60f1a7cfb83cd11fab72c459856aff41_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

60f1a7cfb83cd11fab72c459856aff41_JaffaCakes118
Size

280KB
MD5

60f1a7cfb83cd11fab72c459856aff41
SHA1

03c831788fcfc44e074f5b9563400916b030443a
SHA256

8ca50f6fec7154c95a13db6df5714ccd5990568c1464b9655aa6fc9966cff021
SHA512

e46e4f00b21494aa0bcfb1eafa4e188d86c61070a1cef667674fbb21117a89b859ad42e6e704fdd5e8d4cb4ab1205d21565e30c260b4cfc72fbf8985363f0d0c
SSDEEP

3072:S+ufQ8l+KmiXoIYG1AjGOgFhfshOM7RPqXbfiifM0Tl8eMi/lKAgrFMdPoMrlri:SlviIYDGdfsh17RFnyr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60f1a7cfb83cd11fab72c459856aff41_JaffaCakes118

Files

60f1a7cfb83cd11fab72c459856aff41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a18c82be4443dd27526612602972a1bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
TerminateProcess
GetTimeZoneInformation
GetACP
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetStdHandle
LCMapStringA
LCMapStringW
GetDriveTypeA
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
RaiseException
HeapFree
HeapAlloc
InterlockedExchange
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
SizeofResource
GetOEMCP
GetCPInfo
GetProcessVersion
GetCurrentDirectoryA
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalFree
FindResourceA
LoadResource
LockResource
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetModuleHandleA
MulDiv
lstrlenW
GlobalLock
GlobalAlloc
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
lstrcmpiA
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
lstrcmpA
FormatMessageA
LocalFree
FindNextFileA
FindFirstFileA
SetLastError
FindClose
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
WinExec
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
CreateMutexA
GetLastError
GetProfileIntA
DeleteFileA
GetProfileStringA
WriteProfileStringA
Sleep
CopyFileA
GetSystemDirectoryA
GetModuleFileNameA
IsBadWritePtr

user32

CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
SendDlgItemMessageA
SetActiveWindow
ScreenToClient
CopyRect
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowPos
IntersectRect
GetWindowPlacement
OffsetRect
InflateRect
RegisterWindowMessageA
SystemParametersInfoA
GetWindow
SetFocus
GetDlgCtrlID
CharNextA
AdjustWindowRectEx
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
PostMessageA
FindWindowA
EnableWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
MessageBoxA
PostQuitMessage
CharUpperA
wsprintfA
LoadCursorA
CopyIcon
GetSysColor
InvalidateRect
IsWindow
SetWindowLongA
SetCursor
PtInRect
ReleaseCapture
RedrawWindow
SetCapture
MessageBeep
GetWindowRect
UpdateWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
SetTimer
DefDlgProcA
IsWindowUnicode
LoadIconA
GetSysColorBrush
GetClassNameA
GetDesktopWindow
WindowFromPoint
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
DestroyMenu
LoadStringA
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
GetDC
ReleaseDC
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
CallNextHookEx
IsChild
MapWindowPoints

gdi32

SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
GetMapMode
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
SelectObject
RestoreDC
SaveDC
DeleteDC
PatBlt
SetBkColor
SetTextColor
GetClipBox
DPtoLP
LPtoDP
CreateBitmap
CreateSolidBrush
GetObjectA
CreateFontIndirectA
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
GetStockObject

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
GetUserNameA

shell32

ShellExecuteA

comctl32

ImageList_ReplaceIcon
ord17
ImageList_Destroy
ImageList_Create

oledlg

ord8

ole32

OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SafeArrayAccessData
SysAllocStringLen
VariantClear
SysFreeString
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
VariantTimeToSystemTime
SysStringLen
SafeArrayUnaccessData

Sections

.text
Size: 192KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a18c82be4443dd27526612602972a1bc

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 192KB - Virtual size: 189KB

.rdata Size: 52KB - Virtual size: 48KB

.data Size: 12KB - Virtual size: 30KB

.rsrc Size: 20KB - Virtual size: 18KB

.text
Size: 192KB - Virtual size: 189KB

.rdata
Size: 52KB - Virtual size: 48KB

.data
Size: 12KB - Virtual size: 30KB

.rsrc
Size: 20KB - Virtual size: 18KB