68aee45534abbbdf5f3dd5d6466e0b3b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

68aee45534abbbdf5f3dd5d6466e0b3b_JaffaCakes118
Size

1.2MB
MD5

68aee45534abbbdf5f3dd5d6466e0b3b
SHA1

dc793494acd27b1e4b7dd1ffd2d15e2e9cf547d8
SHA256

333255f885508e0d8f28c46880f8c30c0f531da770e2f597256b796b3b22bf16
SHA512

5ae70c13e154bf31a51453a33ee752f3a228c2104cbe0e429398cb7e327852ccc5d2c36f2d9887a1a3761ea1487bf07c168babc58e8afee2b774222d9e736654
SSDEEP

24576:rk4DfkvJ1IkNeAuIRkFV0UyE1LCQzoeh/z21:81Is4wuoP1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68aee45534abbbdf5f3dd5d6466e0b3b_JaffaCakes118

Files

68aee45534abbbdf5f3dd5d6466e0b3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f02728b49cc7f80e1c4664f36f5b9510

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

msacm32

acmStreamConvert
acmStreamUnprepareHeader
acmStreamClose
acmStreamOpen
acmStreamPrepareHeader
acmFormatSuggest
acmFormatTagDetailsA
acmFormatChooseA
acmFormatDetailsA

kernel32

GetCurrentProcess
GetShortPathNameA
GetLastError
CreateEventA
CopyFileA
ReleaseSemaphore
CreateSemaphoreA
ExitProcess
InitializeCriticalSection
lstrcpyA
lstrcmpA
GetSystemTimeAsFileTime
GlobalUnlock
GlobalLock
GetModuleHandleA
LoadLibraryExA
GlobalReAlloc
DeleteCriticalSection
MultiByteToWideChar
RemoveDirectoryA
CreateDirectoryA
SystemTimeToFileTime
GetSystemTime
GetFileSize
GetCurrentThreadId
SetEvent
LocalFree
LocalAlloc
lstrlenA
IsBadReadPtr
SetUnhandledExceptionFilter
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
SetPriorityClass
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
TerminateProcess
InterlockedExchange
GetFileType
GetStdHandle
SetHandleCount
VirtualQuery
GetSystemInfo
VirtualProtect
GetTimeZoneInformation
LCMapStringW
WideCharToMultiByte
LCMapStringA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetCPInfo
GetOEMCP
GetACP
GetVersionExA
GetCommandLineA
GetStartupInfoA
HeapReAlloc
RtlUnwind
GetDateFormatA
GetTimeFormatA
HeapAlloc
HeapFree
GetLogicalDrives
GetDriveTypeA
GetFullPathNameA
MoveFileA
ReadFile
SetFilePointer
SetEndOfFile
EnterCriticalSection
LeaveCriticalSection
CreateFileA
FindFirstFileA
FindNextFileA
FindClose
WritePrivateProfileStructA
SetThreadPriority
WriteFile
GetPrivateProfileStructA
lstrcmpiA
SetCurrentDirectoryA
GetTempFileNameA
GetCurrentDirectoryA
GetPrivateProfileStringA
lstrcpynA
GetTempPathA
FreeLibrary
CreateProcessA
WritePrivateProfileStringA
LoadLibraryA
GetProcAddress
GetLocalTime
MulDiv
GetPrivateProfileIntA
DeleteFileA
GetModuleFileNameA
WaitForSingleObject
GetFileAttributesA
CloseHandle
CreateThread
GetTickCount
Sleep
FindResourceA
LoadResource
LockResource
GlobalAlloc
GlobalFree
IsBadCodePtr
RaiseException
QueryPerformanceCounter
GetCurrentProcessId
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetFileAttributesA
GetEnvironmentStringsW

user32

DeleteMenu
SetDlgItemInt
GetDlgItemInt
SetFocus
BeginPaint
DrawIconEx
EndPaint
SetCursorPos
WindowFromPoint
DialogBoxParamA
ModifyMenuA
GetMenuItemRect
SystemParametersInfoA
GetMenuItemCount
CreatePopupMenu
GetFocus
RegisterWindowMessageA
LoadStringA
LoadAcceleratorsA
GetClassLongA
LoadIconA
SetClassLongA
IsIconic
EnableMenuItem
RemoveMenu
GetMenuItemInfoA
SendMessageTimeoutA
PostQuitMessage
LoadMenuA
InsertMenuItemA
GetSystemMenu
InsertMenuA
DestroyMenu
GetMenuStringA
SetWindowRgn
EndDeferWindowPos
UpdateWindow
CharNextA
CallWindowProcA
PeekMessageA
GetMessagePos
GetSystemMetrics
wsprintfA
EnableWindow
GetSubMenu
CheckMenuItem
GetForegroundWindow
DeferWindowPos
BeginDeferWindowPos
DestroyCursor
DestroyIcon
TranslateAcceleratorA
CharPrevA
GetWindowPlacement
CopyRect
FillRect
GetWindowRgn
GetCapture
SendNotifyMessageA
GetKeyState
EnumDisplaySettingsA
SetRect
GetUpdateRect
SetMenuItemInfoA
SendMessageA
GetDlgItem
GetDC
LoadImageA
FindWindowExA
IsChild
LoadCursorA
SetCursor
SetCapture
ReleaseCapture
ClientToScreen
GetCursorPos
TrackPopupMenu
CreateWindowExA
DefWindowProcA
FindWindowA
GetClassInfoA
RegisterClassA
IsDialogMessageA
GetMessageA
TranslateMessage
DispatchMessageA
SendDlgItemMessageA
SetTimer
IsDlgButtonChecked
KillTimer
CheckDlgButton
IsWindowVisible
IsWindow
MessageBoxA
SetForegroundWindow
DestroyWindow
GetDlgItemTextA
DrawTextA
GetWindowTextA
SetWindowTextA
CreateDialogParamA
PostMessageA
ScreenToClient
SetWindowLongA
SetParent
SetWindowPos
GetWindowLongA
InvalidateRect
GetWindowRect
EndDialog
GetParent
ShowWindow
SetDlgItemTextA
GetAsyncKeyState
GetClientRect
GetWindowDC
ReleaseDC
RegisterClipboardFormatA

gdi32

UpdateColors
SetBkMode
SetTextColor
LineTo
MoveToEx
GetTextExtentPoint32A
CreateFontIndirectA
EnumFontsA
CreateRectRgn
CreatePolyPolygonRgn
CreatePen
StretchBlt
CreateCompatibleBitmap
CreateBrushIndirect
GetNearestColor
GetDeviceCaps
GetTextMetricsA
CreateFontA
GetStockObject
ExtSelectClipRgn
Rectangle
IntersectClipRect
SetBkColor
SetPixel
RoundRect
GetBkColor
GetTextColor
CreateSolidBrush
FillRgn
CreateRectRgnIndirect
GetObjectA
CreateCompatibleDC
SelectObject
GetDIBits
GetDIBColorTable
DeleteDC
DeleteObject
CreatePalette
CreateDIBSection
SelectPalette
RealizePalette
GetPixel
BitBlt

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA

shell32

SHGetMalloc
DragQueryPoint
DragFinish
DragQueryFileA
SHAppBarMessage
SHBrowseForFolderA
SHGetPathFromIDListA
Shell_NotifyIconA
SHFileOperationA
ShellExecuteA

ole32

RevokeDragDrop
CoRevokeClassObject
OleUninitialize
CoCreateInstance
RegisterDragDrop
CoRegisterClassObject
CoInitialize
CoCreateGuid
CLSIDFromString
OleInitialize

Sections

.text
Size: 393KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 21KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 713KB - Virtual size: 716KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f02728b49cc7f80e1c4664f36f5b9510

Headers

File Characteristics

Imports

comctl32

msacm32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 393KB - Virtual size: 393KB

.rdata Size: 53KB - Virtual size: 52KB

.data Size: 21KB - Virtual size: 105KB

.rsrc Size: 713KB - Virtual size: 716KB

.text
Size: 393KB - Virtual size: 393KB

.rdata
Size: 53KB - Virtual size: 52KB

.data
Size: 21KB - Virtual size: 105KB

.rsrc
Size: 713KB - Virtual size: 716KB