abc49213f9b2740af57df1f34d57ec37_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

abc49213f9b2740af57df1f34d57ec37_JaffaCakes118
Size

6.2MB
MD5

abc49213f9b2740af57df1f34d57ec37
SHA1

dada6fc6c91387dbfd42d93b978fdc7fac92873f
SHA256

54cb140980c68c70730f0f51f79d633c6f7f937c29816adfa589873cef10764d
SHA512

99d98d4ec242a6d12f4b489173e39520980e8c37cc25dcaad3ef0a129461ba2bbb46dc77d666fb3e75dfbe02d42def21ab12fc141d857085ebb42ee84b75272e
SSDEEP

98304:p7oJCNGaGeOGdXOTyFngsKZ9lTabfjqNPBxCLKVt2JZBAZ4/wD:p8JCiatlFxK3wTj6PBxHT2TB5wD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abc49213f9b2740af57df1f34d57ec37_JaffaCakes118

Files

abc49213f9b2740af57df1f34d57ec37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c2f7eb0bcb389a603f1e6e68712e4417

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

avifil32

AVIFileExit
AVIFileRelease
AVIStreamRelease
AVIStreamWrite
AVISaveOptions
AVIMakeCompressedStream
AVIStreamSetFormat
AVIFileCreateStreamA
AVIFileOpenA
AVIFileInit

msvfw32

ord2

comctl32

PropertySheetA
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_Create
ord17
ImageList_DrawEx
ImageList_GetIconSize
ord6
ImageList_LoadImageA
CreateToolbarEx

mpr

WNetAddConnection3A

wininet

InternetQueryOptionA
InternetSetOptionA
InternetCloseHandle
InternetGetConnectedState
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetAttemptConnect

kernel32

FormatMessageA
HeapAlloc
HeapFree
HeapCreate
HeapDestroy
GetComputerNameA
GlobalFree
GlobalAlloc
GetDriveTypeA
SetErrorMode
lstrcmpA
FlushFileBuffers
ReleaseMutex
CreateMutexA
GetPrivateProfileStringA
GetVolumeInformationA
GetCPInfo
GetVersionExA
RemoveDirectoryA
DeviceIoControl
SetLastError
SystemTimeToFileTime
LocalFileTimeToFileTime
SystemTimeToTzSpecificLocalTime
GetThreadPriority
SizeofResource
GetWindowsDirectoryA
GetProcessHeap
GetFullPathNameA
GetShortPathNameA
GetNumberFormatA
lstrcpyA
RaiseException
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
ExitThread
CreateThread
HeapReAlloc
SetEnvironmentVariableA
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetOEMCP
IsValidCodePage
ExitProcess
GetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
FreeLibrary
WaitForSingleObject
CreateSemaphoreA
CloseHandle
GetModuleHandleA
LoadLibraryA
GetCurrentThreadId
GetLocalTime
GetTimeFormatA
lstrcpynA
lstrlenA
WideCharToMultiByte
InterlockedDecrement
GlobalLock
GlobalUnlock
GetDateFormatA
GetCurrentProcess
CreateDirectoryA
GetTimeZoneInformation
ResetEvent
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
GetCurrentProcessId
VirtualAlloc
VirtualFree
CopyFileA
TerminateThread
GetFileTime
SetFileTime
OutputDebugStringA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
GetFileSize
GetCurrentDirectoryA
SetCurrentDirectoryA
FindFirstFileA
GetFileAttributesA
SetFileAttributesA
FindNextFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
InitializeCriticalSection
CreateEventA
ResumeThread
SetEvent
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetDiskFreeSpaceA
DeleteFileA
LocalReAlloc
LocalFree
LocalAlloc
OpenProcess
TerminateProcess
GetLastError
GetProcAddress
MoveFileA
GetSystemDirectoryA
MulDiv
GetLocaleInfoA
GetTickCount
MultiByteToWideChar
Sleep
ReadFile
SetFilePointer
VirtualProtect
WriteFile
GetACP
GetVersion
GetTempPathA
CreateFileA
RtlUnwind

user32

IsIconic
GetDesktopWindow
IsZoomed
DrawMenuBar
SetMenu
EnableMenuItem
GetSubMenu
LoadMenuA
GetMenuState
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetMenuItemID
GetMenuItemCount
GetWindowPlacement
SetWindowPlacement
GetWindowDC
LoadIconA
ReleaseCapture
GetCapture
SetCapture
MapWindowPoints
DestroyIcon
PostQuitMessage
ClipCursor
CloseWindow
GetSystemMenu
RegisterWindowMessageA
GetSysColorBrush
DrawEdge
GetMessagePos
WinHelpA
EnumDisplaySettingsA
SetScrollInfo
GetScrollInfo
IsChild
DestroyAcceleratorTable
RemoveMenu
ExitWindowsEx
CharNextA
CharPrevA
SetClipboardData
EmptyClipboard
ScrollWindowEx
SetScrollRange
mouse_event
GetMenuStringA
ToAsciiEx
MapVirtualKeyA
ActivateKeyboardLayout
LoadKeyboardLayoutA
GetKeyboardLayoutNameA
GetDlgCtrlID
DrawFrameControl
OffsetRect
LoadStringA
PeekMessageA
EnumChildWindows
GetMenu
GetWindow
SetParent
CopyRect
LoadImageA
DrawStateA
OpenClipboard
GetClipboardData
CloseClipboard
DeleteMenu
GetKeyState
GetCursor
GetKeyboardLayout
MapVirtualKeyExA
GetKeyNameTextA
ClientToScreen
BringWindowToTop
GetFocus
IsWindowEnabled
CheckRadioButton
ScreenToClient
IsDlgButtonChecked
GetDlgItemInt
CheckDlgButton
GetWindowTextLengthA
GetWindowTextA
SetTimer
GetClientRect
DrawTextA
SetDlgItemInt
SetWindowTextA
PostThreadMessageA
CallWindowProcA
LoadBitmapA
CreatePopupMenu
InsertMenuA
CheckMenuItem
TrackPopupMenuEx
SendDlgItemMessageA
EnableWindow
ReleaseDC
SetDlgItemTextA
SetFocus
GetDlgItemTextA
MoveWindow
GetWindowRect
GetSystemMetrics
SetWindowPos
GetParent
KillTimer
UnregisterClassA
RegisterClassA
GetWindowLongA
SetWindowLongA
GetCursorPos
wsprintfA
EnumWindows
GetActiveWindow
SetCursor
LoadCursorA
UnhookWindowsHookEx
GetClassNameA
GetWindowThreadProcessId
SendMessageA
CreateDialogParamA
DialogBoxParamA
EndDialog
GetSysColor
GetDC
RegisterClassExA
GetPropA
DefWindowProcA
SetPropA
BeginPaint
FillRect
EndPaint
RemovePropA
CreateWindowExA
DestroyWindow
InvalidateRect
RedrawWindow
MessageBeep
SetRect
GetDlgItem
SetWindowsHookExA
LoadAcceleratorsA
CallNextHookEx
GetForegroundWindow
FindWindowA
SetForegroundWindow
ShowWindow
GetMessageA
IsWindow
IsDialogMessageA
GetClassInfoA
SystemParametersInfoA
PtInRect
DrawFocusRect
InflateRect
IsWindowVisible
UpdateWindow
MessageBoxA
PostMessageA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
DestroyMenu

gdi32

SelectClipRgn
RectVisible
SetBkColor
IntersectClipRect
CreateFontIndirectA
SetBrushOrgEx
GetClipBox
LPtoDP
CreateHalftonePalette
RealizePalette
SelectPalette
GetTextMetricsA
Polygon
TranslateCharsetInfo
UnrealizeObject
CreateBitmap
EndDoc
EndPage
SetTextJustification
SetViewportExtEx
SetWindowExtEx
CreatePatternBrush
StartDocA
GetDIBits
Ellipse
StretchDIBits
SetStretchBltMode
CreateDCA
CreateCompatibleBitmap
CreateDIBSection
CreateCompatibleDC
GetObjectA
BitBlt
DeleteDC
SetTextColor
GetStockObject
CreatePen
CreateSolidBrush
GetDeviceCaps
CreateFontA
SelectObject
MoveToEx
LineTo
SetBkMode
DPtoLP
GetMapMode
SetMapMode
StretchBlt
PatBlt
GetTextExtentPointA
CreateRectRgn
CombineRgn
GetRgnBox
FillRgn
StartPage
CreateBrushIndirect
DeleteObject
TextOutA
Rectangle
GetTextExtentPoint32A

comdlg32

GetSaveFileNameA
GetOpenFileNameA
PrintDlgA

advapi32

RegConnectRegistryA
RegSetValueExA
RegDeleteValueA
RegQueryValueExA
RegEnumValueA
RegOpenKeyExA
RegCreateKeyExA
GetUserNameA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
InitiateSystemShutdownA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
DeleteService
RegOpenKeyA
RegEnumKeyExA
RegDeleteKeyA
RegSetKeySecurity
RegGetKeySecurity
GetTokenInformation
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
RegCloseKey

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
FindExecutableA
ShellExecuteA
SHGetSpecialFolderLocation

ole32

OleUninitialize
CoGetClassObject
OleInitialize
CoUninitialize
CoCreateInstance
OleSetContainedObject
CoTaskMemAlloc
CoUnmarshalInterface
CreateStreamOnHGlobal
CoMarshalInterface
CoReleaseMarshalData
StringFromCLSID
CoTaskMemFree
CoInitialize

oleaut32

SafeArrayAccessData
SafeArrayCreateVector
SysAllocStringLen
VarDateFromStr
SafeArrayDestroy
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayCreate
DispGetParam
VariantTimeToSystemTime
VariantClear
SysAllocString
SysFreeString
VariantInit

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 536KB - Virtual size: 535KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.0MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2f7eb0bcb389a603f1e6e68712e4417

Headers

File Characteristics

Imports

avifil32

msvfw32

comctl32

mpr

wininet

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 536KB - Virtual size: 535KB

.data Size: 172KB - Virtual size: 171KB

.rsrc Size: 4.0MB - Virtual size: 3.9MB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 536KB - Virtual size: 535KB

.data
Size: 172KB - Virtual size: 171KB

.rsrc
Size: 4.0MB - Virtual size: 3.9MB