af2ad80417c6fcb276314cb79d1c6cba_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

af2ad80417c6fcb276314cb79d1c6cba_JaffaCakes118
Size

476KB
MD5

af2ad80417c6fcb276314cb79d1c6cba
SHA1

888f95b6d21c61abe82042a29bceb8db48adec0e
SHA256

ac60bece28a36460bf52a8d15b8862c801455bac58fdae864fa77ff4cde2cb77
SHA512

ec834f1b1812cb177d833d2eb182f286bfcca94e282e58c84cc0696ee4b1245d1d035ee8803fe47b6df235a0882459cca7fd0632d2502bf05e077c29e7945579
SSDEEP

6144:jF2ZsiibL6YEVPDzkNz/X5Jge4IMqCIQ4JPAPOhgvYyAFCxG7033MdAP75zi:jrL611wzEqCIQ3PggvYvgM03P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af2ad80417c6fcb276314cb79d1c6cba_JaffaCakes118

Files

af2ad80417c6fcb276314cb79d1c6cba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9981f78f697ab07ab2cf4fc8f6756ce1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHGetValueW
PathRemoveArgsW
PathUnquoteSpacesW
PathRemoveArgsA
PathUnquoteSpacesA
PathQuoteSpacesW
SHSetValueW
PathQuoteSpacesA
SHSetValueA
SHDeleteValueA
SHGetValueA

iphlpapi

GetNetworkParams

gdiplus

GdipGetImageHeight
GdipLoadImageFromFile
GdiplusShutdown
GdiplusStartup
GdipDisposeImage
GdipGetImageWidth
GdipFree
GdipAlloc
GdipCloneImage

wininet

InternetCrackUrlA
GetUrlCacheEntryInfoA
InternetGetConnectedState
FindFirstUrlCacheEntryA
DeleteUrlCacheEntry
FindNextUrlCacheEntryA
FindNextUrlCacheEntryExA
FindFirstUrlCacheEntryExA
FindCloseUrlCache

kernel32

TerminateProcess
OpenProcess
FindFirstFileW
SetFilePointer
GetShortPathNameA
GetModuleFileNameW
lstrcpynA
CreateDirectoryW
SuspendThread
OutputDebugStringA
GetVolumeInformationA
lstrcmpiA
GetPrivateProfileSectionNamesA
VirtualQuery
OpenEventA
GetCommandLineA
FormatMessageA
InterlockedIncrement
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcatA
GetThreadLocale
GlobalUnlock
GlobalLock
GlobalFree
GetTimeZoneInformation
GetFileAttributesA
GetFullPathNameA
GetDiskFreeSpaceA
lstrcmpA
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
MulDiv
SetLastError
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
DuplicateHandle
GetCurrentProcess
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
GetStringTypeExA
LocalFileTimeToFileTime
SystemTimeToFileTime
WritePrivateProfileStringA
SetErrorMode
RtlUnwind
GetLocalTime
RaiseException
GetStartupInfoA
ExitProcess
GetACP
ExitThread
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetStdHandle
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoA
OpenMutexA
GetTickCount
CreateDirectoryA
GetLongPathNameW
CreateProcessW
GetVersion
CopyFileW
GetWindowsDirectoryA
CreateFileW
SetFileTime
SetFileAttributesW
SetFileAttributesA
GetShortPathNameW
GetModuleFileNameA
GetSystemDirectoryA
CopyFileA
HeapSize
lstrlenA
SizeofResource
InterlockedDecrement
FindFirstFileA
FindNextFileA
FindClose
LoadLibraryA
FreeLibrary
ResumeThread
GetSystemDefaultLangID
GetSystemDefaultLCID
WaitForMultipleObjects
FileTimeToLocalFileTime
FileTimeToSystemTime
GetSystemTime
GetVersionExA
CreateFileMappingA
CreateMutexA
GetModuleHandleA
GetProcAddress
CreateEventA
FindResourceA
LoadResource
LockResource
OpenFileMappingA
CreateProcessA
CreateWaitableTimerA
CancelWaitableTimer
SetWaitableTimer
lstrlenW
WideCharToMultiByte
GetCurrentThread
GetThreadPriority
SetThreadPriority
UnmapViewOfFile
Sleep
MapViewOfFile
WaitForSingleObject
ResetEvent
SetEvent
ReleaseMutex
GetFileSize
ReadFile
HeapReAlloc
LocalAlloc
LocalFree
GetLastError
CreateThread
GetTempPathA
GetTempFileNameA
DeleteFileA
WriteFile
GetPrivateProfileStringA
GetCurrentProcessId
GetPrivateProfileIntA
GetFileTime
GetSystemTimeAsFileTime
CreateFileA
CloseHandle
MultiByteToWideChar
HeapAlloc
GetProcessHeap
HeapFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedExchange
GlobalAlloc

user32

ClientToScreen
LoadCursorA
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
CharUpperA
RegisterClipboardFormatA
PtInRect
GetClassNameA
LoadStringA
FindWindowA
GetDC
ReleaseDC
SetRect
CopyAcceleratorTableA
MapDialogRect
SetWindowContextHelpId
MessageBeep
GetNextDlgGroupItem
ShowOwnedPopups
PostQuitMessage
EndDialog
CreateDialogIndirectParamA
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
BringWindowToTop
InvalidateRect
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
DestroyMenu
GetActiveWindow
GetDesktopWindow
SetCursor
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
CharNextA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
MoveWindow
IsDialogMessageA
LoadIconA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
MessageBoxA
IsChild
GetParent
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
UnregisterClassA
EnableWindow
SendMessageA
SetPropA
SetWindowPos
GetSystemMetrics
SystemParametersInfoA
DestroyIcon
IsWindow
FlashWindowEx
AnimateWindow
GetDlgItem
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
OffsetRect
IsIconic
GetWindowPlacement
wsprintfA
UnhookWindowsHookEx
GetWindowRect
EnumChildWindows
GetPropA
PostThreadMessageA
EnumWindows
GetWindowThreadProcessId
GetClientRect
SetWindowLongA
ShowWindow
GetWindowTextA
SetWindowTextA
KillTimer
GetTopWindow
IsWindowVisible
IsZoomed
GetWindow
GetSysColor
GetSysColorBrush
PostMessageA
UpdateWindow
SetTimer
GetWindowLongA
SetMenuItemBitmaps

gdi32

PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
RestoreDC
SaveDC
DeleteDC
DeleteObject
SetMapMode
LPtoDP
DPtoLP
GetWindowExtEx
GetStockObject
GetDeviceCaps
GetBkColor
GetTextColor
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetViewportExtEx

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

SetSecurityDescriptorDacl
RegCreateKeyA
RegSetValueA
RegQueryValueA
GetFileSecurityA
SetFileSecurityA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
SetNamedSecurityInfoA
InitializeSecurityDescriptor
RegCloseKey
RegQueryValueExA
CryptCreateHash
CryptHashData
CryptVerifySignatureA
CryptDestroyHash
CryptDecrypt
CryptGetProvParam
CryptGetKeyParam
CryptGenKey
CryptExportKey
CryptImportKey
CryptGenRandom
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextA
RegOpenKeyExA
RegDeleteValueA

shell32

SHAppBarMessage
SHGetFileInfoA
ExtractIconA
DragQueryFileA
DragFinish
SHGetSpecialFolderPathA

comctl32

ord17

oledlg

ord8

ole32

OleFlushClipboard
OleIsCurrentClipboard
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
CoDisconnectObject
CoTaskMemAlloc
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StringFromCLSID
CoTaskMemFree
OleRun
CoInitializeEx
GetClassFile
CoInitialize
CoUninitialize
CoCreateInstance

olepro32

ord253

oleaut32

GetErrorInfo
LoadTypeLi
VariantTimeToSystemTime
SysFreeString
SysAllocString
VariantClear
SysStringLen
VariantInit
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy

urlmon

URLDownloadToCacheFileA

Exports

Exports

?interfaceMap@CCustomControlSite@@1UAFX_INTERFACEMAP@@B

Sections

.text
Size: 316KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9981f78f697ab07ab2cf4fc8f6756ce1

Headers

File Characteristics

Imports

shlwapi

iphlpapi

gdiplus

wininet

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

urlmon

Exports

Exports

Sections

.text Size: 316KB - Virtual size: 315KB

.rdata Size: 80KB - Virtual size: 76KB

.data Size: 24KB - Virtual size: 139KB

.rsrc Size: 52KB - Virtual size: 51KB

.text
Size: 316KB - Virtual size: 315KB

.rdata
Size: 80KB - Virtual size: 76KB

.data
Size: 24KB - Virtual size: 139KB

.rsrc
Size: 52KB - Virtual size: 51KB