b8266f74b07debc095cd819318f90ffe_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b8266f74b07debc095cd819318f90ffe_JaffaCakes118
Size

335KB
MD5

b8266f74b07debc095cd819318f90ffe
SHA1

ed989816785bb2eafdde73cda863a5140a02827c
SHA256

e64c10cdac308d3f26abeb5b0830cddfc5ac80360a3d5d4dc330b956def2632c
SHA512

e966cde54a5f641d1cb82d586cf67a9214c53343fc6b8948e610dec41bca08f7c8008d7f351a04b9a5d1f07458a1ea2703ff67909eb363f22104c6172e261200
SSDEEP

6144:aV6KQOq9ELI9a/rjbXBUTz5eZ5AiFD8StSMrGpNCFSfXI42:aV6xOq9ELIsn0Ius84SMroCp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8266f74b07debc095cd819318f90ffe_JaffaCakes118

Files

b8266f74b07debc095cd819318f90ffe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fea0a1d5ec70a8d5894afae23f67b8db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetFullPathNameA
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
ExitProcess
RtlUnwind
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
HeapSize
LCMapStringW
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStringTypeA
GetStringTypeW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
InterlockedIncrement
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
GetUserDefaultLCID
FileTimeToSystemTime
WaitForSingleObject
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
GetModuleHandleA
GetProcAddress
SetLastError
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
CompareStringW
CompareStringA
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
OpenEventA
CreateEventA
GetVolumeInformationA
LocalAlloc
LocalFree
GetLastError
GetModuleFileNameA
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetFileSize
GetTempPathA
Sleep
InterlockedDecrement
MultiByteToWideChar
GetTickCount
InitializeCriticalSection
RaiseException
CreateProcessA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
TerminateThread
CloseHandle
LCMapStringA
CreateThread

user32

GetNextDlgGroupItem
GetNextDlgTabItem
MessageBeep
EndDialog
CreateDialogIndirectParamA
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
ClientToScreen
LoadCursorA
GetDC
ReleaseDC
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatA
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
SetCursor
PostQuitMessage
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
ReleaseCapture
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
IsWindow
SetFocus
IsChild
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconA
PeekMessageA
MapWindowPoints
MessageBoxA
GetKeyState
PostMessageA
SetTimer
EnableWindow
ShowWindow
KillTimer
UnregisterClassA
GetWindowRect
GetDesktopWindow
IsWindowVisible
UpdateWindow
GetClientRect
GetMenu
GetSysColor
AdjustWindowRectEx
GetParent
EqualRect
SetCapture
InvalidateRgn
InvalidateRect
CopyAcceleratorTableA
SetRect
IsRectEmpty
CharNextA
PostThreadMessageA
CallNextHookEx
wsprintfA
SendMessageA
GetClassNameA
EnumChildWindows
SetForegroundWindow
FindWindowA
CharUpperA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
GetWindow
PtInRect
CopyRect
GetSystemMetrics
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
SetWindowLongA
GetWindowLongA
CallWindowProcA
DefWindowProcA
GetDlgCtrlID
RegisterClassA
GetClassInfoA
IsWindowEnabled

gdi32

ExtSelectClipRgn
DeleteDC
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
GetStockObject
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SetMapMode
RestoreDC
SaveDC
ExtTextOutA
DeleteObject
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
TextOutA

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA

comctl32

ord17

shlwapi

PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecA
PathAppendA
PathStripToRootA
UrlUnescapeA
PathIsUNCA

oledlg

ord8

ole32

CoTaskMemFree
OleRun
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
CoDisconnectObject
CoGetClassObject
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal

oleaut32

SysFreeString
VariantInit
VariantCopy
VariantChangeType
VariantClear
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SafeArrayDestroy
SystemTimeToVariantTime
LoadTypeLi
OleCreateFontIndirect
GetErrorInfo
SysAllocString

wininet

InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetOpenA

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fea0a1d5ec70a8d5894afae23f67b8db

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

wininet

iphlpapi

Sections

.text Size: 243KB - Virtual size: 243KB

.rdata Size: 63KB - Virtual size: 63KB

.data Size: 13KB - Virtual size: 28KB

.rsrc Size: 14KB - Virtual size: 13KB

.text
Size: 243KB - Virtual size: 243KB

.rdata
Size: 63KB - Virtual size: 63KB

.data
Size: 13KB - Virtual size: 28KB

.rsrc
Size: 14KB - Virtual size: 13KB