afcb06f2753518c24cb5114a9fbbee51_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

afcb06f2753518c24cb5114a9fbbee51_JaffaCakes118
Size

152KB
MD5

afcb06f2753518c24cb5114a9fbbee51
SHA1

de8c6e3ceff3de8b6e6013eeefe085e877dd9ba1
SHA256

2eddd1a9a5c5901c07684f0de595d5117c3bbc4b7e479c4be971d9218fef3d04
SHA512

8a8d7d49125214b1482a4ec98f5a38a4939c1438fae9192bf4ccd5a818a161fd966064e1fbe563f0a686c883f667938da9d37860d0b0d3de5296e5fba19d85f8
SSDEEP

3072:wsRsnGr7dTAoojop5tSN+2cttZ2cAANaznUI6pAAS2IoYlGL2y/dhP:LrHdTAVU5A/etZoANaUbE2frh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afcb06f2753518c24cb5114a9fbbee51_JaffaCakes118

Files

afcb06f2753518c24cb5114a9fbbee51_JaffaCakes118
.exe windows:4 windows x86 arch:x86

755aab4c69500c16164c55c854cc9d2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\sample\install\Release\install.pdb

Imports

kernel32

lstrlenA
lstrcmpiA
LocalFree
lstrcpynA
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
SetLastError
CreateEventA
WaitForSingleObject
SetThreadPriority
ResumeThread
GetCurrentThreadId
SetEvent
SuspendThread
RaiseException
GetVersion
InterlockedIncrement
GetModuleFileNameA
LocalAlloc
GlobalReAlloc
GlobalHandle
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
lstrcmpA
GetProcAddress
GetModuleHandleA
lstrcmpW
lstrcatA
FreeLibrary
LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GlobalFlags
lstrcpyA
GetCPInfo
GetOEMCP
FlushFileBuffers
GetCurrentProcess
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
RtlUnwind
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
ExitThread
HeapSize
TerminateProcess
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetLastError
CreateThread
DeleteFileA
SetFilePointer
WriteFile
CreateFileA
GetFileSize
ReadFile
CloseHandle
GetTempPathA
FindResourceA
LoadResource
LockResource
SizeofResource
Sleep
GetExitCodeThread
TerminateThread
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedDecrement
InterlockedExchange

user32

GetDlgItem
GetForegroundWindow
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassInfoExA
GetClassLongA
GetCapture
WinHelpA
RegisterWindowMessageA
SetWindowTextA
DestroyMenu
SetForegroundWindow
GetClientRect
GetMenu
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
GetDlgCtrlID
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
CopyRect
PtInRect
GetWindow
SetMenuItemBitmaps
GetTopWindow
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowTextA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnregisterClassA
SetWindowsHookExA
CallNextHookEx
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
CharLowerA
PostMessageA
LoadIconA
UpdateWindow
ShowWindow
CreateWindowExA
SendMessageA
MessageBoxA
SetTimer
KillTimer
DefWindowProcA
PostQuitMessage
EndPaint
BeginPaint
RegisterClassExA
LoadCursorA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
GetFocus
GetSystemMetrics

advapi32

RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey

shell32

Shell_NotifyIconA
ShellExecuteA

comctl32

ord17

wininet

InternetSetOptionA
InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetCloseHandle
InternetReadFile
InternetQueryDataAvailable

ws2_32

WSACleanup
WSAStartup

oleacc

LresultFromObject
CreateStdAccessibleObject

gdi32

CreateBitmap
GetStockObject
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
SaveDC
RestoreDC
DeleteDC
SetTextColor
SetMapMode
GetClipBox
DeleteObject
SetBkColor
PtVisible
RectVisible
TextOutA
ExtTextOutA
SetViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
GetDeviceCaps

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

755aab4c69500c16164c55c854cc9d2d

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

shell32

comctl32

wininet

ws2_32

oleacc

gdi32

winspool.drv

oleaut32

Sections

.text Size: 88KB - Virtual size: 86KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 28KB - Virtual size: 25KB

.text
Size: 88KB - Virtual size: 86KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 28KB - Virtual size: 25KB