3a6a248c261758efcae6d2f596890da2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3a6a248c261758efcae6d2f596890da2_JaffaCakes118
Size

612KB
MD5

3a6a248c261758efcae6d2f596890da2
SHA1

a17c564bfab4dde981b08c4186f0fe843a6af5e2
SHA256

3b9781e9f8bb0104324d34636036da0a03b37f52bc5c70988e7434cbdbf4588d
SHA512

a8cc658635cf79917cb838fecdb2d5527c40873e9548d5417e62459868b884cd11985401646d2b9516f6dca87a2c8dd5b6dd32e08d9179a1885ed6bbec5d8453
SSDEEP

12288:XYzWsWwNRaHe8BzIHLXd9jCRCoJ1Cg8xYOOtuc8f:XQaTBgd9jCRC7vWOwCf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a6a248c261758efcae6d2f596890da2_JaffaCakes118

Files

3a6a248c261758efcae6d2f596890da2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

924605a7c43883b945641c30be82e41f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHDeleteKeyA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

setupapi

SetupDiDestroyDeviceInfoList
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiClassGuidsFromNameA

crypt32

CertFreeCertificateContext
CertOpenSystemStoreA
CertGetCertificateContextProperty
CertRDNValueToStrA
CertFindRDNAttr
CryptDecodeObject
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore

iphlpapi

GetAdaptersInfo

aegise5

@AcStatusNumber@4
@AcAdapterGetMacAddress@8
@AcContextCopyHandle@4
@AcContextType@4
@AcIterateAdapters@4
@AcStatusRelatedContext@4
@AcAdapterGetNameA@12
@AcGlobalContextQuery@8
@AcAdapterAuthenticate@8
@AcCredentialsNumber@4
@AcAdapterQuery@8
@AcAdapterGetStatistics@8
@AcGlobalOpenContextA@4
@AcContextAttachEvent@8
@AcStatusFormatA@12
@AcGetLogErrorA@20
@AcContextRelease@4
@AcContextGetAttachedEvent@4
@AcAdapterSet8021xValues@20
@AcContextConfigWpa@8
@AcContextConfigResumption@8
@AcContextConfigTTLSCredentialsA@40
@AcContextConfigTLSCredentialsA@28
@AcContextConfigPeapCredentialsA@40
@AcContextConfigMd5CredentialsA@12
@AcContextConfigLeapCredentialsA@12
@AcAdapterAuthenticateStop@4
@AcContextConfigWpaPskAscii@8
@AcContextConfigWpaPskBinary@12
@AcIterateAdaptersNext@4

kernel32

ExitProcess
RaiseException
GetTimeZoneInformation
GetACP
TerminateProcess
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetCommandLineA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
GetLastError
WideCharToMultiByte
GetSystemDirectoryA
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
GetModuleFileNameA
Sleep
GetDateFormatA
FileTimeToSystemTime
CreateEventA
CloseHandle
CreateFileA
GetVersionExA
DeviceIoControl
SetLastError
GetCurrentProcess
WinExec
GetSystemDefaultLangID
CreateMutexA
ReleaseMutex
LockResource
LoadResource
FindResourceA
VirtualProtect
GetProcAddress
GetModuleHandleA
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetStartupInfoA
HeapFree
HeapAlloc
RtlUnwind
GetTickCount
WritePrivateProfileStringA
SetErrorMode
GetOEMCP
GetCurrentThreadId
lstrcatA
GetVersion
FreeLibrary
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
lstrlenA
GetCPInfo
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GlobalFlags
GetProcessVersion
SizeofResource
GetCurrentThread
lstrcmpA
MulDiv
GetFileTime
GetFileSize
GetFileAttributesA
FileTimeToLocalFileTime
MultiByteToWideChar
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DuplicateHandle
FormatMessageA
LocalFree
UnhandledExceptionFilter

user32

PostThreadMessageA
RegisterClipboardFormatA
InvalidateRect
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
InflateRect
GetDesktopWindow
PtInRect
GetClassNameA
GetSysColorBrush
LoadCursorA
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
SetCursor
PostQuitMessage
DestroyMenu
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
CharUpperA
GetDC
ReleaseDC
LoadStringA
wvsprintfA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
ScreenToClient
GetClientRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetParent
CopyRect
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
EnableWindow
SendMessageA
IsWindow
SetTimer
KillTimer
LoadBitmapA
UpdateWindow
IsCharAlphaNumericA
GetFocus
GetCursorPos
GetSubMenu
LoadMenuA
GetWindowRect
SetForegroundWindow
LoadIconA
IsCharAlphaA
MessageBeep
IsWindowEnabled
GetDlgItem
SetFocus
GetWindowLongA
GetAsyncKeyState
SetActiveWindow
GetActiveWindow
GetCapture
PostMessageA
ShowWindow
SetWindowPos
MapDialogRect
DestroyWindow
CreateDialogIndirectParamA
GetSystemMetrics
EndDialog
GetNextDlgTabItem
GetWindowPlacement
AdjustWindowRectEx

gdi32

SetWindowExtEx
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
Escape
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
IntersectClipRect
ExtTextOutA
ScaleWindowExtEx
DeleteDC
PatBlt
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetTextExtentPointA
BitBlt
CreateCompatibleDC
GetClipBox
CreateDIBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
CloseServiceHandle
StartServiceA
QueryServiceStatus
OpenServiceA
OpenSCManagerA
ControlService
FreeSid
EqualSid
GetTokenInformation
RegEnumKeyExA
RegEnumValueA
RegCreateKeyExA
AllocateAndInitializeSid
OpenProcessToken

shell32

Shell_NotifyIconA
ShellExecuteA

comctl32

ImageList_Create
ImageList_ReplaceIcon
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ord17
ImageList_Destroy

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CoTaskMemAlloc
CoRevokeClassObject

olepro32

ord253

oleaut32

SysStringLen
SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen

Sections

.text
Size: 352KB - Virtual size: 349KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

924605a7c43883b945641c30be82e41f

Headers

File Characteristics

Imports

shlwapi

version

setupapi

crypt32

iphlpapi

aegise5

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 352KB - Virtual size: 349KB

.rdata Size: 60KB - Virtual size: 59KB

.data Size: 36KB - Virtual size: 51KB

.rsrc Size: 160KB - Virtual size: 157KB

.text
Size: 352KB - Virtual size: 349KB

.rdata
Size: 60KB - Virtual size: 59KB

.data
Size: 36KB - Virtual size: 51KB

.rsrc
Size: 160KB - Virtual size: 157KB