74aaccfd31f21081731f63abd4ac1ee9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

74aaccfd31f21081731f63abd4ac1ee9_JaffaCakes118
Size

4.8MB
MD5

74aaccfd31f21081731f63abd4ac1ee9
SHA1

8634b5e470cbf0201a1d02c9e724502a6e53e44a
SHA256

e472b4d452def472f3be53435297c722ea9554141062cf0ee4d9cf20ac283fcf
SHA512

c6a869b16e2ca41c1e14dab36a6bd36df3e6ac2069136267de6c32084498f995346a0fa0b7e6e6e48d0ec3b46c7682a0b2f160cc2b21b5f79950e577251997c4
SSDEEP

98304:n6Q7qFvmjlbVMkSFYp/tgflef1hkjJwuM1XfgH/f9tg4:n6Q7qFvmjl5MPFYp/tgfctgfM1PeX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74aaccfd31f21081731f63abd4ac1ee9_JaffaCakes118

Files

74aaccfd31f21081731f63abd4ac1ee9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7c0f18242aebf61a05ad0181bac87bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
QueryPerformanceFrequency
ReadFile
WriteFile
GetOverlappedResult
LocalFree
SuspendThread
ResumeThread
WaitForMultipleObjects
WaitCommEvent
ClearCommError
GetCommMask
ResetEvent
InitializeCriticalSection
EnterCriticalSection
SetCommTimeouts
SetCommMask
GetCommState
BuildCommDCBA
SetCommState
PurgeComm
LeaveCriticalSection
TerminateProcess
FreeLibrary
SizeofResource
GetWindowsDirectoryA
GlobalAddAtomA
lstrcmpiA
GetProfileStringA
GetComputerNameA
GetTempPathA
CreateFileW
SetFileAttributesW
GetFileAttributesW
GlobalGetAtomNameA
GetFullPathNameW
InterlockedExchange
CreateDirectoryA
MultiByteToWideChar
CreateProcessA
GetCommandLineA
SleepEx
FindResourceA
LoadResource
LockResource
GetLocalTime
lstrcpynA
GetUserDefaultLangID
GetModuleFileNameA
DeleteFileA
FindFirstFileA
FindClose
GetSystemDirectoryA
CopyFileA
SetCurrentDirectoryA
GetTimeZoneInformation
lstrlenW
WideCharToMultiByte
SetEvent
CreateEventA
Sleep
InterlockedIncrement
FormatMessageA
lstrlenA
LocalAlloc
InterlockedDecrement
ReleaseMutex
GetVersion
CreateMutexA
WaitForSingleObject
GetTickCount
GetLastError
GetProcAddress
LoadLibraryA
CloseHandle
DeviceIoControl
GetSystemTime
CreateFileA
GetCurrentThreadId
lstrcatA
GetThreadLocale
GlobalFree
GlobalUnlock
GlobalLock
SetLastError
MulDiv
FileTimeToSystemTime
FileTimeToLocalFileTime
SetThreadPriority
DuplicateHandle
GetCurrentProcess
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
GetVolumeInformationA
GetFullPathNameA
lstrcmpA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetStdHandle
GetFileType
GetStdHandle
SetHandleCount
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
HeapSize
GetACP
ExitThread
CreateThread
GetStartupInfoA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
RaiseException
RtlUnwind
GetVersionExA
SetErrorMode
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
GetFileAttributesA
WritePrivateProfileStringA
GlobalAlloc
GetCurrentThread

user32

SetDlgItemTextA
SendDlgItemMessageA
PeekMessageA
SetActiveWindow
SetFocus
AdjustWindowRectEx
DeferWindowPos
IsWindowVisible
EnableWindow
RegisterWindowMessageA
SendMessageA
GetWindowRect
SetForegroundWindow
GetCursorPos
LoadImageA
ClientToScreen
wsprintfA
FillRect
SetRect
InflateRect
GetTopWindow
IsChild
WinHelpA
RegisterClassA
TrackPopupMenu
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DestroyWindow
CreateWindowExA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetWindowPos
IntersectRect
SetMenuItemBitmaps
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
IsWindowEnabled
CreatePopupMenu
SystemParametersInfoA
GetWindowPlacement
GetNextDlgGroupItem
DrawFocusRect
LoadMenuA
GetMessagePos
GetUpdateRect
BeginPaint
EndPaint
DrawTextA
GetMenu
SetMenu
GetWindow
CheckMenuItem
EnableMenuItem
GetMenuItemID
MapWindowPoints
IsZoomed
GetSystemMenu
GetSysColor
DrawStateA
DrawEdge
CopyRect
ReleaseDC
GetDC
GetSubMenu
GetMenuItemCount
IsMenu
AppendMenuA
InsertMenuA
ModifyMenuA
GetMenuItemInfoA
GetMenuState
SetTimer
KillTimer
GetClientRect
SetWindowRgn
LoadBitmapA
DrawIcon
GetSystemMetrics
IsIconic
PtInRect
SetCapture
ScreenToClient
ReleaseCapture
GetCapture
DrawFrameControl
OffsetRect
LoadIconA
DrawIconEx
GetMenuCheckMarkDimensions
CharNextA
GetWindowLongA
IsWindow
PostMessageA
LoadCursorA
DefWindowProcA
CreateDialogIndirectParamA
PostThreadMessageA
GetActiveWindow
EndDialog
GetWindowDC
TabbedTextOutA
GrayStringA
wvsprintfA
DestroyMenu
LoadStringA
ValidateRect
CharUpperA
LoadAcceleratorsA
TranslateAcceleratorA
GetDesktopWindow
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
PostQuitMessage
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
SetParent
DeleteMenu
InvertRect
GetClassNameA
GetSysColorBrush
CopyAcceleratorTableA
GetDCEx
LockWindowUpdate
RegisterClipboardFormatA
GetNextDlgTabItem
GetClassInfoA
GetCursor
InvalidateRect
GetParent
GetKeyState
SetCursor
SetRectEmpty
DispatchMessageA
GetMessageA
TranslateMessage
DestroyIcon
keybd_event
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
MapVirtualKeyA
GetFocus
ToAscii
CallNextHookEx
MessageBeep
GetKeyboardState
VkKeyScanA
SendMessageTimeoutW
VkKeyScanW
IsWindowUnicode
MessageBoxA
SetWindowsHookExA
UnhookWindowsHookEx
GetClassLongA
GetMenuStringA
IsRectEmpty
BeginDeferWindowPos
EqualRect
EndDeferWindowPos
RedrawWindow
WindowFromPoint
UpdateWindow
SetWindowLongA

gdi32

SetTextColor
CreateRectRgn
SelectClipRgn
DeleteDC
CreateRectRgnIndirect
AddFontResourceA
StretchBlt
PtInRegion
CreateFontIndirectA
GetPixel
CreateCompatibleBitmap
Rectangle
CreateBitmap
FillRgn
CreatePolygonRgn
CreateFontA
GetObjectA
PatBlt
CreateRoundRectRgn
CombineRgn
GetTextExtentPoint32A
CreateCompatibleDC
SelectObject
BitBlt
SetBkMode
CreateSolidBrush
DeleteObject
SetBkColor
GetTextColor
GetBkColor
GetDeviceCaps
GetStockObject
SaveDC
RestoreDC
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetViewportExtEx
GetWindowExtEx
CreatePen
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
SetRectRgn
DPtoLP
GetTextMetricsA
StretchDIBits
GetCharWidthA
LPtoDP
GetClipBox
GetTextExtentPointA
CreateDIBitmap

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegEnumValueA
CloseServiceHandle
OpenServiceA
OpenSCManagerA
StartServiceA
CreateServiceA
SetFileSecurityA
GetFileSecurityA
CryptEnumProvidersA
CryptGenRandom
CryptAcquireContextA
CryptGetProvParam
GetUserNameA
CryptReleaseContext

shell32

Shell_NotifyIconA
DragQueryFileA
DragFinish
DragAcceptFiles
ShellExecuteA

comctl32

ImageList_Destroy
ord17
ImageList_DragEnter
ImageList_DragMove
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_EndDrag
ImageList_DragShowNolock
ImageList_BeginDrag
_TrackMouseEvent
ImageList_Create
ImageList_DragLeave

oledlg

ord8

ole32

CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CLSIDFromString
CLSIDFromProgID
CoInitializeEx
CoSetProxyBlanket
CoInitializeSecurity
CoCreateInstance
OleRun
CoInitialize
CoUninitialize
OleFlushClipboard
OleIsCurrentClipboard
OleInitialize
OleUninitialize
CoRevokeClassObject
CoRegisterMessageFilter
CoGetClassObject
CoFreeUnusedLibraries

olepro32

ord253

oleaut32

SysStringLen
VariantTimeToSystemTime
SysAllocStringLen
VarDateFromStr
SysAllocStringByteLen
VariantChangeType
SysFreeString
SysAllocString
SafeArrayGetElement
VariantCopy
VariantInit
VariantClear
GetErrorInfo

wsock32

getsockname
ntohs
WSAGetLastError
WSAStartup
WSACleanup
listen
getpeername
inet_addr
accept
WSAAsyncSelect
bind
getsockopt
select
connect
closesocket
send
recv
socket
htons
ioctlsocket
gethostbyname
WSASetLastError
htonl
recvfrom
inet_ntoa
sendto
shutdown
setsockopt

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

crypt32

CertCloseStore
CryptDecodeObject
CertFreeCertificateChain
CertFreeCertificateChainEngine
CertGetCertificateChain
CertCreateCertificateChainEngine
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertSetCertificateContextProperty
CertFreeCertificateContext
CertNameToStrA
CertVerifyCertificateChainPolicy
CertOpenStore
CertAddCertificateContextToStore
CryptEncodeObject
CryptDecodeMessage
CryptDecryptMessage
CryptEncryptMessage

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 280KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 392KB - Virtual size: 429KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f7c0f18242aebf61a05ad0181bac87bf

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

version

crypt32

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 280KB - Virtual size: 277KB

.data Size: 392KB - Virtual size: 429KB

.rsrc Size: 2.1MB - Virtual size: 2.1MB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 280KB - Virtual size: 277KB

.data
Size: 392KB - Virtual size: 429KB

.rsrc
Size: 2.1MB - Virtual size: 2.1MB