b1a97509699bdbf41dbb757a2ef7abf6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b1a97509699bdbf41dbb757a2ef7abf6_JaffaCakes118
Size

422KB
MD5

b1a97509699bdbf41dbb757a2ef7abf6
SHA1

6994dd44a5560df8dc9dd224022fb4bc83ff5054
SHA256

599b6fd1c8b5edb5f625e949192a052e8b9942d2f61c9fd5f06f4437d351c75f
SHA512

95dfd2d31d384a4dcd339c744021c34fdaa39fdb6827288eaa435635603a0e236143771f6dfa4241b37ee4ec1d7b4e1e27f6ad2525619f5919b577f8abd802af
SSDEEP

12288:YOWpczKcUZJiH3vdOkXhBZN7Tu5U0a4A43Oa5dVp:YOlXUTavpjN/oDjA43Oa5dT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1a97509699bdbf41dbb757a2ef7abf6_JaffaCakes118

Files

b1a97509699bdbf41dbb757a2ef7abf6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3c737250d2aef55db40ea1e319b6e544

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiEnumDeviceInfo
SetupGetStringFieldA
SetupDiSetDeviceInstallParamsA
SetupFindFirstLineA
SetupDiClassGuidsFromNameA
SetupDiCreateDeviceInfoA
SetupDiGetDeviceInstallParamsA
SetupDiSetDeviceRegistryPropertyA
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoA
SetupDiSetSelectedDriverA
SetupDiOpenDevRegKey
SetupOpenInfFileA
SetupCloseInfFile
SetupFindNextLine

kernel32

LockFile
WriteFile
SetEndOfFile
MoveFileA
FlushFileBuffers
FindClose
SetFilePointer
UnlockFile
DeleteFileA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
FindFirstFileA
GetFileSize
GetFileTime
LocalFileTimeToFileTime
GetVolumeInformationA
SetFileTime
GetFileAttributesA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCommandLineA
HeapAlloc
HeapFree
RaiseException
RtlUnwind
CreateThread
ExitThread
SystemTimeToFileTime
HeapReAlloc
ExitProcess
TerminateProcess
GetACP
GetTimeZoneInformation
GetSystemTime
GetLocalTime
SetFileAttributesA
Sleep
SetHandleCount
GetStdHandle
DuplicateHandle
ReadFile
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
IsBadReadPtr
IsBadCodePtr
SetConsoleCtrlHandler
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
GetModuleFileNameA
lstrcpynA
SetLastError
GetLastError
CloseHandle
GetCurrentProcess
GetWindowsDirectoryA
LocalAlloc
LocalFree
CreateFileA
WritePrivateProfileStringA
SetErrorMode
GetCurrentDirectoryA
GetOEMCP
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalFlags
GetCPInfo
GetCurrentThread
GetProcessVersion
lstrcmpA
MulDiv
FindResourceA
LoadLibraryA
FreeLibrary
lstrcatA
LoadResource
LockResource
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpiA
lstrcpyA
GlobalFindAtomA
GlobalDeleteAtom
CreateEventA
GetModuleHandleA
GetProcAddress
SetThreadPriority
SuspendThread
GetCurrentThreadId
WaitForSingleObject
ResumeThread
SetEvent
InterlockedIncrement
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
GetVersion
lstrlenA
TlsSetValue
TlsGetValue
LocalReAlloc
GlobalReAlloc
EnterCriticalSection
GlobalAlloc
TlsFree
GlobalLock
LeaveCriticalSection
GetFileType
GlobalHandle
GetStartupInfoA
HeapSize
FatalAppExitA

user32

AdjustWindowRectEx
IsWindow
SetActiveWindow
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
PostMessageA
LoadIconA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
GetDesktopWindow
PostQuitMessage
DestroyMenu
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
ShowOwnedPopups
SetCursor
InsertMenuA
DeleteMenu
GetMenuStringA
CharUpperA
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
ScreenToClient
SetFocus
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
EqualRect
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowRect
GetSystemMetrics
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
GetScrollPos
SetScrollPos
GetClassInfoA
SetWindowsHookExA
OemToCharA
CharToOemA
LoadStringA
UnhookWindowsHookEx
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SendMessageA
MessageBoxA
EnableWindow
LoadBitmapA
GetMenuCheckMarkDimensions
GetWindowPlacement

gdi32

DeleteObject
RestoreDC
SaveDC
StartDocA
DeleteDC
SelectObject
GetDeviceCaps
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
SetPolyFillMode
SetMapMode
SetViewportOrgEx
SetStretchBltMode
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
OffsetWindowOrgEx
SetWindowExtEx
SetWindowOrgEx
SelectClipRgn
ExcludeClipRect
ScaleWindowExtEx
OffsetClipRgn
MoveToEx
IntersectClipRect
SetTextAlign
SetTextJustification
LineTo
SetMapperFlags
GetCurrentPositionEx
SetTextCharacterExtra
SetArcDirection
PolyDraw
ArcTo
SetColorAdjustment
PolyBezierTo
PolylineTo
CreateRectRgn
SelectClipPath
GetClipRgn
PlayMetaFileRecord
SetBkMode
ExtSelectClipRgn
EnumMetaFile
SelectPalette
GetObjectType
PlayMetaFile
GetViewportExtEx
GetStockObject
CreatePen
ExtCreatePen
GetWindowExtEx
CreateHatchBrush
CreatePatternBrush
CreateSolidBrush
PtVisible
RectVisible
CreateDIBPatternBrushPt
ExtTextOutA
Escape
TextOutA
CreateBitmap
SetROP2

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
OpenProcessToken
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegSetValueExA
AdjustTokenPrivileges
RegQueryValueExA
LookupPrivilegeValueA
RegCreateKeyExA
RegRestoreKeyA
RegCloseKey

shell32

SHGetFileInfoA
DragAcceptFiles

Sections

.text
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 420KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrrrr
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gggg
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c737250d2aef55db40ea1e319b6e544

Headers

File Characteristics

Imports

setupapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

Sections

.text Size: 7KB - Virtual size: 8KB

.rdata Size: 420KB - Virtual size: 420KB

.data Size: 1KB - Virtual size: 4KB

.rrrrr Size: 512B - Virtual size: 4KB

.gggg Size: 512B - Virtual size: 44KB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: 7KB - Virtual size: 8KB

.rdata
Size: 420KB - Virtual size: 420KB

.data
Size: 1KB - Virtual size: 4KB

.rrrrr
Size: 512B - Virtual size: 4KB

.gggg
Size: 512B - Virtual size: 44KB

.rsrc
Size: 11KB - Virtual size: 11KB