ab45cee17c61caa9c8e99ad9efe87a86_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ab45cee17c61caa9c8e99ad9efe87a86_JaffaCakes118
Size

909KB
MD5

ab45cee17c61caa9c8e99ad9efe87a86
SHA1

b57000f5847c40618411e79be3dd42e28322a68f
SHA256

c2746b81052daa7ed6efd756679390923163b452f5b91b487b122a07ee761b65
SHA512

4a701c1274c403c1075d34cafb897087cb28e26ec16e5df26330f1c3b0e380374cde6f8635ae20a24f22ede1b3aa35cc62462c53675b5aee53510ec38eb6cfbe
SSDEEP

6144:ZuQ8HNayIGcETkS4tCnN9leVQnr2S6EEh2KpRDesqAihXGkrF5UyyRPZaaGhmWJi:ZuJFwVYJ6EEoojGGVGhmGMcN5e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab45cee17c61caa9c8e99ad9efe87a86_JaffaCakes118

Files

ab45cee17c61caa9c8e99ad9efe87a86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3188c00acf96f4243646dec7c7bb43ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msi

ord160
ord158
ord159
ord31
ord44
ord71
ord49
ord178
ord180
ord117
ord141
ord168
ord174
ord77
ord148
ord67
ord11
ord91
ord110
ord210
ord8
ord116

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

shlwapi

SHGetValueA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
SHDeleteValueA
SHSetValueA
PathRemoveExtensionA
PathFindFileNameA

mpr

MultinetGetConnectionPerformanceA
WNetGetConnectionA

kernel32

GetFullPathNameA
GetShortPathNameA
CreateFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
GetFileTime
GetModuleFileNameW
InterlockedDecrement
FreeLibrary
lstrcmpA
FreeResource
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
VirtualProtect
GetCurrentProcessId
FindNextFileA
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
GetVolumeInformationA
DeleteCriticalSection
TlsFree
GlobalFlags
InterlockedIncrement
GetAtomNameA
SetErrorMode
GetCPInfo
GetOEMCP
GetPrivateProfileIntA
WritePrivateProfileStringA
FindResourceExA
RtlUnwind
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
HeapAlloc
HeapFree
HeapReAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitThread
CreateThread
RaiseException
SetStdHandle
GetFileType
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
LCMapStringA
LCMapStringW
Sleep
SetHandleCount
GetStdHandle
FatalAppExitA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
VirtualFree
HeapDestroy
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetConsoleCP
GetConsoleMode
SetConsoleCtrlHandler
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
SetCurrentDirectoryA
SetEnvironmentVariableA
FindFirstFileA
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
MoveFileA
GlobalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
SuspendThread
GetCurrentThreadId
ResumeThread
SetThreadPriority
SetLastError
LoadLibraryA
GetVersionExA
lstrcpyA
lstrcatA
CreateEventA
WaitForSingleObject
GetCurrentThread
GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
GetEnvironmentVariableA
lstrlenA
lstrcmpiW
lstrcmpiA
CompareStringW
CompareStringA
lstrlenW
GetLastError
MultiByteToWideChar
InterlockedExchange
GetDriveTypeA
GetVersion
GetModuleFileNameA
GetCurrentDirectoryA
GetSystemDirectoryA
DeleteFileA
CreateProcessA
GetExitCodeProcess
GetUserDefaultLangID
GetProcAddress
GetCurrentProcess
CloseHandle
GetModuleHandleA
LoadLibraryExA
WritePrivateProfileSectionA
GetComputerNameA
GetPrivateProfileStringA
CreateMutexA
ReleaseMutex
GetTempPathA
SetEvent
CopyFileA
GetFileAttributesA
SetFileAttributesA
GetDiskFreeSpaceExA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
LocalReAlloc

user32

SetRectEmpty
CreatePopupMenu
InsertMenuItemA
InvalidateRect
LoadAcceleratorsA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
IsRectEmpty
GetSystemMenu
SetParent
UnionRect
SetRect
SetTimer
KillTimer
GetDCEx
LockWindowUpdate
BringWindowToTop
SetMenu
TranslateAcceleratorA
DestroyIcon
WaitMessage
ReleaseCapture
WindowFromPoint
SetCapture
DeleteMenu
DestroyMenu
GetMenuItemInfoA
InflateRect
GetDialogBaseUnits
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
UnregisterClassA
LoadCursorA
GetSysColorBrush
ClientToScreen
GetWindowThreadProcessId
ShowOwnedPopups
SetCursor
MapVirtualKeyA
GetKeyNameTextA
ReleaseDC
GetDC
MapDialogRect
GetAsyncKeyState
ScrollWindowEx
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
PtInRect
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
PostMessageA
SendMessageA
ExitWindowsEx
PostQuitMessage
DispatchMessageA
TranslateMessage
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetWindowTextLengthA
GetWindowTextA
GetScrollPos
SetScrollPos
GetWindow
GetWindowLongA
SetFocus
UnhookWindowsHookEx
GetSystemMetrics
GetMenuStringA
PeekMessageA
MsgWaitForMultipleObjects
EnableWindow
CharLowerA
CharLowerW
CharUpperA
CharUpperW
MessageBoxA
GetParent
LoadIconA
ValidateRect
GetCursorPos
GetKeyState
IsWindowVisible
GetActiveWindow
GetMessageA
CallNextHookEx
SetWindowsHookExA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
CopyRect

gdi32

SetMapMode
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
ModifyWorldTransform
SelectClipRgn
SetRectRgn
CombineRgn
GetMapMode
CreateFontIndirectA
DPtoLP
CreateCompatibleBitmap
GetCharWidthA
CreateFontA
StretchDIBits
GetBkColor
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
DeleteObject
PatBlt
CreateRectRgnIndirect
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CreateDCA
CopyMetaFileA
GetDeviceCaps
SetColorAdjustment
CreateBitmap
GetTextMetricsA
GetTextExtentPoint32A
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
GetStockObject
CreateCompatibleDC
CreatePatternBrush
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
StartDocA
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
EnumFontFamiliesExA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegDeleteValueA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegSetValueA
OpenThreadToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyA

shell32

ShellExecuteExA
ExtractIconA
DragFinish
DragQueryFileA
SHGetFileInfoA

ole32

ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
StringFromCLSID
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoTreatAsClass
CreateBindCtx
ReleaseStgMedium
CoTaskMemAlloc
CoDisconnectObject
OleDuplicateData
CoCreateInstance
StringFromGUID2
CLSIDFromString
WriteClassStg

oleaut32

SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayAllocDescriptor
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysReAllocStringLen
VarDateFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromDate
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SysStringLen
SafeArrayDestroy

Sections

.text
Size: 648KB - Virtual size: 646KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 4KB - Virtual size: 793B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3188c00acf96f4243646dec7c7bb43ca

Headers

File Characteristics

Imports

msi

version

shlwapi

mpr

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 648KB - Virtual size: 646KB

.rdata Size: 132KB - Virtual size: 129KB

.data Size: 16KB - Virtual size: 29KB

.idata Size: 20KB - Virtual size: 16KB

.didat Size: 4KB - Virtual size: 793B

.rsrc Size: 80KB - Virtual size: 80KB

.text
Size: 648KB - Virtual size: 646KB

.rdata
Size: 132KB - Virtual size: 129KB

.data
Size: 16KB - Virtual size: 29KB

.idata
Size: 20KB - Virtual size: 16KB

.didat
Size: 4KB - Virtual size: 793B

.rsrc
Size: 80KB - Virtual size: 80KB