5d1151a483610f6e16121e5b56a325f1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5d1151a483610f6e16121e5b56a325f1_JaffaCakes118
Size

288KB
MD5

5d1151a483610f6e16121e5b56a325f1
SHA1

5519728636860c27d4253d39cae85895bd0ce752
SHA256

fc30be9cae25fb3e511ae860057fc09c7e0d161e930ab39363e96d2b6e1e8050
SHA512

b16d5535668fb7f04d9bb5a14cf214b9c88bb4646f23f42043b71c01bff269a55f77b3d74b627e29153c079352435124ac3846ab44c40517065e952c767075f1
SSDEEP

6144:c8L6XRQ7xhsxQSSAYwbhlDJ2sLaTuLd+G:c82XRqxmxdSgTJraw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d1151a483610f6e16121e5b56a325f1_JaffaCakes118

Files

5d1151a483610f6e16121e5b56a325f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eca87c9104f4e2dc50812df1ebc4f4c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oledlg

ord8

olepro32

ord253

ole32

CreateILockBytesOnHGlobal
CoTaskMemFree
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoGetClassObject
CoFreeUnusedLibraries
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleIsCurrentClipboard
OleUninitialize
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
StringFromCLSID
CoTaskMemAlloc

comdlg32

ChooseColorA
ChooseFontA
ChooseFontW
GetOpenFileNameA
GetFileTitleA
FindTextW
FindTextA

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

comctl32

ord17

user32

TabbedTextOutA
ShowWindow
SetWindowsHookExA
SetWindowTextA
SetWindowLongA
SetWindowContextHelpId
SetRect
SetPropA
SetMenuItemBitmaps
SetForegroundWindow
SetFocus
SetCursor
SetActiveWindow
SendMessageA
SendDlgItemMessageA
RemovePropA
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
RedrawWindow
PtInRect
PostThreadMessageA
PostQuitMessage
PostMessageA
OffsetRect
MoveWindow
ModifyMenuA
MessageBoxA
MessageBeep
MapWindowPoints
MapDialogRect
LoadStringA
LoadIconA
IsWindowVisible
IsWindow
IsIconic
IsDialogMessageA
IsChild
GrayStringA
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindowDC
TranslateMessage
GetTopWindow
GetSysColorBrush
GetSysColor
GetSubMenu
GetPropA
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageTime
GetMessagePos
GetMessageA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetCursorPos
GetCursor
GetClassNameA
GetClassLongA
GetCapture
EndDialog
EnableWindow
DestroyWindow
DestroyMenu
DefWindowProcA
CreateWindowExA
CreateDialogIndirectParamA
CopyRect
CopyAcceleratorTableA
ClientToScreen
CheckMenuItem
CharUpperA
CharNextA
CallWindowProcA
CallNextHookEx
AdjustWindowRectEx
UnhookWindowsHookEx
UnregisterClassA
UpdateWindow
ValidateRect
WinHelpA
wsprintfA
GetWindow

oleaut32

VariantCopy
VariantClear
VariantChangeType
VarBstrFromDate
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocStringByteLen
SysAllocString
VariantTimeToSystemTime

kernel32

lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrlenW
lstrlenA
lstrcatA
WritePrivateProfileStringA
WriteFile
WinExec
WideCharToMultiByte
VirtualFree
VirtualAlloc
UnlockFile
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
SetStdHandle
SetLastError
SetFilePointer
SetErrorMode
SetEnvironmentVariableA
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
MultiByteToWideChar
MulDiv
LockResource
LockFile
LocalReAlloc
LocalFree
LocalAlloc
LoadResource
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalGetAtomNameA
GlobalFree
GlobalFlags
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetVolumeInformationA
GetVersion
GetTimeZoneInformation
GetTickCount
GetTempPathA
GetTempFileNameA
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetShortPathNameA
GetProcessVersion
GetProcAddress
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetFullPathNameA
GetFileType
GetFileTime
GetFileSize
GetFileAttributesA
GetEnvironmentStringsW
GetEnvironmentStringsA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
GetCommandLineA
GetCPInfo
GetACP
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageA
FlushFileBuffers
FindResourceA
FindFirstFileA
FindClose
FileTimeToSystemTime
ExitProcess
EnterCriticalSection
DuplicateHandle
DeleteFileA
DeleteCriticalSection
CreateFileA
CompareStringW
CompareStringA
CloseHandle
FileTimeToLocalFileTime

gdi32

SetBkColor
SelectObject
ScaleWindowExtEx
ScaleViewportExtEx
SaveDC
RestoreDC
Rectangle
RectVisible
PtVisible
OffsetViewportOrgEx
LPtoDP
SetMapMode
GetTextColor
GetStockObject
GetObjectA
GetMapMode
GetDeviceCaps
GetClipBox
GetBkColor
ExtTextOutA
ExtCreatePen
DeleteDC
DPtoLP
CreateBitmap
SetStretchBltMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
TextOutA
GetWindowExtEx

Sections

.text
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 149KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eca87c9104f4e2dc50812df1ebc4f4c8

Headers

File Characteristics

Imports

oledlg

olepro32

ole32

comdlg32

advapi32

winspool.drv

comctl32

user32

oleaut32

kernel32

gdi32

Sections

.text Size: 53KB - Virtual size: 56KB

.rdata Size: 149KB - Virtual size: 152KB

.data Size: 33KB - Virtual size: 148KB

.idata Size: 7KB - Virtual size: 7KB

.rsrc Size: 43KB - Virtual size: 43KB

.text
Size: 53KB - Virtual size: 56KB

.rdata
Size: 149KB - Virtual size: 152KB

.data
Size: 33KB - Virtual size: 148KB

.idata
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 43KB - Virtual size: 43KB