68dd7df213674e096d6ee255a7b90088_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

68dd7df213674e096d6ee255a7b90088_JaffaCakes118
Size

232KB
MD5

68dd7df213674e096d6ee255a7b90088
SHA1

262e60fec40c03ce03458b3772cb2134527d8d27
SHA256

2ba1d27325224407b6d57e0e8d141e3f301225d18a68bb5380c46287a0fc4441
SHA512

daae3fb2c05390fb59de64c70a86b73c81aafb358ff590ec7cc5ac4a6136c9a6ab831cd5aad93a72d4ef19674887e877140d48b64bd5ede1c7755d1407867aed
SSDEEP

3072:hK/MnnOgdlP6Rf1lNpXxHNpW/+Uyq3yVrH5CyfXPdCIGU6OoOA3CbTCy3wd:bPlP67RxHNpO+UG5Cy/Zb33

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68dd7df213674e096d6ee255a7b90088_JaffaCakes118

Files

68dd7df213674e096d6ee255a7b90088_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a9c8bbdd311c882ee64e68151f268c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetOEMCP
GetTickCount
ExitProcess
SetCurrentDirectoryA
RtlUnwind
GetStartupInfoA
HeapAlloc
HeapFree
CreateThread
ExitThread
RaiseException
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
FileTimeToLocalFileTime
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
SetStdHandle
IsBadReadPtr
IsBadCodePtr
GetExitCodeProcess
CreateProcessA
CompareStringA
CompareStringW
SetEnvironmentVariableA
FileTimeToSystemTime
SetErrorMode
SizeofResource
CreateDirectoryA
GetProfileStringA
GetProcessVersion
GetCurrentDirectoryA
WritePrivateProfileStringA
GlobalFlags
GetFileTime
GetFileSize
GetFileAttributesA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
MulDiv
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetModuleHandleA
FindNextFileA
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
FormatMessageA
LocalFree
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
CloseHandle
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
SetLastError
GetDriveTypeA
CreateToolhelp32Snapshot
Process32First
OpenProcess
TerminateProcess
Process32Next
DeleteFileA
RemoveDirectoryA
GetVersion
GetCurrentProcess
WideCharToMultiByte
lstrcatA
lstrcpyA
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleFileNameA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
InitializeCriticalSection
GetCurrentThreadId
GetCommandLineA
lstrcmpiA
DeleteCriticalSection
HeapDestroy
SetFileAttributesA
CopyFileA
Sleep
CreateMutexA
GetFileType
GetLastError

user32

InvalidateRect
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
MessageBeep
GetWindowRect
CharUpperA
PtInRect
UnhookWindowsHookEx
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
CharNextA
ExitWindowsEx
IsDialogMessageA
LoadIconA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
MessageBoxA
SetCursor
PostQuitMessage
WaitMessage
PeekMessageA
DispatchMessageA
PostMessageA
EnableWindow
KillTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
GetSysColorBrush
GetWindowPlacement
GetSystemMenu
AppendMenuA
DrawFocusRect
DefDlgProcA
IsWindowUnicode
SetTimer
SendMessageA
GetClassNameA
GetDesktopWindow
LoadCursorA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
DestroyMenu
LoadStringA
ShowWindow
MoveWindow
SetWindowTextA
ScreenToClient
UpdateWindow
SendDlgItemMessageA
SetMenuItemBitmaps
MapWindowPoints
GetSysColor
SetFocus
wsprintfA
AdjustWindowRectEx

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
SetMapMode
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyExA
RegSetValueExA

shell32

ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterClassObject
CoRevokeClassObject
CoUninitialize
OleIsCurrentClipboard
CoRegisterMessageFilter
OleFlushClipboard

olepro32

ord253

oleaut32

SysAllocStringLen
LoadTypeLi
SysAllocString
SysFreeString
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocStringByteLen
SysStringLen
RegisterTypeLi

wsock32

WSAGetLastError
WSAStartup
WSACleanup
WSASetLastError
connect
sendto
recvfrom
socket
inet_ntoa
WSAAsyncSelect
send
recv
gethostbyname
closesocket
htonl
htons
bind
ioctlsocket
accept
listen

Sections

.text
Size: 160KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7a9c8bbdd311c882ee64e68151f268c2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

Sections

.text Size: 160KB - Virtual size: 156KB

.rdata Size: 40KB - Virtual size: 37KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 16KB - Virtual size: 14KB

.text
Size: 160KB - Virtual size: 156KB

.rdata
Size: 40KB - Virtual size: 37KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 16KB - Virtual size: 14KB