630d1e2b0e784b5c038c18f0361e2946_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

630d1e2b0e784b5c038c18f0361e2946_JaffaCakes118
Size

460KB
MD5

630d1e2b0e784b5c038c18f0361e2946
SHA1

911acf0a7621854f641e1c4f4ea209c8ba2e5e55
SHA256

665e4b74169bd817ae7756c30e6eda447d2f80cf7e0e11460074d8ed62327c68
SHA512

60267019d5109d943f405025e733b139e1ee86db3e813cc531ac9cabd045c76f0200910a45c4240265c81f67f4308276c84753e5c9380ac2ae9f2a5e928103e2
SSDEEP

12288:UEWnwhzR/pufdnMqKs6jOqabqWm48b5+RuYN/2sB126:UEiwhzFYfdtjV8gRuY2sB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
630d1e2b0e784b5c038c18f0361e2946_JaffaCakes118

Files

630d1e2b0e784b5c038c18f0361e2946_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3c737250d2aef55db40ea1e319b6e544

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiEnumDeviceInfo
SetupGetStringFieldA
SetupDiSetDeviceInstallParamsA
SetupFindFirstLineA
SetupDiClassGuidsFromNameA
SetupDiCreateDeviceInfoA
SetupDiGetDeviceInstallParamsA
SetupDiSetDeviceRegistryPropertyA
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoA
SetupDiSetSelectedDriverA
SetupDiOpenDevRegKey
SetupOpenInfFileA
SetupCloseInfFile
SetupFindNextLine

kernel32

LockFile
WriteFile
SetEndOfFile
MoveFileA
FlushFileBuffers
FindClose
SetFilePointer
UnlockFile
DeleteFileA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
FindFirstFileA
GetFileSize
GetFileTime
LocalFileTimeToFileTime
GetVolumeInformationA
SetFileTime
GetFileAttributesA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCommandLineA
HeapAlloc
HeapFree
RaiseException
RtlUnwind
CreateThread
ExitThread
SystemTimeToFileTime
HeapReAlloc
ExitProcess
TerminateProcess
GetACP
GetTimeZoneInformation
GetSystemTime
GetLocalTime
SetFileAttributesA
Sleep
SetHandleCount
GetStdHandle
DuplicateHandle
ReadFile
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
IsBadReadPtr
IsBadCodePtr
SetConsoleCtrlHandler
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
GetModuleFileNameA
lstrcpynA
SetLastError
GetLastError
CloseHandle
GetCurrentProcess
GetWindowsDirectoryA
LocalAlloc
LocalFree
CreateFileA
WritePrivateProfileStringA
SetErrorMode
GetCurrentDirectoryA
GetOEMCP
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalFlags
GetCPInfo
GetCurrentThread
GetProcessVersion
lstrcmpA
MulDiv
FindResourceA
LoadLibraryA
FreeLibrary
lstrcatA
LoadResource
LockResource
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpiA
lstrcpyA
GlobalFindAtomA
GlobalDeleteAtom
CreateEventA
GetModuleHandleA
GetProcAddress
SetThreadPriority
SuspendThread
GetCurrentThreadId
WaitForSingleObject
ResumeThread
SetEvent
InterlockedIncrement
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
GetVersion
lstrlenA
TlsSetValue
TlsGetValue
LocalReAlloc
GlobalReAlloc
EnterCriticalSection
GlobalAlloc
TlsFree
GlobalLock
LeaveCriticalSection
GetFileType
GlobalHandle
GetStartupInfoA
HeapSize
FatalAppExitA

user32

AdjustWindowRectEx
IsWindow
SetActiveWindow
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
PostMessageA
LoadIconA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
GetDesktopWindow
PostQuitMessage
DestroyMenu
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
ShowOwnedPopups
SetCursor
InsertMenuA
DeleteMenu
GetMenuStringA
CharUpperA
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
ScreenToClient
SetFocus
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
EqualRect
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowRect
GetSystemMetrics
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
GetScrollPos
SetScrollPos
GetClassInfoA
SetWindowsHookExA
OemToCharA
CharToOemA
LoadStringA
UnhookWindowsHookEx
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SendMessageA
MessageBoxA
EnableWindow
LoadBitmapA
GetMenuCheckMarkDimensions
GetWindowPlacement

gdi32

DeleteObject
RestoreDC
SaveDC
StartDocA
DeleteDC
SelectObject
GetDeviceCaps
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
SetPolyFillMode
SetMapMode
SetViewportOrgEx
SetStretchBltMode
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
OffsetWindowOrgEx
SetWindowExtEx
SetWindowOrgEx
SelectClipRgn
ExcludeClipRect
ScaleWindowExtEx
OffsetClipRgn
MoveToEx
IntersectClipRect
SetTextAlign
SetTextJustification
LineTo
SetMapperFlags
GetCurrentPositionEx
SetTextCharacterExtra
SetArcDirection
PolyDraw
ArcTo
SetColorAdjustment
PolyBezierTo
PolylineTo
CreateRectRgn
SelectClipPath
GetClipRgn
PlayMetaFileRecord
SetBkMode
ExtSelectClipRgn
EnumMetaFile
SelectPalette
GetObjectType
PlayMetaFile
GetViewportExtEx
GetStockObject
CreatePen
ExtCreatePen
GetWindowExtEx
CreateHatchBrush
CreatePatternBrush
CreateSolidBrush
PtVisible
RectVisible
CreateDIBPatternBrushPt
ExtTextOutA
Escape
TextOutA
CreateBitmap
SetROP2

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
OpenProcessToken
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegSetValueExA
AdjustTokenPrivileges
RegQueryValueExA
LookupPrivilegeValueA
RegCreateKeyExA
RegRestoreKeyA
RegCloseKey

shell32

SHGetFileInfoA
DragAcceptFiles

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0x0x6
Size: 2KB - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.0x0x5
Size: 2KB - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 2KB - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 2KB - Virtual size: 919B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ik
Size: 2KB - Virtual size: 107B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ocode
Size: 2KB - Virtual size: 158B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kpack0
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gddg8
Size: 2KB - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iaoq
Size: 2KB - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oxcodex
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0x0x1
Size: 2KB - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.0x0x2
Size: 2KB - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.0x0x
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.0x0x3
Size: 2KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.0x0x4
Size: 2KB - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c737250d2aef55db40ea1e319b6e544

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 2KB - Virtual size: 1KB

.0x0x6 Size: 2KB - Virtual size: 120B

.0x0x5 Size: 2KB - Virtual size: 84B

.tls Size: 2KB - Virtual size: 13B

.ndata Size: 2KB - Virtual size: 919B

.ik Size: 2KB - Virtual size: 107B

.ocode Size: 2KB - Virtual size: 158B

.kpack0 Size: 194KB - Virtual size: 194KB

.gddg8 Size: 2KB - Virtual size: 356B

.iaoq Size: 2KB - Virtual size: 60B

.oxcodex Size: 4KB - Virtual size: 2KB

.0x0x1 Size: 2KB - Virtual size: 512B

.0x0x2 Size: 2KB - Virtual size: 512B

.0x0x Size: 196KB - Virtual size: 196KB

.0x0x3 Size: 2KB - Virtual size: 160B

.0x0x4 Size: 2KB - Virtual size: 64B

.CRT Size: 2KB - Virtual size: 12B

.rsrc Size: 12KB - Virtual size: 10KB

.reloc Size: 2KB - Virtual size: 462B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 2KB - Virtual size: 1KB

.0x0x6
Size: 2KB - Virtual size: 120B

.0x0x5
Size: 2KB - Virtual size: 84B

.tls
Size: 2KB - Virtual size: 13B

.ndata
Size: 2KB - Virtual size: 919B

.ik
Size: 2KB - Virtual size: 107B

.ocode
Size: 2KB - Virtual size: 158B

.kpack0
Size: 194KB - Virtual size: 194KB

.gddg8
Size: 2KB - Virtual size: 356B

.iaoq
Size: 2KB - Virtual size: 60B

.oxcodex
Size: 4KB - Virtual size: 2KB

.0x0x1
Size: 2KB - Virtual size: 512B

.0x0x2
Size: 2KB - Virtual size: 512B

.0x0x
Size: 196KB - Virtual size: 196KB

.0x0x3
Size: 2KB - Virtual size: 160B

.0x0x4
Size: 2KB - Virtual size: 64B

.CRT
Size: 2KB - Virtual size: 12B

.rsrc
Size: 12KB - Virtual size: 10KB

.reloc
Size: 2KB - Virtual size: 462B