a8ec108ed66a5fa3b30c38d3691fb4b3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a8ec108ed66a5fa3b30c38d3691fb4b3_JaffaCakes118
Size

624KB
MD5

a8ec108ed66a5fa3b30c38d3691fb4b3
SHA1

735844a52ee5c6eff0cb4b7f61bec01cdc83a235
SHA256

2bab6e776334a3598d3d6e2b19be9123cbb3b7aa6a7bfe30e71adb68d7776466
SHA512

2afcc3e6ad864a11bb21550241865829e63349b2acf32737a2a69a27708e7d088e9992383ed838a12a9ef66895ce68dc9e39f497e19a9bc51f442f60b8f9b6ba
SSDEEP

12288:r0uacfmNDV8ED9xObqEl5m81yejcqzJz:r0fAmNKgxO35mWLzJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8ec108ed66a5fa3b30c38d3691fb4b3_JaffaCakes118

Files

a8ec108ed66a5fa3b30c38d3691fb4b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f82e14fdb681fa11ed74fefdc2337b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

listen
WSASocketA
WSAGetLastError
bind
socket
htons
sendto
select
__WSAFDIsSet
closesocket
WSASend
WSARecv
setsockopt
recvfrom
WSAAccept
WSAConnect
WSARecvFrom
getsockname
gethostbyname
inet_ntoa
ntohs
recv
ntohl
inet_addr
WSASendTo
connect
send
htonl

kernel32

SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
GetThreadLocale
GetFileAttributesA
GetFileTime
GetCurrentDirectoryA
RtlUnwind
GetTimeZoneInformation
RaiseException
HeapAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
GetACP
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
SizeofResource
GlobalFlags
lstrcmpA
GetCurrentThread
lstrcpynA
MulDiv
SetLastError
WaitForSingleObject
FormatMessageA
LocalFree
FileTimeToLocalFileTime
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalDeleteAtom
GetModuleHandleA
GlobalLock
GlobalUnlock
LockResource
FindResourceA
LoadResource
GetFileSize
ReadFile
GetProcessHeap
HeapFree
MapViewOfFile
GetCurrentProcessId
DuplicateHandle
DeviceIoControl
UnmapViewOfFile
OpenProcess
TerminateProcess
SetEvent
CreateEventA
CreateFileA
WriteFile
FindFirstFileA
FindNextFileA
FindClose
GetWindowsDirectoryA
TerminateThread
GlobalAlloc
GlobalFree
FileTimeToSystemTime
GetComputerNameA
GetLastError
CreateThread
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetCurrentProcess
GlobalFindAtomA
GlobalAddAtomA
CloseHandle
GetLocaleInfoA
CreateMailslotA
LoadLibraryA
GetProcAddress
FreeLibrary
GetSystemTime
DeleteFileA
InterlockedDecrement
CopyFileA
GetVersionExA
Sleep
GetTickCount
CreateDirectoryA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WritePrivateProfileStringA
GetModuleFileNameA
GetPrivateProfileIntA
GetLocalTime
GetPrivateProfileStringA
GetProfileStringA
SetErrorMode
GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
ExitProcess

user32

SetWindowContextHelpId
DestroyMenu
WindowFromPoint
GetClassNameA
GetDesktopWindow
GetSysColorBrush
CharUpperA
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
wvsprintfA
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
EnableMenuItem
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
CopyRect
IsWindowVisible
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
GetMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
CallWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
IsWindowEnabled
RegisterClassExA
LoadBitmapA
UpdateWindow
PostQuitMessage
KillTimer
FillRect
DefWindowProcA
RegisterClassA
LoadCursorA
CopyIcon
GetDC
ReleaseDC
InflateRect
GetSysColor
SetCursor
ReleaseCapture
RedrawWindow
SetCapture
MessageBeep
MessageBoxA
MsgWaitForMultipleObjects
GetPropA
SetWindowLongA
RemovePropA
GetWindowThreadProcessId
EnumThreadWindows
ExitWindowsEx
SetWindowTextA
GetMenuStringA
ModifyMenuA
LoadMenuA
GetMenuItemCount
GetSubMenu
GetMenuItemID
CheckMenuItem
GetCursorPos
UnregisterHotKey
RegisterHotKey
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuA
LoadIconA
LoadImageA
wsprintfA
IsIconic
GetMessageA
TranslateMessage
ValidateRect
MapDialogRect
GetAsyncKeyState
GrayStringA
DrawTextA
TrackPopupMenu
TabbedTextOutA
ShowWindow
SetForegroundWindow
GetLastActivePopup
FindWindowA
PostMessageA
SetTimer
InvalidateRect
PtInRect
LoadStringA
GetKeyState
MoveWindow
IsWindow
GetClientRect
GetDlgItem
GetWindowRect
ScreenToClient
EnableWindow
GetParent
GetWindow
SendMessageA
IsWindowUnicode
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
GetNextDlgTabItem
MessageBoxA

gdi32

GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
CreateSolidBrush
CreateHatchBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
LineTo
MoveToEx
IntersectClipRect
DeleteObject
SetViewportOrgEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
DeleteDC
PatBlt
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetTextExtentPointA
CreateDIBitmap
GetTextExtentPoint32A
GetObjectA
CreateFontIndirectA
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
StartServiceA
ControlService
CloseServiceHandle
OpenServiceA
QueryServiceStatus
OpenSCManagerA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCreateKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
EnumServicesStatusA
QueryServiceConfigA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
DeleteService
CreateServiceA
RegQueryValueA

shell32

Shell_NotifyIconA
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA

comctl32

ord17
ImageList_Destroy
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA

oledlg

ord8

ole32

OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateInstance
CoUninitialize
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject

olepro32

ord253

oleaut32

VariantChangeType
SysAllocString
VariantCopy
VariantClear
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen
SysStringByteLen
SysAllocStringByteLen
SysFreeString

wininet

HttpOpenRequestA
GetUrlCacheEntryInfoA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
HttpSendRequestA
HttpAddRequestHeadersA
InternetOpenA
InternetConnectA
InternetOpenUrlA

iphlpapi

CreateIpForwardEntry
GetIfTable
SendARP
GetIpForwardTable

wsock32

WSAStartup
WSACleanup

Sections

.text
Size: - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 738KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 459KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.222220
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.222221
Size: 568KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f82e14fdb681fa11ed74fefdc2337b5

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

iphlpapi

wsock32

Sections

.text Size: - Virtual size: 492KB

.rdata Size: - Virtual size: 66KB

.data Size: - Virtual size: 738KB

.rsrc Size: 48KB - Virtual size: 459KB

.222220 Size: - Virtual size: 16KB

.222221 Size: 568KB - Virtual size: 564KB

.reloc Size: 4KB - Virtual size: 136B

.text
Size: - Virtual size: 492KB

.rdata
Size: - Virtual size: 66KB

.data
Size: - Virtual size: 738KB

.rsrc
Size: 48KB - Virtual size: 459KB

.222220
Size: - Virtual size: 16KB

.222221
Size: 568KB - Virtual size: 564KB

.reloc
Size: 4KB - Virtual size: 136B