478a8f804599809c22fb5731900d96b5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

478a8f804599809c22fb5731900d96b5_JaffaCakes118
Size

520KB
MD5

478a8f804599809c22fb5731900d96b5
SHA1

3274c2c549ecb2a203a0304f2099f318507ac5e1
SHA256

4efc9e9021ef1b0f67f27ff5fd96f33882f5e1f6cbe2e0ff29a3040f2a270f9f
SHA512

b6778bbb0a6af5f34701f4efcd256b49fc32549c27e4c5667fde5759990e029cb08f0849e598527315f69f7bc9a401dda2d82b3b4e22370186a0fb00115a765a
SSDEEP

6144:dNHRYC6yVqMSJ/zQHnXAz0IiYTT/8DJNwEyhq:3HVqt/zQHXKFTiJwhq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
478a8f804599809c22fb5731900d96b5_JaffaCakes118

Files

478a8f804599809c22fb5731900d96b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a67400b5636f3000352fec52f66a096

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockFile
UnlockFile
DuplicateHandle
GetFullPathNameA
GetCPInfo
GetOEMCP
SetErrorMode
GetTickCount
GetFileAttributesA
GetFileTime
HeapReAlloc
VirtualProtect
VirtualQuery
GetCommandLineA
GetStartupInfoA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetSystemTimeAsFileTime
RaiseException
ExitProcess
ExitThread
CreateThread
HeapSize
FlushFileBuffers
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetThreadLocale
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
WritePrivateProfileStringA
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GlobalAddAtomA
CreateEventA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
InterlockedDecrement
GetModuleFileNameW
SetLastError
GlobalUnlock
FormatMessageA
MulDiv
FreeResource
GlobalFree
GlobalDeleteAtom
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GlobalLock
lstrcmpA
GlobalAlloc
VirtualFree
VirtualAlloc
GetStdHandle
SetEndOfFile
WriteFile
ReadFile
SetFilePointer
GetFileSize
CreateFileA
FreeLibrary
Module32First
Module32Next
GetCurrentThread
CreateProcessA
RemoveDirectoryA
LoadLibraryA
GetProcAddress
GetSystemInfo
GetCurrentProcess
GetVersionExA
GetVolumeInformationA
LocalAlloc
LocalFree
GetModuleHandleA
GetModuleFileNameA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
GetProcessHeap
HeapAlloc
HeapFree
CreateDirectoryA
FindFirstFileA
SetFileAttributesA
DeleteFileA
CopyFileA
FindResourceA
WaitForSingleObject
GetPrivateProfileStringA
FindClose
LockResource
GetPrivateProfileIntA
GetCurrentProcessId
SizeofResource
LoadResource
CompareStringW
GetLastError
GetVersion
CompareStringA
lstrlenA
InterlockedExchange
MultiByteToWideChar
WideCharToMultiByte
Sleep
Process32Next
CloseHandle
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
HeapDestroy
OutputDebugStringA

user32

PostThreadMessageA
MessageBeep
GetNextDlgGroupItem
ReleaseCapture
SetCapture
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableA
CharNextA
LoadCursorA
GetSysColorBrush
MoveWindow
SetWindowTextA
IsDialogMessageA
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
GetWindowDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
UnhookWindowsHookEx
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindow
SetWindowContextHelpId
MapDialogRect
PostMessageA
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
ModifyMenuA
RegisterClipboardFormatA
DestroyMenu
GetMenuState
EnableMenuItem
UnregisterClassA
CheckMenuItem
SetWindowPos
GetWindowPlacement
ShowWindow
GetForegroundWindow
AttachThreadInput
SetForegroundWindow
EnumWindows
IsWindowVisible
GetWindowThreadProcessId
CharUpperA
SetCursor
RedrawWindow
InvalidateRect
GetParent
GetSysColor
wsprintfA
EnableWindow
LoadBitmapA
SendMessageA
UpdateWindow
FindWindowA
DrawIcon
GetClientRect
GetSystemMetrics
KillTimer
IsIconic
ReleaseDC
SetTimer
GetWindowRect
LoadIconA
GetMenu

gdi32

CreateRectRgnIndirect
GetBkColor
GetTextColor
GetRgnBox
GetWindowExtEx
GetMapMode
GetViewportExtEx
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
BitBlt
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
CreateBitmap
DeleteObject
CreateFontIndirectA
GetStockObject
CreateCompatibleDC
GetObjectA
CreateSolidBrush

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegQueryValueA
RegEnumKeyA
RegOpenKeyA
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA

shell32

ShellExecuteA

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
StrFormatByteSizeA
PathIsUNCA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleUninitialize
OleIsCurrentClipboard
OleFlushClipboard
CoFreeUnusedLibraries
CoRevokeClassObject
CoRegisterMessageFilter

oleaut32

VariantCopy
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysAllocStringByteLen
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString

urlmon

URLDownloadToFileA

wininet

DeleteUrlCacheEntry

Sections

.text
Size: 252KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7a67400b5636f3000352fec52f66a096

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

wininet

Sections

.text Size: 252KB - Virtual size: 250KB

.rdata Size: 60KB - Virtual size: 59KB

.data Size: 12KB - Virtual size: 46KB

.rsrc Size: 192KB - Virtual size: 190KB

.text
Size: 252KB - Virtual size: 250KB

.rdata
Size: 60KB - Virtual size: 59KB

.data
Size: 12KB - Virtual size: 46KB

.rsrc
Size: 192KB - Virtual size: 190KB