4c85888e94e2aeb860d9f08dbec9fc28_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4c85888e94e2aeb860d9f08dbec9fc28_JaffaCakes118
Size

176KB
MD5

4c85888e94e2aeb860d9f08dbec9fc28
SHA1

e6cce844b0b208f9ac12272bb5b37ff3896ad1bc
SHA256

491a3f62d26fea199ddbcb77f2ffcb6ba008f73fee64e91f604c79b97a8234b0
SHA512

1f02b0a91969328d91687935cebc00264e5c418b8840d6b6d305b7528aa50c4313cc151d400a5fad104e373f451f56ac31c995e8f3b054801316c95c58e7adef
SSDEEP

3072:g/NAa1olsSHmCJXsrjVBBLaD/MWxbeC/zdcH494vuwCvpb1VVxpb9JjCdOm2K/tn:+6a4HJ8920er/Be49MYpLV98gG/Jb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c85888e94e2aeb860d9f08dbec9fc28_JaffaCakes118

Files

4c85888e94e2aeb860d9f08dbec9fc28_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b971df38f04db5bf29085dd4af1f1e6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
GetCurrentDirectoryA
RtlUnwind
RaiseException
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
ExitProcess
FileTimeToSystemTime
ExitThread
GetACP
SetStdHandle
GetCPInfo
GetOEMCP
GetTimeZoneInformation
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
TerminateProcess
CreateThread
HeapSize
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetFileType
SetErrorMode
MapViewOfFile
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
lstrcatA
lstrcpyA
LoadLibraryA
GetProcAddress
HeapDestroy
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
GetLastError
FindResourceA
LoadResource
SizeofResource
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MulDiv
WideCharToMultiByte
lstrlenA
GetProcessVersion
GlobalFlags
TlsSetValue
TlsGetValue
LocalReAlloc
TlsAlloc
TlsFree
GlobalHandle
LocalAlloc
GetFileTime
DeleteFileA
GetVolumeInformationA
UnlockFile
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
CreateEventA
ReadFile
DuplicateHandle
ResumeThread
SuspendThread
SetThreadPriority
LocalFree
SetEvent
GetCurrentThread
GlobalGetAtomNameA
SetLastError
GetVersion
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
GlobalSize
lstrcmpA
GlobalFree
MoveFileExA
GlobalReAlloc
GetVersionExA
GetWindowsDirectoryA
WritePrivateProfileStringA
GetTempPathA
GetFullPathNameA
FindFirstFileA
Sleep
WaitForSingleObject
LockResource
FindClose
CreateFileMappingA
UnmapViewOfFile
GetFileSize
GetEnvironmentStringsW
GetTempFileNameA
MultiByteToWideChar
GetFileAttributesA
CreateFileA
WriteFile
CloseHandle
CreateDirectoryA
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
GetDriveTypeA
UnhandledExceptionFilter
HeapCreate
VirtualFree
VirtualAlloc

user32

LoadIconA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
DispatchMessageA
SetActiveWindow
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
SetScrollInfo
GetTopWindow
MessageBoxA
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SystemParametersInfoA
IsIconic
LoadStringA
EnumChildWindows
EnableMenuItem
WindowFromPoint
GetCursorPos
KillTimer
SetTimer
InflateRect
PeekMessageA
GetAsyncKeyState
GetScrollRange
SetScrollPos
SetScrollRange
GetScrollPos
IsRectEmpty
ShowScrollBar
SetRectEmpty
GetSysColor
CopyRect
UnregisterClassA
GetClientRect
EndPaint
InvalidateRect
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
DestroyWindow
SetFocus
GetFocus
IsChild
GetClassInfoExA
RegisterClassExA
CharUpperA
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
CharNextA
CreateWindowExA
CallWindowProcA
GetWindowLongA
SetWindowLongA
ShowWindow
UnionRect
PtInRect
GetKeyState
DefWindowProcA
GetClassNameA
ScreenToClient
GetDC
GetSysColorBrush
PostMessageA
GetWindowPlacement
ReleaseDC
wsprintfA
LoadBitmapA
GetWindowRect
SetWindowPos
LoadCursorA
SetCursor
GetWindowTextA
IsWindow
SendMessageA
RegisterWindowMessageA
EnableWindow
GetParent
GetNextDlgTabItem
DestroyMenu
GetDesktopWindow
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
GetMessageA
TranslateMessage
ValidateRect
ShowOwnedPopups
PostQuitMessage
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GrayStringA
DrawTextA
TabbedTextOutA
ClientToScreen
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
BeginPaint
IsDialogMessageA
IsWindowEnabled
SetWindowTextA
MoveWindow
GetSystemMetrics
GetDlgCtrlID

gdi32

TextOutA
Rectangle
CreateRectRgnIndirect
DeleteMetaFile
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
CreateMetaFileA
DeleteDC
SetViewportOrgEx
SetMapMode
CreateDCA
CreateSolidBrush
LPtoDP
SelectObject
GetStockObject
CreatePen
GetTextMetricsA
GetObjectA
Polygon
GetClipBox
SetTextColor
CreateBitmap
SetBkColor
SetBkMode
CreateFontIndirectA
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
ScaleWindowExtEx
LineTo
MoveToEx
DeleteObject
RectVisible
ExtTextOutA
PtVisible
Escape
GetDeviceCaps
SetTextAlign
GetTextExtentPoint32A

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA

shell32

DragQueryFileA
DragFinish
FindExecutableA
ShellExecuteA

ole32

CoCreateGuid
CoGetMalloc
CreateOleAdviseHolder
OleSaveToStream
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CreateDataAdviseHolder
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
CoDisconnectObject
CoCreateInstance
WriteClassStm
OleLoadFromStream

olepro32

ord250

oleaut32

VarUI4FromStr
LoadTypeLi
SysStringLen
SysAllocString
GetErrorInfo
VariantClear
RegisterTypeLi
VariantChangeType
SysAllocStringByteLen
SysStringByteLen
LoadRegTypeLi
SysAllocStringLen
SysFreeString

Sections

.text
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ffff
Size: 146KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yyup
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b971df38f04db5bf29085dd4af1f1e6f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

ole32

olepro32

oleaut32

Sections

.text Size: 8KB - Virtual size: 12KB

.rdata Size: 156KB - Virtual size: 156KB

.data Size: 2KB - Virtual size: 4KB

.ffff Size: 146KB - Virtual size: 148KB

.yyup Size: 512B - Virtual size: 76KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 8KB - Virtual size: 12KB

.rdata
Size: 156KB - Virtual size: 156KB

.data
Size: 2KB - Virtual size: 4KB

.ffff
Size: 146KB - Virtual size: 148KB

.yyup
Size: 512B - Virtual size: 76KB

.rsrc
Size: 2KB - Virtual size: 2KB