a6fb999907249b0242403b9816353561_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a6fb999907249b0242403b9816353561_JaffaCakes118
Size

1.1MB
MD5

a6fb999907249b0242403b9816353561
SHA1

23d389ffc2728b6f48429d0d0e6c5c088185cdd2
SHA256

8908e1f649fdb16acab53d559047a1d17416a59877d08b174d120474f11e2e15
SHA512

30fd7552827e7ff985409c08b7b04a68e21bb492c2f7211d0397e6b5f93ff7c511b3c6174304484e95ca28986840fbac039af3dc7336389410cd3ac6ef00e397
SSDEEP

24576:2P5lXm0T/yJD2bsWTCAS0h3St54d9mT0Z25:27xTK5kCASMJd9mT025

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6fb999907249b0242403b9816353561_JaffaCakes118

Files

a6fb999907249b0242403b9816353561_JaffaCakes118
.exe windows:4 windows x86 arch:x86

657d3c31a7d90ae0adedc544c5a9b0e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msi

ord180

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
IsValidSid
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegDeleteValueA
RegOpenKeyA
RegEnumKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegQueryValueA
CryptDestroyHash
CryptDestroyKey
CryptAcquireContextA
CryptReleaseContext
CryptImportKey
CryptVerifySignatureA
CryptHashData
CryptCreateHash

crypt32

CertOpenStore
CertCloseStore
CertFindCertificateInStore
CertGetCertificateChain
CertGetNameStringA
CryptVerifyDetachedMessageSignature
CryptMsgClose
CryptQueryObject
CertFreeCertificateContext
CryptMsgGetParam

kernel32

CreateEventA
SetEvent
CreateThread
lstrcmpA
OpenEventA
FreeLibrary
GetProcAddress
LoadLibraryA
LockResource
LoadResource
FindResourceExA
GetModuleFileNameA
GlobalLock
FindResourceA
LocalFree
FormatMessageA
GetUserDefaultLangID
FlushInstructionCache
GetCurrentProcess
InterlockedIncrement
ResetEvent
FreeResource
GlobalFree
GlobalHandle
GlobalAlloc
GlobalUnlock
Sleep
GetTimeFormatA
GetDateFormatA
ReadFile
GetFileSize
CreateFileA
GetShortPathNameA
GetModuleHandleA
lstrcmpiA
InterlockedDecrement
lstrcatA
SetUnhandledExceptionFilter
CreateProcessA
GetCommandLineA
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
FindFirstFileA
GetFileAttributesA
FindClose
FindNextFileA
lstrcpynA
lstrcpyA
GetSystemDirectoryA
MoveFileA
DeleteFileA
WriteFile
GlobalSize
SetFilePointer
GetPrivateProfileStringA
WritePrivateProfileStringA
WritePrivateProfileSectionA
GetPrivateProfileSectionNamesA
CreateDirectoryA
LocalAlloc
CopyFileA
RemoveDirectoryA
GetTempPathA
GetTempFileNameA
CompareFileTime
GetSystemTimeAsFileTime
SetFileAttributesA
FileTimeToSystemTime
QueryPerformanceFrequency
GetFileTime
OutputDebugStringA
GetTickCount
GetSystemTime
SystemTimeToTzSpecificLocalTime
SetEndOfFile
VirtualQuery
VirtualProtect
SearchPathA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
QueryPerformanceCounter
SystemTimeToFileTime
MoveFileExA
GlobalReAlloc
IsBadReadPtr
GetCPInfo
LCMapStringW
LCMapStringA
SetStdHandle
FlushFileBuffers
GetFileType
SetCurrentDirectoryA
SetEnvironmentVariableA
LocalFileTimeToFileTime
SetFileTime
ExitProcess
GetVersion
GetStartupInfoA
GetTimeZoneInformation
HeapAlloc
HeapReAlloc
HeapFree
RaiseException
RtlUnwind
InterlockedExchange
SetVolumeLabelA
GetDriveTypeA
TlsAlloc
GetCurrentDirectoryA
GetDiskFreeSpaceA
TlsGetValue
TerminateProcess
HeapSize
GetEnvironmentVariableA
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
IsBadCodePtr
GetLocaleInfoW
EnterCriticalSection
LeaveCriticalSection
CreateMutexA
WaitForSingleObject
GetCurrentThreadId
GetLocalTime
ReleaseMutex
CloseHandle
GetLastError
SetLastError
lstrlenA
GetVersionExA
CompareStringW
CompareStringA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
TlsSetValue
GetWindowsDirectoryA

user32

PostMessageA
CreateDialogIndirectParamA
CreateDialogParamA
GetDlgCtrlID
SetWindowLongA
GetSysColorBrush
DialogBoxIndirectParamA
PeekMessageA
ReleaseDC
CharToOemBuffA
DispatchMessageA
DestroyWindow
GetParent
GetWindow
SystemParametersInfoA
GetClientRect
MapWindowPoints
GetDC
GetSystemMetrics
AdjustWindowRectEx
GetMenu
RegisterClassExA
GetClassInfoExA
RegisterWindowMessageA
DefWindowProcA
DestroyCursor
GetWindowTextA
GetWindowTextLengthA
SetFocus
IsChild
GetFocus
CallWindowProcA
RedrawWindow
GetClassNameA
CreateAcceleratorTableA
CreateWindowExA
ReleaseCapture
SetCapture
InvalidateRgn
PostThreadMessageA
CharNextA
GetMessageA
CharLowerBuffA
IsDlgButtonChecked
KillTimer
IsDialogMessageA
GetPropA
SetPropA
RemovePropA
EnableMenuItem
SetWindowRgn
ExitWindowsEx
GetDlgItemTextA
MsgWaitForMultipleObjects
SetWindowPos
EnableWindow
SetDlgItemTextA
LoadImageA
SendMessageA
GetSystemMenu
AppendMenuA
ShowWindow
BeginPaint
IsWindow
EndPaint
FillRect
ScreenToClient
InvalidateRect
UpdateWindow
SetCursor
ClientToScreen
GetWindowRect
PtInRect
GetDlgItem
LoadCursorA
SendDlgItemMessageA
SetWindowTextA
GetWindowLongA
GetSysColor
DialogBoxParamA
EndDialog
GetActiveWindow
LoadStringA
CharLowerA
wsprintfA
MessageBoxA
GetDesktopWindow
OemToCharBuffA
SetForegroundWindow
TranslateMessage

gdi32

DeleteObject
SetBkColor
SetTextColor
CreateFontIndirectA
GetObjectA
RestoreDC
TextOutA
SetBkMode
SelectObject
SaveDC
GetDeviceCaps
DeleteDC
BitBlt
CreateCompatibleBitmap
CreateBitmap
CreateCompatibleDC
GetStockObject
CreateRectRgn
CreateSolidBrush

ole32

CoLoadLibrary
StgOpenStorage
CoRevokeClassObject
CoRegisterClassObject
OleLockRunning
CoTaskMemAlloc
CLSIDFromString
OleUninitialize
CoTaskMemFree
CreateStreamOnHGlobal
StringFromCLSID
CoCreateGuid
StringFromGUID2
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CLSIDFromProgID
CoFreeUnusedLibraries
CoCreateInstance
CoInitialize
CoUninitialize
ProgIDFromCLSID
OleInitialize

oleaut32

SafeArrayGetLBound
SysFreeString
SysAllocStringLen
SysStringLen
SysStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SysAllocStringByteLen
SafeArrayPutElement
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
LoadTypeLi
RegisterTypeLi
OleCreateFontIndirect
DispCallFunc
SafeArrayCreateVector
SafeArrayCopy
VariantInit
SafeArrayCreate
VariantChangeType
LoadRegTypeLi
GetErrorInfo
SafeArrayGetElement
CreateErrorInfo
SetErrorInfo
VariantCopy
VariantClear
SysAllocString

shell32

SHGetSpecialFolderLocation
ShellExecuteA
ShellExecuteExA
SHGetPathFromIDListA
SHGetMalloc

urlmon

CoInternetGetSession

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 756KB - Virtual size: 755KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

657d3c31a7d90ae0adedc544c5a9b0e7

Headers

File Characteristics

Imports

msi

advapi32

crypt32

kernel32

user32

gdi32

ole32

oleaut32

shell32

urlmon

version

Sections

.text Size: 756KB - Virtual size: 755KB

.rdata Size: 156KB - Virtual size: 154KB

.data Size: 52KB - Virtual size: 73KB

.rsrc Size: 156KB - Virtual size: 224KB

.text
Size: 756KB - Virtual size: 755KB

.rdata
Size: 156KB - Virtual size: 154KB

.data
Size: 52KB - Virtual size: 73KB

.rsrc
Size: 156KB - Virtual size: 224KB