624e1cfe19d6109ddd4e2b4d95fb8945_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

624e1cfe19d6109ddd4e2b4d95fb8945_JaffaCakes118
Size

245KB
MD5

624e1cfe19d6109ddd4e2b4d95fb8945
SHA1

e31128f71a1392c6a9251cdfb82c0e0f4af744b4
SHA256

afe9e4e2a735dd8840eddaf02d6906048fb3d5f5046b324174942feeb77b6c99
SHA512

c1336026fa6d2663518b06f219067bda87992e85560d16d51dd29fe3aeaeea3769efe06271f284e57519dc50c1b892943bebd2ec487c218292a4b8a2416040fd
SSDEEP

6144:aY6tuDe5ZXpf3DyE9dbB6XMuthh0jey8vnWjv85Yy8YNKOq:7Z8Xp719fubh0j6WjkgXV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
624e1cfe19d6109ddd4e2b4d95fb8945_JaffaCakes118

Files

624e1cfe19d6109ddd4e2b4d95fb8945_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fdb5bfbc1119bd1d1e61ff19142045d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysAllocStringLen

comdlg32

PrintDlgA
GetSaveFileNameW
GetOpenFileNameW

gdi32

LPtoDP
RoundRect
SetLayout
RectVisible
Rectangle
GetViewportExtEx
CreateCompatibleDC
SaveDC
CreateRectRgnIndirect
GetTextExtentPoint32W
EndPage
GetPixel
StretchDIBits
SetPixel
StretchBlt
IntersectClipRect
SelectObject
ExcludeClipRect
TextOutA
DeleteObject
CreateDIBSection
GetCharacterPlacementW
GetDeviceCaps
RestoreDC
PatBlt
SetViewportExtEx
GetTextMetricsA
TextOutW
GetTextExtentPoint32A
GetTextAlign
StartDocA
SetMapMode
GetFontLanguageInfo
CreateHatchBrush
SetWindowExtEx
SetBkMode
EnumFontFamiliesExW
GetDIBits
CreateSolidBrush
CreateBitmap
EndDoc
GdiFlush
GetMapMode
GetLayout
DPtoLP
GetStockObject
GetKerningPairsA
GetClipBox
BitBlt
CombineRgn
SetViewportOrgEx
SetBkColor
GetCurrentObject
CreateDIBPatternBrushPt
SetStretchBltMode
CreateFontA
GetWindowExtEx
SetWindowOrgEx
SetTextAlign
CreatePen
SetBrushOrgEx
GetObjectA
GetWindowOrgEx
SetTextColor
CreatePatternBrush
GetGlyphOutlineW
GetTextExtentExPointW
CreateCompatibleBitmap
StartPage
DeleteDC
AddFontMemResourceEx
EnumFontFamiliesExA

winmm

timeGetTime
timeSetEvent
PlaySoundA
timeGetDevCaps
timeKillEvent

oleacc

AccessibleObjectFromWindow
LresultFromObject

user32

UnregisterClassA
DestroyCaret
AdjustWindowRectEx
SetCursor
CreateWindowExA
CallNextHookEx
CountClipboardFormats
WindowFromPoint
SetActiveWindow
GetSysColorBrush
InvertRect
InflateRect
SetCapture
EnumClipboardFormats
IsWindowUnicode
GetDC
SetForegroundWindow
ReleaseCapture
MessageBeep
GetWindowLongW
DefWindowProcW
DispatchMessageA
EnableMenuItem
ScrollDC
MapWindowPoints
PeekMessageA
SendMessageA
UpdateWindow
InvalidateRect
DrawIconEx
GetWindowDC
IsIconic
ReleaseDC
GetWindowLongA
PostMessageW
RegisterClipboardFormatW
DialogBoxIndirectParamW
RegisterClassExA
SetWindowLongA
EndPaint
MoveWindow
EndDialog
CreateCursor
GetMonitorInfoW
GetKeyState
GetClientRect
IsWindowVisible
CreateIconFromResourceEx
RegisterWindowMessageA
AnimateWindow
GetSystemMenu
LoadIconW
CreateWindowExW
PostQuitMessage
RegisterWindowMessageW
GetScrollInfo
PtInRect
KillTimer
OpenClipboard
GetWindowThreadProcessId
EnableWindow
SendMessageTimeoutA
SetWindowPos
IsWindowEnabled
DrawFrameControl
CloseClipboard
GetSysColor
DrawTextW
GetParent
SendMessageW
PostMessageA
GetWindowPlacement
GetFocus
GetDoubleClickTime
CopyRect
GetIconInfo
LoadCursorFromFileA
GetWindow
SetFocus
IsChild
FillRect
EqualRect
EndDeferWindowPos
SetScrollInfo
GetGuiResources
SetClipboardData
SetTimer
SetWindowTextW
GetClipboardSequenceNumber
GetCursorPos
LoadCursorW
DeferWindowPos
IsWindow
GetWindowRect
DestroyWindow
DefWindowProcA
SetCaretPos
GetDlgCtrlID
GetKeyboardLayout
GetDesktopWindow
GetClassLongA
GetSystemMetrics
CreateCaret
GetMessageA
MonitorFromWindow
BeginPaint
GetWindowTextW
GetUpdateRect
ShowWindow
SystemParametersInfoA
SetWindowsHookExW
GetDialogBaseUnits
RegisterClassExW
NotifyWinEvent
GetActiveWindow
OffsetRect
ScrollWindowEx
TranslateMessage
CallWindowProcW
GetCapture
GetCaretBlinkTime
LoadCursorA
SetWindowLongW
GetMenuState
DrawTextA
GetAsyncKeyState
FlashWindow
GetClipboardData
UnregisterClassW
UnhookWindowsHookEx
CreateDialogIndirectParamW
IsClipboardFormatAvailable
DestroyIcon
EmptyClipboard
BeginDeferWindowPos
RegisterClassW
RegisterClassA
GetClassInfoExW
LoadStringW
DrawEdge

kernel32

GetSystemTimeAsFileTime
GetCurrencyFormatW
GetModuleHandleW
CreateFileW
GetTimeZoneInformation
GetStdHandle
GetNumberFormatW
AllocConsole
FindResourceExW
FlushInstructionCache
SetEndOfFile
CreateMutexA
GetComputerNameA
FindResourceA
SetLastError
MulDiv
IsDebuggerPresent
ReadFile
SystemTimeToFileTime
GetTimeFormatW
MapViewOfFile
LoadLibraryExW
VirtualAlloc
lstrlenA
TlsAlloc
CloseHandle
SetHandleInformation
DeleteCriticalSection
GetDateFormatW
EnterCriticalSection
HeapFree
RaiseException
FlushFileBuffers
FindResourceW
UnmapViewOfFile
FlushViewOfFile
VirtualFree
GlobalAlloc
FreeLibrary
TlsGetValue
GlobalSize
lstrlenW
ProcessIdToSessionId
TlsSetValue
SetThreadLocale
FindClose
GetCurrentThreadId
WaitForMultipleObjects
HeapDestroy
GetFileSize
CreateFileMappingA
HeapReAlloc
GetThreadLocale
CompareStringW
LockResource
HeapSize
CreateEventA
GlobalUnlock
TlsFree
FileTimeToSystemTime
CreateFileA
GetSystemTime
WriteFile
IsProcessorFeaturePresent
HeapAlloc
GetUserDefaultLCID
GetLocalTime
OutputDebugStringW
GetTempFileNameA
CreateThread
FindFirstFileW
CreatePipe
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTempPathA
WaitForSingleObject
LeaveCriticalSection
GlobalFree
SizeofResource
LocalAlloc
SetFilePointer
DisableThreadLibraryCalls
GetProcessHeap
ExitThread
LoadResource
WideCharToMultiByte
FormatMessageA
SetStdHandle
FindNextFileW
GlobalLock
GetCurrentProcess

comctl32

ImageList_DrawEx
ImageList_GetImageInfo
ImageList_GetIconSize

wininet

InternetGetLastResponseInfoA
InternetErrorDlg
HttpOpenRequestA
InternetReadFile
HttpSendRequestA
InternetCombineUrlA
InternetCloseHandle
InternetQueryOptionA
InternetConnectA
InternetOpenA
InternetSetOptionA
HttpQueryInfoA

imm32

ImmSetCandidateWindow
ImmIsIME
ImmNotifyIME
ImmAssociateContextEx
ImmReleaseContext
ImmAssociateContext
ImmGetContext
ImmGetCompositionStringW

ole32

DoDragDrop
RevokeDragDrop
ReleaseStgMedium
CoCreateInstance
RegisterDragDrop
OleInitialize
CoCreateGuid

urlmon

FindMimeFromData

mscms

CreateColorTransformA
SetColorProfileElement
InternalGetPS2ColorRenderingDictionary
GetColorDirectoryA
GetPS2ColorRenderingDictionary
GetStandardColorSpaceProfileW
SetColorProfileElementReference
UninstallColorProfileW
CreateDeviceLinkProfile

tsbyuv

DriverProc

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.KNE
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.e
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 212KB - Virtual size: 407KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fdb5bfbc1119bd1d1e61ff19142045d2

Headers

DLL Characteristics

File Characteristics

Imports

oleaut32

comdlg32

gdi32

winmm

oleacc

user32

kernel32

comctl32

wininet

imm32

ole32

urlmon

mscms

tsbyuv

Sections

.text Size: 16KB - Virtual size: 16KB

.KNE Size: 1KB - Virtual size: 3KB

.rdata Size: 10KB - Virtual size: 9KB

.e Size: 1KB - Virtual size: 1KB

.data Size: 212KB - Virtual size: 407KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 16KB - Virtual size: 16KB

.KNE
Size: 1KB - Virtual size: 3KB

.rdata
Size: 10KB - Virtual size: 9KB

.e
Size: 1KB - Virtual size: 1KB

.data
Size: 212KB - Virtual size: 407KB

.rsrc
Size: 3KB - Virtual size: 2KB