6647aebc46d813130166915ca5bf5e81_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6647aebc46d813130166915ca5bf5e81_JaffaCakes118
Size

266KB
MD5

6647aebc46d813130166915ca5bf5e81
SHA1

46fbd9f95ec720e9d555dd9f079664c66d6f40b1
SHA256

99dba8bf0589ff618b9fe5da2aaaba80e08521213952da0f7230e0e7f5699172
SHA512

05b61c720787ddf78db62c47559ba001840706cd80354e570d862442a7d400f0329208bce4b052ca0db37e3b211d9f6144a233c004ae03eb4f47694195f21d0c
SSDEEP

6144:vU0VbDfMQEk/3X1wR0Zv0NsBfwAfUzwZK:vPVVEQ1wR0Zv0qB4A8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6647aebc46d813130166915ca5bf5e81_JaffaCakes118

Files

6647aebc46d813130166915ca5bf5e81_JaffaCakes118
.exe windows:4 windows x86 arch:x86

05a2d3ef657ec294d02f948009a53ef1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantTimeToSystemTime
VariantInit
VariantCopy
VariantClear
VariantChangeType
VarR8Pow
VarDecFromBool
OleCreateFontIndirect
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen
SysAllocString
SafeArrayDestroy

winspool.drv

ClosePrinter
DocumentPropertiesW
EnumPrinterDataW
GetPrintProcessorDirectoryW
OpenPrinterW

shell32

SHGetSpecialFolderPathW
SHGetFolderPathW
ShellExecuteW

advapi32

RegSetValueExW
RegQueryValueW
RegOpenKeyW
RegOpenKeyExW
RegEnumKeyW
RegCloseKey
OpenTraceW
LsaOpenPolicy
GetTrusteeTypeW
RegisterEventSourceW

wininet

InternetReadFile
InternetOpenW
InternetHangUp
InternetGetLastResponseInfoW
HttpSendRequestW
HttpOpenRequestW
GetUrlCacheEntryInfoW
GetUrlCacheEntryInfoExW

gdi32

GetTextColor
GetStockObject
GetMapMode
GetDeviceCaps
GetClipBox
ExtTextOutW
GetViewportExtEx
Escape
DeleteObject
CreateSolidBrush
CreateRectRgnIndirect
CreateFontIndirectW
CreateCompatibleDC
GetWindowExtEx
OffsetViewportOrgEx
SelectObject
SetBkColor
SetMapMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
TextOutW
ExtSelectClipRgn
StartPage
CreateBitmap

user32

PostThreadMessageW
PtInRect
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
ReleaseDC
RemovePropW
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCapture
SetCursor
SetFocus
PostQuitMessage
SetMenuItemBitmaps
SetRect
SetWindowContextHelpId
SetWindowTextW
ShowWindow
SystemParametersInfoA
TabbedTextOutW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
ValidateRect
WinHelpW
PostMessageW
PeekMessageW
SetForegroundWindow
OffsetRect
AdjustWindowRectEx
ModifyMenuW
MessageBoxW
MapWindowPoints
MapDialogRect
LoadImageW
LoadIconW
IsWindowVisible
IsWindow
IsRectEmpty
IsIconic
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
GrayStringW
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowDC
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetSubMenu
GetPropW
GetParent
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetLastActivePopup
GetKeyState
GetFocus
GetDlgItem
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassLongW
GetClassInfoExW
GetCapture
GetActiveWindow
EqualRect
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawTextExW
DispatchMessageW
DestroyWindow
DestroyMenu
DefWindowProcW
CreateWindowExW
CopyRect
CopyAcceleratorTableW
ClientToScreen
CharNextW
CallNextHookEx
BeginPaint
AppendMenuW
LoadCursorW

comdlg32

GetFileTitleW
PageSetupDlgA
WantArrows
ChooseFontW

kernel32

TerminateProcess
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetStdHandle
SetLastError
SetFilePointer
TlsFree
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualFree
VirtualProtect
WriteConsoleA
WriteFile
lstrcmpA
lstrcmpW
lstrlenW
FormatMessageW
FindResourceW
FindClose
FileTimeToLocalFileTime
EnumSystemLocalesA
DuplicateHandle
CreateHardLinkA
CreateFileW
CreateFileA
CreateDirectoryW
ConvertDefaultLocale
CompareStringW
CloseHandle
TlsGetValue
SetFileAttributesW
SetErrorMode
ReadFile
QueryPerformanceCounter
LockResource
LocalReAlloc
LocalFree
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsDBCSLeadByteEx
InterlockedIncrement
InterlockedExchange
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalReAlloc
GlobalHandle
GlobalFree
GlobalFlags
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVolumeInformationW
GetVersion
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetStringTypeA
GetProcessHeap
GetOEMCP
GetModuleHandleA
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileSize
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetConsoleMode
GetCommandLineA
GetCPInfo
GetBinaryTypeW
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
AreFileApisANSI

Sections

.text
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

05a2d3ef657ec294d02f948009a53ef1

Headers

File Characteristics

Imports

oleaut32

winspool.drv

shell32

advapi32

wininet

gdi32

user32

comdlg32

kernel32

Sections

.text Size: 54KB - Virtual size: 56KB

.rdata Size: 148KB - Virtual size: 148KB

.data Size: 35KB - Virtual size: 152KB

.idata Size: 6KB - Virtual size: 7KB

.rsrc Size: 21KB - Virtual size: 23KB

.text
Size: 54KB - Virtual size: 56KB

.rdata
Size: 148KB - Virtual size: 148KB

.data
Size: 35KB - Virtual size: 152KB

.idata
Size: 6KB - Virtual size: 7KB

.rsrc
Size: 21KB - Virtual size: 23KB