76f18fdb6afa3f0d33592cee8a6448d2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

76f18fdb6afa3f0d33592cee8a6448d2_JaffaCakes118
Size

1.4MB
MD5

76f18fdb6afa3f0d33592cee8a6448d2
SHA1

e10b347f7ac9636e761060e92c572ca18eab59fd
SHA256

69169917fc5e933de0afa8fa4cbd197f749097b45c277855541ffd136b7804ab
SHA512

627dc1a963ec4a5200916bd8e146c1bf0380412308308cbefcfbc4ae8d0e0e3eecf8141035b8554c79779351077fa5d3acb81395839681ebb89eac353b77aeb3
SSDEEP

24576:RAohjTv3g0xiTemN2dRfgq0RgyKKuGxJ7JIXdllwBqhKqh7lTAlw:RPtmNw1Gx9mQqgq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76f18fdb6afa3f0d33592cee8a6448d2_JaffaCakes118

Files

76f18fdb6afa3f0d33592cee8a6448d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a03fd3f45fff173ad0b85cf5649b847

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32First
CreateToolhelp32Snapshot
RemoveDirectoryA
GetPrivateProfileSectionNamesA
InterlockedExchange
GetVersion
CompareStringW
GetLocaleInfoA
GetThreadLocale
HeapFree
GetProcessHeap
HeapAlloc
AreFileApisANSI
GetSystemTime
GetFullPathNameW
DeleteFileW
LockFileEx
GetTempPathW
GetFileAttributesW
LoadLibraryW
LockFile
UnlockFile
SetEnvironmentVariableA
CreateFileW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
Process32Next
GetFileType
SetHandleCount
GetTimeZoneInformation
HeapCreate
GetStdHandle
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetCPInfo
LCMapStringW
LCMapStringA
GetStartupInfoA
GetCommandLineA
VirtualQuery
GetSystemInfo
VirtualProtect
GetSystemTimeAsFileTime
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
InterlockedCompareExchange
HeapSize
HeapReAlloc
HeapDestroy
GetACP
GetVolumeInformationA
GetPrivateProfileIntA
GetFileSize
CreateFileMappingA
MapViewOfFileEx
SetEndOfFile
SetFilePointer
UnmapViewOfFile
ResetEvent
GetEnvironmentVariableA
OpenMutexA
CopyFileA
CreateProcessA
GetExitCodeProcess
LoadLibraryExA
IsDBCSLeadByte
InterlockedIncrement
lstrlenW
CreateDirectoryA
ReadFile
CreateNamedPipeA
ConnectNamedPipe
GetTickCount
GetCurrentProcessId
GetProcAddress
ExitProcess
LoadLibraryA
FreeLibrary
GetVersionExA
lstrcmpiA
CompareStringA
CreateFileA
WriteFile
FlushFileBuffers
InterlockedDecrement
GetModuleHandleA
lstrcatA
FormatMessageA
FreeResource
MulDiv
GetTempPathA
CreateMutexA
GetFileAttributesA
lstrcmpA
FindNextFileA
CreateThread
CreateTimerQueue
CreateTimerQueueTimer
DeleteFileA
DeleteTimerQueueEx
GetPrivateProfileStructA
WritePrivateProfileStringA
WritePrivateProfileStructA
FindFirstFileA
GetFullPathNameA
FindClose
DeleteCriticalSection
InitializeCriticalSection
CloseHandle
SetEvent
WaitForSingleObject
CreateEventA
ExitThread
SetLastError
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
Sleep
GetLastError
RaiseException
lstrcpyA
GlobalLock
lstrcpynA
GetCurrentProcess
FlushInstructionCache
MultiByteToWideChar
lstrlenA
GetModuleFileNameA
GetPrivateProfileStringA
GetDateFormatA
GetTimeFormatA
WideCharToMultiByte
FindResourceExA
FindResourceA
LoadResource
LockResource
GetConsoleCP
SizeofResource

user32

GetMenuItemID
GetWindowThreadProcessId
RegisterClipboardFormatA
SetWindowsHookExA
UnhookWindowsHookEx
CreateDialogParamA
LoadIconA
CallNextHookEx
GetDCEx
FrameRect
InflateRect
PostMessageA
GetSubMenu
LoadMenuA
ModifyMenuA
TrackPopupMenuEx
MonitorFromPoint
GetMonitorInfoA
SetRect
DestroyIcon
RegisterWindowMessageA
DrawIconEx
IsMenu
PeekMessageA
IsRectEmpty
IntersectRect
EndDialog
GetPropA
UnregisterClassA
PostThreadMessageA
EnableScrollBar
GetScrollInfo
GetScrollPos
ShowScrollBar
RemovePropA
SetPropA
SetScrollInfo
GetWindowLongA
GetParent
DrawStateA
CreateIconIndirect
GetIconInfo
MessageBeep
GetSysColorBrush
WindowFromPoint
CharLowerA
GetMessagePos
DestroyCursor
SetMenuItemInfoA
GetMenuItemInfoA
GetMenuItemCount
CopyRect
IsWindowVisible
DestroyMenu
DialogBoxParamA
GetSysColor
GetFocus
SetCursor
DrawFocusRect
SetFocus
GetClassNameA
DrawEdge
WindowFromDC
DrawFrameControl
SetWindowPos
MapWindowPoints
GetClientRect
SystemParametersInfoA
GetWindowRect
GetWindow
SetWindowLongA
CreateWindowExA
SetWindowTextA
SendMessageA
GetMenu
MoveWindow
SetDlgItemTextA
GetDlgItem
OpenClipboard
IsDialogMessageA
AdjustWindowRectEx
SetRectEmpty
OffsetRect
CharNextA
MessageBoxA
PtInRect
ReleaseCapture
GetCapture
GetDlgCtrlID
IsWindowEnabled
KillTimer
SetTimer
UpdateWindow
ClientToScreen
LoadStringA
LoadCursorA
GetClassInfoExA
SetForegroundWindow
LoadImageA
GetSystemMenu
EnableMenuItem
ScreenToClient
FillRect
ValidateRect
CallWindowProcA
EnableWindow
InvalidateRect
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClassExA
DefWindowProcA
BeginPaint
EndPaint
GetKeyState
GetWindowDC
GetCursorPos
SetCapture
GetDC
ReleaseDC
PostQuitMessage
DestroyWindow
RedrawWindow
DrawTextA
GetSystemMetrics
GetActiveWindow
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
GetWindowTextLengthA
GetWindowTextA
SetWindowRgn
LoadBitmapA
IsWindow
SetScrollPos

gdi32

StretchBlt
CreateDIBSection
GetDeviceCaps
GetTextExtentPoint32A
GetCurrentObject
SaveDC
RestoreDC
SetViewportOrgEx
Polygon
SetPixel
GetPixel
CreateSolidBrush
TextOutW
SetStretchBltMode
GetClipBox
UnrealizeObject
PatBlt
SetBrushOrgEx
PlayEnhMetaFile
SetWindowOrgEx
IntersectClipRect
GetBitmapDimensionEx
SetBkColor
ExtTextOutA
MoveToEx
LineTo
CreatePatternBrush
CreatePen
RoundRect
Rectangle
CreateEllipticRgn
CombineRgn
GetDIBits
CreateCompatibleBitmap
CreateRectRgn
GetStockObject
DeleteObject
CreateRoundRectRgn
GetObjectA
CreateFontA
DeleteDC
CreateFontIndirectA
SetTextColor
SetBkMode
BitBlt
SelectObject
CreateCompatibleDC
CreateBitmap
GetClipRgn
SelectClipRgn

advapi32

RegQueryValueExA
RegFlushKey
RegOpenKeyExA
ConvertStringSecurityDescriptorToSecurityDescriptorA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyA
GetUserNameA
RegCloseKey

shell32

ShellExecuteA
SHGetSpecialFolderPathA
ord165
Shell_NotifyIconA
SHGetFolderPathA
SHGetPathFromIDListA
SHBrowseForFolderA

ole32

CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitialize
CoTaskMemRealloc

oleaut32

SysAllocString
VarUI4FromStr
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
VariantClear
VariantInit
SysFreeString

iphlpapi

GetAdaptersInfo

shlwapi

PathAppendA
PathAddBackslashA
PathAddExtensionA
PathFindFileNameA
StrCmpNA
PathRemoveFileSpecA
StrCpyW

comctl32

ImageList_GetIconSize
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
ImageList_Draw
ImageList_Add
_TrackMouseEvent
ImageList_GetImageCount
ImageList_DrawIndirect
InitCommonControlsEx
ord8
ImageList_GetIcon
ImageList_DrawEx

msimg32

TransparentBlt
GradientFill
AlphaBlend

uxtheme

CloseThemeData
OpenThemeData
DrawThemeBackground

wininet

HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetGetCookieA
InternetCrackUrlA
HttpAddRequestHeadersA
InternetSetOptionA
InternetOpenUrlA

Sections

.text
Size: 676KB - Virtual size: 676KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 648KB - Virtual size: 647KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a03fd3f45fff173ad0b85cf5649b847

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

iphlpapi

shlwapi

comctl32

msimg32

uxtheme

wininet

Sections

.text Size: 676KB - Virtual size: 676KB

.rdata Size: 93KB - Virtual size: 93KB

.data Size: 14KB - Virtual size: 23KB

.rsrc Size: 648KB - Virtual size: 647KB

.text
Size: 676KB - Virtual size: 676KB

.rdata
Size: 93KB - Virtual size: 93KB

.data
Size: 14KB - Virtual size: 23KB

.rsrc
Size: 648KB - Virtual size: 647KB