b1bd3247c7b75eaf4c273c99a4c51514_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b1bd3247c7b75eaf4c273c99a4c51514_JaffaCakes118
Size

271KB
MD5

b1bd3247c7b75eaf4c273c99a4c51514
SHA1

e693041230e7654ec88b391db4d0603bbec30003
SHA256

458d0ee88f0bed424cfb40a5b2e470b441f184ca88bc81ab5999d621815a0664
SHA512

60cfa1e30d666308c7376a789a892199dfd2f4fc0b6be408a1533f0bd9e11842e378b6897f0eaa99224f675ab6e882ec2d402a7fbce2abf9b6d78fbfa92b1303
SSDEEP

3072:fU+FYobST1lRBcltbFvxeYlH1XX/e/vGX71j4Cc26iJzMyP667nbU9KxuT64M/+u:fU+CDpJSplH1oupu26iJgyrxcxJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1bd3247c7b75eaf4c273c99a4c51514_JaffaCakes118

Files

b1bd3247c7b75eaf4c273c99a4c51514_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5573e9b240ce8a403c093a151e5d8d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW

user32

IsIconic
DispatchMessageW
DrawTextExW
DrawTextW
AdjustWindowRectEx
BeginPaint
CallNextHookEx
CallWindowProcW
CharNextW
CharUpperW
CheckMenuItem
ClientToScreen
CopyAcceleratorTableW
CopyRect
CreateDialogIndirectParamW
CreateWindowExW
DefWindowProcW
DestroyMenu
EnableMenuItem
EnableWindow
EndDialog
EndPaint
EqualRect
GetActiveWindow
GetCapture
WinHelpW
ValidateRect
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TabbedTextOutW
SystemParametersInfoA
ShowWindow
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowLongW
SetWindowContextHelpId
SetRect
SetPropW
SetMenuItemBitmaps
SetForegroundWindow
SetFocus
SetCapture
SetActiveWindow
SendMessageW
SendDlgItemMessageW
SendDlgItemMessageA
ScreenToClient
RemovePropW
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageW
OffsetRect
MoveWindow
MessageBoxW
MessageBeep
MapWindowPoints
MapDialogRect
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
GetClassInfoExW
IsDialogMessageW
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
InSendMessage
GrayStringW
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetWindow
GetTopWindow
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetSubMenu
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
DestroyWindow

wininet

HttpSendRequestW
InternetCloseHandle
InternetConnectW
InternetGetLastResponseInfoW
InternetOpenW
InternetReadFile

ole32

CoGetClassObject
CoInitializeEx
CoRegisterMessageFilter
CoRevokeClassObject
CoTaskMemAlloc
CoFreeUnusedLibraries
CoUninitialize
CreateILockBytesOnHGlobal
HENHMETAFILE_UserUnmarshal
OleFlushClipboard
OleInitialize
OleIsCurrentClipboard
CoTaskMemFree
CLSIDFromProgID
StgOpenStorageOnILockBytes

oledlg

OleUIBusyW

gdi32

SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
SetTextColor
SetMapMode
SetBkMode
SelectObject
ScaleWindowExtEx
SaveDC
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetTextColor
StretchBlt
GetRgnBox
GetObjectW
GetMapMode
GetDeviceCaps
GetClipBox
GetCharABCWidthsA
GetBkColor
ExtTextOutW
Escape
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreateFontIndirectW
CreateCompatibleDC
CreateBitmap
GetStockObject
TextOutW
OffsetViewportOrgEx
ScaleViewportExtEx

shell32

SHGetFolderPathW
ShellExecuteW

comctl32

InitCommonControlsEx

advapi32

RegOpenKeyW
RegOpenKeyExW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
OpenEncryptedFileRawW
RegSetValueExW
RegQueryValueExW

oleaut32

OleCreateFontIndirect
SafeArrayDestroy
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
SystemTimeToVariantTime
VariantChangeType
VariantClear
VariantTimeToSystemTime
VariantInit
VariantCopy

kernel32

LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsValidCodePage
IsDebuggerPresent
IsDBCSLeadByteEx
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalFree
GlobalFlags
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVolumeInformationW
GetVersionExA
GetVersion
GetUserDefaultLCID
GetTimeZoneInformation
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemInfo
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileType
LoadLibraryW
GetFileAttributesW
GetEnvironmentStringsW
GetEnvironmentStringsA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetCommandLineA
GetCPInfo
GetACP
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushFileBuffers
FindResourceW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
ExitProcess
EnumSystemLocalesA
EnumResourceLanguagesW
EnterCriticalSection
DuplicateHandle
DeleteCriticalSection
CreateFileW
CreateFileA
CreateDirectoryW
ConvertDefaultLocale
CompareStringW
CompareStringA
CloseHandle
lstrlenW
lstrlenA
lstrcmpW
lstrcmpA
WritePrivateProfileStringW
WriteFile
WriteConsoleW
WriteConsoleA
WideCharToMultiByte
VirtualQuery
VirtualProtect
VirtualFree
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadFile
RtlUnwind
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
UnlockFile
GetFileSize

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

Exports

Exports

PDFPortGetVersion
PDFPortInitialize
PDFPortTerminate

Sections

.text
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 135KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5573e9b240ce8a403c093a151e5d8d1

Headers

File Characteristics

Imports

shlwapi

user32

wininet

ole32

oledlg

gdi32

shell32

comctl32

advapi32

oleaut32

kernel32

comdlg32

winspool.drv

Exports

Exports

Sections

.text Size: 59KB - Virtual size: 60KB

.rdata Size: 135KB - Virtual size: 136KB

.data Size: 45KB - Virtual size: 160KB

.idata Size: 9KB - Virtual size: 11KB

.rsrc Size: 21KB - Virtual size: 23KB

.text
Size: 59KB - Virtual size: 60KB

.rdata
Size: 135KB - Virtual size: 136KB

.data
Size: 45KB - Virtual size: 160KB

.idata
Size: 9KB - Virtual size: 11KB

.rsrc
Size: 21KB - Virtual size: 23KB