6537bb0eab3df04170d9ec33c18b46b6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6537bb0eab3df04170d9ec33c18b46b6_JaffaCakes118
Size

257KB
MD5

6537bb0eab3df04170d9ec33c18b46b6
SHA1

952e0468b7a19a67f9b74c7a28a4ff8b305f7071
SHA256

99e067a0418ac7f0bf279abe0b805397b1c3a8560a8e488980bf9d7382b0a5b9
SHA512

85f27fff27115dbcf64ae191cae7806d4a3b745f17771eb5d8ce5a5cc1f33ee518f250a3bf12c62360a6ddd72a770b3a33422e63207230107eaee223e321980b
SSDEEP

3072:miE2T8PdPOW2PS45BU6NVDQlmrT9Ji6wKYyiFXHsNwpjsFbAPICnNqiG6PA/Ry:h35K6CUElAHKDyqcGAFSPMiBL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6537bb0eab3df04170d9ec33c18b46b6_JaffaCakes118

Files

6537bb0eab3df04170d9ec33c18b46b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

369b21a1c2552867aef17cb383ae4abe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GlobalUnlock
lstrcpyA
MultiByteToWideChar
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcatA
GetVersion
SetLastError
MulDiv
LocalFree
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
lstrlenA
WideCharToMultiByte
TlsGetValue
GlobalFlags
WritePrivateProfileStringA
GetLastError
GetProcessVersion
SizeofResource
GetCPInfo
GetOEMCP
SetErrorMode
GetCurrentProcess
ReadFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
LocalReAlloc
lstrcpynA
GetProfileStringA
InterlockedExchange
InterlockedIncrement
InterlockedDecrement
RtlUnwind
ExitProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
GetStartupInfoA
GetCommandLineA
HeapSize
GetACP
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalAlloc
GlobalLock
lstrcmpiA
GlobalDeleteAtom
lstrcmpA
GlobalMemoryStatus
GetCurrentThread
GetCurrentThreadId
EnterCriticalSection
GetVersionExA
GetPrivateProfileStringA
GetComputerNameA
LeaveCriticalSection
WaitForSingleObject
FreeLibrary
DeleteCriticalSection
InitializeCriticalSection
LockResource
FindResourceA
LoadResource
ExpandEnvironmentStringsA
CreateFileA
WriteFile
CreateProcessA
CopyFileA
CreateThread
TerminateThread
DeleteFileA
TerminateProcess
GetSystemDirectoryA
OpenProcess
Sleep
GetProcAddress
GetTickCount
LoadLibraryA
GetTempPathA
GetModuleHandleA
GetModuleFileNameA
CloseHandle

advapi32

RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA

comctl32

gdi32

GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateDIBitmap
PatBlt
GetClipBox
SetTextColor
SetBkColor
GetObjectA
RestoreDC
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateSolidBrush
SetBkMode
GetStockObject
SetViewportOrgEx
SetMapMode
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
GetDeviceCaps
DeleteObject
DeleteDC
SaveDC
CreateBitmap

shell32

ShellExecuteA

user32

GrayStringA
EndDialog
GetWindowRect
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
RegisterWindowMessageA
GetWindow
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
GetDlgCtrlID
GetWindowTextA
GetWindowTextLengthA
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
GetClassInfoA
wsprintfA
WinHelpA
GetCapture
GetTopWindow
CopyRect
ScreenToClient
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
IsDialogMessageA
ShowWindow
LoadStringA
DestroyMenu
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
CreateDialogIndirectParamA
LoadCursorA
GetClassNameA
PtInRect
GetSysColorBrush
InvalidateRect
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
SetCursor
PostQuitMessage
GetWindowLongA
DefWindowProcA
SetWindowLongA
IsWindow
UnregisterClassA
RegisterClassA
CreateWindowExA
IsWindowEnabled
GetActiveWindow
SetActiveWindow
GetParent
PeekMessageA
FindWindowA
SetWindowTextA
SetWindowPos
FindWindowExA
PostMessageA
EnumChildWindows
DestroyWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
LoadIconA
MessageBoxA
EnableWindow
CloseWindow
GetWindowThreadProcessId
IsWindowVisible
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
InflateRect
CharNextA
IsWindowUnicode

wininet

InternetOpenUrlA
InternetConnectA
InternetCrackUrlA
HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
InternetReadFile
InternetOpenA

winmm

mciSendStringA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

ws2_32

WSASocketA

Sections

code
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avp
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

369b21a1c2552867aef17cb383ae4abe

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

gdi32

shell32

user32

wininet

winmm

winspool.drv

ws2_32

Sections

code Size: 248KB - Virtual size: 248KB

.rsrc Size: 2KB - Virtual size: 4KB

.avp Size: 6KB - Virtual size: 8KB

code
Size: 248KB - Virtual size: 248KB

.rsrc
Size: 2KB - Virtual size: 4KB

.avp
Size: 6KB - Virtual size: 8KB