4a00cf794ff714364da9adf5ff71c33e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4a00cf794ff714364da9adf5ff71c33e_JaffaCakes118
Size

324KB
MD5

4a00cf794ff714364da9adf5ff71c33e
SHA1

0c49174b3fbb685049ec1afae084f9761bf6208d
SHA256

213398c66a0214f73750de207b9f9875ce50215dd166fb5c21530de4cec99eec
SHA512

95e4a37eb5a20147f4c79b04d87599fd95847e2d4a7b31b98522cbab9fecf508a53a48ee3ccc8b2639d3f1ed12faf4f673d0d1f9a36a0b779b757a3d6858d5c9
SSDEEP

6144:ZkIakuhuu7FV71Sjpm/weBqBmQBx4uIhdKefmhDbHB8uxcbSk:AHEu74wIeAwOt77xc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a00cf794ff714364da9adf5ff71c33e_JaffaCakes118

Files

4a00cf794ff714364da9adf5ff71c33e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

382b8b0e52e52cf99ea5041db743fc89

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalFree
LockResource
MapViewOfFile
MulDiv
MultiByteToWideChar
OpenEventW
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadFile
ResetEvent
RtlUnwind
SearchPathW
SetEvent
SetLastError
InterlockedIncrement
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrlenA
lstrlenW
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetVersionExA
GetVersion
GetUserDefaultUILanguage
GetTimeFormatA
GetTickCount
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemDefaultUILanguage
GetProcessHeap
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetFileSize
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
FreeLibrary
FlushInstructionCache
FindResourceW
FindResourceExW
FileTimeToSystemTime
FileTimeToLocalFileTime
EnumUILanguagesW
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateFileW
CreateFileMappingW
CreateEventW
SetUnhandledExceptionFilter
CloseHandle

user32

MessageBoxW
MoveWindow
MsgWaitForMultipleObjects
NotifyWinEvent
OffsetRect
OpenClipboard
PeekMessageW
PostMessageW
PostThreadMessageW
PtInRect
RedrawWindow
RegisterClassExW
ReleaseCapture
ReleaseDC
RemovePropW
ReplyMessage
ScreenToClient
SendDlgItemMessageW
SendMessageW
SetCapture
SetClassLongW
SetClipboardData
SetCursor
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetMenuItemInfoW
SetParent
SetPropW
SetRect
SetRectEmpty
SetTimer
SetWindowLongW
SetWindowPos
SetWindowTextW
SetWindowsHookExW
ShowCaret
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
TrackPopupMenu
TrackPopupMenuEx
TranslateAcceleratorW
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassA
UpdateWindow
ValidateRect
WindowFromPoint
AllowSetForegroundWindow
AppendMenuW
AttachThreadInput
BeginPaint
BringWindowToTop
CallNextHookEx
CallWindowProcW
CharNextW
CheckDlgButton
CheckMenuItem
ChildWindowFromPoint
ClientToScreen
CloseClipboard
MapWindowPoints
LoadStringW
LoadMenuW
LoadImageW
LoadIconW
LoadCursorW
KillTimer
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDlgButtonChecked
IsChild
CloseWindow
CopyRect
CreateDialogParamW
InvalidateRect
IntersectRect
InflateRect
InSendMessageEx
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowLongW
GetWindowInfo
GetWindow
GetUpdateRect
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetSubMenu
GetPropW
GetParent
GetMessagePos
GetMenuState
GetKeyState
GetFocus
GetDlgItemInt
GetDlgItem
GetDesktopWindow
GetDC
GetComboBoxInfo
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoExW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FillRect
EqualRect
EndPaint
EndDialog
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawFocusRect
DrawEdge
DispatchMessageW
DialogBoxParamW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyAcceleratorTable
DefWindowProcW
CreateWindowExW
CreatePopupMenu
LoadAcceleratorsW

ole32

CoTaskMemRealloc
CoGetInterfaceAndReleaseStream
StringFromGUID2
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoUninitialize
CoInitializeEx
CoTaskMemFree
CoTaskMemAlloc
CoMarshalInterThreadInterfaceInStream
CoCreateInstance

oleaut32

SysAllocString
SysAllocStringLen
SysFreeString
SysStringByteLen
SysStringLen
VarBstrCat
VarBstrCmp
VarUI4FromStr
VariantChangeType
VariantClear
VariantCopy
VariantInit
SysAllocStringByteLen

oleacc

LresultFromObject
CreateStdAccessibleObject

advapi32

RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW

shell32

SHGetFolderPathW
SHGetInstanceExplorer

gdi32

GetPixel
GetStockObject
GetTextColor
GetTextExtentPoint32W
GetTextExtentPointW
IntersectClipRect
LineTo
MoveToEx
PatBlt
Rectangle
SelectClipRgn
SelectObject
GetObjectW
SetBkMode
SetLayout
SetTextAlign
SetTextColor
StretchBlt
TextOutW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CombineRgn
BitBlt
GetDeviceCaps
GetCurrentObject
GetClipRgn
GetBkColor
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePen
CreatePatternBrush
SetBkColor
CreateFontIndirectW
CreateFontW

wininet

FindNextUrlCacheEntryW
GetUrlCacheEntryInfoW
HttpOpenRequestW
InternetCanonicalizeUrlW
InternetGetCookieW
InternetSetOptionW
ReadUrlCacheEntryStream
RetrieveUrlCacheEntryStreamW
UnlockUrlCacheEntryStream
DeleteUrlCacheEntryW
FindFirstUrlCacheEntryW

shlwapi

StrChrW
StrToIntW
UrlCanonicalizeW
StrRChrW
SHStrDupW
SHDeleteKeyW
SHCreateStreamOnFileW
PathUndecorateW
StrCmpW
StrChrA
StrCmpIW
PathRemoveExtensionW
PathFindFileNameW
PathFindExtensionW
PathAppendW
StrStrW
PathAddExtensionW

Exports

Exports

PL_Base64Decode
PL_Base64Encode
PL_CreateLongOptState
PL_CreateOptState
PL_DestroyOptState
PL_FPrintError
PL_GetNextOpt
PL_PrintError
PL_strcasecmp
PL_strcaserstr
PL_strcasestr
PL_strcat
PL_strcatn
PL_strchr
PL_strcmp
PL_strcpy
PL_strdup
PL_strfree
PL_strlen
PL_strncasecmp
PL_strncaserstr
PL_strncasestr
PL_strncat
PL_strnchr
PL_strncmp
PL_strncpy
PL_strncpyz
PL_strndup
PL_strnlen
PL_strnpbrk
PL_strnprbrk
PL_strnrchr
PL_strnrstr
PL_strnstr
PL_strpbrk
PL_strprbrk
PL_strrchr
PL_strrstr
PL_strstr
PL_strtok_r
libVersionPoint

Sections

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

382b8b0e52e52cf99ea5041db743fc89

Headers

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

oleacc

advapi32

shell32

gdi32

wininet

shlwapi

Exports

Exports

Sections

.text Size: 232KB - Virtual size: 232KB

.rdata Size: 48KB - Virtual size: 48KB

.data Size: 20KB - Virtual size: 1.7MB

.idata Size: 12KB - Virtual size: 12KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 232KB - Virtual size: 232KB

.rdata
Size: 48KB - Virtual size: 48KB

.data
Size: 20KB - Virtual size: 1.7MB

.idata
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 8KB - Virtual size: 8KB