b3f48662375e611a7ee7e3b704713f1c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b3f48662375e611a7ee7e3b704713f1c_JaffaCakes118
Size

172KB
MD5

b3f48662375e611a7ee7e3b704713f1c
SHA1

6842ad2bb57cbb61527910ffff0aac4b152289c3
SHA256

02740f9add465b9e723174a313324e41fe646aa12e025e57a6d6fe6bf38ad20b
SHA512

f2a31a44d34f3dd734a803d7bc68361fc1f0498aafc05ceb28d91a2f27f7345b8f76e0cac925f290f18080df905eee0f6ef825724d831011aad90814a3368d96
SSDEEP

3072:JLADt0N0RAqCMs6mhCEusWOMRwYIf8q4rcOq5xyJE/t+TPLt:JLADt0N0iMo4Ip4KgTP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3f48662375e611a7ee7e3b704713f1c_JaffaCakes118

Files

b3f48662375e611a7ee7e3b704713f1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6378f11165d9d2ac671ca247b014aa0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

wininet

InternetCloseHandle
InternetReadFileExA
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetGetLastResponseInfoA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
InternetQueryDataAvailable

kernel32

GlobalFlags
WritePrivateProfileStringA
lstrcatA
GetCurrentDirectoryA
GetModuleHandleA
GetVersion
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetProcessVersion
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
SetErrorMode
GetCPInfo
GetOEMCP
HeapAlloc
HeapFree
SetStdHandle
GetFileType
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
TlsGetValue
GetCommandLineA
ExitProcess
TerminateProcess
RaiseException
HeapReAlloc
HeapSize
GetACP
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
TlsAlloc
GetFullPathNameA
GetVolumeInformationA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
ReadFile
DuplicateHandle
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryA
LocalAlloc
FreeLibrary
EnterCriticalSection
lstrcpynA
lstrcpyA
SetLastError
FormatMessageA
LocalFree
lstrlenA
InterlockedIncrement
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThreadId
GetVersionExA
MultiByteToWideChar
FindFirstFileA
FindNextFileA
FindClose
InterlockedDecrement
WideCharToMultiByte
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
SetProcessPriorityBoost
CreateFileA
WriteFile
GetFileSize
GetTickCount
CreateProcessA
WaitForSingleObject
Sleep
CloseHandle
DeleteFileA
GetModuleFileNameA
SetFilePointer
GetLastError
GetStartupInfoA

user32

RegisterWindowMessageA
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
GetSysColor
MapWindowPoints
LoadIconA
GetSysColorBrush
DestroyMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetFocus
ShowWindow
SetWindowPos
SetWindowLongA
GetDlgItem
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
GetMenuItemCount
UnhookWindowsHookEx
GetWindowTextA
SetWindowTextA
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetClassNameA
ClientToScreen
LoadCursorA
GetSystemMetrics
CharUpperA
wsprintfA
LoadStringA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
EnableWindow
SetCursor
SendMessageA
PostQuitMessage
PostMessageA
UnregisterClassA
GetCapture

gdi32

SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SetViewportExtEx
SetMapMode
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA
SetTextColor
ScaleViewportExtEx
SelectObject
OffsetViewportOrgEx
RestoreDC
SaveDC
DeleteDC
DeleteObject
CreateBitmap
SetBkColor
GetStockObject
SetViewportOrgEx

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteExA
SHChangeNotify

comctl32

ord17

ole32

CoInitializeEx
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
CoInitializeSecurity

oleaut32

SysAllocString
SysFreeString
VariantClear

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6378f11165d9d2ac671ca247b014aa0a

Headers

File Characteristics

Imports

iphlpapi

wininet

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

Sections

.text Size: 116KB - Virtual size: 115KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 16KB - Virtual size: 43KB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 116KB - Virtual size: 115KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 16KB - Virtual size: 43KB

.rsrc
Size: 12KB - Virtual size: 9KB