8e1ad0b1d4edd0f6a81fb38f2e1f5881_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8e1ad0b1d4edd0f6a81fb38f2e1f5881_JaffaCakes118
Size

856KB
MD5

8e1ad0b1d4edd0f6a81fb38f2e1f5881
SHA1

db11414156cafe68a3306c058c0a1637eb04b25a
SHA256

13980e26c89d7508e6af970c018670cfa3a4a575c06c8c59a9cce8267ca04fbd
SHA512

a6225a53eba46dd2dd58a4a0d81a8ae3744d83ca3c036c335e63439b1acf00839d9262f10c162dcc8b0b253a15ae3a5975655f5fd7e585b01e98403468c6e5ef
SSDEEP

12288:0zRxgjnKTfzYBxunT4inVEqt2XujyVBYCcvyxnYQ3hzb8W:+oKTQuNnSq4XEyYzyq8eW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e1ad0b1d4edd0f6a81fb38f2e1f5881_JaffaCakes118

Files

8e1ad0b1d4edd0f6a81fb38f2e1f5881_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a764295e1f8f8da6b6e3aaee67fcdf9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cmfrgnet

GetNetModuleInterface

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

GetTimeZoneInformation
FindFirstFileA
FindNextFileA
HeapReAlloc
TerminateProcess
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapAlloc
VirtualFree
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
SetStdHandle
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
RtlUnwind
HeapFree
ExitProcess
GetStartupInfoW
SetErrorMode
GetFileTime
GetFileAttributesW
FileTimeToLocalFileTime
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringW
FileTimeToSystemTime
GlobalFlags
lstrcmpiW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
InterlockedIncrement
VirtualProtect
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
InterlockedDecrement
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetModuleHandleA
lstrcatW
lstrcmpW
SetLastError
lstrcpyW
GlobalLock
GlobalUnlock
FormatMessageW
lstrcpynW
LocalFree
GetVersionExA
LoadLibraryA
GlobalMemoryStatus
GetCurrentProcessId
QueryPerformanceCounter
GetTickCount
GetStdHandle
GetFileType
GetVersion
LoadLibraryW
GetProcAddress
FreeLibrary
GlobalAlloc
GlobalFree
GetLocalTime
lstrlenA
CreateSemaphoreW
GetSystemTimeAsFileTime
WaitForSingleObject
ReleaseSemaphore
TerminateThread
CloseHandle
CreateThread
GetModuleFileNameW
CreateProcessW
MulDiv
FindResourceW
LoadResource
LockResource
SizeofResource
GetCurrentThreadId
GetModuleHandleW
lstrlenW
GetLastError
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSection
RaiseException
WideCharToMultiByte
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapCreate

user32

GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatW
PostThreadMessageW
SetWindowContextHelpId
MapDialogRect
CreateDialogIndirectParamW
EndDialog
GetMessageW
TranslateMessage
ValidateRect
PostQuitMessage
SetMenuItemBitmaps
ModifyMenuW
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextW
TabbedTextOutW
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextLengthW
GetWindowTextW
GetLastActivePopup
DispatchMessageW
GetDlgItem
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
InvalidateRgn
GetKeyState
GetMenu
AdjustWindowRectEx
ScreenToClient
EqualRect
GetClassInfoW
RegisterClassW
GetDlgCtrlID
SetWindowPos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
PtInRect
GetWindow
GetMenuState
GetMenuStringW
GetMenuItemID
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
SystemParametersInfoW
CallWindowProcW
DrawTextExW
MessageBoxW
RedrawWindow
MapWindowPoints
GetClassNameW
GetFocus
UpdateWindow
SetRect
RegisterWindowMessageW
GetCursorPos
GetSystemMetrics
IsWindowEnabled
SetActiveWindow
LoadIconW
GetForegroundWindow
SetForegroundWindow
GetDesktopWindow
KillTimer
SetTimer
IsWindowVisible
IsIconic
RemoveMenu
GetMenuItemCount
EnableMenuItem
DrawIcon
IsWindow
GetSubMenu
TrackPopupMenuEx
wsprintfW
DestroyMenu
LoadMenuW
CopyAcceleratorTableW
IsRectEmpty
CharNextW
CharUpperW
LoadStringW
LoadCursorW
DestroyCursor
GetSysColor
SetCursor
DestroyIcon
EnableWindow
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ReleaseDC
SetCapture
GetSysColorBrush
ReleaseCapture
TrackPopupMenu
GetDC
ClientToScreen
GetClientRect
GetWindowRect
SendMessageW
DrawFocusRect
DrawFrameControl
FrameRect
FillRect
OffsetRect
InflateRect
CopyRect
DrawStateW
DestroyWindow
CreateWindowExW
SetWindowLongW
PostMessageW
GetWindowLongW
DefWindowProcW
UnregisterClassW

gdi32

ExtSelectClipRgn
CreatePen
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SetTextAlign
BitBlt
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
MoveToEx
CreateFontIndirectW
GetViewportOrgEx
SetViewportOrgEx
Rectangle
CreateSolidBrush
PatBlt
GetTextExtentPoint32W
GetObjectW
CreateBitmap
SetBkColor
SetTextColor
DeleteDC
GetStockObject
DeleteObject
GetDeviceCaps
LineTo

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueExW
RegOpenKeyExW
DeregisterEventSource
ReportEventA
RegisterEventSourceA
RegOpenKeyW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
RegCloseKey

shell32

Shell_NotifyIconW
ShellExecuteW

comctl32

_TrackMouseEvent
ord17
ImageList_Destroy

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
StrToIntW
PathIsUNCW

oledlg

OleUIBusyW

ole32

StgCreateDocfileOnILockBytes
CoInitialize
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
StgOpenStorageOnILockBytes
CoGetClassObject
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal

oleaut32

VariantClear
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysStringLen
SysFreeString
VariantInit
VariantChangeType
OleCreateFontIndirect
SysAllocStringLen

ws2_32

gethostbyname
socket
closesocket
WSAStartup
htons
WSAGetLastError
ioctlsocket
connect
send
recv
__WSAFDIsSet
select
WSACleanup

winmm

PlaySoundW

Sections

.text
Size: 408KB - Virtual size: 407KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 272KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a764295e1f8f8da6b6e3aaee67fcdf9f

Headers

File Characteristics

Imports

cmfrgnet

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

winmm

Sections

.text Size: 408KB - Virtual size: 407KB

.rdata Size: 128KB - Virtual size: 126KB

.data Size: 44KB - Virtual size: 64KB

.rsrc Size: 272KB - Virtual size: 269KB

.text
Size: 408KB - Virtual size: 407KB

.rdata
Size: 128KB - Virtual size: 126KB

.data
Size: 44KB - Virtual size: 64KB

.rsrc
Size: 272KB - Virtual size: 269KB