish

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
CoRegisterMessageFilter
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoUninitialize
CoInitialize
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
OleInitialize

olepro32

ord253

oleaut32

SysStringLen
SafeArrayGetDim
VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayUnaccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

Sections

.text
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

87749002dbff8a209ab80f9a00303b42

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 184KB - Virtual size: 180KB

.rdata Size: 56KB - Virtual size: 52KB

.data Size: 12KB - Virtual size: 22KB

.rsrc Size: 45KB - Virtual size: 48KB

.text
Size: 184KB - Virtual size: 180KB

.rdata
Size: 56KB - Virtual size: 52KB

.data
Size: 12KB - Virtual size: 22KB

.rsrc
Size: 45KB - Virtual size: 48KB