60b75c2068aef883dea98b45ad2ccd5a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

60b75c2068aef883dea98b45ad2ccd5a_JaffaCakes118
Size

1.2MB
MD5

60b75c2068aef883dea98b45ad2ccd5a
SHA1

eb35c5fdb970a4ad39ef892253e4910b9713dc8a
SHA256

d345503e3d67215aabbf459c3796e782cb71d99f5e32e72b467aab8229afeb05
SHA512

7a35af5639a1dc95a07c13b18d74f44fc6500aefaf08723883059c60fb741c8e804f8c80a43f5247090f0fcf02c238f458c99337f517f3066f481c572ce76a46
SSDEEP

24576:KAssimsLWIkonIzXY0R/3B2bAIlzLVhVPOVu:Lgt6XYqklVjPOVu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60b75c2068aef883dea98b45ad2ccd5a_JaffaCakes118

Files

60b75c2068aef883dea98b45ad2ccd5a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc1103ec42531760225bf40874579d4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

advapi32

RegDeleteValueA
RegDeleteKeyA
GetFileSecurityA
SetFileSecurityA
RegQueryValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCreateKeyExA
RegSetValueA
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegSetValueExA
RegCreateKeyA

kernel32

SizeofResource
TlsAlloc
GlobalHandle
TlsFree
GlobalFlags
GlobalReAlloc
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
HeapFree
HeapAlloc
TlsSetValue
GetTempFileNameA
GetLocalTime
HeapReAlloc
GetACP
GetStartupInfoA
GetCommandLineA
RaiseException
CreateThread
ExitThread
LocalAlloc
GetDiskFreeSpaceA
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
GetFileTime
CreateFileA
GetStdHandle
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
CompareStringA
CompareStringW
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
SuspendThread
GetCurrentThread
CreateEventA
WaitForSingleObject
SetThreadPriority
SetEvent
GetStringTypeExA
GetProfileIntA
GetThreadLocale
SetEndOfFile
GetFullPathNameA
GetVolumeInformationA
SetFilePointer
UnlockFile
LockFile
DuplicateHandle
WriteFile
ReadFile
SetLastError
lstrcmpA
HeapSize
SetStdHandle
GetFileSize
GetLocaleInfoA
FindFirstFileA
FindNextFileA
FindClose
GlobalLock
GlobalSize
GlobalUnlock
InterlockedDecrement
InterlockedIncrement
GetTickCount
CopyFileA
GetPrivateProfileSectionA
GetPrivateProfileStringA
FreeLibrary
LoadLibraryA
GetProcAddress
GetFileAttributesA
MultiByteToWideChar
GetProfileStringA
FileTimeToLocalFileTime
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GlobalFree
LockResource
FindResourceA
LoadResource
GetVersion
GetWindowsDirectoryA
CreateMutexA
ReleaseMutex
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
GetCurrentDirectoryA
MulDiv
WritePrivateProfileStringA
FileTimeToSystemTime
WideCharToMultiByte
ExitProcess
SetFileTime
FlushFileBuffers
SystemTimeToFileTime
LocalFileTimeToFileTime
DeleteFileA
ResumeThread
MoveFileA
GlobalAlloc
GetSystemTime
GetLastError
lstrcatA
WinExec
GetShortPathNameA
lstrlenA
FormatMessageA
LocalFree
GetSystemDefaultLangID
lstrcpyA
GetPrivateProfileIntA
Sleep
GetExitCodeThread
GetVersionExA
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
GetTempPathA
CreateDirectoryA
DeleteCriticalSection
GetCurrentProcess
lstrcpynA
InitializeCriticalSection
SetHandleCount
TerminateProcess
GetTimeZoneInformation
LCMapStringW

user32

GetDlgItemInt
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
GetMenuCheckMarkDimensions
wvsprintfA
WindowFromPoint
LoadAcceleratorsA
TranslateAcceleratorA
SetMenu
ReuseDDElParam
UnpackDDElParam
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
MapDialogRect
LoadStringA
CharUpperA
IsClipboardFormatAvailable
ValidateRect
TranslateMessage
GetMessageA
PostQuitMessage
SetWindowContextHelpId
IsZoomed
UnionRect
GetClassNameA
GetSysColorBrush
GetDCEx
LockWindowUpdate
DestroyIcon
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
PostThreadMessageA
SetParent
GetScrollPos
SetScrollPos
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetWindowTextLengthA
GetDlgCtrlID
DefWindowProcA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
IntersectRect
GetNextDlgTabItem
PeekMessageA
SendDlgItemMessageA
CreateDialogIndirectParamA
IsWindowEnabled
SystemParametersInfoA
CopyIcon
SetRect
RedrawWindow
BroadcastSystemMessage
RegisterWindowMessageA
DestroyMenu
MessageBoxExA
IsChild
CreatePopupMenu
InsertMenuA
DdeGetLastError
DdeQueryStringA
DdeCreateDataHandle
DdePostAdvise
DdeGetData
DdeFreeDataHandle
DdeNameService
GetScrollRange
DrawFocusRect
CallWindowProcA
ShowWindow
CreateWindowExA
DrawMenuBar
AppendMenuA
GetWindowTextA
ShowOwnedPopups
TrackPopupMenu
GetWindowPlacement
SetWindowPlacement
GetMenu
wsprintfA
MessageBeep
SetActiveWindow
ClientToScreen
ReleaseCapture
SetCapture
EmptyClipboard
SetClipboardData
GetForegroundWindow
GetParent
ChangeClipboardChain
DeleteMenu
SetMenuDefaultItem
RemoveMenu
GetFocus
SetClipboardViewer
GetDesktopWindow
GetKeyState
GetMenuItemCount
GetMenuItemID
GetMenuStringA
ModifyMenuA
GetMenuItemInfoA
SetMenuItemInfoA
FindWindowExA
SetWindowTextA
FindWindowA
BringWindowToTop
SetForegroundWindow
ExitWindowsEx
DdeInitializeA
DdeCreateStringHandleA
DdeConnect
DdeClientTransaction
DdeDisconnect
DdeFreeStringHandle
DdeUninitialize
UpdateWindow
GetWindowLongA
SetWindowLongA
GetWindowDC
InflateRect
LoadMenuA
MapWindowPoints
DeferWindowPos
DispatchMessageA
AdjustWindowRectEx
BeginDeferWindowPos
GetScrollInfo
SetScrollInfo
EndDialog
GetActiveWindow
DrawFrameControl
GetSubMenu
GetSystemMetrics
GetAsyncKeyState
PtInRect
PostMessageA
RegisterClipboardFormatA
SetFocus
OpenClipboard
GetClipboardData
CloseClipboard
LoadIconA
GetCursorPos
SetTimer
FillRect
IsIconic
GetDC
OffsetRect
ReleaseDC
LoadBitmapA
IsWindowVisible
EqualRect
InvalidateRect
GetMessagePos
IsRectEmpty
LoadCursorA
SetCursor
CopyRect
MessageBoxA
KillTimer
GetWindow
GetWindowRect
ScreenToClient
GetSysColor
DrawEdge
IsWindow
SetWindowPos
SetRectEmpty
GetClientRect
EnableWindow
GetDlgItem
SendMessageA
DestroyWindow
MoveWindow
EndDeferWindowPos
ShowCaret
DefDlgProcA
UnregisterClassA
HideCaret
ExcludeUpdateRgn
IsWindowUnicode

gdi32

GetTextExtentPointA
CreateBitmap
BitBlt
CreateDIBitmap
CreateCompatibleBitmap
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
SetBkMode
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
Escape
GetTextMetricsA
StretchDIBits
GetCharWidthA
CreateFontA
GetTextColor
GetBkColor
LPtoDP
SelectPalette
RestoreDC
SaveDC
DPtoLP
ExtTextOutA
CreateRectRgnIndirect
CreateRectRgn
CombineRgn
CreatePatternBrush
GetMapMode
SetRectRgn
SetTextColor
GetClipBox
SetBkColor
GetTextExtentPoint32A
Rectangle
GetObjectA
CreateFontIndirectA
PatBlt
GetDeviceCaps
RealizePalette
CreatePalette
MoveToEx
LineTo
CreatePen
SelectObject
DeleteDC
GetStockObject
DeleteObject
CreateCompatibleDC
CreateSolidBrush
SetMapMode

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

shell32

ExtractIconA
DragQueryFileA
Shell_NotifyIconA
DragFinish
SHFileOperationA
ShellExecuteA
SHGetFileInfoA
SHGetDesktopFolder
SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListA

comctl32

ord17
ImageList_ReplaceIcon
CreatePropertySheetPageA
DestroyPropertySheetPage
ImageList_AddMasked
ImageList_Create
ImageList_Draw
ImageList_SetOverlayImage
ImageList_LoadImageA
PropertySheetA
ImageList_Destroy

oledlg

ord8

ole32

CoFreeUnusedLibraries
CoTaskMemAlloc
CreateStreamOnHGlobal
StringFromGUID2
CoCreateGuid
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoTaskMemFree
OleGetClipboard
CLSIDFromProgID
CLSIDFromString
OleRun
CoCreateInstance
OleInitialize
OleUninitialize
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject

olepro32

ord251
ord253

oleaut32

SysStringLen
VariantTimeToSystemTime
VarDateFromStr
SysAllocStringByteLen
VariantCopy
SysAllocString
VariantClear
VariantChangeType
SysAllocStringLen
SysFreeString

wsock32

WSASetLastError
connect
ioctlsocket
WSAStartup
closesocket
WSACleanup
htons
send
WSAGetLastError
WSAAsyncSelect
socket
accept
listen
getsockname
bind
htonl
setsockopt
inet_addr
ntohs
gethostbyname
recv

wininet

InternetGetLastResponseInfoA
HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetCrackUrlA
InternetSetStatusCallback
InternetSetFilePointer
InternetCloseHandle
InternetOpenA
InternetSetOptionExA
InternetGetCookieA
InternetCanonicalizeUrlA

Sections

.text
Size: 840KB - Virtual size: 838KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc1103ec42531760225bf40874579d4a

Headers

File Characteristics

Imports

winmm

advapi32

kernel32

user32

gdi32

comdlg32

winspool.drv

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

wininet

Sections

.text Size: 840KB - Virtual size: 838KB

.rdata Size: 156KB - Virtual size: 154KB

.data Size: 36KB - Virtual size: 56KB

.rsrc Size: 180KB - Virtual size: 179KB

.text
Size: 840KB - Virtual size: 838KB

.rdata
Size: 156KB - Virtual size: 154KB

.data
Size: 36KB - Virtual size: 56KB

.rsrc
Size: 180KB - Virtual size: 179KB