447593a41b860380f83c36371d278cc2_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

447593a41b860380f83c36371d278cc2_JaffaCakes118
Size

536KB
MD5

447593a41b860380f83c36371d278cc2
SHA1

165feb4613629af803bbdf34978b42d6a2917ee0
SHA256

122f26afbd6133cdd395c49fb3f83c4691a653789ee9ef9b6cb8b0a3fd5ddf92
SHA512

7c0d2f53ba327597c5902d661ecebfc3c12e78b2c1791a75e8c07ee87a88e25d3b84e1a93f95888e1f221748f11e4ab0c8dbb675d6b33eac8563ac0f4471bb3f
SSDEEP

12288:TlRVg3CP6ylqbH7Bs2lnqf9LMDTdBfVEz6rsRcjIUAsIvR:ZRVg3AadzyqDTdBprsR/IIvR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
447593a41b860380f83c36371d278cc2_JaffaCakes118

Files

447593a41b860380f83c36371d278cc2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fecd8c606bc7ae8fb936838e78eb9a02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\woeonnesp.pdb

Imports

comdlg32

ChooseColorW
FindTextA
GetSaveFileNameA

comctl32

MakeDragList
ImageList_Copy
ImageList_DragLeave
InitCommonControlsEx
ImageList_SetImageCount
CreateStatusWindowA
ImageList_EndDrag
CreateStatusWindowW
ImageList_Draw
ImageList_SetIconSize
ImageList_Add
CreatePropertySheetPageW
ImageList_SetFlags
CreateToolbar
_TrackMouseEvent
ImageList_DragEnter
DrawStatusTextA
ImageList_ReplaceIcon
ImageList_DrawEx
ImageList_GetIconSize
ImageList_Read
ImageList_GetImageCount
ImageList_Replace
DestroyPropertySheetPage

user32

GrayStringW
MessageBoxW
ActivateKeyboardLayout
CallMsgFilter
CreateDialogParamW
DrawStateW
SendNotifyMessageW
GetForegroundWindow
DrawFrameControl
InflateRect
IsWindowEnabled
GetKeyboardType
CreateWindowExW
GetKeyboardLayoutNameW
DestroyWindow
ChangeMenuW
RegisterClassExA
ShowWindow
RegisterClassA
SystemParametersInfoW
MessageBoxA
DefWindowProcA
GetDlgItemInt
EnableWindow
InSendMessageEx
WinHelpA
WaitMessage
GetUserObjectSecurity
GetClipboardViewer

kernel32

InterlockedIncrement
GetCurrentProcessId
CreateNamedPipeA
RemoveDirectoryA
ReadConsoleOutputCharacterA
FileTimeToSystemTime
SetHandleCount
InterlockedExchange
GetStringTypeA
GetStringTypeW
GetModuleHandleA
SetConsoleOutputCP
CreateMutexW
FreeEnvironmentStringsW
GetProcAddress
GetStdHandle
InitializeCriticalSection
QueryPerformanceCounter
MoveFileExA
SetFileAttributesA
ReadFileEx
OpenWaitableTimerA
LockFileEx
FreeEnvironmentStringsA
FreeResource
VirtualQuery
lstrcpy
CreatePipe
SetLastError
GetThreadContext
GetCurrentThread
GetFileType
GetModuleFileNameW
ReadConsoleA
VirtualAlloc
FillConsoleOutputAttribute
SetThreadLocale
GlobalAddAtomW
HeapDestroy
FindNextChangeNotification
CompareStringW
SetConsoleCursorInfo
CloseHandle
VirtualQueryEx
TerminateProcess
EnterCriticalSection
GetProfileSectionW
GetEnvironmentStrings
GetComputerNameA
SetEnvironmentVariableA
LCMapStringA
GetLongPathNameA
FindAtomA
FileTimeToLocalFileTime
TlsSetValue
GetDiskFreeSpaceExA
CompareFileTime
OutputDebugStringA
IsBadWritePtr
LeaveCriticalSection
WriteProfileSectionA
GetEnvironmentStringsW
LoadLibraryA
CompareStringA
GetShortPathNameW
FlushFileBuffers
GetModuleFileNameA
GetDateFormatW
CreateDirectoryExA
AddAtomA
EnumTimeFormatsW
RtlUnwind
LCMapStringW
GetSystemTime
GetCurrentProcess
SetStdHandle
InterlockedDecrement
GetThreadTimes
WriteFile
GetExitCodeProcess
HeapAlloc
OpenMutexA
ContinueDebugEvent
GetPrivateProfileSectionA
LockResource
GetStartupInfoW
ReadFile
SetThreadAffinityMask
HeapCreate
MapViewOfFileEx
FindNextFileW
FlushInstructionCache
HeapFree
GetPrivateProfileIntW
UnhandledExceptionFilter
GlobalUnlock
ExitProcess
EnumResourceTypesW
TlsGetValue
CreateMutexA
TlsFree
WaitNamedPipeA
VirtualFree
SleepEx
LoadModule
GetTickCount
GetCommandLineA
GetVersion
HeapReAlloc
TransactNamedPipe
GetTimeZoneInformation
GetSystemTimeAsFileTime
SetFilePointer
WaitForSingleObjectEx
CreateProcessW
WideCharToMultiByte
FindAtomW
GetConsoleCursorInfo
SetComputerNameA
DeleteCriticalSection
GetLastError
LocalLock
RemoveDirectoryW
TlsAlloc
WriteConsoleW
GetDriveTypeW
ConvertDefaultLocale
GetCurrentThreadId
GetLocalTime
GetCommandLineW
EnumSystemCodePagesA
MultiByteToWideChar
GetStartupInfoA
GetCPInfo

wininet

InternetHangUp
InternetGetConnectedStateEx
RetrieveUrlCacheEntryStreamW
SetUrlCacheGroupAttributeA

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fecd8c606bc7ae8fb936838e78eb9a02

Headers

File Characteristics

PDB Paths

Imports

comdlg32

comctl32

user32

kernel32

wininet

Sections

.text Size: 136KB - Virtual size: 135KB

.rdata Size: 244KB - Virtual size: 243KB

.data Size: 112KB - Virtual size: 130KB

.rsrc Size: 40KB - Virtual size: 36KB

.text
Size: 136KB - Virtual size: 135KB

.rdata
Size: 244KB - Virtual size: 243KB

.data
Size: 112KB - Virtual size: 130KB

.rsrc
Size: 40KB - Virtual size: 36KB