845ba4d19c71ab80ef07ed713169c794_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

845ba4d19c71ab80ef07ed713169c794_JaffaCakes118
Size

416KB
MD5

845ba4d19c71ab80ef07ed713169c794
SHA1

9386f462c5c204da942941a72c360a6846e78bec
SHA256

c02d43ca402ebb18de7b5676c973e6198e2b205e3d93c1f2815ebe0b2d270932
SHA512

84bf9b260e382718e932116dad02319244cb18849ac6abeb3256b7528d22efaa295a944c579d20d88429681c6a1ed062e9d6bcb508a30830a22f42f9ce01736a
SSDEEP

12288:mH/YBIeIROIB6NGSEcBtPbhdivyvM2gqL29/qIa2QD9S:ftIROIBNQD9S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
845ba4d19c71ab80ef07ed713169c794_JaffaCakes118

Files

845ba4d19c71ab80ef07ed713169c794_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cb29ee36166bd1112c50e1b4b3eeaa96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dxwnd

ord3
ord4
ord1
ord2

shlwapi

PathRemoveFileSpecA

kernel32

GetCommandLineA
HeapFree
HeapAlloc
RaiseException
TerminateProcess
ExitProcess
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapSize
SetHandleCount
GetACP
GetFileType
GetTimeZoneInformation
GetVersionExA
GetEnvironmentStringsW
GetStartupInfoA
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
GetStdHandle
FlushFileBuffers
RtlUnwind
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
FormatMessageA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetShortPathNameA
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
HeapCreate
HeapDestroy
SetFilePointer
CloseHandle
GetModuleFileNameA
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
CreateProcessA
GetCurrentDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetOEMCP
GetCPInfo
GetThreadLocale
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
SizeofResource
SetLastError
GlobalFlags
MulDiv
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
lstrcpynA
GetFileAttributesA
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalAddAtomA
IsBadCodePtr
GetEnvironmentVariableA
GetProfileStringA

user32

LoadIconA
CharUpperA
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetDC
ReleaseDC
PtInRect
GetClassNameA
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
GetDesktopWindow
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
DestroyMenu
InvalidateRect
wvsprintfA
GetNextDlgGroupItem
MessageBeep
MapWindowPoints
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
CopyAcceleratorTableA
SetRect
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CharNextA
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
MapDialogRect
GetWindow
SetWindowContextHelpId
SetFocus
ShowWindow
SetWindowPos
MoveWindow
SetWindowLongA
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
DestroyIcon
LoadStringA
GetSysColorBrush
IsChild
GetTopWindow
CallWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
MessageBoxA
SetCursor
ShowOwnedPopups
PostMessageA
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
ClientToScreen
LoadMenuA
GetSubMenu
SendMessageA
EnableWindow
GetWindowRect
UpdateWindow
LoadCursorA
GetMessagePos
GetMessageTime
RemovePropA
EndDeferWindowPos
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode

gdi32

GetTextExtentPointA
GetClipBox
BitBlt
CreateCompatibleDC
CreateDIBitmap
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
PatBlt
GetMapMode
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
DeleteDC
GetStockObject
GetDeviceCaps
SelectObject
DeleteObject
GetObjectA
SetBkColor
CreateBitmap
SetTextColor

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegSetValueA
RegCreateKeyA
RegQueryValueA
RegCloseKey
RegSetValueExA
RegOpenKeyA
RegDeleteKeyA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyExA

shell32

SHGetFileInfoA
ExtractIconA
DragQueryFileA
DragFinish

comctl32

ord17
ImageList_Destroy

oledlg

ord8

ole32

OleUninitialize
CoFreeUnusedLibraries
OleInitialize
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
CoRegisterMessageFilter
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal

olepro32

ord253

oleaut32

SysFreeString
SysStringLen
SysAllocStringByteLen
VariantChangeType
SysAllocString
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb29ee36166bd1112c50e1b4b3eeaa96

Headers

File Characteristics

Imports

dxwnd

shlwapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 172KB - Virtual size: 171KB

.rdata Size: 48KB - Virtual size: 44KB

.data Size: 20KB - Virtual size: 33KB

.rsrc Size: 172KB - Virtual size: 169KB

.text
Size: 172KB - Virtual size: 171KB

.rdata
Size: 48KB - Virtual size: 44KB

.data
Size: 20KB - Virtual size: 33KB

.rsrc
Size: 172KB - Virtual size: 169KB