9618aaeeed52332469dfc52527a9226e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

9618aaeeed52332469dfc52527a9226e_JaffaCakes118
Size

173KB
MD5

9618aaeeed52332469dfc52527a9226e
SHA1

2c0e1e4b0cb41b2ba846a3ba562d4d7b010801f1
SHA256

fc7115f4485b289bf1418f37e8905485385aa6e9621eae4798beed9301654dbd
SHA512

31b3b74003e5d32af714d5cefbdabc79a66ee3e2a9f2d10e3c19bc55d1f1bb7c5a07d06c57df5e1c12cf6c216f9182ec74f97dcc7818c4cb9edcf293e0b64cca
SSDEEP

3072:5ZAujR10CUVVqZbvuJRo2VwZ46iETKTC9DMAYjKQZGQu:PDr0LCZjT2V36bKTC9DMAYjZC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9618aaeeed52332469dfc52527a9226e_JaffaCakes118

Files

9618aaeeed52332469dfc52527a9226e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a32c819543b1331e0df2866f3aedb37

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoFreeUnusedLibraries
CoRevokeClassObject
CoTaskMemFree
CoUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoCreateInstance
CoInitialize
OleInitialize
CoRegisterMessageFilter
OleUninitialize
StgOpenStorageOnILockBytes
CLSIDFromProgID
CoGetClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc
CLSIDFromString

advapi32

RegCreateKeyExW
RegEnumKeyW
RegEnumKeyExW
RegQueryValueW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegOpenKeyW
RegSetValueExW
RegQueryInfoKeyW
RegQueryValueExW

comdlg32

GetFileTitleW

shlwapi

PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathAppendW

gdi32

ScaleViewportExtEx
SetBkColor
SetTextColor
GetViewportExtEx
SetWindowExtEx
Escape
SetViewportExtEx
GetWindowExtEx
DeleteObject
SaveDC
SelectObject
DeleteDC
SetViewportOrgEx
RestoreDC
GetMapMode
ExtSelectClipRgn
GetBkColor
GetStockObject
GetObjectW
GetDeviceCaps
TextOutW
OffsetViewportOrgEx
GetClipBox
SetMapMode
ExtTextOutW
RectVisible
PtVisible
ScaleWindowExtEx
GetTextColor
GetRgnBox
CreateBitmap
CreateRectRgnIndirect

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

shell32

SHCreateDirectoryExW
SHGetSpecialFolderPathW

user32

GetClassInfoW
CharNextW
SendDlgItemMessageA
IntersectRect
IsChild
EqualRect
UpdateWindow
GetTopWindow
SetForegroundWindow
IsWindow
CreateWindowExW
GetClassLongW
MapWindowPoints
GetMenu
IsIconic
GetClientRect
WinHelpW
GetPropW
DefWindowProcW
GetNextDlgGroupItem
AdjustWindowRectEx
SetRect
IsRectEmpty
SetActiveWindow
RemovePropW
LoadIconW
RegisterClassW
InvalidateRgn
GetNextDlgTabItem
OffsetRect
CopyAcceleratorTableW
GetWindowPlacement
RegisterWindowMessageW
GetForegroundWindow
GetMessageTime
CharUpperW
MessageBeep
InvalidateRect
SetPropW
GetMessagePos
GetClassInfoExW
CallWindowProcW
DestroyMenu

kernel32

GetCalendarInfoW
GetVersion
EnumResourceLanguagesW
DeleteCriticalSection
MoveFileW
GetVersionExW
MultiByteToWideChar
SetFilePointer
lstrcmpiA
GetFileAttributesW
LoadResource
ReleaseMutex
GetProcAddress
FindFirstFileW
InterlockedDecrement
WideCharToMultiByte
InitializeCriticalSection
FindResourceW
CloseHandle
GetCurrentDirectoryW
GetThreadContext
SetFileTime
CreateFileW
FreeLibrary
WaitForSingleObject
GetACP
EnumResourceNamesA
GetSystemDefaultLangID
SizeofResource
RaiseException
GetModuleHandleW
LoadLibraryW
ExitProcess
DeleteFileW
GetLocaleInfoA
ReadFile
WriteFile
CreateDirectoryW
GetModuleFileNameW
LocalFileTimeToFileTime
ConvertDefaultLocale
CreateMutexW
GetCurrentProcessId
SystemTimeToFileTime
FindNextFileW
GetLocaleInfoW
RemoveDirectoryW
lstrcpyW
LockResource
InterlockedExchange
VirtualFree
FindClose
GetThreadLocale
lstrcmpA

oledlg

OleUIBusyW

Sections

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3a32c819543b1331e0df2866f3aedb37

Headers

File Characteristics

Imports

ole32

advapi32

comdlg32

shlwapi

gdi32

winspool.drv

shell32

user32

kernel32

oledlg

Sections

.text Size: 98KB - Virtual size: 98KB

.rdata Size: 5KB - Virtual size: 4KB

.bss Size: 67KB - Virtual size: 67KB

.edata Size: 1024B - Virtual size: 92KB

.text
Size: 98KB - Virtual size: 98KB

.rdata
Size: 5KB - Virtual size: 4KB

.bss
Size: 67KB - Virtual size: 67KB

.edata
Size: 1024B - Virtual size: 92KB