6429832e35f42f3236bcecda0168d7b2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6429832e35f42f3236bcecda0168d7b2_JaffaCakes118
Size

216KB
MD5

6429832e35f42f3236bcecda0168d7b2
SHA1

e919e9000bb85869fce4abe5ce48f3b5978f5c9f
SHA256

d77ed8d0d8ae4a99c4c3e9aa5d820815efec46842f578cd99708d925e0379e4d
SHA512

9c15d1c7e0e5beff5274ba0affef7b0ee6b01fd47d69426432ecb38ba7253ebcdf7ab28790d077ab323d189872c0bfff8dade049899ebd1e0ac4c215c221e380
SSDEEP

3072:mCxH2tsV7cX6MRDRBU2cag77QkbtridwfV39qdQUslBBeuROlsw:medV7Sppp67EkF14p6Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6429832e35f42f3236bcecda0168d7b2_JaffaCakes118

Files

6429832e35f42f3236bcecda0168d7b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18edb4662f20a4d2091e5e76df00f90c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetLocalTime
RtlUnwind
RaiseException
TerminateProcess
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
GetStartupInfoW
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetStringTypeA
GetStringTypeW
SetStdHandle
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
FindResourceA
GlobalAddAtomA
GetProfileStringA
GetFileTime
GetFileSize
GetFileAttributesW
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
ReadFile
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetThreadLocale
SizeofResource
GetProcessVersion
WritePrivateProfileStringW
GlobalFlags
lstrcmpiW
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
MulDiv
SetLastError
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
LoadLibraryA
FreeLibrary
lstrlenA
MultiByteToWideChar
GetVersion
GlobalAddAtomW
GlobalFindAtomW
lstrcpyW
GlobalUnlock
GlobalFree
LockResource
FindResourceW
LoadResource
GlobalLock
lstrcmpW
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GetModuleHandleW
GetProcAddress
GetModuleFileNameW
lstrcatW
SetUnhandledExceptionFilter
CreateSemaphoreW
GetCommandLineW
lstrcpynW
GetLastError
FormatMessageW
LocalFree
CreateFileW
lstrlenW
WideCharToMultiByte
SetFilePointer
WriteFile
CloseHandle
VirtualFree

user32

CharUpperW
RegisterClipboardFormatW
PostThreadMessageW
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
GetTopWindow
IsChild
GetCapture
WinHelpW
wsprintfW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextW
GetDlgCtrlID
CreateWindowExW
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongW
SetWindowPos
RegisterWindowMessageW
OffsetRect
IntersectRect
SystemParametersInfoW
IsIconic
GetWindowPlacement
GetWindowRect
EndDialog
IsWindow
GetSystemMetrics
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
SetRect
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageW
GetCursorPos
SetWindowsHookExW
FindWindowW
EnableWindow
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongW
MessageBoxW
PostQuitMessage
PtInRect
LoadCursorW
SetCursor
PostMessageW
InvalidateRect
CopyRect
GrayStringW
DrawTextW
DrawTextA
DrawFocusRect
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
GetClientRect
SendMessageW
TabbedTextOutW
MessageBeep
CharNextW
GetNextDlgGroupItem
DestroyMenu
LoadStringW
GetSysColorBrush
GetClassNameW
LoadIconW
GetDesktopWindow
LoadBitmapW
CopyAcceleratorTableW
InflateRect
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
MapDialogRect
SetWindowContextHelpId
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetActiveWindow

gdi32

GetClipBox
SetTextColor
SetBkColor
GetObjectW
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
CreateBitmap
DeleteObject
GetDeviceCaps
CreateSolidBrush
PatBlt
GetTextColor
BitBlt
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
CreateCompatibleBitmap
CreateCompatibleDC
LPtoDP
GetMapMode
DPtoLP
CreateDIBitmap
ExtTextOutA
GetTextExtentPointA
GetBkColor

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW

shell32

ShellExecuteW

comctl32

ord17

oledlg

OleUIBusyW

ole32

CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID

olepro32

ord253

oleaut32

SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
SysStringLen

gdiplus

GdipSetStringFormatTrimming
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectRectI
GdipCreateFromHDC
GdipAlloc
GdipCloneBrush
GdipFree
GdipSetStringFormatAlign
GdipCreateStringFormat
GdipDrawString
GdipCreateFont
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipSetStringFormatLineAlign
GdipSetTextRenderingHint
GdipDeleteFont
GdiplusShutdown
GdipDeleteBrush
GdipDeleteStringFormat
GdipDeleteGraphics
GdipCreateSolidFill
GdiplusStartup

shlwapi

SHSetValueW
PathRemoveFileSpecW

wininet

InternetReadFile
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoW
InternetCloseHandle

Sections

.text
Size: 144KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

18edb4662f20a4d2091e5e76df00f90c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

gdiplus

shlwapi

wininet

Sections

.text Size: 144KB - Virtual size: 142KB

.rdata Size: 40KB - Virtual size: 37KB

.data Size: 20KB - Virtual size: 35KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 144KB - Virtual size: 142KB

.rdata
Size: 40KB - Virtual size: 37KB

.data
Size: 20KB - Virtual size: 35KB

.rsrc
Size: 8KB - Virtual size: 7KB