95c93805f25ba1da197923be383b1c51_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

95c93805f25ba1da197923be383b1c51_JaffaCakes118
Size

270KB
MD5

95c93805f25ba1da197923be383b1c51
SHA1

1b5bbf0e1b6f39ea9740864fc70f69e6a703b87e
SHA256

f1ff9f97c455a2fd6e347feafac887185af24b4ac314623921e99a8ce890fcc2
SHA512

1950e05302689a65931a50ff328b0ee6f6bb7e3fdec1766fec5a5d74299214bb880edb873048d2c11f3f645ad020ea5e834c6f06fc9fa3a85795404a50b15303
SSDEEP

3072:8altR3JyGvtZeXAFj//d2svXBM+/lXs1OH7YOjxSJRA0YGcf01mlEQR4o:zR5yUeXAFTvXC+/lXs4EvRjByIyy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95c93805f25ba1da197923be383b1c51_JaffaCakes118

Files

95c93805f25ba1da197923be383b1c51_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e241549af442f91fd26e00bc1802c072

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oledlg

OleUIBusyW

kernel32

GetModuleHandleW
GetOEMCP
GetProcessHeap
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadLocale
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVolumeInformationW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFlags
GlobalFree
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadFile
ReadFileEx
RtlUnwind
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetFileAttributesW
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualProtect
VirtualQuery
WriteConsoleA
WriteConsoleW
WriteFile
lstrcmpA
lstrcmpW
lstrlenA
lstrlenW
CompareStringA
CompareStringW
ConvertDefaultLocale
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileTime
GetFileSize
GetFileAttributesW
CreateDirectoryW
CreateFileA
CreateFileW
DeleteCriticalSection
DuplicateHandle
EnumResourceLanguagesW
EnumSystemLocalesA
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetEnvironmentStringsW
FreeResource
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStringsA
CloseHandle

shell32

SHGetFolderPathW
ShellExecuteW

advapi32

OpenTraceW
RegCreateKeyExW
RegEnumKeyW
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW
RegQueryValueW
RegSetValueExW
RegCloseKey

user32

GetSysColorBrush
GetSystemMetrics
GetTopWindow
GetWindow
GetWindowDC
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
GrayStringW
IntersectRect
InvalidateRect
InvalidateRgn
IsChild
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxW
ModifyMenuW
OffsetRect
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PtInRect
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemovePropW
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
GetNextDlgGroupItem
SetCursor
GetSysColor
SetForegroundWindow
SetMenuItemBitmaps
SetRect
SetWindowContextHelpId
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoA
TabbedTextOutW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
VkKeyScanExA
WinHelpW
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetActiveWindow
EqualRect
EndPaint
EndDialog
EnableWindow
DrawTextExW
DispatchMessageW
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemID
GetCursorPos
GetMenuCheckMarkDimensions
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
DestroyWindow
DestroyMenu
DefWindowProcW
CreateWindowExW
GetSubMenu
GetPropW
GetParent
SetFocus
GetNextDlgTabItem
CreateDialogIndirectParamW
CopyRect
CopyAcceleratorTableW
ClientToScreen
CheckMenuItem
CharUpperW
CharNextW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
GetDesktopWindow
SetCapture
GetDC
GetMenuItemCount
DrawTextW

wininet

GetUrlCacheEntryInfoExW
HttpSendRequestW
InternetCloseHandle
InternetGetLastResponseInfoW
InternetOpenW
InternetReadFile
HttpOpenRequestW

comctl32

InitCommonControlsEx

comdlg32

GetFileTitleW
ChooseFontW

oleaut32

VariantChangeType
SafeArrayDestroy
VariantTimeToSystemTime
VariantInit
VariantCopy
VariantClear
OleCreateFontIndirect
VarDecFromUI2
SystemTimeToVariantTime
SysFreeString
SysAllocStringLen
SysAllocString

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

shlwapi

PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW

ole32

CoFreeUnusedLibraries
CoGetClassObject
CLSIDFromProgID
CoInitializeEx
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
HGLOBAL_UserSize
OleFlushClipboard
OleInitialize
OleIsCurrentClipboard
OleUninitialize
StgOpenStorageOnILockBytes
CoDisconnectObject
StgCreateDocfileOnILockBytes

gdi32

GetDeviceCaps
GetMapMode
GetObjectW
GetOutlineTextMetricsW
GetStockObject
GetClipBox
GetViewportExtEx
GetWindowExtEx
OffsetViewportOrgEx
ExtTextOutW
SelectObject
GetTextColor
GetBkColor
SetBkColor
SetBkMode
SetMapMode
SetPixelV
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
CreateBitmap
ExtSelectClipRgn
Escape
DeleteObject
CreateSolidBrush
CreateRectRgnIndirect
CreateFontIndirectW
CreateCompatibleDC
TextOutW
PtVisible

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Tok33enizerInit
Tok33enizerTerminate
Tok33tnizerTokenize

Sections

.text
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 137KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e241549af442f91fd26e00bc1802c072

Headers

File Characteristics

Imports

oledlg

kernel32

shell32

advapi32

user32

wininet

comctl32

comdlg32

oleaut32

winspool.drv

shlwapi

ole32

gdi32

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 60KB

.rdata Size: 137KB - Virtual size: 140KB

.data Size: 44KB - Virtual size: 156KB

.idata Size: 9KB - Virtual size: 11KB

.rsrc Size: 21KB - Virtual size: 23KB

.text
Size: 57KB - Virtual size: 60KB

.rdata
Size: 137KB - Virtual size: 140KB

.data
Size: 44KB - Virtual size: 156KB

.idata
Size: 9KB - Virtual size: 11KB

.rsrc
Size: 21KB - Virtual size: 23KB