5f81eb1aee3360b70d56f3b015bcbee1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5f81eb1aee3360b70d56f3b015bcbee1_JaffaCakes118
Size

1.2MB
MD5

5f81eb1aee3360b70d56f3b015bcbee1
SHA1

c4ddc0dba21a85231424bcc6ef5b3cdb76ccfab8
SHA256

4700811f33c2c1c63edeb0d66a383c60ac3dc83dcc44fff4505b965cd81b2409
SHA512

223f5dcb7c32353d907ebae1cc17319ed5bd7a699ea02d196df04e29da67bb8760d112145056b14cd1edea4ebb1d322d52c6d3718a764aadce368b45d2971efe
SSDEEP

12288:Vp2CpXN2tkAtFdQRIaLZo6vbtv1IOVb9Nhz47flF6HkO2tzxVlzMOQPkPK:WCCFdQn26prt9NhyG2lxL4h8P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f81eb1aee3360b70d56f3b015bcbee1_JaffaCakes118

Files

5f81eb1aee3360b70d56f3b015bcbee1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5699a040aff076ea01da1a778470c44d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile
MoveFileA
DeleteFileA
UnlockFile
GetStringTypeExA
LockFile
GetVolumeInformationA
GetFileSize
LocalFileTimeToFileTime
SystemTimeToFileTime
GetShortPathNameA
GetDriveTypeA
RtlUnwind
SetErrorMode
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapFree
RaiseException
HeapSize
HeapReAlloc
WriteFile
GetACP
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCurrentThread
GlobalAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
FlushFileBuffers
CompareStringW
SetEnvironmentVariableA
SetFilePointer
DuplicateHandle
ReadFile
CreateFileA
GetCPInfo
SizeofResource
GetOEMCP
GetThreadLocale
GlobalFlags
GetProcessVersion
SetFileTime
GetDiskFreeSpaceA
GetFileTime
lstrcpynA
GetFullPathNameA
GetFileAttributesA
TlsSetValue
TlsGetValue
LocalReAlloc
LeaveCriticalSection
EnterCriticalSection
GlobalReAlloc
DeleteCriticalSection
TlsFree
GlobalHandle
LocalAlloc
TlsAlloc
InitializeCriticalSection
GlobalFree
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetWindowsDirectoryA
GetSystemDirectoryA
GetTempPathA
GetTempFileNameA
_lcreat
_lwrite
GetModuleFileNameA
_lopen
_lread
_llseek
GetCurrentProcess
TerminateProcess
CopyFileA
_lclose
GlobalLock
GlobalUnlock
MulDiv
SetLastError
FindResourceA
LoadResource
LockResource
GetVersion
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
lstrcmpA
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
GetCurrentThreadId
CloseHandle
InterlockedDecrement
InterlockedIncrement
FormatMessageA
LocalFree
lstrlenA
WideCharToMultiByte
RemoveDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
CreateDirectoryA
WinExec
CreateMutexA
GetLastError
ReleaseMutex
MultiByteToWideChar
FindFirstFileA
FindNextFileA
FindClose
CompareStringA
OutputDebugStringA
LoadLibraryA
FreeLibrary
GetProcAddress
GetProfileStringA
WriteProfileStringA
SetFileAttributesA
lstrcpyA
lstrcatA
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
SetStdHandle
GetTickCount

user32

WindowFromPoint
PtInRect
InflateRect
RegisterClipboardFormatA
GetSysColorBrush
GetClassNameA
KillTimer
DestroyIcon
CharUpperA
GetDCEx
LockWindowUpdate
SetCapture
PostThreadMessageA
SetParent
TranslateAcceleratorA
LoadAcceleratorsA
IsRectEmpty
FindWindowA
GetDesktopWindow
SetRect
CopyAcceleratorTableA
MapDialogRect
SetWindowContextHelpId
GetNextDlgGroupItem
SetCursor
ShowOwnedPopups
PostQuitMessage
MoveWindow
SetWindowTextA
IsDialogMessageA
EndDialog
CreateDialogIndirectParamA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
PostMessageA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetActiveWindow
SetFocus
ScreenToClient
EqualRect
UnpackDDElParam
UnionRect
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
ReleaseCapture
GetMenu
GetMenuItemCount
GetSubMenu
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
OffsetRect
IsZoomed
SetRectEmpty
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
LoadStringA
wsprintfA
UnhookWindowsHookEx
AdjustWindowRectEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
SetWindowsHookExA
GetLastActivePopup
CharNextA
DestroyMenu
ReuseDDElParam
LoadMenuA
DeferWindowPos
BeginDeferWindowPos
RegisterClassA
IsWindowEnabled
GetWindowLongA
SetTimer
LoadImageA
FindWindowExA
IsIconic
ShowWindow
BringWindowToTop
SetForegroundWindow
LoadIconA
LoadCursorA
CreatePopupMenu
AppendMenuA
GetCursorPos
InvalidateRect
GetKeyState
GetClientRect
SetMenu
MessageBeep
MessageBoxA
EnableWindow
CreateWindowExA
UpdateWindow
GetParent
DestroyWindow
SendMessageA
GetSystemMetrics
IsWindow
GetWindowRect
GetMenuItemID
ClientToScreen
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode

gdi32

DeleteObject
CreateRectRgn
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
DPtoLP
LPtoDP
GetTextColor
GetBkColor
StretchDIBits
CreateCompatibleBitmap
GetCharWidthA
CreateFontA
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
CreateFontIndirectA
CreateDIBitmap
GetTextExtentPointA
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetViewportExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
SetMapMode
SetViewportOrgEx
SetBkMode
GetStockObject
RestoreDC
DeleteDC
SaveDC
SetTextColor
GetClipBox
SetBkColor
SelectObject
CreateBitmap
BitBlt
GetObjectA
CreateCompatibleDC
GetTextMetricsA
GetTextExtentPoint32A

comdlg32

GetOpenFileNameA
GetFileTitleA
PrintDlgA
GetSaveFileNameA
CommDlgExtendedError

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
RegQueryValueA
RegCloseKey
RegOpenKeyA
SetFileSecurityA
GetFileSecurityA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCreateKeyA
RegSetValueA

shell32

SHGetFileInfoA
ExtractIconA
DragFinish
DragQueryFileA
ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoTaskMemAlloc
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CLSIDFromProgID
CoCreateInstance
OleFlushClipboard
CoRegisterMessageFilter
CoRevokeClassObject
OleIsCurrentClipboard
CoGetClassObject
StgOpenStorageOnILockBytes
CLSIDFromString

olepro32

ord253

oleaut32

SysStringLen
SafeArrayGetLBound
VariantChangeType
SysAllocStringByteLen
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SysAllocStringLen
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantTimeToSystemTime
SysFreeString
SysAllocString
VariantInit
VariantClear

wininet

FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
FindCloseUrlCache
DeleteUrlCacheEntry

Exports

Exports

?interfaceMap@CCustomControlSite@@1UAFX_INTERFACEMAP@@B
AEB_HostGetFunc

Sections

.text
Size: 340KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.6rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dspack
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.6rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5699a040aff076ea01da1a778470c44d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

Exports

Exports

Sections

.text Size: 340KB - Virtual size: 336KB

.rdata Size: 80KB - Virtual size: 76KB

.data Size: 24KB - Virtual size: 182KB

.rsrc Size: 24KB - Virtual size: 21KB

.6rdata Size: 68KB - Virtual size: 68KB

.dspack Size: 9KB - Virtual size: 9KB

.6rdata Size: 68KB - Virtual size: 68KB

.text
Size: 340KB - Virtual size: 336KB

.rdata
Size: 80KB - Virtual size: 76KB

.data
Size: 24KB - Virtual size: 182KB

.rsrc
Size: 24KB - Virtual size: 21KB

.6rdata
Size: 68KB - Virtual size: 68KB

.dspack
Size: 9KB - Virtual size: 9KB

.6rdata
Size: 68KB - Virtual size: 68KB