84058bec62b53b005f1e96a5aa63a461_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

84058bec62b53b005f1e96a5aa63a461_JaffaCakes118
Size

444KB
MD5

84058bec62b53b005f1e96a5aa63a461
SHA1

f2366acb29065924a4a0452c3eee330c81dbf131
SHA256

66e3059b1d17d99a7c4881b7f748bf15b4d50f5190b2282388d9fd3d1d9b5e44
SHA512

b8878fd414f7b0b240c5906aec4f5667c75b8a5389d3cc2f7b4eaf51ea38db85de81c3eba2ebe9edd80061620a3912a4abbce1d70e8013ac41dc3487ffde0852
SSDEEP

6144:nbU4kFXYyY9FR9do/vZnJKeySs3IHBNssc86itYlqlD2+jmoCoc5hnOeGBk:Y4SXYF97Po/vZnZ/s3iv9tn8+mdnnOnC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84058bec62b53b005f1e96a5aa63a461_JaffaCakes118

Files

84058bec62b53b005f1e96a5aa63a461_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a135a383cbfa4f1935cbcb6ef627173

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasGetEntryDialParamsA
RasGetEntryPropertiesA
RasEnumEntriesA

kernel32

HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sleep
GetVersionExA
GetProcAddress
LCMapStringW
LCMapStringA
GetProfileStringA
LoadLibraryA
FreeLibrary
GetEnvironmentVariableA
WideCharToMultiByte
CloseHandle
ReadFile
CreateFileA
ExitProcess
GetLocalTime
GetCurrentProcess
MultiByteToWideChar
ExpandEnvironmentStringsA
GetLastError
MulDiv
lstrcpyA
GlobalUnlock
GlobalLock
GlobalAlloc
CreateThread
lstrcatA
lstrcpynA
lstrcmpA
lstrlenA
WritePrivateProfileStringA
WinExec
GetCurrentThreadId
LoadResource
FindResourceA
LockResource
GlobalFree
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetACP
HeapSize
HeapReAlloc
GetFileType
SetStdHandle
HeapAlloc
RaiseException
GetCommandLineA
GetStartupInfoA
GetSystemTime
GetTimeZoneInformation
HeapFree
TerminateProcess
RtlUnwind
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GlobalFlags
GetPrivateProfileIntA
GetCurrentThread
SetLastError
GetModuleFileNameA
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
DuplicateHandle
FormatMessageA
LocalFree
InterlockedDecrement
InterlockedIncrement
GetVersion
HeapDestroy

user32

ReuseDDElParam
UnpackDDElParam
GetSysColorBrush
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
MapDialogRect
SetWindowContextHelpId
TranslateMessage
ValidateRect
ShowOwnedPopups
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
CharUpperA
LoadStringA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
GetFocus
SetFocus
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
IsChild
WinHelpA
SetMenu
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetKeyState
CreateWindowExA
GetClassLongA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetWindow
RegisterWindowMessageA
IntersectRect
GetWindowPlacement
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
SetWindowPos
CallWindowProcA
GetForegroundWindow
CallNextHookEx
IsWindowVisible
SetWindowLongA
UnhookWindowsHookEx
SetWindowsHookExA
GetMenuItemRect
IsMenu
GetMenuItemCount
SetRectEmpty
SetMenuItemInfoA
GetClassNameA
GetMenu
GetPropA
SetPropA
SendMessageA
LoadIconA
InvalidateRect
EnableWindow
wsprintfA
UnregisterClassA
HideCaret
ShowCaret
RemovePropA
SystemParametersInfoA
LoadBitmapA
GetMenuItemInfoA
EqualRect
MoveWindow
EnumChildWindows
DefWindowProcA
MessageBeep
LoadCursorA
IsWindow
GrayStringA
DrawTextA
TabbedTextOutA
ScreenToClient
GetCapture
SetCapture
PtInRect
GetMessageA
DispatchMessageA
GetDesktopWindow
LoadAcceleratorsA
RedrawWindow
DefMDIChildProcA
DrawMenuBar
TranslateAcceleratorA
TranslateMDISysAccel
DefFrameProcA
RegisterClassA
BringWindowToTop
ReleaseCapture
GetDlgCtrlID
IsRectEmpty
LoadImageA
GetIconInfo
CreateIconIndirect
ReleaseDC
FillRect
DrawStateA
CopyRect
FrameRect
InflateRect
OffsetRect
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
ShowWindow
PostMessageA
ExitWindowsEx
GetDC
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClassInfoA
SetForegroundWindow
FindWindowA
SetTimer
AppendMenuA
GetSystemMenu
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
GetCursorPos
GetSubMenu
LoadMenuA
SendMessageTimeoutA
MessageBoxA
KillTimer
GetSysColor
IsCharAlphaNumericA
DestroyMenu
DestroyCursor
DestroyIcon
GetWindowLongA
GetNextDlgTabItem
GetParent
SetCursor
GetActiveWindow
DrawFocusRect
GetWindowRect
TrackPopupMenuEx
ClientToScreen
WindowFromPoint

gdi32

SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
RestoreDC
GetViewportExtEx
GetWindowExtEx
GetMapMode
DPtoLP
GetBkColor
LPtoDP
SaveDC
PatBlt
Ellipse
GetTextMetricsA
GetCharWidthA
CreateCompatibleDC
CreatePatternBrush
GetTextExtentPoint32A
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
Rectangle
GetTextColor
GetCurrentObject
CreateSolidBrush
CreatePen
GetClipBox
GetObjectA
GetPixel
SetPixel
CreateBitmap
SetBkColor
SetTextColor
DeleteDC
GetStockObject
DeleteObject
GetDeviceCaps
CreateFontIndirectA
CreateCompatibleBitmap
SelectObject
GetTextExtentPointA
CreateDIBitmap
BitBlt

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegQueryValueExA
RegOpenKeyExA
LogonUserA
RegEnumKeyExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
LookupAccountNameA
RegQueryValueA
RegEnumValueA

shell32

DragQueryFileA
DragFinish
ShellExecuteExA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA

comctl32

ord17
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_Draw
ImageList_GetIcon
ImageList_Destroy
ImageList_Create

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoUninitialize
CoCreateInstance
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemFree

olepro32

ord253

oleaut32

SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
GetErrorInfo
SysFreeString

wininet

HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetReadFile

Sections

.text
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a135a383cbfa4f1935cbcb6ef627173

Headers

File Characteristics

Imports

rasapi32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

Sections

.text Size: 248KB - Virtual size: 244KB

.rdata Size: 56KB - Virtual size: 54KB

.data Size: 24KB - Virtual size: 39KB

.rsrc Size: 112KB - Virtual size: 111KB

.text
Size: 248KB - Virtual size: 244KB

.rdata
Size: 56KB - Virtual size: 54KB

.data
Size: 24KB - Virtual size: 39KB

.rsrc
Size: 112KB - Virtual size: 111KB