44155ccb61a8b53a2f6f9650edd810eb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

44155ccb61a8b53a2f6f9650edd810eb_JaffaCakes118
Size

360KB
MD5

44155ccb61a8b53a2f6f9650edd810eb
SHA1

7ab363fc23676811780d0c33b23924afd0fdd4fc
SHA256

b0dd8e734834185b072e543ceec4ecb3203298ad7c5346811f42ee334f95beb1
SHA512

db7b68be79eee37ed34de011b570672610b916d3efd80222b64b6baca289f1db9540097facdc791d096f269ad61e1f72a9c87372c6f3e66ff749820071e2254a
SSDEEP

6144:b3qMCGoQlKVqXeZwM9BMJKi1fitvXx7kiE3qIlsAEbxwdajn0cm4J0222U222G2v:bzoQlKVquf92JKWi/7jqqIlfEwy0h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44155ccb61a8b53a2f6f9650edd810eb_JaffaCakes118

Files

44155ccb61a8b53a2f6f9650edd810eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

230318ab5b5aef04318744832c4d212c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\ool\etgse\ourk.pdb

Imports

wininet

InternetGetLastResponseInfoA
GopherOpenFileW
FtpGetFileW
InternetTimeFromSystemTimeW
ShowSecurityInfo
FindFirstUrlCacheEntryA
InternetInitializeAutoProxyDll

gdi32

FloodFill
AbortPath
CombineTransform
CreateEnhMetaFileA
SetMetaRgn
GetCharABCWidthsFloatA
GetTextMetricsA
SetMagicColors
PtInRegion
GetColorSpace
DrawEscape
StretchDIBits
FillRgn
ExtCreatePen

comctl32

ImageList_Read
ImageList_Replace
CreateStatusWindow
InitCommonControlsEx
ImageList_DrawEx
CreateToolbarEx
CreateUpDownControl
MakeDragList
ImageList_LoadImage
ImageList_Draw
ImageList_LoadImageW
ImageList_GetIcon

comdlg32

PageSetupDlgW

kernel32

HeapAlloc
VirtualAlloc
GetCompressedFileSizeW
WideCharToMultiByte
GetCommandLineA
SetEnvironmentVariableA
SetLastError
GetPrivateProfileSectionW
GetCurrentThreadId
LocalLock
GetProcessAffinityMask
WaitForSingleObject
ExpandEnvironmentStringsW
CreateNamedPipeW
LCMapStringW
HeapDestroy
CloseHandle
SetEnvironmentVariableW
InterlockedDecrement
TerminateProcess
RemoveDirectoryA
GetLocalTime
GetCPInfo
lstrcmpiA
SystemTimeToFileTime
GetProcAddress
HeapCreate
GetTimeZoneInformation
LocalReAlloc
LCMapStringA
GetStringTypeA
GetFileType
GetEnvironmentStringsW
QueryPerformanceCounter
VirtualFree
GetStringTypeW
LoadLibraryA
SetFileAttributesW
SetSystemTime
MultiByteToWideChar
FlushFileBuffers
InterlockedExchange
lstrcpyn
GetStartupInfoW
TlsGetValue
GetTempPathA
GetLocaleInfoA
HeapReAlloc
GetStartupInfoA
TlsAlloc
EnumResourceLanguagesA
IsValidCodePage
OutputDebugStringA
ReadFile
WritePrivateProfileSectionW
IsValidLocale
FreeEnvironmentStringsA
SetVolumeLabelW
LockFile
CreateDirectoryExW
SetHandleCount
GetEnvironmentStrings
IsDebuggerPresent
OpenMutexA
EnumSystemLocalesA
ReadConsoleOutputCharacterA
HeapSize
GetTickCount
SetEndOfFile
SetThreadLocale
GetSystemTimeAsFileTime
EnterCriticalSection
GetCurrencyFormatW
GetCurrentThread
CompareStringW
TlsFree
SetConsoleCursorPosition
GetPrivateProfileIntA
OpenSemaphoreA
GetProfileStringA
SetUnhandledExceptionFilter
EnumCalendarInfoExA
GetVersionExW
SetConsoleCursorInfo
SetFileTime
TlsSetValue
CompareStringA
InitializeCriticalSection
ReleaseSemaphore
HeapFree
GetCurrentProcessId
GetModuleHandleA
ReadConsoleW
GetCommandLineW
CreateProcessA
WriteFile
InterlockedIncrement
GetVersion
DeleteCriticalSection
SetComputerNameW
GetShortPathNameW
GetConsoleCP
CreateMutexA
SetThreadIdealProcessor
WriteFileEx
SetStdHandle
GetNumberFormatW
GetStringTypeExW
GetStdHandle
DebugBreak
FindResourceA
GetCurrentProcess
GlobalFix
LeaveCriticalSection
FreeEnvironmentStringsW
EnumResourceTypesW
GetSystemTime
GetMailslotInfo
VirtualQuery
ExitProcess
RtlMoveMemory
SetConsoleTitleW
GetFullPathNameW
GetThreadPriorityBoost
SetFilePointer
GetModuleFileNameW
ResetEvent
OpenEventW
UnhandledExceptionFilter
GlobalAddAtomA
CreateWaitableTimerA
RtlUnwind
GetLastError
CreateWaitableTimerW
IsBadWritePtr
GetModuleFileNameA

user32

BeginDeferWindowPos
DrawTextExA
UnloadKeyboardLayout
GetSubMenu
ShowWindow
DefWindowProcA
SetWindowLongW
ScrollWindowEx
MessageBoxA
GetNextDlgGroupItem
GetCursorInfo
InvalidateRgn
CloseClipboard
DdeGetLastError
SystemParametersInfoW
GetScrollRange
TabbedTextOutA
OemToCharA
CharLowerBuffW
BroadcastSystemMessageA
SetScrollRange
ChildWindowFromPointEx
EndPaint
ReplyMessage
GetAltTabInfo
PtInRect
OpenClipboard
MapVirtualKeyA
RegisterClassExA
EnumDisplaySettingsA
CheckDlgButton
IsCharUpperA
RegisterHotKey
RegisterClassA
CreateWindowExA
CreateWindowExW
DdeReconnect
CloseWindowStation
DestroyWindow
GetClassNameA
wsprintfW
CopyAcceleratorTableA
AdjustWindowRectEx
DrawStateW
LoadStringA
SendNotifyMessageW
SetUserObjectInformationW

Sections

.text
Size: 120KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

230318ab5b5aef04318744832c4d212c

Headers

File Characteristics

PDB Paths

Imports

wininet

gdi32

comctl32

comdlg32

kernel32

user32

Sections

.text Size: 120KB - Virtual size: 117KB

.rdata Size: 72KB - Virtual size: 70KB

.data Size: 92KB - Virtual size: 98KB

.rsrc Size: 72KB - Virtual size: 68KB

.text
Size: 120KB - Virtual size: 117KB

.rdata
Size: 72KB - Virtual size: 70KB

.data
Size: 92KB - Virtual size: 98KB

.rsrc
Size: 72KB - Virtual size: 68KB