5a193d521f75165e611a880262ec759b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5a193d521f75165e611a880262ec759b_JaffaCakes118
Size

1.6MB
MD5

5a193d521f75165e611a880262ec759b
SHA1

4fae1b238623bb2bf02ce9b516321a90a5e6ed13
SHA256

d94afb5056327a5527ab3848cf4622ea3e623c3e1c5228ebd67eb274bea62bb1
SHA512

56539fb7d21636df7170463fb576f6db55f9fbfa257999f5428fbc0c6133b283249a17e76c05f7dbdab1bb11a0cfe4d8b4f4415759e79502f9a4779a5af6e47e
SSDEEP

49152:xhxPvgDhB6F++2c8bDabX9dVbwkXlx7bxUpSGn:fxPvgDhB6F++2cTX9dZx7bxWf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a193d521f75165e611a880262ec759b_JaffaCakes118

Files

5a193d521f75165e611a880262ec759b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7bd3ed3308dab40c53fb8d95237488d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

zipdll

??0CUnzip@@QAE@PBD@Z
?SwapSize@CMamaZip@@QAEXPBD@Z

kernel32

GetDriveTypeA
RaiseException
ExitProcess
GetStartupInfoA
GetCommandLineA
SetStdHandle
HeapReAlloc
HeapSize
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
CreateThread
TerminateThread
Sleep
GetExitCodeThread
OutputDebugStringA
GetFileAttributesA
FileTimeToLocalFileTime
CloseHandle
CreateFileA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
WriteFile
ReadFile
GetFileSize
GetLocalTime
GetLastError
SetFilePointer
CreateDirectoryA
GetACP
GetSystemTime
DeleteFileA
GetTempPathA
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
GetComputerNameA
SetEvent
WaitForMultipleObjectsEx
CreateEventA
LCMapStringA
FindClose
FindFirstFileA
ReleaseMutex
ExitThread
WaitForSingleObject
FindNextFileA
CopyFileA
GetWindowsDirectoryA
GetSystemDirectoryA
GetVolumeInformationA
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
CreateMutexA
GetVersion
WinExec
CreateProcessA
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
LockResource
SizeofResource
LoadResource
FreeLibrary
FindResourceA
LoadLibraryA
SystemTimeToFileTime
EnumResourceNamesA
LoadLibraryExA
GetTempFileNameA
RemoveDirectoryA
MoveFileA
ResetEvent
GetProcAddress
LocalFree
lstrcpynA
FormatMessageA
GetCommState
SetCommState
FlushFileBuffers
PurgeComm
SetCommTimeouts
GetCurrentThreadId
SetLastError
SetCurrentDirectoryA
GetCurrentDirectoryA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OutputDebugStringW
GetModuleHandleA
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
lstrcatA
InterlockedIncrement
InterlockedDecrement
lstrcmpA
GlobalReAlloc
MulDiv
FileTimeToSystemTime
ResumeThread
SetThreadPriority
SuspendThread
DuplicateHandle
LockFile
UnlockFile
SetEndOfFile
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
LocalAlloc
GetFileTime
GetDiskFreeSpaceA
GetCurrentThread
GlobalFlags
TlsAlloc
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCPInfo
GetOEMCP
SetErrorMode
FindResourceExA
RtlUnwind
GetTimeZoneInformation
HeapAlloc
HeapFree
GetFileType
_lwrite
OpenFile
_llseek
_lread
_lopen
_lclose
_lcreat
DeviceIoControl

user32

IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
GetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
IsWindowEnabled
CallWindowProcA
GetDlgItem
RemovePropA
LoadCursorA
GetWindowThreadProcessId
DefWindowProcA
RegisterClassExA
CreateWindowExA
IsWindowVisible
IsWindow
DrawFocusRect
DefDlgProcA
IsWindowUnicode
EnableWindow
SendMessageA
ShowCaret
OffsetRect
SetRect
RegisterWindowMessageA
PostThreadMessageA
PostMessageA
DestroyWindow
GetMenuItemID
SetMenuDefaultItem
SetCapture
GetCapture
DispatchMessageA
ReleaseCapture
BeginPaint
EndPaint
EnumWindows
ShowWindow
SetPropA
LoadStringA
ScreenToClient
SetWindowPos
SetActiveWindow
SetForegroundWindow
SetFocus
ReleaseDC
GetDC
GetWindowLongA
SetWindowLongA
UpdateWindow
GetWindow
GetForegroundWindow
GetLastActivePopup
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetKeyState
GetDlgCtrlID
GetWindowTextA
ModifyMenuA
GetParent
DeleteMenu
GetMenuState
CheckMenuItem
RedrawWindow
GetSysColor
AdjustWindowRectEx
CopyRect
GetMenu
RemoveMenu
CreateIconFromResource
wsprintfA
MessageBeep
UnregisterClassA
HideCaret
GetWindowTextLengthA
SetWindowPlacement
GetMenuItemCount
GetMessageA
SetTimer
KillTimer
GetClientRect
GetClassNameA
InvalidateRect
RegisterClassA
GetClassInfoA
WinHelpA
GetTopWindow
IsChild
MessageBoxA
GetPropA
GetDesktopWindow
DestroyMenu
TrackPopupMenu
EnableMenuItem
GetCursorPos
SetScrollPos
GetSubMenu
GetScrollPos
SetScrollRange
LoadMenuA
FillRect
DrawTextA
EndDialog
DialogBoxParamA
ExcludeUpdateRgn
LoadIconA
GetWindowRect
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
EqualRect
GetFocus
PeekMessageA
MapWindowPoints
SendDlgItemMessageA
GetDlgItemTextA
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
MoveWindow
SetMenuItemBitmaps
LoadBitmapA
GetMenuCheckMarkDimensions
GetWindowDC
TabbedTextOutA
GrayStringA
ValidateRect
TranslateMessage
CharUpperA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
SetCursor
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
IsZoomed
InflateRect
PtInRect
SetCursorPos
DestroyCursor
SetParent
IsRectEmpty
AppendMenuA
GetSystemMenu
WindowFromPoint
FindWindowA
PostQuitMessage
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
GetAsyncKeyState
RegisterClipboardFormatA
GetTabbedTextExtentA
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
DestroyIcon
GetMenuStringA
InsertMenuA
LockWindowUpdate
GetDCEx
InvertRect
wvsprintfA
GetSysColorBrush
ClientToScreen

gdi32

DeleteObject
GetTextExtentPointA
GetWindowOrgEx
GetTextFaceA
GetROP2
GetBkMode
GetTextAlign
GetPolyFillMode
GetStretchBltMode
GetNearestColor
EnumFontFamiliesExA
GetBkColor
GetTextColor
CreateFontIndirectA
CombineRgn
SetRectRgn
GetMapMode
CreateDCA
SetAbortProc
StartPage
EndPage
EndDoc
AbortDoc
Rectangle
DPtoLP
LPtoDP
GetCharWidthA
GetTextMetricsA
GetTextExtentPoint32A
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreatePatternBrush
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
CreateRectRgn
GetCurrentPositionEx
SetTextAlign
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SelectPalette
RestoreDC
SaveDC
StartDocA
PatBlt
GetClipBox
GetViewportOrgEx
CreateRectRgnIndirect
CreateFontA
CreateCompatibleBitmap
SetBkMode
SetBkColor
SetTextColor
CreateBitmap
BitBlt
CreateSolidBrush
CreatePen
SelectObject
MoveToEx
LineTo
CreateDIBitmap
StretchDIBits
RealizePalette
GetStockObject
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC

comdlg32

GetSaveFileNameA
GetFileTitleA
CommDlgExtendedError
GetOpenFileNameA
PrintDlgA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCloseKey
RegDeleteValueA
RegSetValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
SetFileSecurityA
GetFileSecurityA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyA
RegOpenKeyExA

shell32

ExtractIconA
DragQueryFileA
DragFinish
SHGetFileInfoA
Shell_NotifyIconA
ShellExecuteA
SHGetMalloc
SHGetDesktopFolder
SHBrowseForFolderA
SHGetPathFromIDListA

comctl32

ord17
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
PropertySheetA
CreatePropertySheetPageA
ImageList_ReplaceIcon
DestroyPropertySheetPage

oledlg

ord8

ole32

CreateILockBytesOnHGlobal
CoGetClassObject
CoTaskMemFree
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
StgOpenStorageOnILockBytes
CLSIDFromProgID
CLSIDFromString
OleIsCurrentClipboard

olepro32

ord253
ord251

oleaut32

VarDateFromStr
VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantCopy
VariantClear
SysAllocStringLen
SysFreeString
VariantTimeToSystemTime
SysStringLen

odbc32

ord19
ord46
ord12
ord68
ord41
ord2
ord1
ord50
ord45
ord51
ord44
ord9
ord14
ord3
ord11
ord18
ord13
ord16
ord5
ord10
ord72
ord4
ord48
ord15
ord8
ord59
ord49
ord20
ord17

wininet

InternetCloseHandle
InternetSetOptionExA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
InternetQueryDataAvailable
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetGetLastResponseInfoA
InternetOpenA
InternetCanonicalizeUrlA
InternetCrackUrlA

shlwapi

StrTrimA

cabinet

FDICreate
FDICopy
FDIIsCabinet
FDIDestroy

ws2_32

WSACreateEvent
WSACloseEvent
sendto
recvfrom
accept
WSAStartup
recv
select
send
WSACleanup
shutdown
closesocket
listen
bind
socket
htons
inet_addr
htonl
ntohl
inet_ntoa
gethostname
gethostbyname
connect
getpeername

avifil32

AVIStreamRelease
AVIFileRelease
AVIFileExit
AVIStreamWrite
AVISaveOptions
AVIStreamSetFormat
AVIFileCreateStreamA
AVIFileInit
AVISaveOptionsFree
AVISaveVA
AVIStreamInfoA
AVIStreamStart
AVIStreamReadFormat
AVIFileGetStream
AVIFileOpenA
AVIMakeCompressedStream

msvfw32

ICClose
ICOpen
ICSendMessage
ord2
DrawDibBegin
DrawDibOpen
DrawDibDraw
ICDecompress

winmm

waveOutReset
waveInClose
mixerGetControlDetailsA
mixerSetControlDetails
waveOutWrite
waveOutPrepareHeader
waveInReset
waveOutUnprepareHeader
mixerOpen
waveOutClose
mixerGetID
waveOutOpen
mixerGetNumDevs
mixerClose
mixerGetLineControlsA
mixerGetLineInfoA

dbghelp

ImageNtHeader

Sections

.text
Size: 840KB - Virtual size: 839KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 64KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512KB - Virtual size: 508KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gtide
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gidata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b7bd3ed3308dab40c53fb8d95237488d

Headers

File Characteristics

Imports

zipdll

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

odbc32

wininet

shlwapi

cabinet

ws2_32

avifil32

msvfw32

winmm

dbghelp

Sections

.text Size: 840KB - Virtual size: 839KB

.rdata Size: 144KB - Virtual size: 143KB

.data Size: 64KB - Virtual size: 107KB

.rsrc Size: 512KB - Virtual size: 508KB

.gtide Size: 72KB - Virtual size: 70KB

.gdata Size: 8KB - Virtual size: 6KB

.gidata Size: 16KB - Virtual size: 15KB

.text
Size: 840KB - Virtual size: 839KB

.rdata
Size: 144KB - Virtual size: 143KB

.data
Size: 64KB - Virtual size: 107KB

.rsrc
Size: 512KB - Virtual size: 508KB

.gtide
Size: 72KB - Virtual size: 70KB

.gdata
Size: 8KB - Virtual size: 6KB

.gidata
Size: 16KB - Virtual size: 15KB