5aa8d02af2f30b1aa945bc794851eb93_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5aa8d02af2f30b1aa945bc794851eb93_JaffaCakes118
Size

1.2MB
MD5

5aa8d02af2f30b1aa945bc794851eb93
SHA1

75fc6fb34aecc8b9caf93c7fdbbcb0bb3234eded
SHA256

3cd52f14415310bf11eafba6944874df03473c93c850ee6980dd42711a72c072
SHA512

84b8edb80e82ff8799b741811a00538fa3aeff45c343694881f8b5a7da6a6067753483bf4089b5d4bfb717c2cdf6bec1636e050e0a919b90b6eec8815d47902a
SSDEEP

24576:ni0P0EPeEV9mBwWvkaGIEh1qHpgtZi9X2hqF+gSIqR:Gk8XD5Eh1qHpgtcbQgfq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aa8d02af2f30b1aa945bc794851eb93_JaffaCakes118

Files

5aa8d02af2f30b1aa945bc794851eb93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8523de5779f77b14ed2c50c111c413e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

socket
gethostbyname
ioctlsocket
htons
WSAStartup
WSACleanup
WSACancelAsyncRequest
WSAAsyncGetHostByName
WSAGetLastError
gethostname
connect
send
shutdown
recv
WSASetLastError
select
setsockopt
closesocket
inet_addr
ntohs
recvfrom
sendto

iphlpapi

GetNetworkParams

kernel32

SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
GetThreadLocale
GetCurrentThread
lstrcmpA
IsBadStringPtrA
IsBadWritePtr
IsBadReadPtr
GlobalFlags
TlsAlloc
GlobalHandle
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCPInfo
GetOEMCP
SetErrorMode
WritePrivateProfileStringA
RtlUnwind
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
HeapFree
HeapAlloc
ExitThread
GetACP
TerminateProcess
HeapReAlloc
HeapSize
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
WriteFile
SetUnhandledExceptionFilter
VirtualAlloc
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
LockResource
SizeofResource
LoadResource
FindResourceA
_lclose
SetFileAttributesA
OpenFile
CreateFileA
MultiByteToWideChar
lstrlenA
FindClose
FindNextFileA
CopyFileA
FindFirstFileA
GetLastError
CreateDirectoryA
GlobalFree
GlobalAlloc
WideCharToMultiByte
lstrlenW
CloseHandle
ReleaseMutex
CreateMutexA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GlobalReAlloc
GlobalSize
GetModuleFileNameA
WaitForSingleObject
ResetEvent
SetEvent
GetTimeZoneInformation
TerminateThread
ReadFile
GetCurrentProcess
DuplicateHandle
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSize
lstrcpynA
FileTimeToLocalFileTime
FileTimeToSystemTime
MulDiv
SuspendThread
SetThreadPriority
FormatMessageA
InterlockedDecrement
InterlockedIncrement
GetVersion
lstrcatA
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
CreateEventA
GetTempPathA
RemoveDirectoryA
DeleteFileA
lstrcpyW
GetComputerNameA
GlobalUnlock
GlobalLock
GetCurrentThreadId
GetFileAttributesA
LocalAlloc
LocalFree
FreeLibrary
LoadLibraryA
GetProcAddress
GetWindowsDirectoryA
CreateThread
ResumeThread
GetTickCount
Sleep
SetLastError
VirtualFree

user32

CharNextA
GetSysColorBrush
GetClassNameA
GetDesktopWindow
DestroyMenu
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
InflateRect
CharUpperA
LoadStringA
FindWindowA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GetMessageA
TranslateMessage
ValidateRect
WindowFromPoint
ShowWindow
MoveWindow
IsDialogMessageA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
RegisterClipboardFormatA
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindowEnabled
DispatchMessageA
PeekMessageA
IsWindowVisible
GetDlgItem
SetWindowTextA
GetParent
CallNextHookEx
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
SetWindowsHookExA
UnhookWindowsHookEx
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetKeyState
GetSystemMenu
AppendMenuA
LoadAcceleratorsA
LoadMenuA
TranslateAcceleratorA
GetFocus
CheckMenuItem
PostThreadMessageA
DestroyAcceleratorTable
GetSubMenu
EnableMenuItem
GetCursorPos
ScreenToClient
LoadCursorA
SetCursor
IsIconic
GetSystemMetrics
MessageBeep
DrawIcon
CopyRect
GetSysColor
OffsetRect
ReleaseCapture
SetCapture
InvalidateRect
GetCapture
GetClientRect
PtInRect
KillTimer
GetWindowLongA
SetWindowLongA
SetTimer
LoadBitmapA
PostMessageA
GetWindowRect
UpdateWindow
wsprintfA
MessageBoxA
SendMessageA
LoadIconA
EnableWindow
IsWindowUnicode
DefWindowProcA
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
GetClassLongA

gdi32

SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
OffsetViewportOrgEx
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
LPtoDP
DPtoLP
PatBlt
GetMapMode
GetTextColor
GetBkColor
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
EnumFontFamiliesExA
CreateSolidBrush
CreateCompatibleDC
GetTextExtentPoint32A
GetObjectA
GetTextExtentPointA
CreateDIBitmap
BitBlt

comdlg32

CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA
ChooseColorA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey

shell32

SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA

comctl32

ImageList_ReplaceIcon
ord17
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA

oledlg

ord8

ole32

CoTaskMemAlloc
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoInitialize
CoCreateGuid
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal

olepro32

ord253

oleaut32

VariantChangeType
SysAllocStringByteLen
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
VarDateFromStr
VarBstrFromDate
SafeArrayGetUBound
SafeArrayAccessData
VariantClear
SysFreeString
SysAllocString
SysAllocStringLen
SysStringLen
SafeArrayUnaccessData

odbc32

ord1
ord50
ord45
ord51
ord15
ord9
ord14
ord3
ord11
ord18
ord13
ord61
ord16
ord2
ord10
ord48
ord49
ord20
ord17
ord59
ord8
ord44
ord19
ord46
ord12
ord41
ord5
ord68
ord43

Sections

.text
Size: 556KB - Virtual size: 553KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 552KB - Virtual size: 586KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8523de5779f77b14ed2c50c111c413e9

Headers

File Characteristics

Imports

wsock32

iphlpapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

odbc32

Sections

.text Size: 556KB - Virtual size: 553KB

.rdata Size: 112KB - Virtual size: 108KB

.data Size: 44KB - Virtual size: 71KB

.rsrc Size: 552KB - Virtual size: 586KB

.text
Size: 556KB - Virtual size: 553KB

.rdata
Size: 112KB - Virtual size: 108KB

.data
Size: 44KB - Virtual size: 71KB

.rsrc
Size: 552KB - Virtual size: 586KB