5ba983f596d0101b9e76658a05514813_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5ba983f596d0101b9e76658a05514813_JaffaCakes118
Size

952KB
MD5

5ba983f596d0101b9e76658a05514813
SHA1

48283095151a88dd1b4538d56cc1fcc9ba8a566c
SHA256

942b9c1ebb759424e631ec2fe0129e773a571b8ec19b36d4d9593eda91497839
SHA512

a1f120d25253b284887b249dbeeaa56f561ef2101f25cab96ac4c1820dcab2ac92dfb77470a69eba3f4589857e04790196222f3d4a3484ab6c73a01106ab79a7
SSDEEP

24576:5S9tQdbtZed3ehasTyCtF6GmUTRfv4HAf2m:dHTzeUTRfgg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ba983f596d0101b9e76658a05514813_JaffaCakes118

Files

5ba983f596d0101b9e76658a05514813_JaffaCakes118
.exe windows:4 windows x86 arch:x86

599183f9e949e25213da4be403e33d89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
GetLocaleInfoW
VirtualQuery
GetSystemInfo
VirtualProtect
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
IsBadCodePtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetTimeZoneInformation
GetSystemTimeAsFileTime
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
SetUnhandledExceptionFilter
GetFileType
SetStdHandle
HeapSize
HeapReAlloc
CreateThread
ExitThread
TerminateProcess
GetProfileIntA
GetTempPathA
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
IsBadReadPtr
HeapFree
HeapAlloc
RaiseException
RtlUnwind
SetErrorMode
LocalFileTimeToFileTime
SystemTimeToFileTime
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
InterlockedIncrement
GetCurrentDirectoryA
GlobalFlags
GetShortPathNameA
CreateFileA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
CopyFileA
MulDiv
GlobalSize
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
WaitForSingleObject
ResumeThread
SetThreadPriority
CloseHandle
WritePrivateProfileStringA
GlobalAddAtomA
lstrcpynA
InterlockedDecrement
FreeResource
GetCurrentThread
FreeLibrary
GlobalDeleteAtom
ConvertDefaultLocale
EnumResourceLanguagesA
LoadLibraryA
lstrcmpA
QueryPerformanceFrequency
GetTickCount
QueryPerformanceCounter
SetLastError
GetCurrentProcessId
FormatMessageA
InterlockedExchange
LocalFree
GlobalAlloc
GlobalLock
lstrcpyA
GetLastError
GlobalUnlock
GlobalFree
GetModuleHandleA
GetProcAddress
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetStringTypeExA
lstrlenA
lstrcmpiA
CompareStringW
lstrlenW
CompareStringA
GetVersion
MultiByteToWideChar
GetModuleFileNameA
lstrcatA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP

user32

TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
UnregisterClassA
DefWindowProcA
CallWindowProcA
IntersectRect
IsIconic
GetWindowPlacement
CopyRect
GetWindow
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
ValidateRect
ShowOwnedPopups
SetCursor
RegisterClipboardFormatA
GetWindowTextLengthA
GetWindowTextA
SetWindowPos
ShowWindow
MoveWindow
ScrollWindow
SendMessageA
InvalidateRect
EnableWindow
LoadImageA
GetSysColor
MapWindowPoints
LoadIconA
GetMessagePos
GetMessageTime
GetTopWindow
GetWindowRect
GetSubMenu
LoadMenuA
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
CheckDlgButton
SetFocus
MessageBoxA
GetLastActivePopup
EndDeferWindowPos
BeginDeferWindowPos
GetForegroundWindow
IsChild
RemovePropA
GetPropA
SetMenuItemBitmaps
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
GetCapture
GetMenuCheckMarkDimensions
GetActiveWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetPropA
GetClassNameA
GetClassInfoExA
GetClassLongA
UpdateWindow
CreateWindowExA
RedrawWindow
LoadBitmapA
GetClientRect
GetParent
CharUpperA
PtInRect
SetRectEmpty
OffsetRect
GetDesktopWindow
RegisterClassExA
GetSysColorBrush
LoadCursorA
UnhookWindowsHookEx
EqualRect
InflateRect
CallNextHookEx
PostMessageA
DrawFrameControl
SetWindowRgn
ScreenToClient
SetTimer
KillTimer
SetCapture
SetWindowsHookExA
ReleaseCapture
GetCursorPos
GetIconInfo
DestroyIcon
SystemParametersInfoA
DrawIconEx
WinHelpA
RegisterWindowMessageA
RemoveMenu
InsertMenuA
AppendMenuA
GetMenuStringA
SetRect
GetMenuItemInfoA
DestroyMenu
GetKeyNameTextA
MapVirtualKeyA
TranslateAcceleratorA
SetMenu
BringWindowToTop
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
ReuseDDElParam
UnpackDDElParam
ClientToScreen
WindowFromPoint
FillRect
TabbedTextOutA
MessageBeep
DrawTextA
DrawTextExA
GrayStringA
GetWindowDC
BeginPaint
EndPaint
DeleteMenu
PostThreadMessageA
IsRectEmpty
UnionRect
GetDCEx
LockWindowUpdate
IsClipboardFormatAvailable
MapDialogRect
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
GetWindowThreadProcessId
DrawIcon
FindWindowA
DestroyCursor
WaitMessage
MapVirtualKeyExA
IsCharLowerA
EnableScrollBar
FrameRect
SetCursorPos
DrawStateA
GetMenuDefaultItem
SetMenuDefaultItem
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
IsMenu
IsZoomed
ShowCursor
DrawEdge
DestroyAcceleratorTable
GetAsyncKeyState
CopyImage
DrawFocusRect
ReleaseDC
GetDC
wsprintfA
PostQuitMessage
PeekMessageA
SetParent
GetSystemMenu
GetTabbedTextExtentA
CheckMenuItem

gdi32

SetStretchBltMode
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
SetROP2
CreatePen
SetRectRgn
GetTextMetricsA
GetCharWidthA
SetPolyFillMode
SetBkMode
RestoreDC
GetBkColor
PatBlt
CreateRectRgnIndirect
GetTextExtentPoint32A
ExtTextOutA
BitBlt
DeleteDC
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
StartDocA
DPtoLP
CopyMetaFileA
CreateDCA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
StretchBlt
FrameRgn
CreateCompatibleDC
OffsetRgn
EqualRgn
CombineRgn
CreateRoundRectRgn
CreatePolygonRgn
CreateRectRgn
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreateDIBSection
GetTextColor
Polygon
SetPixel
RealizePalette
Ellipse
Rectangle
CreatePalette
GetPaletteEntries
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
PtInRegion
SetPixelV
GetViewportOrgEx
CreateEllipticRgn
LPtoDP
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetWindowOrgEx
CreateCompatibleBitmap
GetObjectA
CreateFontIndirectA
CreateSolidBrush
GetStockObject
SaveDC
GetDeviceCaps
CreateFontA
DeleteObject

comdlg32

CommDlgExtendedError
GetOpenFileNameA
GetFileTitleA
PrintDlgA
ChooseColorA
GetSaveFileNameA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter
GetJobA

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegDeleteValueA
RegSetValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegQueryValueExA

shell32

DragQueryFileA
ExtractIconA
SHGetFileInfoA
DragFinish
ShellExecuteA

comctl32

ord17
ImageList_GetIconSize
ImageList_Draw
ImageList_Add
ImageList_GetImageCount
ImageList_GetIcon
ImageList_AddMasked
ImageList_Destroy
ImageList_Create
ImageList_GetImageInfo
ImageList_ReplaceIcon
ImageList_DrawEx
PropertySheetA
DestroyPropertySheetPage
ImageList_SetBkColor
CreatePropertySheetPageA

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateInstance
CreateStreamOnHGlobal
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemFree
DoDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop

oleaut32

VariantInit
VariantChangeType
SysAllocString
VariantClear

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

ws2_32

inet_addr
htons
gethostbyname
WSASocketA
setsockopt
sendto
recvfrom
bind
select
WSAStartup
closesocket
WSACleanup

oleacc

LresultFromObject
CreateStdAccessibleObject

winmm

PlaySoundA

Sections

.text
Size: 660KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

599183f9e949e25213da4be403e33d89

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

version

ws2_32

oleacc

winmm

Sections

.text Size: 660KB - Virtual size: 659KB

.rdata Size: 148KB - Virtual size: 144KB

.data Size: 16KB - Virtual size: 32KB

.rsrc Size: 124KB - Virtual size: 159KB

.text
Size: 660KB - Virtual size: 659KB

.rdata
Size: 148KB - Virtual size: 144KB

.data
Size: 16KB - Virtual size: 32KB

.rsrc
Size: 124KB - Virtual size: 159KB