5713c63205a93d4d67e77023f82bc9e0_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5713c63205a93d4d67e77023f82bc9e0_JaffaCakes118
Size

552KB
MD5

5713c63205a93d4d67e77023f82bc9e0
SHA1

741658d9ca0b70cd4ff4e04ec62fa2d65cf5daae
SHA256

decd474e4c808ac1a3255e1b6aecab359028bbadb6852f9ff70b33fdea648978
SHA512

8d696c1d523aedba176fc57aa885ba77db196a3347118216069f13ea4f6f4445ab36bb166af276865e06e92b7fdc60adba72791600528bc9f42e349e85eaa8a3
SSDEEP

12288:j1SsgEa0YK0fFUlKN3cGWvr0t2OonRUkDdUDg:A/Ea0Y3v3clPOZh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
5713c63205a93d4d67e77023f82bc9e0_JaffaCakes118

Files

5713c63205a93d4d67e77023f82bc9e0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2fc7eb83ba50f151a1c0a19e1abe500e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetCommandLineA
HeapReAlloc
ExitThread
CreateThread
TerminateProcess
HeapSize
HeapDestroy
HeapCreate
IsBadWritePtr
LCMapStringA
LCMapStringW
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
InterlockedIncrement
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
InterlockedDecrement
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
CreateEventA
SetEvent
SetThreadPriority
lstrcmpA
RaiseException
WaitForSingleObject
SetLastError
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
lstrcpynA
GetModuleHandleA
GetProcAddress
LoadLibraryW
ExitProcess
QueryPerformanceCounter
lstrcpyA
GetCurrentProcessId
GetSystemTime
SystemTimeToFileTime
GetTickCount
GlobalMemoryStatus
GetQueuedCompletionStatus
FormatMessageA
LocalFree
Sleep
CloseHandle
GetCurrentThreadId
GetCurrentThread
SuspendThread
CancelIo
GetExitCodeThread
PostQueuedCompletionStatus
CreateIoCompletionPort
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ResumeThread
FindResourceA
LoadResource
LockResource
SizeofResource
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
VirtualFree
InterlockedExchange

user32

LoadCursorA
GetSysColorBrush
DestroyMenu
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetCursor
PostQuitMessage
wsprintfA
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
ReleaseDC
GetDC
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
GetMenuState
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
EnableWindow
SendMessageA
GetClientRect
DrawIcon
IsIconic
GetWindowRect
SetTimer
KillTimer
LoadIconA
MessageBoxA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetSysColor
AdjustWindowRectEx
GetParent
GetSystemMetrics
PostMessageA
GetWindow
PtInRect
CopyRect
GetWindowPlacement
SystemParametersInfoA
SetWindowPos
SetWindowLongA
GetWindowLongA
CallWindowProcA
DefWindowProcA
GetDlgCtrlID
UnregisterClassA
RegisterClassA
GetClassInfoA
ScreenToClient
GetCursorPos

gdi32

GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
PtVisible
DeleteObject
SetMapMode
RestoreDC
SaveDC
CreateBitmap
GetDeviceCaps
GetObjectA
SetBkColor
SetTextColor
GetClipBox
RectVisible

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegCloseKey

comctl32

ord17
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA

shlwapi

PathFindExtensionA

ws2_32

htons
closesocket
setsockopt
inet_ntoa
getpeername
WSAStartup
WSAGetLastError
socket
gethostbyname
WSARecv
WSASend
WSACloseEvent
WSASocketA
WSACreateEvent
WSAEventSelect
bind
listen
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSACleanup
WSAAccept

winmm

timeGetTime
timeBeginPeriod
timeEndPeriod

oleaut32

VariantClear
VariantChangeType
VariantInit

Exports

Exports

Oxy

Sections

.text
Size: 196KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2fc7eb83ba50f151a1c0a19e1abe500e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

shlwapi

ws2_32

winmm

oleaut32

Exports

Exports

Sections

.text Size: 196KB - Virtual size: 192KB

.rdata Size: 64KB - Virtual size: 60KB

.data Size: 8KB - Virtual size: 21KB

.rsrc Size: 248KB - Virtual size: 244KB

.reloc Size: 32KB - Virtual size: 31KB

.text
Size: 196KB - Virtual size: 192KB

.rdata
Size: 64KB - Virtual size: 60KB

.data
Size: 8KB - Virtual size: 21KB

.rsrc
Size: 248KB - Virtual size: 244KB

.reloc
Size: 32KB - Virtual size: 31KB