5ffd1d342bbb197a803b1a05bcc22b9c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5ffd1d342bbb197a803b1a05bcc22b9c_JaffaCakes118
Size

300KB
MD5

5ffd1d342bbb197a803b1a05bcc22b9c
SHA1

b944693a1be0a51fe21bba0ea5bf151e515c4d31
SHA256

1f3293dcf8328a86867d789502fd52f6d8ae56dd148bc1e694e15c56931bba4e
SHA512

a2a1fc95f43e47a58c2b3af8ea2943cf65455b2bd84aa83e82aae958b194dbf1a1f9a380e71cde2b1987f648d34a165e21083e08d1029ee013ad90f7b2633c0e
SSDEEP

6144:VtqDEl0Xg+1kt5VkfgTPwfTfd4kSCRsQGnTmn:VEJ1kt5XTPwb14kZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ffd1d342bbb197a803b1a05bcc22b9c_JaffaCakes118

Files

5ffd1d342bbb197a803b1a05bcc22b9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b231b963534e191d8b2392932845976

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mixerGetDevCapsA
mixerGetNumDevs
CloseDriver
OpenDriver
SendDriverMessage

setupapi

SetupFindNextLine
SetupCloseInfFile
SetupFindFirstLineA
SetupOpenInfFileA
SetupGetStringFieldA

kernel32

LockFile
SetEndOfFile
GetTickCount
GetFileSize
UnlockFile
GetVolumeInformationA
GetFullPathNameA
GetFileTime
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
TerminateProcess
HeapFree
GetTimeZoneInformation
HeapReAlloc
HeapSize
SetFilePointer
FlushFileBuffers
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GlobalHandle
HeapAlloc
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
WriteFile
GetStringTypeW
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
ReadFile
CreateFileA
DuplicateHandle
SetErrorMode
GetOEMCP
GetCPInfo
GetThreadLocale
SizeofResource
GetProcessVersion
GetCurrentDirectoryA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
LCMapStringW
LCMapStringA
GlobalReAlloc
lstrcmpiA
lstrcatA
GetModuleFileNameA
GetPrivateProfileSectionA
MoveFileExA
WritePrivateProfileStringA
GetShortPathNameA
GetSystemDirectoryA
GetWindowsDirectoryA
Sleep
GetVersion
RemoveDirectoryA
SetFileAttributesA
GetCurrentProcess
GetLastError
CloseHandle
DeleteFileA
GetFileAttributesA
GetProfileStringA
TlsFree
FileTimeToLocalFileTime
TlsAlloc
LocalAlloc
LeaveCriticalSection
FileTimeToSystemTime
EnterCriticalSection
MulDiv
DeleteCriticalSection
InitializeCriticalSection
GlobalFindAtomA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFree
GetModuleHandleA
GlobalUnlock
LoadResource
LockResource
FindResourceA
GlobalDeleteAtom
GlobalLock
GlobalAlloc
FormatMessageA
GetCurrentThread
GetCurrentThreadId
FindFirstFileA
LocalFree
FindNextFileA
lstrcpynA
SetLastError
FindClose
InterlockedDecrement
WideCharToMultiByte
GetDriveTypeA
InterlockedIncrement
GetVersionExA
FreeLibrary
LoadLibraryA
GetProcAddress
lstrcpyA
MultiByteToWideChar
lstrlenA
GetEnvironmentVariableA
lstrcmpA
HeapDestroy
GetACP
GetStringTypeA

user32

MessageBeep
GetNextDlgGroupItem
CharUpperA
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
UpdateWindow
MapWindowPoints
GetSysColor
AdjustWindowRectEx
ScreenToClient
CopyRect
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
CharNextA
CopyAcceleratorTableA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetDesktopWindow
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
LoadStringA
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
GetSysColorBrush
PtInRect
GetClassNameA
CallWindowProcA
GetPropA
PostQuitMessage
wsprintfA
EnableWindow
SetRect
GetWindowRect
InvalidateRect
GetSystemMenu
AppendMenuA
GetSystemMetrics
GetClientRect
DrawIcon
LoadIconA
PostMessageA
MessageBoxA
ExitWindowsEx
FindWindowA
IsIconic
ShowWindow
SetForegroundWindow
SendMessageA
LoadCursorA
DestroyMenu
SetFocus
GetDlgCtrlID
SetWindowLongA
MoveWindow
GetTopWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode

gdi32

GetObjectA
SetBkColor
SetTextColor
DeleteDC
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
GetClipBox
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
RectVisible
TextOutA
PtVisible
Escape
ExtTextOutA
GetTextColor
DPtoLP
LPtoDP
GetBkColor
GetMapMode
PatBlt
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueExA
RegEnumKeyExA
AdjustTokenPrivileges
RegSetValueExA
RegDeleteKeyA
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA

shell32

ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
CoRegisterMessageFilter
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
CLSIDFromProgID
OleUninitialize
OleInitialize
CoInitialize
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoTaskMemFree
CLSIDFromString

olepro32

ord253

oleaut32

SysFreeString
VariantTimeToSystemTime
SysAllocStringByteLen
SysStringLen
SysAllocString
SysAllocStringLen
VariantChangeType
VariantClear
VariantCopy

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3b231b963534e191d8b2392932845976

Headers

File Characteristics

Imports

winmm

setupapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 168KB - Virtual size: 167KB

.rdata Size: 40KB - Virtual size: 38KB

.data Size: 20KB - Virtual size: 35KB

.rsrc Size: 28KB - Virtual size: 27KB

.lrdata Size: 20KB - Virtual size: 20KB

.text
Size: 168KB - Virtual size: 167KB

.rdata
Size: 40KB - Virtual size: 38KB

.data
Size: 20KB - Virtual size: 35KB

.rsrc
Size: 28KB - Virtual size: 27KB

.lrdata
Size: 20KB - Virtual size: 20KB