3fd26b34f8c7dac70be6e90b23445d90_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3fd26b34f8c7dac70be6e90b23445d90_JaffaCakes118
Size

408KB
MD5

3fd26b34f8c7dac70be6e90b23445d90
SHA1

0c3408f4f003301cb37544ec722ea067314669d9
SHA256

f968c61f6543416d9061d43e05efa09d105ac458515bfab52a3501e7bffcd97c
SHA512

faad43d4bd49c1cbb757bebf9ecb1ae36e0f0671e4e9bb99e0574a69199641aa922508929b7bb2e31d16b911d77f9ee107398d34d6c5ab33e54a5c5c9991d44c
SSDEEP

6144:K9YSn6nQAvhSNLlzGys/wpsDz3HZXiqiEW5RvfqQ17p/wavHK:KIQAvA7z/s/ysDz3ZX819/wavHK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fd26b34f8c7dac70be6e90b23445d90_JaffaCakes118

Files

3fd26b34f8c7dac70be6e90b23445d90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee2ef2eb84d87c0052d534559339fdfd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

setsockopt
closesocket
select
connect
htons
WSAGetLastError
socket
send
recv
inet_addr
gethostname
ioctlsocket
WSAStartup
inet_ntoa
WSACleanup
gethostbyname

shlwapi

PathFileExistsA

kernel32

FindFirstFileW
FileTimeToSystemTime
MultiByteToWideChar
FreeLibrary
LoadLibraryA
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
InterlockedIncrement
InterlockedDecrement
LocalFree
FormatMessageA
LoadResource
FindResourceA
LockResource
GetModuleHandleA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
MulDiv
lstrcpynA
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
SizeofResource
GetThreadLocale
GetCPInfo
GetOEMCP
SetErrorMode
DuplicateHandle
GetCurrentProcess
FlushFileBuffers
LockFile
UnlockFile
GetVolumeInformationA
FileTimeToLocalFileTime
GetFileTime
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
HeapFree
HeapReAlloc
HeapSize
GetACP
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
CreateProcessA
lstrcpyA
GetModuleFileNameA
CloseHandle
ReleaseMutex
GetLastError
CreateMutexA
GetPrivateProfileIntA
GetFullPathNameA
lstrlenA
DeleteFileW
CreateDirectoryW
SetFileAttributesW
GetPrivateProfileStringA
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
MoveFileA
DeleteFileA
SetFileAttributesA
SetLastError
SetEndOfFile
SetFileTime
SetFilePointer
lstrcatA
AreFileApisANSI
CreateFileW
WriteFile
GetStdHandle
GetVersionExA
GetProcAddress
WideCharToMultiByte
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateDirectoryA
WritePrivateProfileStringA
SetThreadPriority
OutputDebugStringA
GetTickCount
GetFileAttributesA
FindFirstFileA
FindClose
CreateFileA
GetFileSize
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
ReadFile
CreateThread
ResumeThread
WaitForSingleObject
Sleep
MoveFileExA
CopyFileA

user32

GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadStringA
DestroyMenu
InflateRect
GetDesktopWindow
GetClassNameA
GetSysColorBrush
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
ReleaseDC
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
CharNextA
EnableWindow
GetCursorPos
PtInRect
LoadCursorA
SetCursor
GetDC
KillTimer
SetTimer
PostQuitMessage
GetWindowRect
InvalidateRect
PostMessageA
IsIconic
GetSystemMetrics
ClientToScreen
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
LoadImageA
IsWindowVisible
MessageBoxA
LoadIconA
GetParent
SendMessageA
GetDlgCtrlID
IsWindowUnicode
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
EnableMenuItem

gdi32

SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
PatBlt
DPtoLP
GetTextColor
GetBkColor
LPtoDP
DeleteDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetObjectA
GetStockObject
CreateFontA
GetTextExtentPointA
CreateDIBitmap
DeleteObject

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey

shell32

ShellExecuteA
SHFileOperationA

comctl32

ord17

oledlg

ord8

ole32

CoGetClassObject
CoTaskMemAlloc
CLSIDFromProgID
CreateStreamOnHGlobal
StgOpenStorageOnILockBytes
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CLSIDFromString

olepro32

ord253
ord251

oleaut32

SysAllocStringByteLen
VariantChangeType
VariantTimeToSystemTime
SysStringLen
SysAllocStringLen
SysFreeString
VariantCopy
VariantClear
SysAllocString

Sections

.text
Size: 256KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ee2ef2eb84d87c0052d534559339fdfd

Headers

File Characteristics

Imports

ws2_32

shlwapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 256KB - Virtual size: 252KB

.rdata Size: 48KB - Virtual size: 45KB

.data Size: 20KB - Virtual size: 38KB

.rsrc Size: 80KB - Virtual size: 80KB

.text
Size: 256KB - Virtual size: 252KB

.rdata
Size: 48KB - Virtual size: 45KB

.data
Size: 20KB - Virtual size: 38KB

.rsrc
Size: 80KB - Virtual size: 80KB