b4f3295903a7a02bf3618708c99709c4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b4f3295903a7a02bf3618708c99709c4_JaffaCakes118
Size

179KB
MD5

b4f3295903a7a02bf3618708c99709c4
SHA1

7960e34dd9d7fc3259ef0cb3068444a10afde4d8
SHA256

75cd67455f91a0a8c6243a1513934540a504d3e64ec939d7fafea0b72c428c4d
SHA512

d840eced64401e430e2f744996a37a336b502f987c67c3f16640a38e2358f2c74c0444fffec93c2837d79fbb0b7703f6db7f2769c8371e96a16f31dde48f6df4
SSDEEP

3072:Lbfe6FzdHTk/xJ4z40M0ad6abOiqdpcHY5FkuwzMx2046kobj:PfeszdHTRjzw/8dpn5KjP78

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4f3295903a7a02bf3618708c99709c4_JaffaCakes118

Files

b4f3295903a7a02bf3618708c99709c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37e1b58ed044d043bfeff7c54a05a90e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAdjustment
GetStringTypeA
GetFileType
CreateMailslotW
FlushFileBuffers
WriteFile
GetStdHandle
GetOEMCP
SetHandleCount
CompareStringW
GetStringTypeW
SetStdHandle
GetEnvironmentStrings
RaiseException
IsBadReadPtr
lstrlenA
lstrcpyA
MulDiv
LocalAlloc
OutputDebugStringA
lstrcmpiA
GlobalSize
GlobalReAlloc
GlobalAlloc
GlobalLock
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCurrentProcess
FreeEnvironmentStringsA
UnhandledExceptionFilter
CloseHandle
TerminateProcess
ExitProcess
HeapCreate
LCMapStringA
HeapDestroy
LCMapStringW
GetStartupInfoA
RtlUnwind
GetCommandLineA
HeapFree
GetModuleHandleA
HeapAlloc
GetLocalTime
MoveFileA
GetLastError
SetErrorMode
GetSystemTime
GetTimeZoneInformation
WinExec
GetSystemDefaultLangID
GetCPInfo
GetLocaleInfoA
WideCharToMultiByte
GetSystemDirectoryA
LockResource
MultiByteToWideChar
SizeofResource
LoadResource
FreeResource
FindResourceA
_lread
SetEndOfFile
SetFilePointer
_lclose
_lwrite
OpenFile
GetModuleFileNameA
_llseek
GetWindowsDirectoryA
GlobalFlags
GetTickCount
FatalAppExitA
SetEnvironmentVariableA
LocalLock
LocalReAlloc
GlobalUnlock
LocalUnlock
GetProcAddress
LocalFree
GetACP
GetVersion
FreeLibrary
LoadLibraryA
GlobalHandle
GetProfileStringA
lstrcmpA
HeapReAlloc
IsDBCSLeadByte
GlobalFree
ReadFile
CreateFileA
CompareStringA

user32

InvalidateRect
SendDlgItemMessageA
GetDialogBaseUnits
IsDlgButtonChecked
CheckDlgButton
GetNextDlgTabItem
SetScrollRange
SetDlgItemTextA
GetDlgItemTextA
MapWindowPoints
CheckRadioButton
GetDoubleClickTime
ReleaseCapture
SetCapture
RegisterClassW
SetMenu
SetWindowTextA
GetWindowTextA
InvalidateRgn
ScrollDC
IsZoomed
AppendMenuA
GetSystemMenu
GetClassLongA
GetClassLongW
DispatchMessageA
DispatchMessageW
GetMessageW
GetMessageA
DefWindowProcW
VkKeyScanA
GetKeyboardLayout
LoadKeyboardLayoutA
ActivateKeyboardLayout
GetKeyboardLayoutList
InvertRect
GetMenuCheckMarkDimensions
RegisterClipboardFormatA
CloseClipboard
EmptyClipboard
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
SetClipboardData
HiliteMenuItem
GetMenuState
GetMenuItemID
DeleteMenu
DrawMenuBar
EqualRect
UnionRect
GetDesktopWindow
GetMessagePos
GetMessageTime
SetParent
GetClassInfoA
SetWindowPos
MessageBoxA
DialogBoxParamA
BringWindowToTop
OffsetRect
GetCaretBlinkTime
SetTimer
MessageBeep
WinHelpA
CreateDialogParamA
SendMessageA
GetAsyncKeyState
EnableWindow
GetScrollPos
GetScrollRange
SetScrollPos
SetCursor
PtInRect
ShowCursor
IsWindowVisible
GetMenuItemCount
LoadStringA
IsWindowUnicode
UpdateWindow
GetMenu
FindWindowA
GetKeyState
PeekMessageA
KillTimer
DefWindowProcA
LoadIconA
LoadCursorA
IsDialogMessageA
GetFocus
BeginPaint
EndPaint
ScreenToClient
SetRect
FillRect
IntersectRect
CopyRect
SetWindowLongA
MoveWindow
DestroyWindow
CheckMenuItem
SetRectEmpty
RemoveMenu
GetSubMenu
CreateMenu
EnableMenuItem
GetMenuStringA
ModifyMenuA
InsertMenuA
GetParent
TranslateMessage
SetForegroundWindow
SetFocus
PostQuitMessage
PostMessageA
CreateWindowExA
RegisterClassA
GetDC
LoadMenuA
IsIconic
GetWindowLongA
ClientToScreen
GetWindowRect
GetClassNameA
DestroyMenu
IsRectEmpty
IsWindow
ShowWindow
LoadBitmapA
GetSysColor
GetDlgItem
GetClientRect
DrawTextA
wsprintfA
GetSystemMetrics
GetWindowDC
ReleaseDC
EndDialog
InflateRect
GetCursorPos
GetActiveWindow

gdi32

CreateCompatibleBitmap
CreateFontIndirectA
LineTo
SetBkMode
GetStockObject
CreatePen
MoveToEx
BitBlt
DeleteMetaFile
GetObjectA
GetDeviceCaps
SetBkColor
CopyMetaFileA
PatBlt
CreatePatternBrush
SetTextColor
PtVisible
GetTextFaceA
CreateBitmap
ExtTextOutA
SetMapMode
CreateFontA
GetCharWidthA
GetCharWidth32A
GetMapMode
GetCharWidth32W
GetBitmapBits
GetCharWidthW
TextOutW
SetTextAlign
TextOutA
Escape
CreateICA
GetTextMetricsA
EnumFontFamiliesExA
CreateSolidBrush
EnumFontsA
SelectClipRgn
SetRectRgn
CreateRectRgn
GetClipBox
RectVisible
CreateRectRgnIndirect
Ellipse
Polygon
SetROP2
SetMapperFlags
ExtTextOutW
Arc
SetWindowExtEx
SetWindowOrgEx
GetTextExtentPoint32A
CloseMetaFile
RestoreDC
CreateMetaFileA
SaveDC
StretchBlt
EnumMetaFile
PlayMetaFile
SetViewportExtEx
SetStretchBltMode
FillRgn
CombineRgn
GetMetaFileBitsEx
Rectangle
DeleteDC
CreateCompatibleDC
DeleteObject
SelectObject

advapi32

RegEnumKeyExA
RegEnumValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyA

ole32

CreateDataAdviseHolder
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
GetHGlobalFromILockBytes
CoDisconnectObject
CoLockObjectExternal
OleUninitialize
CoRegisterMessageFilter
CoRevokeClassObject
CoRegisterClassObject
OleInitialize
CreateOleAdviseHolder
OleRegEnumFormatEtc
ReleaseStgMedium
WriteFmtUserTypeStg
OleTranslateAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
GetRunningObjectTable
CoGetMalloc
OleDuplicateData
OleGetClipboard
WriteClassStg
OleFlushClipboard
OleSetClipboard

shell32

DragAcceptFiles

oleaut32

SysReAllocStringLen
SafeArraySetRecordInfo
VariantChangeTypeEx
GetErrorInfo

Sections

.text
Size: 93KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

37e1b58ed044d043bfeff7c54a05a90e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

shell32

oleaut32

Sections

.text Size: 93KB - Virtual size: 132KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 76KB - Virtual size: 75KB

.reloc Size: 512B - Virtual size: 312B

.text
Size: 93KB - Virtual size: 132KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 76KB - Virtual size: 75KB

.reloc
Size: 512B - Virtual size: 312B