b0b35ca92cb1bd2c8e6a60e539091d9c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b0b35ca92cb1bd2c8e6a60e539091d9c_JaffaCakes118
Size

224KB
MD5

b0b35ca92cb1bd2c8e6a60e539091d9c
SHA1

9692cc6630fb12906ae95bed2b637fa62d63f47c
SHA256

99452c09ac63b12e2f57edc19905832d18bd748e2a3d34cd77cd2951a134aa99
SHA512

84584277d7cb5d79b0befc8229dae96143303e50f45d4fcc00c8ff8ba3ce143dcef1277c4d458cd25739b995375e25baeb9172bb03ed3f619afca1457be83c73
SSDEEP

3072:42q1w3tOkIPnd7F2KNAykGmTiIp9bhDZKCrWlDsbWZFNfKERSCK/DdBCvloul8q2:4pw3skIPnd7YKaBTiW9N+NfK+tKyy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0b35ca92cb1bd2c8e6a60e539091d9c_JaffaCakes118

Files

b0b35ca92cb1bd2c8e6a60e539091d9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b06334dbbca7add2ad20dc48cbef6203

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

am_ath32

ord71
ord51
ord62
ord11

am_oid32

ord13030

issdsp32

ord31

user32

HideCaret
GetClientRect
IsIconic
UnregisterClassA
AdjustWindowRectEx
SetFocus
DrawIcon
GetSystemMetrics
SendMessageA
GetSystemMenu
AppendMenuA
LoadIconA
EnableWindow
GetSysColor
PeekMessageA
IsWindowEnabled
GetDlgItem
GetWindowLongA
GetParent
DestroyWindow
CreateDialogIndirectParamA
IsWindow
SetActiveWindow
GetActiveWindow
EndDialog
GetNextDlgTabItem
GetWindowRect
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
RegisterWindowMessageA
SetWindowPos
SetWindowLongA
GetWindow
SetForegroundWindow
GetForegroundWindow
GetLastActivePopup
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
GetKeyState
GetDlgCtrlID
GetWindowTextA
GetWindowTextLengthA
SetWindowPlacement
TrackPopupMenu
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
wsprintfA
WinHelpA
GetCapture
IsChild
MessageBoxA
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
IsWindowVisible
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
DeferWindowPos
EqualRect
ScreenToClient
DestroyMenu
GetMessageA
GetFocus
DispatchMessageA
ExcludeUpdateRgn
ShowCaret
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
PostMessageA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
CharToOemA
OemToCharA
LoadStringA
PostQuitMessage
ShowOwnedPopups
SetCursor
GetCursorPos
ValidateRect
TranslateMessage
DefDlgProcA
DrawFocusRect
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetClassNameA
PtInRect
GetDesktopWindow
GetDialogBaseUnits
LoadCursorA
GetSysColorBrush
SetCapture
ReleaseCapture
WaitMessage
GetWindowThreadProcessId
WindowFromPoint
InsertMenuA
DeleteMenu
GetMenuStringA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
CharUpperA
IsWindowUnicode
CharNextA
InflateRect

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

shell32

DragFinish
DragQueryFileA
SHGetFileInfoA
DragAcceptFiles

comctl32

ord17

kernel32

CreateFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
GetCurrentProcess
UnlockFile
SetEndOfFile
MoveFileA
DeleteFileA
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetThreadLocale
DuplicateHandle
GetShortPathNameA
SetErrorMode
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
HeapFree
Sleep
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetStringTypeExA
GetFileAttributesA
GetCommandLineA
ExitProcess
GetPrivateProfileStringA
GetCurrentDirectoryA
WritePrivateProfileStringA
ExitThread
HeapReAlloc
HeapSize
GetACP
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
FatalAppExitA
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetConsoleCtrlHandler
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
GetCPInfo
GetPrivateProfileIntA
GetOEMCP
LocalReAlloc
GetProcessVersion
TlsGetValue
GlobalReAlloc
TlsSetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
TlsFree
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
SizeofResource
LocalFree
LocalAlloc
lstrcpynA
GetLastError
GlobalFlags
CreateEventA
MulDiv
SetLastError
ResumeThread
SuspendThread
SetThreadPriority
CloseHandle
SetEvent
WaitForSingleObject
lstrcmpA
GetModuleFileNameA
GlobalAlloc
WideCharToMultiByte
GetCurrentThread
MultiByteToWideChar
InterlockedIncrement
lstrlenA
InterlockedDecrement
GetVersion
LoadLibraryA
FreeLibrary
GlobalGetAtomNameA
lstrcatA
GetCurrentThreadId
GlobalFindAtomA
lstrcmpiA
GlobalAddAtomA
GetModuleHandleA
GlobalDeleteAtom
lstrcpyA
GlobalUnlock
GetProcAddress
GlobalLock
FindResourceA
GlobalFree
LockResource
RaiseException
LoadResource
TerminateProcess
GetLocalTime
GetStartupInfoA
CreateThread

gdi32

OffsetClipRgn
PolyDraw
SetArcDirection
PtVisible
CreateDIBPatternBrushPt
RectVisible
BitBlt
GetTextExtentPointA
PatBlt
CreateFontIndirectA
GetTextMetricsA
GetTextExtentPoint32A
Escape
CreateHatchBrush
CreateSolidBrush
CreatePatternBrush
CreatePen
GetWindowExtEx
ExtCreatePen
GetDeviceCaps
PlayMetaFile
GetViewportExtEx
GetObjectType
PlayMetaFileRecord
EnumMetaFile
SelectClipPath
CreateRectRgn
ExtSelectClipRgn
DeleteObject
PolyBezierTo
GetClipRgn
PolylineTo
CreateDIBitmap
SetColorAdjustment
ArcTo
GetCurrentPositionEx
TextOutA
SetTextCharacterExtra
SetTextJustification
SetMapperFlags
LineTo
MoveToEx
SetTextAlign
IntersectClipRect
ExcludeClipRect
ExtTextOutA
ScaleWindowExtEx
SetWindowExtEx
SelectClipRgn
SetWindowOrgEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetViewportOrgEx
SetViewportExtEx
SetStretchBltMode
SetROP2
SetMapMode
SetBkMode
SelectPalette
SetPolyFillMode
SelectObject
RestoreDC
GetStockObject
StartDocA
DeleteDC
SaveDC
GetObjectA
SetBkColor
CreateBitmap
GetClipBox
GetDCOrgEx
SetTextColor
CreateCompatibleDC

advapi32

RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegDeleteValueA
RegSetValueExA

Sections

.text
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b06334dbbca7add2ad20dc48cbef6203

Headers

File Characteristics

Imports

am_ath32

am_oid32

issdsp32

user32

comdlg32

winspool.drv

shell32

comctl32

kernel32

gdi32

advapi32

Sections

.text Size: 148KB - Virtual size: 144KB

.rdata Size: 32KB - Virtual size: 30KB

.data Size: 16KB - Virtual size: 32KB

.rsrc Size: 24KB - Virtual size: 20KB

.text
Size: 148KB - Virtual size: 144KB

.rdata
Size: 32KB - Virtual size: 30KB

.data
Size: 16KB - Virtual size: 32KB

.rsrc
Size: 24KB - Virtual size: 20KB