4a29f4bd091056147791b37f8972e39f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4a29f4bd091056147791b37f8972e39f_JaffaCakes118
Size

45KB
MD5

4a29f4bd091056147791b37f8972e39f
SHA1

52f662ffe14c2bee6ba27f28eabe5692cb03c87c
SHA256

c6f162e1175805e8a1d30b37995fc8e3f54f6feb1f37aa09752715f4ff71d5c8
SHA512

63e4978fadecddd7c903d80de482efe629f641ca8a6792b6da394c4b1eaef6385e1d33235a90a97fc271bbeb6add5f4d325a90ce0bfacf6e738c50d0cadaf5c3
SSDEEP

768:gnzSzDwo0pQupVwvzhtqedEcJJXJ4hl65sZsIqe1UoC:gnQDj0Wup+zOGBHXp5+qwbC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a29f4bd091056147791b37f8972e39f_JaffaCakes118

Files

4a29f4bd091056147791b37f8972e39f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1f18e290f5674982db643c6b8e89f0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetViewportExtEx
GetBkColor
CreateHatchBrush
GetBkMode
SetAbortProc
Escape
MoveToEx
SetViewportOrgEx
ExcludeClipRect
DPtoLP
SetArcDirection
SetStretchBltMode
SetTextJustification
GetROP2
GetWindowOrgEx
GetTextMetricsW
DeleteDC
GetClipBox
EnumMetaFile
IntersectClipRect
SetBrushOrgEx
CreatePatternBrush
PolyDraw
CreatePen
CreateSolidBrush
UnrealizeObject
SaveDC
LPtoDP
GetTextColor
SetPolyFillMode
CreateFontIndirectW
OffsetRgn
GetStockObject
SetColorAdjustment
CombineRgn
CloseMetaFile
PatBlt
GetCharWidthW
CopyMetaFileW
CreateCompatibleBitmap
SetTextCharacterExtra
StretchDIBits
GetPixel
GetNearestColor
SetTextAlign
GetTextExtentPoint32A
GetViewportOrgEx
ScaleWindowExtEx
SelectPalette
CreateCompatibleDC
GetObjectW
OffsetWindowOrgEx
AbortDoc
SelectObject
PolylineTo
SetROP2
GetStretchBltMode
GetDeviceCaps
SetTextColor
RealizePalette
SelectClipPath
GetTextExtentPoint32W
GetWindowExtEx
GetTextFaceW
SetBkColor
PtVisible
ScaleViewportExtEx
DeleteMetaFile
SetRectRgn
DeleteObject
StartDocW
ExtSelectClipRgn
PlayMetaFile
SetBkMode
EnumFontFamiliesExW
GetPolyFillMode
TextOutW
CreatePalette
RestoreDC
SetWindowExtEx
GetMapMode
LineTo
GetClipRgn
CreateDCW
SetViewportExtEx
GetObjectType
PlayMetaFileRecord
CreateRectRgnIndirect
CreateMetaFileW
PolyBezierTo
SetMapperFlags
ArcTo
CreateBitmap
CreateRectRgn
SelectClipRgn
CreateDIBPatternBrushPt
Rectangle
SetMapMode
GetTextAlign
OffsetViewportOrgEx
OffsetClipRgn
CreateFontW
RectVisible
GetCurrentPositionEx
StartPage
ExtCreatePen
EndPage
ExtTextOutW
GetPaletteEntries
EndDoc
BitBlt
EnumFontFamiliesW
SetWindowOrgEx

ole32

CLSIDFromString
OleUninitialize
DoDragDrop
OleLoadFromStream
WriteClassStg
OleCreateFromFile
SetConvertStg
RevokeDragDrop
OleGetClipboard
StringFromGUID2
RegisterDragDrop
OleIsRunning
CoUninitialize
CoGetClassObject
OleRegGetMiscStatus
CoDisconnectObject
CreateStreamOnHGlobal
ReadClassStg
ReleaseStgMedium
GetHGlobalFromILockBytes
CreateGenericComposite
CreateBindCtx
CreateDataAdviseHolder
OleDuplicateData
CoTaskMemFree
StringFromCLSID
CreateILockBytesOnHGlobal
OleCreateMenuDescriptor
OleRegGetUserType
OleLoad
IsAccelerator
OleIsCurrentClipboard
OleSetContainedObject
StgOpenStorage
CoCreateInstance
OleSave
CoGetMalloc
GetRunningObjectTable
GetClassFile
OleSetClipboard
CLSIDFromProgID
OleRun
OleCreateStaticFromData
OleGetIconOfClass
WriteFmtUserTypeStg
StgIsStorageFile
StgOpenStorageOnILockBytes
OleQueryLinkFromData
OleCreate
CoRegisterClassObject
ReadClassStm
OleQueryCreateFromData
CoRegisterMessageFilter
CoTaskMemAlloc
WriteClassStm
OleTranslateAccelerator
OleSaveToStream
OleInitialize
OleRegEnumVerbs
CreateOleAdviseHolder
OleCreateLinkFromData
CoFreeUnusedLibraries
OleFlushClipboard
StgCreateDocfile
CoLockObjectExternal
CoInitialize
CoRevokeClassObject
CoTreatAsClass
OleLockRunning
OleCreateLinkToFile
CreateFileMoniker
OleCreateFromData
StgCreateDocfileOnILockBytes
CreateDataCache
OleSetMenuDescriptor
CreateItemMoniker
ReadFmtUserTypeStg
OleDestroyMenuDescriptor

activeds

FreeADsMem

msvcrt

__argc
_wtoi
wcsspn
_CxxThrowException
_wsplitpath
_beginthreadex
fread
wcstoul
fwrite
time
_purecall
wcslen
malloc
_get_osfhandle
_fdopen
wcsstr
_wfullpath
wcspbrk
modf
_open_osfhandle
_initterm
_wtol
wcsncmp
vswprintf
_wcsupr
localtime
fseek
clearerr
iswspace
_wcsrev
wcscspn
_adjust_fdiv
memmove
_msize
_wcsdup
wcscmp
__CxxFrameHandler
_ltow
gmtime
__dllonexit
_ultow
fclose
swprintf
_onexit
free
calloc
iswdigit
mktime
realloc
ceil
_endthreadex
wcsncpy
wcstod
__doserrno
_snwprintf
_except_handler3
abort
fgetws
_wcslwr
floor
wcsftime
wcsrchr
__wargv
wcschr
_itow
fflush
wcstol
fputws
_expand
_wcsnicmp
ftell
wcscpy

dciman32

DCIEnum

kernel32

GetCurrentProcess
GetTempFileNameW
GetVersionExW
lstrcatW
MoveFileW
GetProfileIntW
TlsAlloc
LocalFree
CopyFileW
OutputDebugStringW
GlobalUnlock
CloseHandle
GetVersionExA
TerminateProcess
TlsSetValue
CreateSemaphoreW
LocalFileTimeToFileTime
InterlockedCompareExchange
GetVersion
FindNextFileW
EnterCriticalSection
GetFileTime
GlobalFree
QueryPerformanceCounter
IsDBCSLeadByte
SetFileTime
GetFileAttributesW
SuspendThread
CreateFileW
GetPrivateProfileIntW
FindFirstFileW
WaitForMultipleObjects
GetSystemTimeAsFileTime
GlobalAlloc
lstrcmpW
WideCharToMultiByte
GetThreadLocale
DeleteCriticalSection
CreateEventW
GetPrivateProfileStringW
GlobalAddAtomW
WritePrivateProfileStringW
FileTimeToLocalFileTime
GlobalFindAtomW
FlushFileBuffers
GetCurrentDirectoryW
ReleaseMutex
SetThreadPriority
GlobalLock
GetProcAddress
MulDiv
lstrcmpiW
TlsGetValue
SetFileAttributesW
LockResource
GetTickCount
ResumeThread
lstrcpynW
LoadLibraryW
GetFullPathNameW
WriteFile
CreateMutexW
ReleaseSemaphore
SetErrorMode
UnhandledExceptionFilter
GetProcessVersion
GetShortPathNameW
SetFilePointer
ReadFile
GetFileSize
GetModuleHandleA
GetVolumeInformationW
lstrcatA
FreeLibrary
GetModuleHandleW
GetSystemInfo
Sleep
LoadLibraryA
GetUserDefaultLCID
SetEvent
LeaveCriticalSection
GlobalSize
DelayLoadFailureHook
InterlockedIncrement
TlsFree
FindResourceW
FreeResource
LoadResource
InitializeCriticalSection
lstrlenW
UnlockFile
GlobalGetAtomNameW
lstrcpyA
LocalReAlloc
InterlockedDecrement
GetDiskFreeSpaceW
lstrcpynA
FormatMessageW
SystemTimeToFileTime
SetLastError
GetCurrentThread
lstrlenA
GetCurrentProcessId
GlobalReAlloc
VirtualQuery
LocalLock
GetTempPathW
lstrcpyW
GetModuleFileNameW
LockFile
FileTimeToSystemTime
FindClose
DuplicateHandle
VirtualProtect
SetUnhandledExceptionFilter
FreeConsole
GlobalDeleteAtom
GlobalFlags
GetLastError
GetStringTypeExW
LocalUnlock
SetEndOfFile
MultiByteToWideChar
FindResourceExW
GlobalHandle
LocalAlloc
SearchPathW
VirtualAlloc
GetSystemDirectoryA
DeleteFileW
LoadLibraryExA
GetCurrentThreadId
lstrcmpA
lstrcmpiA
SizeofResource

advapi32

RegEnumKeyW
RegQueryValueExW
RegCreateKeyW
RegCreateKeyExW
SetFileSecurityW
RegOpenKeyExW
RegSetValueExW
RegOpenKeyW
RegDeleteKeyW
RegDeleteValueW
GetFileSecurityW
RegSetValueW
RegQueryValueW
RegCloseKey

user32

ModifyMenuW
SetRect
OffsetRect
SetPropW
CheckRadioButton
CreateMenu
SetMenu
CheckDlgButton
ScrollWindow
IsRectEmpty
GetMenuStringW
GetTabbedTextExtentA
EndDialog
GetKeyState
GetMessagePos
GetDC
WindowFromDC
BeginDeferWindowPos
ClientToScreen
LoadAcceleratorsW
MessageBeep
SetWindowsHookExW
MapDialogRect
DrawTextW
IsWindowEnabled
DrawEdge
UnregisterClassW
CopyRect
SetCursor
DeleteMenu
FindWindowW
GetNextDlgTabItem
CheckMenuItem
IsWindow
GetSystemMetrics
GetParent
InSendMessage
DrawMenuBar
DrawFocusRect
SetActiveWindow
GetWindowDC
EnableMenuItem
SetTimer
EnumChildWindows
TranslateMessage
DefWindowProcW
SetMenuItemBitmaps
UnpackDDElParam
SetWindowLongW
TabbedTextOutW
MsgWaitForMultipleObjects
wsprintfW
SendMessageW
wvsprintfW
InvertRect
GetWindow
IntersectRect
EqualRect
GetForegroundWindow
UpdateWindow
GetFocus
CharNextW
IsZoomed
GetScrollInfo
EndPaint
SetRectEmpty
RegisterClassW
WaitMessage
GetClassNameW
ShowScrollBar
SendDlgItemMessageA
GetMenuCheckMarkDimensions
IsClipboardFormatAvailable
MessageBoxA
UnionRect
GetDialogBaseUnits
GetWindowTextLengthW
FrameRect
EndDeferWindowPos
GetDesktopWindow
InvalidateRgn
LoadIconW
LoadStringW
DestroyWindow
SetCapture
DispatchMessageW
GetMessageW
GetDlgItem
SetCursorPos
GetWindowLongW
GetPropW
GetWindowPlacement
GetLastActivePopup
LoadCursorW
SetWindowContextHelpId
InvalidateRect
SetForegroundWindow
GetMenuItemID
GetClientRect
AppendMenuW
GetTopWindow
GrayStringW
AdjustWindowRectEx
PostMessageW
CallNextHookEx
GetMenuItemCount
DestroyMenu
GetWindowTextW
RegisterClipboardFormatW
SendDlgItemMessageW
DestroyIcon
GetScrollPos
GetSysColorBrush
ReuseDDElParam
ValidateRect
CreateWindowExW
WinHelpW
DeferWindowPos
IsDialogMessageW
GetDlgItemInt
DefMDIChildProcW
PeekMessageW
GetMessageTime
GetCapture
MessageBoxW
SetDlgItemInt
RegisterWindowMessageW
RemoveMenu
MapWindowPoints
SetWindowTextW
CopyAcceleratorTableW
ScrollWindowEx
GetDCEx
SetScrollInfo
SystemParametersInfoW
SetDlgItemTextW
EnableWindow
TrackPopupMenu
ShowOwnedPopups
SetScrollPos
GetDlgCtrlID
ShowWindow
LockWindowUpdate
FillRect
GetClassInfoW
GetWindowRect
MoveWindow
GetCursorPos
IsIconic
PostQuitMessage
CharUpperW
ReleaseCapture
PostThreadMessageW
GetSysColor
CreateDialogIndirectParamW
InflateRect
IsWindowVisible
KillTimer
CallWindowProcW
LoadMenuW
GetSubMenu
RedrawWindow
LoadBitmapW
GetScrollRange
BeginPaint
BringWindowToTop
RemovePropW
DefFrameProcW
IsDlgButtonChecked
ClipCursor
SetWindowPos
GetAsyncKeyState
GetMenuState
SetWindowPlacement
ScreenToClient
DestroyCursor
GetTabbedTextExtentW
GetSystemMenu
PtInRect
GetMenu
SystemParametersInfoA
SetParent
UnhookWindowsHookEx
SetScrollRange
GetActiveWindow
GetWindowThreadProcessId
GetNextDlgGroupItem
CountClipboardFormats
GetDlgItemTextW
TranslateAcceleratorW
InsertMenuW
IsChild
ReleaseDC
WindowFromPoint
SetFocus
TranslateMDISysAccel

wininet

FtpRenameFileW
HttpQueryInfoW
GopherCreateLocatorW
HttpAddRequestHeadersW
InternetErrorDlg
HttpEndRequestW
FtpGetCurrentDirectoryW
FtpFindFirstFileW
GopherGetAttributeW
HttpOpenRequestW
InternetCanonicalizeUrlW
InternetOpenUrlW
InternetFindNextFileW
InternetSetStatusCallbackW
HttpSendRequestW
InternetSetOptionExW
InternetGetLastResponseInfoW
InternetReadFile
GopherOpenFileW
FtpRemoveDirectoryW
GopherFindFirstFileW
InternetOpenW
InternetQueryOptionW
InternetConnectW
FtpGetFileW
FtpPutFileW
FtpDeleteFileW
InternetQueryDataAvailable
InternetSetCookieW
FtpCreateDirectoryW
InternetWriteFile
FtpSetCurrentDirectoryW
InternetSetFilePointer
HttpSendRequestExW
InternetCloseHandle
InternetGetCookieW
InternetCrackUrlW
FtpOpenFileW

Sections

.textbss
Size: - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1f18e290f5674982db643c6b8e89f0f

Headers

File Characteristics

Imports

gdi32

ole32

activeds

msvcrt

dciman32

kernel32

advapi32

user32

wininet

Sections

.textbss Size: - Virtual size: 144KB

.text Size: 512B - Virtual size: 428B

.idata Size: 16KB - Virtual size: 16KB

.data Size: 26KB - Virtual size: 26KB

.rdata Size: 512B - Virtual size: 32B

.textbss
Size: - Virtual size: 144KB

.text
Size: 512B - Virtual size: 428B

.idata
Size: 16KB - Virtual size: 16KB

.data
Size: 26KB - Virtual size: 26KB

.rdata
Size: 512B - Virtual size: 32B