67a3e4fe2299b5b7ce43e094f767f75b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

67a3e4fe2299b5b7ce43e094f767f75b_JaffaCakes118
Size

344KB
MD5

67a3e4fe2299b5b7ce43e094f767f75b
SHA1

d3e48cb53b591a4fa743ed77ebd1e3033bb02e97
SHA256

ed4d95c26914842937caceb13859f6aa059bbb11bc838b676175f2acee518d45
SHA512

e1825bd1dcf6c3543eeb1c16cb612d70c630a74060eec3ad3ef67ac1a498043ca9255dee66989d2eb1d17a2857455efe0bf55c0b6f88fc246ed651724e861daf
SSDEEP

6144:uGrR66OHG4g6l0kZ6j1UvUNvyxnxh9dElbJgygpVGrzvR0g1V:uGgm4g6GrBUv2qxnX9dEl6yJz50g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67a3e4fe2299b5b7ce43e094f767f75b_JaffaCakes118

Files

67a3e4fe2299b5b7ce43e094f767f75b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb51b00efcaaee284e97214a9c83eb45

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetFullPathNameA
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
HeapSize
FlushFileBuffers
LCMapStringW
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA
SetFilePointer
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
InterlockedIncrement
RaiseException
GetTickCount
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
FileTimeToSystemTime
GetUserDefaultLCID
WaitForSingleObject
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
GetModuleHandleA
GetProcAddress
SetLastError
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
CompareStringW
CompareStringA
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
GetLastError
OpenEventA
CreateEventA
GetVolumeInformationA
MultiByteToWideChar
GetModuleFileNameA
WriteFile
ReadFile
CreateFileA
GetFileSize
GetTempPathA
InterlockedDecrement
Sleep
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
TerminateThread
CloseHandle
LCMapStringA
CreateThread

user32

GetNextDlgGroupItem
GetNextDlgTabItem
MessageBeep
EndDialog
CreateDialogIndirectParamA
DestroyMenu
LoadCursorA
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatA
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
SetCursor
PostQuitMessage
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
EndPaint
BeginPaint
GetWindowDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
ReleaseCapture
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
IsWindow
SetFocus
IsChild
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconA
PeekMessageA
MapWindowPoints
MessageBoxA
GetKeyState
PostMessageA
SendMessageA
GetClientRect
SetTimer
EnableWindow
ShowWindow
GetWindowRect
GetDesktopWindow
IsWindowVisible
UpdateWindow
GetMenu
GetSysColor
AdjustWindowRectEx
GetParent
EqualRect
SetCapture
InvalidateRgn
InvalidateRect
CopyAcceleratorTableA
GetClassInfoA
SetRect
IsRectEmpty
CharNextA
PostThreadMessageA
CallNextHookEx
wsprintfA
KillTimer
GetClassNameA
EnumChildWindows
SetForegroundWindow
FindWindowA
CharUpperA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
GetWindow
PtInRect
CopyRect
GetSystemMetrics
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
SetWindowLongA
GetWindowLongA
CallWindowProcA
DefWindowProcA
GetDlgCtrlID
UnregisterClassA
RegisterClassA
ReleaseDC

gdi32

CreateBitmap
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
GetStockObject
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
OffsetViewportOrgEx

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegOpenKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

shell32

ShellExecuteA

comctl32

ord17

shlwapi

StrToIntA
PathFindFileNameA
PathStripToRootA
UrlUnescapeA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoCreateInstance
OleRun
CoInitialize
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
CoDisconnectObject
CoGetClassObject
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal

oleaut32

SysStringByteLen
SysFreeString
VariantClear
SysAllocString
VariantInit
SysAllocStringLen
SysStringLen
VariantChangeType
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
LoadTypeLi
OleCreateFontIndirect
GetErrorInfo
SysAllocStringByteLen

wininet

InternetReadFile
InternetOpenUrlA
HttpQueryInfoA
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb51b00efcaaee284e97214a9c83eb45

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

wininet

iphlpapi

Sections

.text Size: 244KB - Virtual size: 243KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 16KB - Virtual size: 28KB

.rsrc Size: 16KB - Virtual size: 13KB

.text
Size: 244KB - Virtual size: 243KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 16KB - Virtual size: 28KB

.rsrc
Size: 16KB - Virtual size: 13KB