44ba72b4888795bb195871748e465008_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

44ba72b4888795bb195871748e465008_JaffaCakes118
Size

1.1MB
MD5

44ba72b4888795bb195871748e465008
SHA1

85df7dffafbb6917ec6e503e4f1fa83fbf14fcce
SHA256

5e5fd3647fe6f0f148d203e0239c38c5cddd19b4ec30d58e8373614046f67795
SHA512

7d0ba12e6a2ae8357226eb187dbef0cf6ac8f1afd56f693c7cba44d75da43ad2d9c63cea55aa966e857ec31df694e450f64fb58d3e94e12cd4e547bbee4df666
SSDEEP

12288:D9DF+LSFmOrFpej9fmN7orsT6xkPzSVaP69PdPu7PqdDFkhki:hhRm4Fpw9fqorsGmW9PdVdD7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44ba72b4888795bb195871748e465008_JaffaCakes118

Files

44ba72b4888795bb195871748e465008_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de605b84d32d7ca7483a3e5554c4c9fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ereg

SetLanguage
ereg
genid

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
TerminateProcess
HeapAlloc
HeapSize
HeapFree
GetACP
GetOEMCP
GetTimeZoneInformation
HeapReAlloc
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCPInfo
GetEnvironmentStringsW
SetHandleCount
UnhandledExceptionFilter
GetFileType
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
SetCurrentDirectoryA
GetModuleHandleA
SetStdHandle
GetLocaleInfoA
CompareStringA
CompareStringW
GetLocaleInfoW
GlobalFree
LocalAlloc
LocalFree
GetModuleFileNameA
GetTempPathA
GetVersionExA
MoveFileExA
WritePrivateProfileStringA
DeleteFileA
FindClose
RemoveDirectoryA
GetPrivateProfileIntA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
CreateProcessA
WaitForSingleObject
FindResourceA
LoadResource
LockResource
GetUserDefaultLCID
OpenFile
FindFirstFileA
FindNextFileA
lstrcpyA
GetPrivateProfileStringA
GetProfileStringA
SetEnvironmentVariableA
CreateDirectoryA
RtlUnwind
GetTickCount
GlobalAddAtomA
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
GetCurrentDirectoryA
SizeofResource
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
SetLastError
CreateFileA
GetLastError
lstrcpynA
GetFileTime
GetFileSize
GetFileAttributesA
CloseHandle
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
FormatMessageA
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
MulDiv
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAlloc
GlobalLock
GlobalUnlock
IsBadWritePtr
IsBadCodePtr
GetEnvironmentStrings
GetStdHandle

user32

RegisterClipboardFormatA
CopyAcceleratorTableA
SetRect
MessageBeep
GetNextDlgGroupItem
IntersectRect
InflateRect
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
SetMenu
ReuseDDElParam
UnpackDDElParam
CharNextA
PostThreadMessageA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
BringWindowToTop
SetDlgItemTextA
GetNextDlgTabItem
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
PostMessageA
UpdateWindow
SendDlgItemMessageA
SystemParametersInfoA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
EqualRect
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
ScreenToClient
ScrollWindow
SetScrollInfo
ShowScrollBar
GetScrollPos
SetScrollPos
OffsetRect
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetMenuItemID
GetMenu
TrackPopupMenu
GetWindowPlacement
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
GetWindowRect
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
GetSysColor
GetDC
ReleaseDC
FindWindowA
GetSysColorBrush
LoadCursorA
GetDesktopWindow
ClientToScreen
PtInRect
GetClassNameA
LoadMenuA
GetSubMenu
GetCursorPos
ExitWindowsEx
IsIconic
GetSystemMetrics
DrawIcon
PostQuitMessage
LoadIconA
SendMessageA
wsprintfA
MessageBoxA
ReleaseCapture
GetTopWindow
IsWindowEnabled
SetScrollRange
MapDialogRect
EnableWindow
InvalidateRect
CopyRect
GetParent
GetClientRect
LoadBitmapA
DestroyMenu
CharUpperA
TranslateMessage
WindowFromPoint
GetMessageA
ShowOwnedPopups
ValidateRect
SetCursor
LoadStringA
DrawTextA
GrayStringA
BeginPaint
TabbedTextOutA
EndPaint
GetMenuState
GetWindowDC
GetMenuCheckMarkDimensions
IsChild
ModifyMenuA
GetCapture
DeferWindowPos
ShowWindow
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
HideCaret
UnregisterClassA

gdi32

BitBlt
CreateCompatibleDC
GetStockObject
CreatePalette
CreateDIBitmap
SelectPalette
SetTextColor
SetBkColor
CreateBitmap
DeleteDC
SaveDC
RestoreDC
SelectObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
RealizePalette
IntersectClipRect
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
LPtoDP
DPtoLP
GetTextExtentPointA
GetTextColor
GetBkColor
GetMapMode
StretchBlt
GetObjectA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryInfoKeyA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteValueA
RegSetValueExA

shell32

DragFinish
SHGetPathFromIDListA
ShellExecuteA
SHGetSpecialFolderLocation
DragQueryFileA

comctl32

ord17
ImageList_Destroy
ImageList_LoadImageA

oledlg

ord8

ole32

OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoInitialize
CoRevokeClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoGetClassObject
CoTaskMemFree
CreateILockBytesOnHGlobal

oleaut32

SysStringLen
SysAllocStringLen
SysFreeString
VariantClear
OleCreateFontIndirect
SysAllocString
VariantChangeType
SysAllocStringByteLen

Sections

.text
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 19KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 642KB - Virtual size: 642KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 195KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

de605b84d32d7ca7483a3e5554c4c9fa

Headers

File Characteristics

Imports

ereg

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

Sections

.text Size: 181KB - Virtual size: 180KB

.rdata Size: 47KB - Virtual size: 46KB

.data Size: 19KB - Virtual size: 35KB

.rsrc Size: 642KB - Virtual size: 642KB

.text Size: 195KB - Virtual size: 196KB

.text
Size: 181KB - Virtual size: 180KB

.rdata
Size: 47KB - Virtual size: 46KB

.data
Size: 19KB - Virtual size: 35KB

.rsrc
Size: 642KB - Virtual size: 642KB

.text
Size: 195KB - Virtual size: 196KB