70106529a322251c2b6096a6f32c8355_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

70106529a322251c2b6096a6f32c8355_JaffaCakes118
Size

926KB
MD5

70106529a322251c2b6096a6f32c8355
SHA1

b991b527fc0ca0500170adee18d936be50017263
SHA256

b3a5be3a5a2cd5ef67d1ac6d2479df2f4c29b4174eb9be1ae29fdadf8f95de0f
SHA512

789e8824a65037ed35a662dc69a431466cffbaf13d1412d63b3d7cc60a7fb086a7d98a47743876c535a718541a3698f23ae05bfac8eabfe46eeabfaa04c01beb
SSDEEP

12288:uC48T/REd5+mymJtINXYTwE1HYytXLMxwn6RFkJHratGps0NrRYDWzUSbJkx:uruJEd5btINITHRz8cphps0Nr6Ykx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70106529a322251c2b6096a6f32c8355_JaffaCakes118

Files

70106529a322251c2b6096a6f32c8355_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bb924edf5d34f1bbee061512cb363295

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
GetCPInfo
IsDebuggerPresent
InterlockedDecrement
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsGetValue
TlsSetValue
DecodePointer
GetModuleHandleW
SetLastError
GetCurrentThreadId
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetStringTypeW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
HeapFree
ExitProcess
Sleep
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
LoadLibraryW
RtlUnwind
GetProcAddress
GetLastError
HeapCreate
GlobalAlloc
HeapAlloc
SetUnhandledExceptionFilter
MulDiv

user32

ShowCaret
UnregisterClassA
RedrawWindow
EmptyClipboard
CharUpperBuffW
GetKeyNameTextA
MapVirtualKeyA
DestroyWindow
ModifyMenuA
SetClassLongA
CreateWindowExW
GetLastActivePopup
DrawTextA
GetClassInfoW
CharUpperBuffA
GetForegroundWindow
EnableScrollBar
DefWindowProcA
IsWindowEnabled
GetCaretPos
WaitForInputIdle
FindWindowA
GetClassInfoA
SetTimer
FlashWindow
DeferWindowPos
GetWindow
CheckMenuItem
EnumThreadWindows
HideCaret
SetForegroundWindow
CreateIcon
SetRect
RegisterClassW
PtInRect
DrawTextExA
ClientToScreen
SetFocus
IntersectRect
GetSubMenu
GetClipboardFormatNameA
EnumWindows
InvalidateRect
SetMenuItemInfoA
LoadBitmapA
CharNextW
IsClipboardFormatAvailable
SetActiveWindow
PeekMessageA
GetWindowDC
DestroyCursor
DrawEdge
CreateMenu
GetIconInfo
TabbedTextOutA
GetClipboardData
DefMDIChildProcA
CreateWindowExA
DialogBoxParamA
DrawMenuBar
TranslateMessage
CallWindowProcA
EnableWindow
ShowWindow
SystemParametersInfoA
ReleaseDC
ValidateRect
SetKeyboardState
RegisterWindowMessageA
CallNextHookEx
EqualRect
UpdateWindow
GetScrollInfo
DrawIcon
EndPaint
IsZoomed
EndDeferWindowPos
DispatchMessageA
DefWindowProcW
GetTopWindow
GetWindowTextLengthW
DestroyCaret
FrameRect
GetKeyboardLayout
GetPropA
DeleteMenu
BringWindowToTop
IsCharAlphaA
InvalidateRgn
GetScrollRange
SetWindowTextW
MoveWindow
SetMenu
UnhookWindowsHookEx
MessageBeep
GetMessageA
DefFrameProcA
BeginDeferWindowPos
LoadCursorA
GetMenuCheckMarkDimensions
DrawCaption
IsWindow
GetAsyncKeyState
ToUnicode
CloseClipboard
PostMessageA
DrawTextW
RegisterClipboardFormatA
WindowFromPoint
OffsetRect
GetScrollPos
IsWindowVisible
GetMessageTime
CallWindowProcW
OpenClipboard
ToAscii
GetActiveWindow
IsChild
LoadKeyboardLayoutA
CreateDialogParamA
GetKeyState
SendNotifyMessageA
OemToCharA
GetMenuItemCount
GetKeyboardLayoutList
WinHelpA
GetMenuItemID
GetWindowTextA
ScrollWindow
ChildWindowFromPoint
GetSysColor
GetCapture
PostThreadMessageA
SetWindowRgn
GetMenuState
EnableMenuItem
DestroyIcon
SetParent
RemoveMenu
SetClipboardData
CharNextA
GetDlgItem
CreateCaret
BeginPaint
GetTabbedTextExtentA
MapWindowPoints
GetDoubleClickTime
RemovePropA
TrackPopupMenu
RegisterClassA
SetWindowPos
ActivateKeyboardLayout
CharLowerBuffA
LoadIconA
GetMessagePos
EndDialog
SetWindowsHookExA
ScreenToClient
TranslateMDISysAccel
GetSystemMetrics
GetMenu
GetCursorPos
IsIconic
CharUpperA
SetScrollInfo
DestroyMenu
GetCursor
DrawFrameControl
SendMessageW
InsertMenuItemA
InsertMenuA
GetUpdateRect
GetDesktopWindow
SetCapture
SendDlgItemMessageA
GetWindowThreadProcessId
EnumClipboardFormats
WaitMessage
GetWindowLongA
SetWindowLongW
GetMenuItemInfoA
InflateRect
FindWindowExA
LoadCursorFromFileA
DrawTextExW
ShowOwnedPopups
IsWindowUnicode
SetCursor
CreatePopupMenu
GetSystemMenu
SetWindowTextA
SetWindowPlacement
SendMessageTimeoutA
ReleaseCapture
GetClassNameA
IsCharAlphaNumericA
DrawIconEx
CopyImage
GetSysColorBrush
mouse_event
SetWindowLongA
PostQuitMessage
InvertRect
SubtractRect
CopyRect
AdjustWindowRectEx
SetScrollPos
LockWindowUpdate
WindowFromDC
IsDialogMessageA
SetScrollRange
GetFocus
CharLowerA
IsRectEmpty
UnionRect
wsprintfA
GetParent
MessageBoxA
GetDCEx
SendMessageA
MsgWaitForMultipleObjects
FillRect
ShowCursor
GetMenuStringA
GetDC
GetMenuItemRect
DrawFocusRect
SetRectEmpty
CharPrevW
GetWindowPlacement
SetCaretPos
ScrollWindowEx
ScrollDC
SetPropA
GetKeyboardState
GetClientRect
KillTimer
GetWindowRgn
GetWindowTextW
GetWindowRect
ShowScrollBar

gdi32

GetRandomRgn

comdlg32

GetSaveFileNameA
ChooseFontA
PrintDlgA
GetOpenFileNameA
ChooseColorA

advapi32

RegEnumValueA
RegQueryValueA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyA
RegCloseKey
RegQueryInfoKeyA
RegSetValueExA
RegDeleteKeyA
RegFlushKey
RegOpenKeyExA
RegDeleteValueA
GetUserNameA
RegCreateKeyExA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder

ole32

OleUninitialize
OleInitialize

oleaut32

VarCmp
OleLoadPicture

comctl32

ImageList_Read
ImageList_DragShowNolock
ImageList_Write
ImageList_DrawEx
ImageList_DragEnter
ImageList_GetDragImage
ImageList_Add
ImageList_GetIcon
ImageList_SetIconSize
ImageList_GetBkColor
ImageList_SetDragCursorImage
ImageList_GetIconSize
ord17
ImageList_SetBkColor
ImageList_DragLeave
ImageList_Draw
ImageList_Destroy
ImageList_EndDrag
ImageList_DragMove
ImageList_GetImageCount
ImageList_Replace
ImageList_ReplaceIcon
ImageList_Remove
ImageList_Create
ImageList_BeginDrag
ImageList_GetImageInfo
ImageList_LoadImageA

winmm

timeEndPeriod
mciSendCommandA
mciGetErrorStringA
timeBeginPeriod
timeGetTime

msimg32

AlphaBlend

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

wsock32

WSAStartup
gethostbyname
recvfrom
select
listen
connect
WSACleanup
getsockname
getsockopt
setsockopt
WSAAsyncSelect
socket
closesocket
accept
ioctlsocket
htons
inet_ntoa
sendto
gethostname
bind

mpr

WNetGetUniversalNameA
WNetGetConnectionA
WNetEnumResourceA
WNetOpenEnumA
WNetCloseEnum

imm32

ImmSetCompositionFontA
ImmGetCompositionStringA
ImmGetCompositionStringW
ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

ws2_32

WSARecv
WSAGetOverlappedResult
WSAEventSelect
WSAStringToAddressA
WSASocketA
WSAAddressToStringA
WSASend

wldap32

ord315

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.wert
Size: 1024B - Virtual size: 1021B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 828KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zert
Size: 736KB - Virtual size: 736KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb924edf5d34f1bbee061512cb363295

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

winmm

msimg32

version

wsock32

mpr

imm32

ws2_32

wldap32

Sections

.text Size: 91KB - Virtual size: 90KB

.wert Size: 1024B - Virtual size: 1021B

.rdata Size: 41KB - Virtual size: 40KB

.data Size: 45KB - Virtual size: 828KB

.zert Size: 736KB - Virtual size: 736KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 91KB - Virtual size: 90KB

.wert
Size: 1024B - Virtual size: 1021B

.rdata
Size: 41KB - Virtual size: 40KB

.data
Size: 45KB - Virtual size: 828KB

.zert
Size: 736KB - Virtual size: 736KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 7KB