b29d8360bbd5810629ceceda257cf654_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b29d8360bbd5810629ceceda257cf654_JaffaCakes118
Size

1.8MB
MD5

b29d8360bbd5810629ceceda257cf654
SHA1

90f4ea09f2c254c5f85a06d2d82f0076264d742e
SHA256

dbf27131d6e840293002a177cee70516d92248f090e7845612012ccd58f0826d
SHA512

0ea01895edae66d8b82e48e2846c1ae998b89395184face7dab5a438c369a5cf1cf61779eb467634476293b058c5c080978b0e7a44fd1ea3af7b3e000f2c107a
SSDEEP

24576:XN7G7N8ACfDKjg11BeYJwb9sov744BZsxuUuBodlOMSPCWs4c8r:SQdjJwbeS744B+uxBodlOXPCR4z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b29d8360bbd5810629ceceda257cf654_JaffaCakes118

Files

b29d8360bbd5810629ceceda257cf654_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c05c25e46b1dfaa76423c79529c78a7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegQueryValueA
RegCloseKey

comctl32

ImageList_AddMasked
ImageList_ReplaceIcon
_TrackMouseEvent
InitCommonControls
ImageList_Destroy
ImageList_Create

gdi32

GetDeviceCaps
DeleteObject
CombineRgn
CreateRectRgn
GetDIBits
DeleteDC
SelectObject
CreateDCA
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
PatBlt
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
StretchBlt
IntersectClipRect
CreatePen
CreatePatternBrush
SetRectRgn
GetTextColor
CopyMetaFileA
GetCurrentObject
CreateFontIndirectA
CreateRectRgnIndirect
Polygon
Polyline
CreateSolidBrush
GetCharWidthA
GetTextExtentPoint32A
GetStockObject
CreatePalette
RealizePalette
CreateDIBitmap
GetObjectA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
CreateCompatibleDC
LPtoDP
CreateCompatibleBitmap
GetMapMode
DPtoLP
GetBkColor
ExcludeClipRect
GetTextExtentPointA
BitBlt

kernel32

GetTimeZoneInformation
GetSystemTime
GetLocalTime
RaiseException
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
CreateThread
ExitThread
HeapReAlloc
HeapSize
GetACP
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LockResource
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
HeapAlloc
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
ReadFile
SetFilePointer
GetFileSize
WriteFile
LockResource
LoadResource
SizeofResource
FindResourceA
CloseHandle
CreateFileA
lstrcpy
CreateDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetLastError
CreateMutexA
GetTickCount
lstrcmp
HeapFree
RtlUnwind
SetErrorMode
CopyFileA
GlobalSize
GetFileTime
GetFileAttributesA
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
Sleep
GetTempPathA
GlobalUnlock
GlobalLock
GlobalAlloc
LocalFree
FormatMessageA
TlsAlloc
InitializeCriticalSection
GlobalFlags
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
GetCurrentThread
SetLastError
lstrcpyn
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetVersion
GetCurrentThreadId
DeleteFileA
GlobalGetAtomNameA
lstrcmpi
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetProcAddress
GlobalFree
LocalAlloc
LocalLock
MultiByteToWideChar
LocalUnlock
MulDiv
CreateProcessA
lstrcat
lstrlen
WinExec
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
SetFileAttributesA

oleaut32

VariantCopy
VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantClear
VariantTimeToSystemTime
SysStringLen
SysAllocStringLen
SysFreeString

olepro32

OleCreateFontIndirect
OleLoadPicture

shell32

Shell_NotifyIcon
ShellExecuteA
SHGetFileInfo

user32

ValidateRect
TranslateMessage
GetMessageA
DestroyMenu
SetWindowContextHelpId
MapDialogRect
GetDesktopWindow
IsClipboardFormatAvailable
WindowFromPoint
CharUpperA
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
PostThreadMessageA
IsDialogMessage
SetDlgItemTextA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
AdjustWindowRectEx
IsWindowVisible
GetScrollInfo
SetScrollInfo
GetTopWindow
IsChild
wsprintfA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetDlgCtrlID
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetForegroundWindow
wvsprintfA
IntersectRect
GetWindowPlacement
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindowEnabled
DialogBoxIndirectParamA
GetClassNameA
GetSystemMenu
CheckDlgButton
SetFocus
SetWindowTextA
EndDialog
WinHelpA
LoadStringA
BeginPaint
EndPaint
GetLastActivePopup
MessageBoxA
SetMenuDefaultItem
SetWindowPos
GetWindowDC
SystemParametersInfoA
SetWindowRgn
GetSysColorBrush
FindWindowA
GetScrollRange
SetScrollPos
GetScrollPos
CopyRect
LockWindowUpdate
GetCursorPos
SetRect
RedrawWindow
ShowWindow
UpdateWindow
CopyIcon
GetDC
ReleaseDC
InflateRect
SetCursor
GetMessagePos
MessageBeep
SetWindowLongA
ClientToScreen
CreatePopupMenu
AppendMenuA
GetNextDlgTabItem
GetKeyState
PtInRect
GetCapture
ReleaseCapture
SetCapture
DestroyCaret
CreateCaret
SetCaretPos
ShowCaret
EnableScrollBar
ShowScrollBar
GetFocus
FillRect
OffsetRect
PostMessageA
GetClassInfoA
LoadCursorA
DefWindowProcA
RegisterClipboardFormatA
GetParent
DestroyCursor
OpenClipboard
EmptyClipboard
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
RegisterClipboardFormatA
CheckMenuItem
SetClipboardData
CloseClipboard
SetForegroundWindow
LoadMenuA
EnableMenuItem
GetSubMenu
SetPropA
PostQuitMessage
IsIconic
GetSystemMetrics
DrawIcon
KillTimer
InvalidateRect
SetTimer
GetDlgItem
LoadBitmapA
LoadIconA
GrayStringA
DrawTextA
TabbedTextOutA
GetSysColor
GetClientRect
GetActiveWindow
MoveWindow
EnableWindow
SendMessageA
IsWindow
GetWindowRect
GetWindow
GetWindowLongA
ScreenToClient
GetWindowTextA
IsWindowUnicode
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
HideCaret
UnregisterClassA
GetDialogBaseUnits

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

ws2_32

htons
socket
bind
recv
getpeername
listen
ioctlsocket
accept
WSAStartup
WSAGetLastError
closesocket
send

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

ole32

StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
ReleaseStgMedium
CreateILockBytesOnHGlobal
CLSIDFromString
CLSIDFromProgID
CreateStreamOnHGlobal
CoTaskMemAlloc
CoTaskMemFree
OleDuplicateData
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleSetClipboard

oledlg

OleUIBusyA

Sections

.text
Size: 448KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2lqivayb
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 368KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dy4j2mwl
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dzvwqib8
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yojoyj73
Size: 572KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mackt
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c05c25e46b1dfaa76423c79529c78a7a

Headers

File Characteristics

Imports

advapi32

comctl32

gdi32

kernel32

oleaut32

olepro32

shell32

user32

winspool.drv

ws2_32

comdlg32

ole32

oledlg

Sections

.text Size: 448KB - Virtual size: 448KB

2lqivayb Size: 96KB - Virtual size: 96KB

.data Size: 108KB - Virtual size: 108KB

.rsrc Size: 368KB - Virtual size: 368KB

dy4j2mwl Size: 4KB - Virtual size: 4KB

dzvwqib8 Size: 188KB - Virtual size: 188KB

yojoyj73 Size: 572KB - Virtual size: 580KB

.mackt Size: 72KB - Virtual size: 72KB

.text
Size: 448KB - Virtual size: 448KB

2lqivayb
Size: 96KB - Virtual size: 96KB

.data
Size: 108KB - Virtual size: 108KB

.rsrc
Size: 368KB - Virtual size: 368KB

dy4j2mwl
Size: 4KB - Virtual size: 4KB

dzvwqib8
Size: 188KB - Virtual size: 188KB

yojoyj73
Size: 572KB - Virtual size: 580KB

.mackt
Size: 72KB - Virtual size: 72KB