a8053ca5a8228fd0a36d81566bfdaeca_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a8053ca5a8228fd0a36d81566bfdaeca_JaffaCakes118
Size

2.5MB
MD5

a8053ca5a8228fd0a36d81566bfdaeca
SHA1

bf9031e8f978805632301bb4c6e3eff23db3d5de
SHA256

c78121116ddf287483ab7a6617bc587a89699360f2a0c2f36d50403e19428126
SHA512

c52eea4b2db122b9d1bc50c82631f19cb3f3fe7cfffc6c04614d16031e59d6d94e1fa87cb34d580934d4c6f1a91db019d04613561a683520bc8687e4baaa99a5
SSDEEP

24576:JkCTIaN6Geu5GGiP8deKP4P33rtL8fxp130Ch8ZIkt0fp4tt+EgtQ9vhHNF4WsQT:ZWKiaeKPG36ZpZ8ZIp4tt+FtQ9tkpKk+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8053ca5a8228fd0a36d81566bfdaeca_JaffaCakes118

Files

a8053ca5a8228fd0a36d81566bfdaeca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

182033c52f7f25af5a759ebf35cd57b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
SetFileTime
SetErrorMode
GlobalSize
CopyFileA
FindResourceExA
RtlUnwind
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
HeapReAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
CreateThread
ExitThread
TerminateProcess
HeapSize
SetStdHandle
GetFileType
FatalAppExitA
CompareStringA
CompareStringW
GetEnvironmentVariableA
LocalFileTimeToFileTime
HeapCreate
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
SetConsoleCtrlHandler
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
CreateFileW
GetLocaleInfoW
GetFileTime
GetFileAttributesA
GetOEMCP
GetCPInfo
GetProfileStringA
InterlockedExchange
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GlobalFlags
VirtualProtect
GetCurrentThread
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForMultipleObjects
CreateEventA
ReleaseMutex
CreateMutexA
ReleaseSemaphore
CreateSemaphoreA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
DuplicateHandle
lstrcmpA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcpynA
MulDiv
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GlobalFree
GetCurrentDirectoryA
SetCurrentDirectoryA
CreateFileA
ReadFile
Sleep
GlobalMemoryStatus
GetTickCount
GetLastError
LocalAlloc
LocalFree
IsBadWritePtr
GetLocaleInfoA
GetSystemDefaultLangID
GlobalAlloc
GlobalLock
GlobalUnlock
GetWindowsDirectoryA
MultiByteToWideChar
FormatMessageA
SetEnvironmentVariableA
SetLastError
FindNextFileA
CreateDirectoryA
SetFileAttributesA
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
GetVersion
GetUserDefaultLangID
lstrcpyA
lstrcatA
WinExec
LoadResource
SizeofResource
LockResource
GetExitCodeProcess
CreateProcessA
WaitForSingleObject
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
lstrlenW
WideCharToMultiByte
GetDateFormatA
FindFirstFileA
FindClose
GetFileSize
FindResourceA
GetModuleFileNameA
lstrlenA
GetVersionExA
GetModuleHandleA
GetProcAddress
LoadLibraryA
OpenProcess
CloseHandle
HeapDestroy
FreeLibrary

user32

CharNextA
CopyAcceleratorTableA
RemoveMenu
SetRectEmpty
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
RegisterClipboardFormatA
PostThreadMessageA
wvsprintfA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
SetFocus
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
SetScrollRange
GetTopWindow
wsprintfA
RegisterClassA
SetWindowPlacement
GetWindowTextLengthA
GetDlgCtrlID
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
SetWindowPos
IntersectRect
GetWindowPlacement
OemToCharA
CharToOemA
EndDialog
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
LoadStringA
DrawTextA
GetIconInfo
GetWindowLongA
GetDialogBaseUnits
IsChild
GetDesktopWindow
CopyIcon
SetWindowLongA
MessageBeep
SetRect
AdjustWindowRect
GetSystemMetrics
GetMenuItemCount
GetWindow
GetMenu
IsMenu
GetSysColorBrush
CopyRect
GetSysColor
BeginPaint
GetActiveWindow
OffsetRect
GetForegroundWindow
AttachThreadInput
SetActiveWindow
DrawAnimatedRects
FindWindowA
EnumChildWindows
SystemParametersInfoA
GetClassNameA
TrackPopupMenu
LoadImageA
RegisterWindowMessageA
InsertMenuA
GetMenuItemID
TranslateAcceleratorA
WindowFromPoint
LoadAcceleratorsA
LoadIconA
LoadMenuA
GetSubMenu
SetMenuDefaultItem
EnableMenuItem
GetWindowThreadProcessId
IsWindowVisible
GetParent
SetTimer
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetAsyncKeyState
MapDialogRect
SetWindowContextHelpId
WaitMessage
ShowOwnedPopups
PostQuitMessage
DestroyMenu
GetMessageA
TranslateMessage
MsgWaitForMultipleObjects
CharUpperA
GrayStringA
TabbedTextOutA
DeleteMenu
AppendMenuA
GetMenuStringA
ModifyMenuA
GetCursorPos
SetWindowRgn
GetCapture
ReleaseCapture
SetCapture
DrawIconEx
SetParent
GetLastActivePopup
IsIconic
ClientToScreen
ScreenToClient
ChildWindowFromPointEx
RedrawWindow
GetWindowRect
DrawFocusRect
DefDlgProcA
IsWindowUnicode
SendMessageA
GetClientRect
WinHelpA
EndPaint
GetWindowTextA
EnumWindows
GetClassLongA
SendMessageTimeoutA
SetForegroundWindow
ShowWindow
EnableWindow
ReleaseDC
GetDC
IsWindow
UpdateWindow
InvalidateRect
PostMessageA
DestroyIcon
ValidateRect
FillRect
EqualRect
GetFocus
FrameRect
KillTimer
GetKeyState
LoadCursorA
DefWindowProcA
GetClassInfoA
GetNextDlgTabItem
GetNextDlgGroupItem
InvalidateRgn
InflateRect
MessageBoxA
DestroyCursor
SetCursor
LoadBitmapA
GetWindowDC
PtInRect
ShowScrollBar
GetScrollPos
GetScrollRange
SetScrollPos
GetMenuState

gdi32

MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
SelectClipPath
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
OffsetClipRgn
GetViewportExtEx
GetWindowExtEx
ExtCreatePen
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
SetRectRgn
DPtoLP
GetTextMetricsA
GetTextColor
LPtoDP
CopyMetaFileA
CreateDCA
EnumFontFamiliesExA
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetROP2
SetPolyFillMode
SelectPalette
RestoreDC
GetDeviceCaps
CreateSolidBrush
StartDocA
PatBlt
GetDCOrgEx
SetBkMode
StretchDIBits
RectVisible
CreateBitmap
GetClipBox
ExtSelectClipRgn
SetDIBitsToDevice
RealizePalette
GetDIBits
CreateDIBitmap
GetTextFaceA
CreateFontA
SetBkColor
GetBkColor
SetTextColor
SetStretchBltMode
StretchBlt
DeleteDC
CreateDIBSection
ExtCreateRegion
SelectObject
Polygon
DeleteObject
GetTextExtentPoint32A
PtInRegion
GetStockObject
CreateRectRgnIndirect
CreateRectRgn
CombineRgn
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreatePen
GetTextExtentPointA
RoundRect
GetObjectA
CreateFontIndirectA
SaveDC

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

shell32

Shell_NotifyIconA
ExtractIconA
DragQueryFileA
DragFinish
DragAcceptFiles
SHAppBarMessage
ExtractIconExA
SHGetFileInfoA
ShellExecuteA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

comctl32

DestroyPropertySheetPage
PropertySheetA
ImageList_Write
ImageList_Read
ImageList_Merge
ImageList_LoadImageA
ImageList_Create
ImageList_Destroy
ord14
ord13
ImageList_Draw
ImageList_AddMasked
ord17
ImageList_GetImageCount
ImageList_Remove
ImageList_ReplaceIcon
CreatePropertySheetPageA

oledlg

ord8

ole32

CreateBindCtx
OleDuplicateData
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
ReleaseStgMedium
OleRun
CoDisconnectObject
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
CLSIDFromProgID
CoInitializeEx
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
SetConvertStg

olepro32

ord253

oleaut32

SysAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantClear
SafeArrayRedim
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
SysStringByteLen
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SysReAllocStringLen
SysStringLen
LoadTypeLi
GetErrorInfo
SetErrorInfo
VariantInit
CreateErrorInfo
SysFreeString

wsock32

send
WSAAsyncSelect
inet_ntoa
socket
recvfrom
sendto
connect
bind
accept
recv
getpeername
ntohs
inet_addr
WSAGetLastError
WSASetLastError
ioctlsocket
gethostbyname
gethostbyaddr
WSAStartup
WSACleanup
closesocket
htonl
getsockname
htons

wininet

InternetGetLastResponseInfoA
GopherFindFirstFileA
InternetFindNextFileA
FtpFindFirstFileA
HttpQueryInfoA
HttpSendRequestExA
HttpEndRequestA
HttpSendRequestA
HttpAddRequestHeadersA
InternetErrorDlg
HttpOpenRequestA
GopherOpenFileA
GopherGetAttributeA
GopherCreateLocatorA
FtpGetFileA
FtpPutFileA
FtpOpenFileA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpRemoveDirectoryA
FtpCreateDirectoryA
FtpRenameFileA
FtpDeleteFileA
InternetConnectA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetGetCookieA
InternetSetCookieA
InternetSetStatusCallback
InternetSetOptionExA
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

shlwapi

SHDeleteKeyA

Sections

.text
Size: 1008KB - Virtual size: 1004KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 76KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.trdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

182033c52f7f25af5a759ebf35cd57b2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

wininet

version

shlwapi

Sections

.text Size: 1008KB - Virtual size: 1004KB

.rdata Size: 164KB - Virtual size: 161KB

.data Size: 76KB - Virtual size: 96KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.trdata Size: 60KB - Virtual size: 60KB

.text
Size: 1008KB - Virtual size: 1004KB

.rdata
Size: 164KB - Virtual size: 161KB

.data
Size: 76KB - Virtual size: 96KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

.trdata
Size: 60KB - Virtual size: 60KB