831afd78eb1c529dfbb3565791eef77c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

831afd78eb1c529dfbb3565791eef77c_JaffaCakes118
Size

2.0MB
MD5

831afd78eb1c529dfbb3565791eef77c
SHA1

ca2fa5e944397f93999d54fc96db1918331337ef
SHA256

ca2cb2f85acd9217fb2967c9d5d4b7ec5fb0dfde16a329a49896c6bea30ba79d
SHA512

27fc250509cc6e72a4567e9784d772be232d3ae94a89f77e40453503db2540503e18f450c214b2cd93839424524a1792bdb700fecedcc12f470b16f736a9c7a1
SSDEEP

24576:2GmIH8BWaFGxe8GVIWiG0wAhJ6mf6lckJ92TQv8jOZ9hY:5m8/aFbhVIQKJCckPGQvSOZ9hY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
831afd78eb1c529dfbb3565791eef77c_JaffaCakes118

Files

831afd78eb1c529dfbb3565791eef77c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1039d5b7d03badf54139e3b990b1b9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceExA
GetOEMCP
WritePrivateProfileStringA
DuplicateHandle
GetCurrentProcess
FlushFileBuffers
LockFile
UnlockFile
GetTickCount
GetProcessVersion
GetCPInfo
ExitProcess
TerminateProcess
GetTimeZoneInformation
GetStartupInfoA
GetCommandLineA
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
CreateThread
ExitThread
HeapSize
RaiseException
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
SetLastError
WaitForSingleObject
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
TlsSetValue
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
TlsGetValue
LocalReAlloc
LeaveCriticalSection
EnterCriticalSection
GlobalReAlloc
DeleteCriticalSection
TlsFree
GlobalHandle
LocalAlloc
TlsAlloc
InitializeCriticalSection
lstrcpynA
GlobalFlags
lstrcmpA
GlobalAlloc
GetCurrentThread
CreateEventA
ResumeThread
SuspendThread
SetThreadPriority
GetACP
MulDiv
MoveFileA
FindFirstFileA
FindClose
SetFileTime
GetFileTime
WriteFile
ReadFile
SetEndOfFile
GetFileSize
SetFilePointer
CreateFileA
lstrlenA
GetTempPathA
SetFileAttributesA
GetSystemTime
SystemTimeToFileTime
LoadLibraryA
SetThreadLocale
CreateMutexA
CloseHandle
GetFileAttributesA
GetLastError
GetLocaleInfoA
GetNumberFormatA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatA
GetTimeFormatA
GetThreadLocale
FreeLibrary
InterlockedDecrement
InterlockedIncrement
GlobalGetAtomNameA
GetVersion
GetCurrentThreadId
GlobalFindAtomA
lstrcmpiA
GlobalAddAtomA
GlobalLock
GlobalDeleteAtom
GetModuleHandleA
LockResource
GlobalUnlock
GlobalFree
GlobalMemoryStatus
FindResourceA
LoadResource
GetLocalTime
IsBadReadPtr
IsBadWritePtr
GetModuleFileNameA
LocalFileTimeToFileTime
OutputDebugStringA
GetSystemDirectoryA
DeviceIoControl
QueryPerformanceFrequency
Sleep
QueryPerformanceCounter
lstrcpyA
GetWindowsDirectoryA
lstrcatA
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
GetVersionExA
GetExitCodeThread
SetConsoleCtrlHandler
FormatMessageA
LocalFree
GetProcAddress
SetErrorMode
GetDiskFreeSpaceA
GetDriveTypeA
SetVolumeLabelA
GetVolumeInformationA
HeapCreate
GetFullPathNameA
SetCurrentDirectoryA
SetEvent
RemoveDirectoryA
CreateDirectoryA
FindNextFileA
DeleteFileA
VirtualFree
VirtualAlloc
IsBadCodePtr

user32

SetTimer
KillTimer
CharUpperA
RegisterClipboardFormatA
GetDCEx
LockWindowUpdate
SetParent
ReleaseCapture
SetCapture
GetSysColorBrush
GetDesktopWindow
GetClassNameA
WindowFromPoint
IsZoomed
SetRectEmpty
DestroyMenu
SetWindowContextHelpId
PostQuitMessage
GetAsyncKeyState
GetMessageA
ValidateRect
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
ClientToScreen
LoadStringA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
IntersectRect
GetWindowPlacement
GetNextDlgTabItem
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetMenu
GetMenuItemID
wsprintfA
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
GetCursorPos
GetParent
InflateRect
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
GetSysColor
MapWindowPoints
EnumChildWindows
PtInRect
CopyRect
SetCursor
SetClassLongA
GetFocus
DestroyCursor
LoadCursorA
MapDialogRect
SystemParametersInfoA
OffsetRect
InvalidateRect
UpdateWindow
PostThreadMessageA
TranslateAcceleratorA
GetWindowLongA
SetWindowLongA
GetMenuItemCount
CheckMenuItem
ScreenToClient
GetSubMenu
RemoveMenu
InsertMenuA
IsIconic
DrawIcon
GetSystemMenu
AppendMenuA
GetClientRect
GetSystemMetrics
LoadAcceleratorsA
LoadMenuA
IsChild
LoadIconA
GetDC
GetWindowRect
GetActiveWindow
MessageBoxA
LoadImageA
IsWindow
SetForegroundWindow
EnableWindow
SendMessageA
RegisterClassA
PostMessageA
UnregisterClassA

gdi32

CreateRectRgn
DeleteObject
GetViewportExtEx
GetWindowExtEx
GetDeviceCaps
CreatePatternBrush
PtVisible
RectVisible
ExtTextOutA
TextOutA
PatBlt
CreateRectRgnIndirect
Escape
CreateCompatibleBitmap
StretchDIBits
GetTextExtentPoint32A
EnumFontFamiliesExA
GetBkColor
DPtoLP
GetTextColor
GetMapMode
SetRectRgn
LPtoDP
CombineRgn
IntersectClipRect
ExcludeClipRect
ScaleWindowExtEx
SetWindowExtEx
SelectClipRgn
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetMapMode
SetViewportOrgEx
GetStockObject
SelectObject
SaveDC
RestoreDC
CreateBitmap
SetBkColor
DeleteDC
GetClipBox
SetTextColor
CreateCompatibleDC
BitBlt
GetObjectA
CreateFontIndirectA
GetTextMetricsA
CreateSolidBrush

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExA
RegCloseKey
RegOpenKeyA
RegSetValueExA
RegCreateKeyA
RegCreateKeyExA
RegOpenKeyExA

shell32

SHGetDesktopFolder
SHGetMalloc
ShellExecuteA
SHGetFileInfoA

comctl32

ord17
_TrackMouseEvent
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Destroy

oledlg

ord8

ole32

CoFreeUnusedLibraries
CoRegisterMessageFilter
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize

olepro32

ord253

oleaut32

SysStringLen
SysAllocStringByteLen
VariantCopy
SysAllocString
VariantChangeType
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

Sections

.text
Size: 708KB - Virtual size: 706KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 536KB - Virtual size: 578KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 712KB - Virtual size: 710KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1039d5b7d03badf54139e3b990b1b9e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 708KB - Virtual size: 706KB

.rdata Size: 72KB - Virtual size: 71KB

.data Size: 536KB - Virtual size: 578KB

.rsrc Size: 712KB - Virtual size: 710KB

.text
Size: 708KB - Virtual size: 706KB

.rdata
Size: 72KB - Virtual size: 71KB

.data
Size: 536KB - Virtual size: 578KB

.rsrc
Size: 712KB - Virtual size: 710KB