aa3a1e67e60619604e387662c92e620f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

aa3a1e67e60619604e387662c92e620f_JaffaCakes118
Size

272KB
MD5

aa3a1e67e60619604e387662c92e620f
SHA1

6be853a13dec7deefcefd48750b636ffd5ed0dc6
SHA256

28e816535a35478d1025bed49e86c7b2388e23313f4885f2abb6a5306410592c
SHA512

3dbcd616c1c1b8c4866acf8ef01b091d70525dd90e4b932370a47c8bb3d5232f04d6e7d7b6c5368e396f83a4ff160275aae855d0c264db7178a8c098a804144d
SSDEEP

3072:BHxVsSgxXuiVzK06/dJNXaEKv0BbTpecKtIXBERqXggXfbOGL1n1OKy3TBR2kkO6:xxVweSzD6/LbqIXP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa3a1e67e60619604e387662c92e620f_JaffaCakes118

Files

aa3a1e67e60619604e387662c92e620f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ad3c6786c1a7157111abdf30c9bc6b55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsFree
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
FileTimeToSystemTime
FileTimeToLocalFileTime
SizeofResource
WritePrivateProfileStringA
GetCurrentDirectoryA
SetErrorMode
RtlUnwind
GlobalHandle
LeaveCriticalSection
TerminateProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapFree
HeapSize
HeapReAlloc
GetTimeZoneInformation
GetACP
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
RaiseException
ExitProcess
FindClose
InitializeCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetWindowsDirectoryA
GetShortPathNameA
CreateDirectoryA
lstrcatA
lstrcpyA
lstrlenA
GetProfileStringA
DeleteCriticalSection
TlsAlloc
LocalAlloc
GetFullPathNameA
GetVolumeInformationA
LockFile
SetEndOfFile
UnlockFile
WriteFile
FlushFileBuffers
SetFilePointer
ReadFile
DuplicateHandle
GetFileTime
GetFileSize
FindFirstFileA
GetCurrentThread
FindNextFileA
FreeEnvironmentStringsA
lstrcmpiA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
GetFileAttributesA
InterlockedIncrement
GlobalLock
GlobalUnlock
MulDiv
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
GetModuleHandleA
lstrcmpA
GetVersionExA
GetPrivateProfileStringA
CreateMutexA
GetUserDefaultLangID
GetPrivateProfileIntA
GlobalAlloc
WaitForSingleObject
GlobalFree
GetModuleFileNameA
OutputDebugStringA
SetLastError
SetFileAttributesA
CreateFileA
GetLastError
CloseHandle
lstrcpynA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW

user32

GetDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
IsDialogMessageA
IsWindowEnabled
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
CreateDialogIndirectParamA
GetActiveWindow
EndDialog
PostQuitMessage
SetCursor
GetCursorPos
ValidateRect
GetMessageA
CharUpperA
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
DestroyMenu
GetSysColor
GetFocus
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
CopyRect
IsWindowVisible
ClientToScreen
ReleaseDC
GetTopWindow
GetParent
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetDlgCtrlID
GetKeyState
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetWindow
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
LoadStringA
DestroyWindow
CallWindowProcA
CreateWindowExA
ScreenToClient
GetWindowLongA
GetWindowRect
SetWindowLongA
SetWindowTextA
EnumChildWindows
MoveWindow
CallNextHookEx
GetDesktopWindow
SetWindowsHookExA
MessageBoxIndirectA
UnhookWindowsHookEx
PeekMessageA
DispatchMessageA
TranslateMessage
FindWindowA
ShowWindow
GetLastActivePopup
SetForegroundWindow
DestroyIcon
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
LoadIconA
CharNextA
CharPrevA
MessageBoxA
RedrawWindow
SendMessageA
EnableWindow
SendDlgItemMessageA
PostMessageA
UpdateWindow
MapWindowPoints
GetMessagePos
GetMessageTime
RegisterWindowMessageA
DefWindowProcA
DrawFocusRect
ExcludeUpdateRgn
InvalidateRect
DefDlgProcA
IsWindowUnicode
InflateRect
HideCaret
UnregisterClassA
ShowCaret

gdi32

GetStockObject
GetClipBox
SetTextColor
SetBkColor
DeleteDC
SaveDC
RestoreDC
SelectObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
GetObjectA
DeleteObject
GetDeviceCaps
CreateSolidBrush
RectVisible
TextOutA
PtVisible
Escape
CreateBitmap
ExtTextOutA
CreateCompatibleDC
BitBlt
CreateDIBitmap
GetTextExtentPointA
PatBlt
CreateFontIndirectA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA

shell32

ShellExecuteExA
SHFileOperationA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc

comctl32

ord17

ole32

CoUninitialize
CoInitialize
CoCreateInstance

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad3c6786c1a7157111abdf30c9bc6b55

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

Sections

.text Size: 124KB - Virtual size: 123KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 40KB - Virtual size: 55KB

.rsrc Size: 76KB - Virtual size: 75KB

.text
Size: 124KB - Virtual size: 123KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 40KB - Virtual size: 55KB

.rsrc
Size: 76KB - Virtual size: 75KB