48f671a4f39f1583e6f477e93c228f3a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

48f671a4f39f1583e6f477e93c228f3a_JaffaCakes118
Size

330KB
MD5

48f671a4f39f1583e6f477e93c228f3a
SHA1

98a662ade45298833695412f18e2ef01c2aabe97
SHA256

61a198d391c7775921471efaa8261fbb49b37b51e2b16811cd7c5126926ead47
SHA512

4699d421c21dd6edd1ac0dc4dca0b957020d948b73091aedebe60362c985edfd601924b2ec128590bc105db3a31edd8bf4bda0a18d16f2e16e9ec0537cae1419
SSDEEP

6144:LoYvaiUaE5nNJ9TCbRAjEF+3lHVKkpcXPFVeFIwj8hCtAh79:kIIaA12+3lTpcXPSuO8hl5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48f671a4f39f1583e6f477e93c228f3a_JaffaCakes118

Files

48f671a4f39f1583e6f477e93c228f3a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

55f166f3c94b77a87df7e6557ea6a225

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
memmove
memcpy
strchr
_errno
strlen
memset
malloc
_initterm
free

comdlg32

GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
GetFileTitleA
ChooseFontA
ChooseColorA

shell32

SHGetPathFromIDListA
DragFinish
DragQueryFileA
DragAcceptFiles
SHGetSpecialFolderLocation

user32

WinHelpA
CharNextA
GetMessageA
PostThreadMessageA
DestroyIcon
LoadBitmapA
CreateIconIndirect
DrawIcon
TabbedTextOutA
GetTabbedTextExtentA
CallWindowProcA
HideCaret
ShowCaret
DrawTextExA
GetWindowTextLengthA
GetWindowTextA
GetCaretPos
DrawFocusRect
LoadIconA
RegisterClipboardFormatA
GetTopWindow
RedrawWindow
GetLastActivePopup
IsRectEmpty
TrackPopupMenu
EnableMenuItem
CheckMenuItem
GetWindowDC
FindWindowA
EnumThreadWindows
IsZoomed
DialogBoxParamA
GetKeyState
GetActiveWindow
SetWindowPos
GetFocus
TranslateAcceleratorA
LoadAcceleratorsA
RegisterWindowMessageA
GetDesktopWindow
PostQuitMessage
IsDlgButtonChecked
GetForegroundWindow
WaitMessage
WindowFromPoint
GetClassLongA
GetWindow
GetDlgItem
LoadMenuA
EndDialog
CharNextW
ChildWindowFromPointEx
GetDlgCtrlID
DestroyMenu
ModifyMenuA
GetMenuItemCount
GetMenuItemID
GetClipboardOwner
SetWindowTextA
CountClipboardFormats
SetForegroundWindow
MessageBoxA
MapWindowPoints
GetCursorPos
ScreenToClient
ClipCursor
PtInRect
BringWindowToTop
GetDoubleClickTime
GetUpdateRect
GetCapture
SetTimer
SetRect
ClientToScreen
SetRectEmpty
UnionRect
GetInputState
GetParent
GetMenu
GetSubMenu
KillTimer
GetCursor
SetCursor
SetScrollPos
ScrollWindow
GetScrollInfo
SetScrollInfo
EmptyClipboard
OpenClipboard
GetClipboardData
CloseClipboard
SetClipboardData
GetPriorityClipboardFormat
BeginPaint
DrawEdge
FillRect
InflateRect
EndPaint
CreateDialogParamA
GetDlgItemTextA
SetWindowsHookExA
SetCapture
SetDlgItemTextA
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
CallNextHookEx
ReleaseCapture
UnhookWindowsHookEx
EnumWindows
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
LoadCursorA
RegisterClassExA
CreateWindowExA
GetDC
LoadStringA
ReleaseDC
IsWindowVisible
GetWindowLongA
SetWindowLongA
DefWindowProcA
GetProcessDefaultLayout
LoadImageA
GetClipboardViewer
PostMessageA
SendMessageA
GetAsyncKeyState
SetFocus
ShowWindow
GetSysColorBrush
GetSysColor
wsprintfA
DrawTextA
UpdateWindow
GetClientRect
MoveWindow
EnableWindow
SetDlgItemInt
GetDlgItemInt
GetWindowRect
DestroyWindow
UnregisterClassA
GetSystemMetrics
InvalidateRect
MessageBeep
SetCursorPos

gdi32

SelectPalette
RealizePalette
GetDIBits
CreateDCA
CreateCompatibleBitmap
BitBlt
GetSystemPaletteEntries
CreateICA
CreatePalette
GetClipBox
CreateFontA
GetStockObject
GetTextExtentPointA
GetObjectA
SelectObject
GetTextMetricsA
SetTextColor
SetBkColor
PatBlt
DeleteObject
CreateCompatibleDC
GetDeviceCaps
EndDoc
SetBkMode
AddFontResourceA
ScaleViewportExtEx
EndPage
CreateBitmap
RestoreDC
IntersectClipRect
SaveDC
CreatePen
GetTextFaceA
CreateFontIndirectA
SetViewportOrgEx
SetViewportExtEx
SetWindowExtEx
GetCharABCWidthsA
ExtTextOutA
LineTo
MoveToEx
Ellipse
SetROP2
StretchDIBits
SetStretchBltMode
ExtCreatePen
FloodFill
CreateDIBSection
CreateDIBitmap
SetTextAlign
StartDocA
SetAbortProc
StartPage
CreatePatternBrush
AbortDoc
CreateSolidBrush
SetWindowOrgEx
SetMapMode
PlayEnhMetaFile
GetPixel
Rectangle
GetEnhMetaFileHeader
DeleteDC
GetSystemPaletteUse

kernel32

GetProcAddress
LoadLibraryA
AddAtomA
FreeLibrary
GetCurrentProcess
GetLastError
lstrlenA
TlsFree
GetVersionExA
GetModuleHandleA
TlsAlloc
lstrcpyA
GetConsoleCP
GetSystemDefaultLangID
lstrcatA
OpenSemaphoreW
GetSystemDirectoryA
lstrcpynA
OpenSemaphoreA
LoadLibraryExA
HeapAlloc
InterlockedCompareExchange
LocalFree
GetModuleHandleW
LocalAlloc
ResetEvent
SetCurrentDirectoryA
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineW
GlobalFree
FormatMessageW
SetFileAttributesA
GetCurrentDirectoryA
OpenMutexW
GetTempPathA
GetSystemDefaultLCID
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetStdHandle
GetComputerNameExW
FreeEnvironmentStringsA
GetProcessHeap
CreateEventW
QueryPerformanceCounter
InterlockedDecrement
CreateEventA
FindNextFileA
CreateThread
TlsSetValue
GetComputerNameW
OpenEventW
SetEvent
FreeLibraryAndExitThread
GetOEMCP
GetSystemDefaultUILanguage
WaitForSingleObject
MultiByteToWideChar
WideCharToMultiByte
IsDBCSLeadByte
FindFirstFileA
FindClose
GetCurrentThreadId
GetUserDefaultLCID
ReadFile
PulseEvent
CreateFileA
WriteFile
DeleteFileA
CreateMutexW
lstrcmpA
OpenEventA
CreateSemaphoreA
IsDebuggerPresent
DisableThreadLibraryCalls
CloseHandle
GetModuleFileNameA
GetTickCount
InitializeCriticalSection
HeapCreate
OpenMutexA
GetConsoleOutputCP
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GlobalLock
GlobalUnlock
GetThreadLocale
GlobalReAlloc
GetUserDefaultLangID
GetLogicalDrives
GlobalAlloc

advapi32

RegCreateKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyA
RegFlushKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

msasn1

ASN1uint32_uoctets
ASN1_CloseModule
ASN1_CreateModule
ASN1char16string_free
ASN1EncSetError
ASN1DecSetError
ASN1objectidentifier_free
ASN1octetstring_free
ASN1_CloseEncoder2
ASN1_CreateEncoder
ASN1Free
ASN1_CloseDecoder
ASN1_CreateDecoder
ASN1_FreeEncoded
ASN1_CloseEncoder
ASN1_Encode
ASN1_Decode
ASN1_FreeDecoded

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 208KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55f166f3c94b77a87df7e6557ea6a225

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

comdlg32

shell32

user32

gdi32

kernel32

advapi32

msasn1

Sections

.text Size: 84KB - Virtual size: 84KB

.data Size: 208KB - Virtual size: 253KB

.bss Size: - Virtual size: 30KB

.tls Size: 2KB - Virtual size: 1KB

.rsrc Size: 30KB - Virtual size: 30KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 84KB - Virtual size: 84KB

.data
Size: 208KB - Virtual size: 253KB

.bss
Size: - Virtual size: 30KB

.tls
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 30KB - Virtual size: 30KB

.reloc
Size: 4KB - Virtual size: 3KB