70d8c62b5d12ccddb8577f02b985d44d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

70d8c62b5d12ccddb8577f02b985d44d_JaffaCakes118
Size

740KB
MD5

70d8c62b5d12ccddb8577f02b985d44d
SHA1

8ddf2e8934f04715b2b4303313c97e277075b620
SHA256

a779d72bc18eadd45e4d41278c2edcaa3bf6032c95b246abda01e6764f7d63cd
SHA512

de93d770603b4a7be75eaba9ee8b79d4f7a3ff8c856e23da81cb2a25cc1e2085ad4b00b2827aa899ae8fcfa01d03da3887766d6ab0c5db3fe01dff05535a4870
SSDEEP

12288:myIK5Z53UfZCcq31CdKoPHOaDU5ZRObV6poNmQN+qw1GfHVaZfb:HFZC09MHOx5IRmQNU1EHVaZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70d8c62b5d12ccddb8577f02b985d44d_JaffaCakes118

Files

70d8c62b5d12ccddb8577f02b985d44d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2fcf5ebea4752876254ce0cd63c04c33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\iwottesbzw\zltk.pdb

Imports

wininet

InternetAttemptConnect
InternetConnectA
HttpAddRequestHeadersA
InternetOpenA
InternetSetFilePointer
InternetQueryDataAvailable
InternetSetStatusCallback
InternetCloseHandle
InternetWriteFile
HttpOpenRequestA
InternetGetConnectedState
InternetCanonicalizeUrlA
InternetGetLastResponseInfoA
HttpQueryInfoA
HttpEndRequestA
InternetReadFile

gdi32

CreateDCW
SelectObject
GetObjectW
DeleteDC
GetDeviceCaps

user32

EmptyClipboard
GetActiveWindow
EnableMenuItem
GetClientRect
DeleteMenu
CopyRect
EndDeferWindowPos
DrawFocusRect
SetDlgItemInt
InflateRect
GetMessageW
EnumChildWindows
MessageBoxW
GetMessagePos
LoadMenuW
IsDlgButtonChecked
DrawTextW
UnhookWindowsHookEx
OpenClipboard
SetMenuDefaultItem
DestroyIcon
UnregisterClassW
RedrawWindow
IsClipboardFormatAvailable
UpdateWindow
AppendMenuW
GetForegroundWindow
BeginPaint
ShowWindow
GetWindowThreadProcessId
GetWindowPlacement
GetKeyNameTextW
GetNextDlgTabItem
GetMenuState
ScreenToClient
SetScrollPos
GetKeyboardLayout
ReleaseCapture
LoadIconW
IsWindow
MoveWindow
GetWindowRect
FrameRect
GetClassInfoExW
SetTimer
EndDialog
GetMenu
DestroyCursor
SetRectEmpty
TranslateMessage
DrawEdge
FillRect
GetDlgItemTextW
SetCursor
SetParent
ReleaseDC
RegisterWindowMessageW
MapDialogRect
SetScrollInfo
InvalidateRgn
GetTopWindow
SetCapture
PeekMessageW
GetMenuItemID
EndPaint
IsZoomed
GetAsyncKeyState
SystemParametersInfoW
GetMessageTime
MessageBeep
SetDlgItemTextW
SetWindowTextW
UnregisterHotKey
GetClassInfoW
GetWindowLongW
MapWindowPoints
IsWindowVisible
IsMenu
IsWindowEnabled
ModifyMenuW
GetDC
RegisterHotKey
PostThreadMessageW
RegisterClassW
InvalidateRect
InsertMenuItemW
GetSubMenu
CreateWindowExW
KillTimer
GetWindowTextLengthW
GetWindow
GetSysColor
wsprintfW
SetRect
ClientToScreen
GetClassNameW
SendMessageW
RegisterClassExW
SetForegroundWindow
GetDlgCtrlID
SetWindowPos
IsRectEmpty
SendDlgItemMessageA
GetDesktopWindow
OffsetRect
TrackPopupMenu
SetMenu
GetWindowTextW
SetFocus
IsDialogMessageW
GetSystemMetrics
GetDlgItem
DispatchMessageW
DrawFrameControl
GetIconInfo
EqualRect
IsChild
GetCursorPos
TranslateAcceleratorW
SetWindowsHookExW
SetMenuItemBitmaps
CloseClipboard
SetClipboardData
LoadImageW
SetWindowLongW
GetParent
PostQuitMessage
CharUpperW
GetMenuItemCount
SendDlgItemMessageW
GetFocus
SystemParametersInfoA
EnableWindow
AdjustWindowRectEx
ValidateRect
WindowFromPoint
GetLastActivePopup
GetKeyState
LockWindowUpdate
CheckMenuItem
GetWindowDC
DestroyWindow
SetActiveWindow
BeginDeferWindowPos
GetClassLongW
CreatePopupMenu
DefWindowProcW
GetSysColorBrush
DeferWindowPos
DrawStateW
IntersectRect
DestroyMenu
PtInRect
GetMenuStringW
IsIconic
PostMessageW
FindWindowW
LoadBitmapW
CallNextHookEx
ChildWindowFromPoint
LoadCursorW
SetWindowPlacement
GetMenuCheckMarkDimensions
GetScrollInfo
SendMessageTimeoutW
GetClipboardData
GetCapture
SetMenuItemInfoW
GetSystemMenu

mfc42

ord1576

advapi32

RegQueryValueExA
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegQueryValueA
RegCreateKeyA

comctl32

InitCommonControlsEx
ImageList_Destroy
ImageList_Create
ord17

kernel32

TlsGetValue
GetModuleHandleA
GetEnvironmentStringsW
InterlockedExchange
IsBadWritePtr
GetProcAddress
WideCharToMultiByte
FreeEnvironmentStringsW
GetTimeZoneInformation
FlushFileBuffers
LoadLibraryA
GetFileType
CompareStringW
TerminateProcess
QueryPerformanceCounter
HeapFree
SetConsoleCtrlHandler
GetACP
IsBadCodePtr
TlsAlloc
EnterCriticalSection
SetUnhandledExceptionFilter
CloseHandle
GetModuleFileNameA
IsBadReadPtr
FatalAppExitA
LeaveCriticalSection
SetEnvironmentVariableA
VirtualFree
RaiseException
HeapSize
GetSystemInfo
GetLocaleInfoW
GetCurrentProcess
VirtualQuery
GetStringTypeA
SetStdHandle
GetUserDefaultLCID
RtlUnwind
GetDateFormatA
UnhandledExceptionFilter
SetLastError
LCMapStringW
GetStdHandle
GetCurrentThreadId
IsValidCodePage
ReadFile
GetTimeFormatA
InitializeCriticalSection
WriteFile
GetStartupInfoW
HeapDestroy
GetCommandLineA
GetCommandLineW
GetCPInfo
GetSystemTimeAsFileTime
GetEnvironmentStrings
GetTickCount
CompareStringA
GetOEMCP
CreateMutexW
MultiByteToWideChar
GetModuleHandleW
SetHandleCount
GetModuleFileNameW
LCMapStringA
GetStartupInfoA
TlsSetValue
VirtualAlloc
FreeEnvironmentStringsA
VirtualProtect
GetCurrentProcessId
DeleteCriticalSection
HeapAlloc
SetFilePointer
HeapCreate
HeapReAlloc
GetCurrentThread
GetStringTypeW
GetLastError
IsValidLocale
GetLocaleInfoA
GetVersionExA
ExitProcess
TlsFree

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 456KB - Virtual size: 455KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2fcf5ebea4752876254ce0cd63c04c33

Headers

File Characteristics

PDB Paths

Imports

wininet

gdi32

user32

mfc42

advapi32

comctl32

kernel32

Sections

.text Size: 84KB - Virtual size: 83KB

.rdata Size: 456KB - Virtual size: 455KB

.data Size: 100KB - Virtual size: 97KB

.rsrc Size: 96KB - Virtual size: 94KB

.text
Size: 84KB - Virtual size: 83KB

.rdata
Size: 456KB - Virtual size: 455KB

.data
Size: 100KB - Virtual size: 97KB

.rsrc
Size: 96KB - Virtual size: 94KB