465bb236b425013ca0a8b79078104f92_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

465bb236b425013ca0a8b79078104f92_JaffaCakes118
Size

432KB
MD5

465bb236b425013ca0a8b79078104f92
SHA1

2857b28799331d2d7d7486be087701d91b29e61b
SHA256

4cafa843777abcf09242a484d726e756d535a3e7354af59380435454f739a451
SHA512

2950c925800fa5c1cc017e64e45fc64722332b0024a07a211721f705e0c4a46eae6614d36dbb1ed204f66396201ed490e6b82679fe783ce2eef00e4a0ce9b5a5
SSDEEP

6144:tSBq6T+QPjSxQg6IrnKNtmZQwpMDQoFgewJD2rG7Ku2lKx7vDVXAhX:g6QPjJPIDKnrCboDwMra6Kx9X0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
465bb236b425013ca0a8b79078104f92_JaffaCakes118

Files

465bb236b425013ca0a8b79078104f92_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43ae10865a863fa8a1011551b89d3adf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RaiseException
HeapAlloc
GetTimeZoneInformation
GetACP
HeapFree
TerminateProcess
ExitProcess
RtlUnwind
GetStartupInfoA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCommandLineA
HeapReAlloc
GetFileType
HeapSize
LCMapStringW
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
LCMapStringA
SetHandleCount
GetVersion
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStdHandle
GetCPInfo
FindFirstFileA
FindNextFileA
FindClose
GetVersionExA
SetFileAttributesA
DeleteFileA
CopyFileA
GetLastError
FormatMessageA
LocalFree
CreateDirectoryA
lstrcmpA
lstrcpyA
lstrlenA
SetCurrentDirectoryA
GetCurrentDirectoryA
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
SizeofResource
GetOEMCP
SetErrorMode
GetProcessVersion
GlobalFlags
TlsSetValue
TlsGetValue
LocalReAlloc
TlsAlloc
GlobalReAlloc
TlsFree
LeaveCriticalSection
LocalAlloc
EnterCriticalSection
MulDiv
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThread
GetFileSize
GetFileTime
FileTimeToSystemTime
GetFileAttributesA
FileTimeToLocalFileTime
LockResource
FindResourceA
LoadResource
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
SetLastError
lstrcmpiA
GlobalFree
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
LockFile
SetEndOfFile
UnlockFile
SetFilePointer
CloseHandle
FlushFileBuffers
CreateFileA
WriteFile
ReadFile
WideCharToMultiByte
GetCurrentProcess
DuplicateHandle
GetPrivateProfileSectionA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
CreateProcessA
MultiByteToWideChar
GetPrivateProfileStringA
GetProcAddress
FreeLibrary
GetTempPathA
GetPrivateProfileIntA
Sleep
MoveFileExA
GetModuleFileNameA
WritePrivateProfileStringA
IsBadReadPtr
RemoveDirectoryA
IsBadCodePtr
HeapDestroy
HeapCreate
GetProfileStringA

user32

SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
ShowWindow
LoadStringA
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
DestroyMenu
InflateRect
ClientToScreen
SetCursor
PostQuitMessage
EndDialog
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetMessageA
GetActiveWindow
ValidateRect
GetCursorPos
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
GetFocus
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
IsWindowVisible
GetWindowDC
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
CharUpperA
RegisterWindowMessageA
EnableWindow
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
SetForegroundWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawTextA
GrayStringA
BeginPaint
TabbedTextOutA
EndPaint
DrawIcon
GetDC
ReleaseDC
LoadImageA
InvalidateRect
PostMessageA
DestroyIcon
LoadIconA
MessageBoxA
SendMessageA
wsprintfA
GetSubMenu
GetMenuItemCount
UnregisterClassA
IsWindowUnicode
CharNextA
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret

gdi32

GetStockObject
GetClipBox
RealizePalette
SetBkColor
GetObjectA
SetTextColor
DeleteDC
CreateBitmap
RestoreDC
SelectObject
SaveDC
SetBkMode
SelectPalette
SetStretchBltMode
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
IntersectClipRect
DeleteObject
GetDIBits
CreateSolidBrush
PtVisible
TextOutA
ExtTextOutA
RectVisible
PatBlt
Escape
CreateDIBitmap
GetTextExtentPointA
CreateHalftonePalette
BitBlt
GetStretchBltMode
CreateCompatibleDC
CreatePalette
GetDeviceCaps
StretchDIBits

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteValueA
RegQueryValueExA

shell32

ShellExecuteExA
SHChangeNotify

comctl32

ord17

ole32

CoUninitialize
CoInitialize
CoCreateInstance

Sections

.text
Size: 172KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43ae10865a863fa8a1011551b89d3adf

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

Sections

.text Size: 172KB - Virtual size: 170KB

.rdata Size: 40KB - Virtual size: 38KB

.data Size: 12KB - Virtual size: 28KB

.rsrc Size: 52KB - Virtual size: 49KB

.text
Size: 172KB - Virtual size: 170KB

.rdata
Size: 40KB - Virtual size: 38KB

.data
Size: 12KB - Virtual size: 28KB

.rsrc
Size: 52KB - Virtual size: 49KB