843f604397d3172ceae29ed02f5dab12_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

843f604397d3172ceae29ed02f5dab12_JaffaCakes118
Size

2.4MB
MD5

843f604397d3172ceae29ed02f5dab12
SHA1

cd805c7328af13d83946f2e8e8ff9a01902cdad0
SHA256

324a417510304d298f571af3bbdb02d347e5be0edff3bf8ee0ecc16f801631a3
SHA512

4ef8176545b6592f5cfe1ed8b8d1a092f654e3f2a585eeaac3df6e6cd393f73c62231820be07219ff219073f76bcbc8fdb18989bc29a5b5ba471bbdc7aa45e25
SSDEEP

24576:ZdWjg3XkL4MQq584H1naXY1S38cr52NicDvkc+N3eyqc9/D3oOy2zOFo3F7qmR3I:id4M3FVn9ZNgVeyf/7Fqu7jRsY3at

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
843f604397d3172ceae29ed02f5dab12_JaffaCakes118

Files

843f604397d3172ceae29ed02f5dab12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

282d344763ad1275c26a5ce0a2502d04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

DrawDibDraw
DrawDibSetPalette
DrawDibOpen
DrawDibRealize
DrawDibClose
DrawDibBegin

dsound

ord1

winmm

timeGetTime

kernel32

ExitProcess
TerminateProcess
GetLocalTime
GetSystemTime
GetFileType
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
RaiseException
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
SetStdHandle
CreateThread
GetTimeZoneInformation
FreeEnvironmentStringsA
GetACP
ExitThread
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SizeofResource
CopyFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
RtlUnwind
lstrlenW
SetFileAttributesA
GlobalSize
SetErrorMode
GetCurrentDirectoryA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetOEMCP
FindResourceExA
FormatMessageA
TlsGetValue
GetCPInfo
GetProcessVersion
EnterCriticalSection
LocalReAlloc
TlsSetValue
TlsFree
GlobalReAlloc
LeaveCriticalSection
TlsAlloc
GlobalHandle
DeleteCriticalSection
LocalAlloc
InitializeCriticalSection
LocalFree
FreeEnvironmentStringsW
GetEnvironmentStrings
GlobalFlags
GetProcAddress
LockResource
FindResourceA
LoadResource
SetFilePointer
WriteFile
FlushFileBuffers
ReadFile
CreateFileA
SetLastError
GetFileSize
GetLastError
DeleteFileA
WaitForSingleObject
TerminateThread
SetEvent
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GetFullPathNameA
GetLogicalDriveStringsA
GetProcessHeap
HeapAlloc
HeapFree
GetDriveTypeA
GetDiskFreeSpaceExA
GetDiskFreeSpaceA
Sleep
CloseHandle
lstrlenA
lstrcpyA
lstrcatA
GetModuleHandleA
GetModuleFileNameA
FileTimeToLocalFileTime
GetProfileStringA
CreateDirectoryA
FileTimeToSystemTime
GetFileTime
SetFileTime
GetTempFileNameA
GetFileAttributesA
GetProfileIntA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
MoveFileA
SetEndOfFile
UnlockFile
LockFile
GetCurrentProcess
DuplicateHandle
GetTickCount
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateEventA
lstrcmpA
GetCurrentThread
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
lstrcpynA
MulDiv
InterlockedDecrement
LoadLibraryA
FreeLibrary
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SetHandleCount
GetStdHandle

user32

GetMenuStringA
DestroyIcon
PostThreadMessageA
CharNextA
CopyAcceleratorTableA
InsertMenuA
GetNextDlgGroupItem
InvertRect
IsZoomed
GetWindowThreadProcessId
WaitMessage
LoadStringA
IsClipboardFormatAvailable
SetCapture
CharUpperA
InflateRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
ShowOwnedPopups
PostQuitMessage
MapDialogRect
GetAsyncKeyState
UnpackDDElParam
ReuseDDElParam
SetMenu
ReleaseCapture
LoadAcceleratorsA
RedrawWindow
DefMDIChildProcA
DrawMenuBar
TranslateAcceleratorA
TranslateMDISysAccel
DefFrameProcA
BringWindowToTop
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
WindowFromPoint
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
GetDlgItemTextA
GetMenuCheckMarkDimensions
GetSysColorBrush
GetDCEx
SetMenuItemBitmaps
EnableMenuItem
SendDlgItemMessageA
MapWindowPoints
DispatchMessageA
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
MessageBoxA
IsChild
GetCapture
GetClassInfoA
SetParent
GetMenu
GetMenuItemCount
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetClassNameA
DeleteMenu
ModifyMenuA
GetMenuState
RegisterClassA
LoadMenuA
GetSubMenu
TrackPopupMenu
DestroyMenu
CheckMenuItem
PostMessageA
IsWindow
PtInRect
LoadCursorA
SetCursor
MessageBeep
SetRectEmpty
GetCursorPos
SetActiveWindow
IsWindowVisible
GetWindowLongA
SetWindowLongA
GetParent
DrawFocusRect
LockWindowUpdate
GetSystemMenu
AppendMenuA
RemoveMenu
LoadBitmapA
ScreenToClient
RegisterClipboardFormatA
UpdateWindow
GetForegroundWindow
GetDesktopWindow
PeekMessageA
IsRectEmpty
SetRect
GetDC
ReleaseDC
InvalidateRect
OffsetRect
SetTimer
KillTimer
GetSystemMetrics
GetClientRect
DrawIcon
CopyRect
GetFocus
GetSysColor
FillRect
IsIconic
GetWindowRect
SendMessageA
EnableWindow
LoadIconA
wsprintfA
WinHelpA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode

gdi32

ExcludeClipRect
DeleteObject
RealizePalette
DeleteDC
SelectObject
CreateSolidBrush
CreateDIBitmap
GetTextExtentPointA
LineTo
GetTextExtentPoint32A
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreatePen
CreatePatternBrush
PtVisible
RectVisible
TextOutA
IntersectClipRect
SelectClipRgn
ExtTextOutA
Escape
GetMapMode
SetRectRgn
CombineRgn
DPtoLP
GetTextMetricsA
EnumFontFamiliesExA
GetTextColor
GetBkColor
LPtoDP
CopyMetaFileA
SetWindowExtEx
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
SetViewportOrgEx
SetMapMode
OffsetViewportOrgEx
SelectPalette
RestoreDC
SetBkMode
CreateRectRgnIndirect
SaveDC
GetCharWidthA
StretchDIBits
PatBlt
SetBkColor
SetTextColor
CreateBitmap
GetObjectA
GetClipBox
GetStockObject
BitBlt
CreateFontIndirectA
GetDeviceCaps
CreatePalette
CreateFontA
SetTextAlign
MoveToEx
CreateCompatibleBitmap
CreateCompatibleDC

comdlg32

GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyA
RegCreateKeyExA
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegDeleteValueA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA

shell32

ExtractIconA
SHGetFileInfoA
DragFinish
DragAcceptFiles
ShellExecuteA
DragQueryFileA

comctl32

ImageList_ReplaceIcon
ImageList_AddMasked
CreatePropertySheetPageA
ImageList_GetIconSize
PropertySheetA
ImageList_Write
ImageList_Read
ImageList_LoadImageA
ImageList_Create
ImageList_Draw
ImageList_DrawEx
ImageList_Destroy
ImageList_Remove
DestroyPropertySheetPage
ImageList_GetIcon
ImageList_GetImageCount
ord17

oledlg

ord8

ole32

StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterMessageFilter
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
CoGetClassObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleDuplicateData
ReleaseStgMedium
CreateStreamOnHGlobal
OleFlushClipboard
CoTaskMemFree

olepro32

ord253

oleaut32

SysStringLen
VariantCopy
SysAllocString
VariantChangeType
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
SysAllocStringByteLen

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 212KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 668KB - Virtual size: 668KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

282d344763ad1275c26a5ce0a2502d04

Headers

File Characteristics

Imports

msvfw32

dsound

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 212KB - Virtual size: 209KB

.data Size: 160KB - Virtual size: 297KB

.rsrc Size: 668KB - Virtual size: 668KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 212KB - Virtual size: 209KB

.data
Size: 160KB - Virtual size: 297KB

.rsrc
Size: 668KB - Virtual size: 668KB