b06ca53d810ab20b8f9f1256a9332bb3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b06ca53d810ab20b8f9f1256a9332bb3_JaffaCakes118
Size

326KB
MD5

b06ca53d810ab20b8f9f1256a9332bb3
SHA1

378cd3ea9d96818b61cabf96d23e6d7a38e910c7
SHA256

97122540155f4b316c9bdef5ce51353bb9ed735c3a91e8210b3c992694fdebed
SHA512

8b9d2158aa01f6d08a07d9756544877a0af40f51746971b4479a2bd3b48ac7fdcde2d7c0fb4c58c857dbdc142412b0a5ee2720ae03b8a0b5daddb1b172fb54e1
SSDEEP

6144:WB087Pznj3c1MS1VdYe3hl71p2S6tmrQtbWH1b+yW/v8A:WB0Mv+pdDaZErQtb8J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b06ca53d810ab20b8f9f1256a9332bb3_JaffaCakes118

Files

b06ca53d810ab20b8f9f1256a9332bb3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c42eab4712123a0c24f49573e3a39dd2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mmioDescend
mmioOpenA
mmioOpenW
mmioRead
mmioWrite
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeGetTime
mmioCreateChunk
timeSetEvent
waveOutClose
waveOutGetDevCapsW
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite
mmioClose
mmioAscend
timeKillEvent

wininet

InternetErrorDlg
HttpAddRequestHeadersW

shell32

CommandLineToArgvW
DragAcceptFiles
DragFinish
SHGetDesktopFolder
SHBrowseForFolderW
SHChangeNotify
SHCreateDirectoryExW
ShellExecuteW
SHGetFolderPathW
SHGetMalloc
SHGetSpecialFolderPathA
ShellExecuteA
DragQueryFileW

ole32

StgOpenStorage
StgIsStorageFile
StgCreateDocfile
CoCreateInstance
CoFreeUnusedLibraries
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
OleDraw
ReleaseStgMedium

ws2_32

WSACleanup
WSAStartup

gdi32

SetWinMetaFileBits
UnrealizeObject
TranslateCharsetInfo
TextOutW
StrokePath
StretchDIBits
StretchBlt
StartPage
StartDocW
SetTextColor
SetTextAlign
SetStretchBltMode
SetRectRgn
SetPolyFillMode
SetPixelV
SetPixel
SetMapMode
SetDIBitsToDevice
SetDIBits
SetBrushOrgEx
SetBkMode
SetBkColor
SetBitmapBits
SelectPalette
SelectObject
SelectClipRgn
SelectClipPath
SaveDC
RoundRect
RestoreDC
Rectangle
RectVisible
RealizePalette
PtVisible
PolylineTo
Polyline
Polygon
PolyPolygon
PolyBezierTo
PlayEnhMetaFileRecord
PatBlt
PaintRgn
OffsetRgn
MoveToEx
ModifyWorldTransform
MaskBlt
LineTo
LPtoDP
IntersectClipRect
GetWorldTransform
GetWindowOrgEx
GetWindowExtEx
GetViewportOrgEx
BeginPath
BitBlt
CloseEnhMetaFile
CloseFigure
CloseMetaFile
CombineRgn
CreateBitmap
CreateBitmapIndirect
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBPatternBrushPt
CreateDIBSection
CreateDIBitmap
CreateEnhMetaFileW
CreateFontIndirectW
CreateHatchBrush
CreateMetaFileW
CreatePalette
CreatePatternBrush
CreatePen
CreatePolygonRgn
CreateRectRgn
CreateRectRgnIndirect
CreateSolidBrush
DPtoLP
DeleteDC
DeleteEnhMetaFile
DeleteMetaFile
DeleteObject
Ellipse
EndDoc
EndPage
EndPath
EnumEnhMetaFile
EnumFontFamiliesExW
EnumFontFamiliesW
Escape
ExtCreatePen
ExtTextOutW
FillPath
FillRgn
FrameRgn
GdiFlush
GetBitmapBits
GetBkColor
GetBkMode
GetCharWidthW
GetClipBox
GetClipRgn
GetCurrentObject
GetDIBits
GetDeviceCaps
GetEnhMetaFileHeader
GetEnhMetaFileW
GetFontData
GetGlyphOutlineW
GetKerningPairsW
GetMapMode
GetMetaFileBitsEx
GetNearestColor
GetNearestPaletteIndex
GetObjectW
GetOutlineTextMetricsW
GetPaletteEntries
GetPath
GetPixel
GetPolyFillMode
GetStockObject
GetSystemPaletteEntries
GetTextAlign
GetTextCharset
GetTextColor
GetTextExtentExPointW
GetTextExtentPoint32W
GetTextMetricsW
GetViewportExtEx

oleaut32

VariantClear
SysFreeString
SysAllocString

imm32

ImmSetCompositionFontW
ImmSetCandidateWindow
ImmReleaseContext
ImmNotifyIME
ImmGetVirtualKey
ImmGetContext
ImmGetCompositionStringW
ImmSetCompositionWindow

msvfw32

ICCompressorFree
ICCompressorChoose

comdlg32

GetSaveFileNameW
CommDlgExtendedError
ChooseColorW
PrintDlgW
GetFileTitleW
GetOpenFileNameW

shlwapi

SHDeleteKeyW
PathFileExistsW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

LoadLibraryA
LoadLibraryW
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LockResource
MapViewOfFile
MoveFileW
MulDiv
MultiByteToWideChar
OpenEventW
OpenProcess
OutputDebugStringA
OutputDebugStringW
QueryPerformanceFrequency
RaiseException
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryW
ResetEvent
ResumeThread
SetEndOfFile
SetErrorMode
LeaveCriticalSection
SetFilePointer
SetLastError
SetThreadPriority
SizeofResource
SystemTimeToFileTime
TerminateProcess
TlsGetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualUnlock
WideCharToMultiByte
WriteFile
_llseek
_lread
lstrcmpW
lstrcpyW
lstrcpynW
lstrlenW
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalFree
IsDBCSLeadByte
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
HeapFree
HeapAlloc
GlobalUnlock
SetFileAttributesW
GlobalSize
GetVersionExW
GetVersionExA
GetVersion
GetTimeZoneInformation
GetTickCount
GetThreadPriority
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDirectoryA
GetSystemDefaultLangID
GetStdHandle
GetStartupInfoW
GetProfileStringW
GetProcessHeap
GetProcAddress
CloseHandle
CompareFileTime
CompareStringW
CopyFileW
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileA
CreateFileMappingW
CreateFileW
CreateMailslotA
CreateMutexA
CreateProcessW
CreateSemaphoreW
CreateThread
DebugBreak
DeleteCriticalSection
DeleteFileA
DeleteFileW
DosDateTimeToFileTime
EnterCriticalSection
ExitThread
FatalAppExitA
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileExW
FindFirstFileW
FindNextFileW
FindResourceW
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeLibrary
GetACP
GetCommandLineW
GetComputerNameExA
GetCurrentDirectoryW
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceW
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileTime
GetFullPathNameA
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDrives
GetMailslotInfo
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW

Exports

Exports

kRegistration_ComChoiceValue_NO
kRegistration_ComChoiceValue_UNSET
kRegistration_ComChoiceValue_YES
kRegistration_ComChoice_Email
kRegistration_ComChoice_Postal
kRegistration_ComChoice_Telephone
kRegistration_Field_Address1
kRegistration_Field_Address2
kRegistration_Field_City
kRegistration_Field_Company
kRegistration_Field_Country
kRegistration_Field_Email
kRegistration_Field_EmailConfirmation
kRegistration_Field_FirstName
kRegistration_Field_Job
kRegistration_Field_LastName
kRegistration_Field_Organization
kRegistration_Field_Position
kRegistration_Field_Prefecture
kRegistration_Field_State
kRegistration_Field_StateROW
kRegistration_Field_Telephone
kRegistration_Field_Title
kRegistration_Field_WardVillage
kRegistration_Field_ZipPostal
kRegistration_Server_Incentive
kRegistration_Server_PreferenceCenter
kRegistration_Server_Privacy
registration_comm_options_are_required
registration_countryKeys
registration_createSession
registration_destroySession
registration_getAllKeys
registration_getWebPageForServer
registration_hasDataToSend
registration_hiddenKeys
registration_jobDescriptions
registration_needsToShowRegistrationScreen
registration_orgDescriptions
registration_register_later
registration_register_never
registration_register_now
registration_requiredKeys
registration_sendData
registration_setValueForKey
registration_showDialog
registration_titleKeys
registration_valueForKey

Sections

.text
Size: 228KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c42eab4712123a0c24f49573e3a39dd2

Headers

File Characteristics

Imports

winmm

wininet

shell32

ole32

ws2_32

gdi32

oleaut32

imm32

msvfw32

comdlg32

shlwapi

version

kernel32

Exports

Exports

Sections

.text Size: 228KB - Virtual size: 232KB

.rdata Size: 56KB - Virtual size: 60KB

.data Size: 16KB - Virtual size: 64KB

.idata Size: 11KB - Virtual size: 12KB

.rsrc Size: 13KB - Virtual size: 16KB

.text
Size: 228KB - Virtual size: 232KB

.rdata
Size: 56KB - Virtual size: 60KB

.data
Size: 16KB - Virtual size: 64KB

.idata
Size: 11KB - Virtual size: 12KB

.rsrc
Size: 13KB - Virtual size: 16KB