62b27a01aeb061e589c84250fa861a93_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

62b27a01aeb061e589c84250fa861a93_JaffaCakes118
Size

788KB
MD5

62b27a01aeb061e589c84250fa861a93
SHA1

6abf76a07c756494f1c31c8e9e542db1377ec7d8
SHA256

c9ad102a7689b1729eda6e57f1f29dd90943f8b3d5d6105faf781cab455ca4da
SHA512

0c4d3f1cd0244a65c252c1b70540c9e80c7e9252c33be54da6b4e50ed347bf52de84203405aa10d6ab0092abc7efd2a7ca1b192e554714eb9131fb24a5920e59
SSDEEP

12288:pctwx+T+khd9i8vgK0gtQA7Mcg4ECDbFGUU4+bYBRPlMwIj7:pctwx+T+khd9iqD7MVHCDbxo4RPlyj7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62b27a01aeb061e589c84250fa861a93_JaffaCakes118

Files

62b27a01aeb061e589c84250fa861a93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a7f79261a454d73352deffeaf6518434

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetAttemptConnect
InternetCloseHandle
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
HttpEndRequestA
InternetWriteFile
HttpSendRequestExA
InternetReadFile
HttpQueryInfoA
InternetConnectA
InternetOpenA

kernel32

GetProcessVersion
GetCPInfo
GetOEMCP
GetFileTime
LocalFileTimeToFileTime
SetErrorMode
GetPrivateProfileIntA
GlobalSize
CopyFileA
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapAlloc
HeapFree
GetStartupInfoA
RaiseException
GetACP
TerminateProcess
ExitThread
SetStdHandle
HeapReAlloc
HeapSize
SetHandleCount
GetStdHandle
FatalAppExitA
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetEnvironmentVariableA
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
TlsGetValue
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetConsoleCtrlHandler
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
lstrcatA
ReadFile
CloseHandle
GetFileSize
CreateFileA
WriteFile
ResumeThread
CreateThread
GetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileStringA
LocalFree
FormatMessageA
GetLastError
LocalAlloc
SetFilePointer
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
TlsAlloc
SizeofResource
GlobalFlags
CreateEventA
SuspendThread
SetThreadPriority
SetEvent
WaitForSingleObject
GlobalAlloc
lstrcmpA
GetCurrentThread
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
SetEndOfFile
UnlockFile
MoveFileA
DeleteFileA
SetFileAttributesA
Sleep
GetCurrentDirectoryA
GetTickCount
GetCurrentProcessId
GetModuleFileNameA
LockFile
FlushFileBuffers
FileTimeToLocalFileTime
FileTimeToSystemTime
MulDiv
SetLastError
InterlockedDecrement
InterlockedIncrement
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
SetFileTime
DosDateTimeToFileTime
SystemTimeToFileTime
GetCurrentProcess
DuplicateHandle
GetFileType
SetCurrentDirectoryA
GetSystemInfo
CreateProcessA
ExitProcess
WideCharToMultiByte
lstrcpyA
LoadLibraryA
GetProcAddress
FreeLibrary
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
InitializeCriticalSection
GetCurrentThreadId
GetCommandLineA
lstrcmpiA
DeleteCriticalSection
HeapDestroy
GetModuleHandleA
FindFirstFileA
FindClose
CreateDirectoryA
FreeEnvironmentStringsW

user32

ReleaseCapture
WaitMessage
GetWindowThreadProcessId
WindowFromPoint
InsertMenuA
DeleteMenu
GetMenuStringA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
RegisterClipboardFormatA
RemoveMenu
PostThreadMessageA
DestroyIcon
DestroyMenu
LoadStringA
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
SetCursor
ShowOwnedPopups
PostQuitMessage
CharUpperA
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
OemToCharA
CharToOemA
wvsprintfA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
SetCapture
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
SetWindowRgn
GetWindowRect
InflateRect
GetSysColorBrush
LoadCursorA
GetDialogBaseUnits
GetDesktopWindow
PeekMessageA
GetClassNameA
FillRect
KillTimer
IsIconic
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
RedrawWindow
MessageBoxA
SetTimer
LoadIconA
CharNextA
FindWindowA
SetForegroundWindow
LoadImageA
GetDC
ReleaseDC
PtInRect
GetCursorPos
ScreenToClient
DrawFocusRect
GetSysColor
DrawTextA
InvalidateRect
GetSystemMetrics
SendMessageA
EnableWindow
IsWindow
PostMessageA
GetParent
IsWindowUnicode
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
IsChild

gdi32

SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
SelectPalette
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
ExtCreatePen
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
GetTextExtentPoint32A
GetTextMetricsA
GetMapMode
SetRectRgn
CombineRgn
DPtoLP
LPtoDP
CopyMetaFileA
CreateDCA
RestoreDC
SaveDC
StartDocA
DeleteDC
CreateRectRgnIndirect
PatBlt
CreateBitmap
GetClipBox
GetDCOrgEx
CreateFontIndirectA
CreateRoundRectRgn
CreateCompatibleBitmap
CreateSolidBrush
GetPixel
SelectObject
DeleteObject
SetTextColor
SetBkColor
GetObjectA
CreateCompatibleDC
BitBlt
GetStockObject
GetTextExtentPointA
CreateRectRgn
CreateDIBitmap
CreateFontA

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueA
RegQueryValueExA
RegOpenKeyExA
RegFlushKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyA
RegEnumKeyA
RegCloseKey
RegSetValueA
RegOpenKeyA

shell32

DragQueryFileA
DragFinish
SHGetFileInfoA
DragAcceptFiles
ShellExecuteA
ExtractIconA

comctl32

ord17
ord13
ord14
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Merge
ImageList_Read
ImageList_Write

oledlg

ord8

ole32

ReadClassStg
OleRegGetUserType
CoUninitialize
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
ReadFmtUserTypeStg
CreateStreamOnHGlobal
OleIsCurrentClipboard
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleRun
CoDisconnectObject
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
OleDuplicateData
CreateBindCtx
SetConvertStg
WriteFmtUserTypeStg
OleFlushClipboard
OleSetClipboard
CoRegisterMessageFilter
ReleaseStgMedium
CoTreatAsClass
StringFromCLSID
WriteClassStg

olepro32

ord253

oleaut32

SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromDate
VarDateFromStr
VarBstrFromCy
VarCyFromStr
SysStringByteLen
SysAllocStringByteLen
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysReAllocStringLen
VariantCopy
VariantChangeType
VariantTimeToSystemTime
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysStringLen
VariantClear
SysAllocStringLen
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString

ws2_32

recv
send
htons
connect
socket
closesocket
setsockopt
inet_ntoa
sendto
WSAGetLastError
recvfrom
WSAStartup
gethostbyname
inet_addr

Sections

.text
Size: 576KB - Virtual size: 575KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a7f79261a454d73352deffeaf6518434

Headers

File Characteristics

Imports

wininet

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

ws2_32

Sections

.text Size: 576KB - Virtual size: 575KB

.rdata Size: 88KB - Virtual size: 85KB

.data Size: 36KB - Virtual size: 66KB

.idata Size: 20KB - Virtual size: 16KB

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 40KB - Virtual size: 36KB

.text
Size: 576KB - Virtual size: 575KB

.rdata
Size: 88KB - Virtual size: 85KB

.data
Size: 36KB - Virtual size: 66KB

.idata
Size: 20KB - Virtual size: 16KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 40KB - Virtual size: 36KB