965ea362c69b4007563b3919a02d7eac_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

965ea362c69b4007563b3919a02d7eac_JaffaCakes118
Size

699KB
MD5

965ea362c69b4007563b3919a02d7eac
SHA1

773c23cdc471caf77a5d1230f2752ab7b34d6718
SHA256

8e1923e91c5cffa8073c216388c0f40366b96de60679bc37a75676d501057e95
SHA512

1a108c827a0c9ddfc83f1d883717ad72f9343fe0ca0ad12949e5ac27c0fd69aca36ae2e86c278af09b69030524bd85ac28cb1456fe47fe2a4c564687588846ce
SSDEEP

12288:HeKJlR/DOWqAgwJ8/dW4va82JFINh7fQ+WF/XA1bhw2S6reUKR+vk:3p+/dW4va82JFINh7/W5XAq6reUKcM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
965ea362c69b4007563b3919a02d7eac_JaffaCakes118

Files

965ea362c69b4007563b3919a02d7eac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a6ca47fb91a97abfc08d61a1610139b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

PropertySheetA
CreateToolbarEx
ord5
ord17
ImageList_ReplaceIcon
ImageList_Add
ImageList_Destroy
ord6
ImageList_Create

kernel32

GetModuleFileNameA
FindClose
GetFullPathNameA
lstrcpyA
lstrlenA
lstrcmpiA
MoveFileA
CloseHandle
FindNextChangeNotification
WaitForMultipleObjects
FindFirstChangeNotificationA
MulDiv
CreateEventA
WaitForSingleObject
SetEvent
GetCurrentDirectoryA
FindFirstFileA
FindNextFileA
GetDriveTypeA
CreateDirectoryA
SetCurrentDirectoryA
GetDiskFreeSpaceA
lstrcpynA
MultiByteToWideChar
ResumeThread
SetThreadPriority
ResetEvent
CreateThread
FileTimeToLocalFileTime
GlobalFree
GlobalUnlock
GlobalLock
CreateProcessA
InitializeCriticalSection
GetTimeFormatA
GetDateFormatA
FileTimeToSystemTime
FormatMessageA
GetLastError
LocalFree
_lwrite
_lread
GetVolumeInformationA
SetFileAttributesA
_lclose
_lcreat
DeleteFileA
lstrcmpA
CompareFileTime
FileTimeToDosDateTime
GetWindowsDirectoryA
OpenFile
CopyFileA
WideCharToMultiByte
SearchPathA
GetShortPathNameA
_llseek
SizeofResource
LockResource
LoadResource
FindResourceA
_lopen
SetErrorMode
GetVersionExA
GetFileAttributesA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
ExitThread
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
HeapReAlloc
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetFileType
GetStdHandle
CreateFileA
TlsAlloc
SetLastError
TlsGetValue
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
HeapDestroy
HeapCreate
VirtualFree
lstrcatA
LCMapStringA
LCMapStringW
HeapSize
GetProcAddress
VirtualAlloc
SetStdHandle
FlushFileBuffers
SetEndOfFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
LoadLibraryA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoA
GetLocaleInfoW
RaiseException
GetTickCount
FreeResource
GlobalHandle
GlobalReAlloc
GlobalAlloc

user32

DestroyWindow
IsWindow
UpdateWindow
IsZoomed
LoadAcceleratorsA
GetWindowPlacement
SetWindowPlacement
IsIconic
GetKeyState
CreatePopupMenu
KillTimer
TranslateAcceleratorA
BringWindowToTop
InflateRect
EnableMenuItem
PostMessageA
ShowWindowAsync
DestroyCursor
LoadStringA
ChildWindowFromPoint
GetWindowRect
MessageBeep
GetWindowTextA
OemToCharA
EndDeferWindowPos
DeferWindowPos
AdjustWindowRect
SetRect
OffsetRect
SetMenuDefaultItem
WindowFromPoint
IsDialogMessageA
GetSystemMenu
GetSystemMetrics
DrawEdge
DrawTextA
FillRect
GetSysColorBrush
IntersectRect
EnumChildWindows
GetCursorPos
ClipCursor
ReleaseCapture
SetCursorPos
WaitMessage
SetCapture
GetWindowTextLengthA
SetRectEmpty
IsRectEmpty
CharToOemA
PtInRect
ScreenToClient
SetMenu
SetDlgItemInt
EndPaint
BeginDeferWindowPos
GetMenu
IsWindowEnabled
RegisterClipboardFormatA
MoveWindow
InvalidateRgn
ScrollWindowEx
GetActiveWindow
DefWindowProcA
TrackPopupMenu
DestroyMenu
GetClientRect
CreateWindowExA
IsDlgButtonChecked
CheckDlgButton
GetSysColor
DrawFocusRect
AppendMenuA
EnableWindow
GetDlgItemTextA
SetWindowLongA
GetWindowLongA
IsWindowVisible
DdeAccessData
DdeUnaccessData
DdeFreeStringHandle
DdeUninitialize
DestroyIcon
DdeInitializeA
DdeCreateStringHandleA
DdeNameService
GetDC
ReleaseDC
LoadIconA
PeekMessageA
TranslateMessage
GetMessageA
DispatchMessageA
GetDesktopWindow
MessageBoxA
SetDlgItemTextA
SendMessageA
GetDlgItem
EndDialog
GetParent
WinHelpA
SetTimer
SendDlgItemMessageA
LoadCursorA
SetCursor
InvalidateRect
wsprintfA
SetWindowTextA
CheckMenuItem
RegisterClassA
CreateDialogParamA
SystemParametersInfoA
BeginPaint
PostQuitMessage
SetWindowPos
ShowWindow
RemoveMenu
GetFocus
DialogBoxParamA
SetFocus
GetClassInfoA
ClientToScreen

gdi32

CreatePalette
SetDIBColorTable
SetWinMetaFileBits
CreateDIBitmap
PlayEnhMetaFile
StretchBlt
DeleteEnhMetaFile
SetDIBits
SelectClipRgn
CreateRectRgn
CombineRgn
FillRgn
SetBkColor
CreateSolidBrush
CreateDIBSection
Rectangle
CreatePen
LineTo
MoveToEx
EndDoc
SetAbortProc
StartDocA
StartPage
GetTextExtentExPointA
TextOutA
GetDIBColorTable
StretchDIBits
EndPage
PatBlt
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteDC
GetObjectA
GetDeviceCaps
SetStretchBltMode
GetTextExtentPoint32A
SelectPalette
RealizePalette
DeleteObject
UnrealizeObject
SetBkMode
SetTextColor
GetTextMetricsA
GetStockObject
SelectObject

advapi32

RegQueryValueExA
RegCloseKey
RegCreateKeyA
RegSetValueA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyA
RegQueryValueA
RegOpenKeyExA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA

ole32

OleUninitialize
OleInitialize
RevokeDragDrop
DoDragDrop
RegisterDragDrop
CoCreateInstance
ReleaseStgMedium

comdlg32

CommDlgExtendedError
GetOpenFileNameA
PrintDlgA
GetFileTitleA

shell32

DragQueryFileA
SHGetFileInfoA
ShellExecuteA
SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA
DragFinish
SHFileOperationA
SHGetDesktopFolder

Sections

.text
Size: 493KB - Virtual size: 493KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a6ca47fb91a97abfc08d61a1610139b

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

ole32

comdlg32

shell32

Sections

.text Size: 493KB - Virtual size: 493KB

.rdata Size: 70KB - Virtual size: 70KB

.data Size: 37KB - Virtual size: 53KB

.idata Size: 9KB - Virtual size: 9KB

.rsrc Size: 63KB - Virtual size: 63KB

.reloc Size: 25KB - Virtual size: 24KB

.text
Size: 493KB - Virtual size: 493KB

.rdata
Size: 70KB - Virtual size: 70KB

.data
Size: 37KB - Virtual size: 53KB

.idata
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 63KB - Virtual size: 63KB

.reloc
Size: 25KB - Virtual size: 24KB