8841a335c14de9dfecf5e33d44905730_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8841a335c14de9dfecf5e33d44905730_JaffaCakes118
Size

261KB
MD5

8841a335c14de9dfecf5e33d44905730
SHA1

2b3e20b12732b8420bf44bf6ff099b90da8eb4e7
SHA256

5cf1794d69bbd7a5a68e8206034a0e5f55e0c7829e7305113be3714c25f291ee
SHA512

336a0864e78cdb1d8dcba7b9a0f7aadf0e8ad7b9653b9af0c94ea755d5d90ea8655c0656ce915edc0054fb38643a21279cbe5175f6a315e7855eafcc3f9f3216
SSDEEP

6144:ckPoycE12Hfi9d9giv6KIhcDf4QiiA25CzK:ck/WHfi91Qy7Fdw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8841a335c14de9dfecf5e33d44905730_JaffaCakes118

Files

8841a335c14de9dfecf5e33d44905730_JaffaCakes118
.exe windows:4 windows x86 arch:x86

05a2d3ef657ec294d02f948009a53ef1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantTimeToSystemTime
VariantInit
VariantCopy
VariantClear
VariantChangeType
VarR8Pow
VarDecFromBool
OleCreateFontIndirect
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen
SysAllocString
SafeArrayDestroy

winspool.drv

ClosePrinter
DocumentPropertiesW
EnumPrinterDataW
GetPrintProcessorDirectoryW
OpenPrinterW

shell32

SHGetSpecialFolderPathW
SHGetFolderPathW
ShellExecuteW

advapi32

RegSetValueExW
RegQueryValueW
RegOpenKeyW
RegOpenKeyExW
RegEnumKeyW
RegCloseKey
OpenTraceW
LsaOpenPolicy
GetTrusteeTypeW
RegisterEventSourceW

wininet

InternetReadFile
InternetOpenW
InternetHangUp
InternetGetLastResponseInfoW
HttpSendRequestW
HttpOpenRequestW
GetUrlCacheEntryInfoW
GetUrlCacheEntryInfoExW

gdi32

GetTextColor
GetStockObject
GetMapMode
GetDeviceCaps
GetClipBox
ExtTextOutW
GetViewportExtEx
Escape
DeleteObject
CreateSolidBrush
CreateRectRgnIndirect
CreateFontIndirectW
CreateCompatibleDC
GetWindowExtEx
OffsetViewportOrgEx
SelectObject
SetBkColor
SetMapMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
TextOutW
ExtSelectClipRgn
StartPage
CreateBitmap

user32

PostThreadMessageW
PtInRect
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
ReleaseDC
RemovePropW
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCapture
SetCursor
SetFocus
PostQuitMessage
SetMenuItemBitmaps
SetRect
SetWindowContextHelpId
SetWindowTextW
ShowWindow
SystemParametersInfoA
TabbedTextOutW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
ValidateRect
WinHelpW
PostMessageW
PeekMessageW
SetForegroundWindow
OffsetRect
AdjustWindowRectEx
ModifyMenuW
MessageBoxW
MapWindowPoints
MapDialogRect
LoadImageW
LoadIconW
IsWindowVisible
IsWindow
IsRectEmpty
IsIconic
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
GrayStringW
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowDC
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetSubMenu
GetPropW
GetParent
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetLastActivePopup
GetKeyState
GetFocus
GetDlgItem
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassLongW
GetClassInfoExW
GetCapture
GetActiveWindow
EqualRect
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawTextExW
DispatchMessageW
DestroyWindow
DestroyMenu
DefWindowProcW
CreateWindowExW
CopyRect
CopyAcceleratorTableW
ClientToScreen
CharNextW
CallNextHookEx
BeginPaint
AppendMenuW
LoadCursorW

comdlg32

GetFileTitleW
PageSetupDlgA
WantArrows
ChooseFontW

kernel32

TerminateProcess
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetStdHandle
SetLastError
SetFilePointer
TlsFree
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualFree
VirtualProtect
WriteConsoleA
WriteFile
lstrcmpA
lstrcmpW
lstrlenW
FormatMessageW
FindResourceW
FindClose
FileTimeToLocalFileTime
EnumSystemLocalesA
DuplicateHandle
CreateHardLinkA
CreateFileW
CreateFileA
CreateDirectoryW
ConvertDefaultLocale
CompareStringW
CloseHandle
TlsGetValue
SetFileAttributesW
SetErrorMode
ReadFile
QueryPerformanceCounter
LockResource
LocalReAlloc
LocalFree
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsDBCSLeadByteEx
InterlockedIncrement
InterlockedExchange
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalReAlloc
GlobalHandle
GlobalFree
GlobalFlags
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVolumeInformationW
GetVersion
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetStringTypeA
GetProcessHeap
GetOEMCP
GetModuleHandleA
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileSize
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetConsoleMode
GetCommandLineA
GetCPInfo
GetBinaryTypeW
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
AreFileApisANSI

Sections

.text
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 145KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

05a2d3ef657ec294d02f948009a53ef1

Headers

File Characteristics

Imports

oleaut32

winspool.drv

shell32

advapi32

wininet

gdi32

user32

comdlg32

kernel32

Sections

.text Size: 53KB - Virtual size: 56KB

.rdata Size: 145KB - Virtual size: 148KB

.data Size: 34KB - Virtual size: 152KB

.idata Size: 6KB - Virtual size: 7KB

.rsrc Size: 21KB - Virtual size: 23KB

.text
Size: 53KB - Virtual size: 56KB

.rdata
Size: 145KB - Virtual size: 148KB

.data
Size: 34KB - Virtual size: 152KB

.idata
Size: 6KB - Virtual size: 7KB

.rsrc
Size: 21KB - Virtual size: 23KB