8bfaaf217ef1ca366659df8c64288b82_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8bfaaf217ef1ca366659df8c64288b82_JaffaCakes118
Size

243KB
MD5

8bfaaf217ef1ca366659df8c64288b82
SHA1

a633d1af4b73f04fe18337de38509b2a130076e1
SHA256

ac2fff870aea891f8b85e84411a9100248f484b082613348fdfb05868b70b9ef
SHA512

be409a241219eac57cb903669de4ba272267888fa051bd677b6fef32fcb189a0f8febfb1b3021e0f9abbb9d933980006f55e3f477df86eca9338b2b1a57e6139
SSDEEP

3072:oqdnsRof5Jwb3ys2LiYQOfk7e55oJt/C/qP97px/omlM3dvi6EH:FBsq+1OQO8Y5bqP97pRo+wEH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bfaaf217ef1ca366659df8c64288b82_JaffaCakes118

Files

8bfaaf217ef1ca366659df8c64288b82_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3974c113362ea368c14bfa1720389c1b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winspool.drv

EnumPortsA
OpenPrinterA

user32

MoveWindow
CreateAcceleratorTableW
AppendMenuW
EndDeferWindowPos
SetWindowTextA
InsertMenuA
GetClassLongA
GetWindowLongA
CreateIcon
IsCharAlphaNumericA
ScreenToClient
GetWindowTextLengthA
DispatchMessageW
CreateDialogParamW
LoadIconW
RegisterWindowMessageA
SetCapture
UnregisterDeviceNotification
GetClassNameA
GetClipboardFormatNameA
GrayStringW
GetDoubleClickTime
TranslateMDISysAccel
GetCursor
KillTimer
GetClassInfoExW
LockWindowUpdate
MapWindowPoints
LoadIconA
GetWindowPlacement
DrawTextW
GetWindowDC
GetKeyboardLayoutList
LoadMenuA
SetCursorPos
GetLastActivePopup
GetSystemMenu
GetMenuItemInfoA
UnionRect
ExcludeUpdateRgn
AttachThreadInput
GetFocus
IsCharAlphaA
GetForegroundWindow
PtInRect
VkKeyScanA
LoadAcceleratorsA
IsMenu
SetForegroundWindow
OpenIcon
CreateWindowExW
DdeConnect
SetWindowLongW
GetScrollRange
SetDlgItemTextW
SetPropA
RemoveMenu
FrameRect
CheckMenuRadioItem
IsDialogMessageW
DefFrameProcA
LoadStringA
AppendMenuA
DestroyMenu
DestroyWindow
GetIconInfo
SendMessageTimeoutW
CharLowerBuffW
CharUpperBuffA
IsWindowVisible
WindowFromPoint
SendDlgItemMessageA
GetSysColor
SetWindowContextHelpId
OemToCharBuffA
DrawStateW
ModifyMenuW
GetWindowModuleFileNameA
CharPrevW
OffsetRect
DdeUnaccessData

kernel32

TlsSetValue
GetPriorityClass
InterlockedCompareExchange
SetErrorMode
CreateToolhelp32Snapshot
GetPrivateProfileStringW
CreateMutexA
QueryPerformanceFrequency
SetNamedPipeHandleState
GetTempFileNameW
GetTempPathA
GetSystemDefaultUILanguage
lstrcatA
GetSystemDirectoryW
HeapSetInformation
GetLocaleInfoW
CreateFileW
CreateNamedPipeA
HeapReAlloc
CopyFileW
FlushInstructionCache
QueryDosDeviceW
LCMapStringW
WideCharToMultiByte
GetLastError
GetDriveTypeA
WriteProfileStringA
InterlockedIncrement
FindClose
HeapDestroy
GetStartupInfoA
GlobalReAlloc
GetOverlappedResult
SetStdHandle
FindCloseChangeNotification
GetSystemTimeAsFileTime
AddAtomA
GetProfileStringA
GlobalGetAtomNameW
VirtualFree
DeviceIoControl
IsDBCSLeadByteEx
WritePrivateProfileStringW
GetDriveTypeW
SystemTimeToFileTime
VirtualAlloc
LoadResource
SetUnhandledExceptionFilter
GlobalUnlock
DosDateTimeToFileTime
lstrcmpiW
GlobalFindAtomA
MultiByteToWideChar
GetConsoleMode
GlobalDeleteAtom
DeleteCriticalSection
SetThreadLocale
CreateDirectoryW
lstrlenA
ConvertDefaultLocale
GetDateFormatA
CloseHandle
CreateThread
WritePrivateProfileSectionA
GetModuleHandleA
_lread
OpenMutexA
GetSystemDefaultLCID
Sleep
UnmapViewOfFile
GetConsoleOutputCP
GetVersionExA
TlsAlloc
GetCommandLineW
GetDiskFreeSpaceExW
LoadLibraryExA
ExpandEnvironmentStringsA
lstrcmpW
GetLongPathNameW
GetProcessAffinityMask
InitializeCriticalSectionAndSpinCount
SetCurrentDirectoryW
GetShortPathNameA
GetACP
GlobalAddAtomA
GetExitCodeProcess
OpenMutexW
HeapSize
SystemTimeToTzSpecificLocalTime
GetFileAttributesA
GetUserDefaultLangID
GetFullPathNameW
GetTimeFormatW
FindResourceExW

gdi32

Rectangle
CreateDCA
CopyMetaFileA
GdiComment
GetPaletteEntries
GetTextCharsetInfo
TextOutA
GetBkColor
GetTextMetricsA
GetClipRgn
EnumFontFamiliesW
SelectPalette
CopyEnhMetaFileA
GetTextFaceW
GetTextAlign
SetPixel
GetMetaFileBitsEx
CreateMetaFileW

oleaut32

SafeArrayPutElement

comctl32

PropertySheetW
ImageList_AddMasked
ImageList_GetImageCount
ImageList_DragMove

shell32

ExtractIconA
SHFileOperationW
SHGetMalloc
ShellExecuteExW

version

GetFileVersionInfoSizeW

comdlg32

GetOpenFileNameA
GetFileTitleW
ChooseColorA

shlwapi

PathIsUNCA

advapi32

RegDeleteKeyA
RegQueryValueW
StartServiceW
RegQueryInfoKeyA
GetTokenInformation
CreateServiceA
GetSecurityDescriptorSacl
RegFlushKey
ChangeServiceConfigW
LookupAccountSidA
ConvertSidToStringSidW
ImpersonateSelf
RegisterServiceCtrlHandlerW
AddAce

ole32

CoCreateGuid
CoLockObjectExternal
OleSetMenuDescriptor
CoSuspendClassObjects

msvcrt

_adjust_fdiv
_XcptFilter
_wcsicmp
_wcslwr
_exit
_iob
wcsncmp
malloc
fclose
strncmp
swprintf
fread
strrchr
_snwprintf
_wsplitpath
_beginthreadex
_cexit
_wcsdup
longjmp
_expand
_ltow
wcsstr
rand
_stricmp
srand
_wtoi64
_vsnprintf
wcscmp
_mbsrchr
_errno
tolower
_CxxThrowException
atof
wcsrchr
setlocale
wcspbrk
_wcsupr
wcschr
wcstok
memmove
_wcsnicmp
_strnicmp
floor
atol
_strlwr
__p__commode
__p__fmode
__set_app_type
_except_handler3
_acmdln
__getmainargs
_initterm
_controlfp
__setusermatherr
exit

Sections

.text
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3974c113362ea368c14bfa1720389c1b

Headers

File Characteristics

Imports

winspool.drv

user32

kernel32

gdi32

oleaut32

comctl32

shell32

version

comdlg32

shlwapi

advapi32

ole32

msvcrt

Sections

.text Size: 215KB - Virtual size: 215KB

.data Size: 21KB - Virtual size: 20KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 215KB - Virtual size: 215KB

.data
Size: 21KB - Virtual size: 20KB

.rsrc
Size: 6KB - Virtual size: 5KB