bd85b85ff19d25251aee04be14981216_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bd85b85ff19d25251aee04be14981216_JaffaCakes118
Size

360KB
MD5

bd85b85ff19d25251aee04be14981216
SHA1

bb001c55a56df613a076a3582bc6cf9a8f30bd6a
SHA256

eb46f6e6bbf945f648c806dad8ae73d9274b54d656d813e80c8ad3999ed40af7
SHA512

ba769f2e7e15c5ac83377809e8c0f15b12a3d464b0e2dd0d29b27fa87e34499fb7c232076a58d2f2f40d9316a23c1f75b43d53b2c4de46a355fe2ea9bcba6af6
SSDEEP

6144:O3QxhZqQyP5w4xecsCVjSjgRIT2hZbSc0ltCUaA9e:O3Qx7qQW5w4bVjS6bElLaN

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd85b85ff19d25251aee04be14981216_JaffaCakes118

Files

bd85b85ff19d25251aee04be14981216_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1750f4de21fa7bec36bbed29cd08a840

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
TerminateProcess
RtlUnwind
GetCommandLineA
RaiseException
ExitProcess
HeapFree
GetStartupInfoA
FileTimeToLocalFileTime
HeapReAlloc
HeapSize
HeapAlloc
GetTimeZoneInformation
SetStdHandle
GetFileType
FileTimeToSystemTime
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
FindClose
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
WritePrivateProfileStringA
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetErrorMode
GetProcessVersion
GetOEMCP
GetCPInfo
TlsSetValue
TlsGetValue
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
GlobalFlags
TlsAlloc
SizeofResource
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
LocalAlloc
EnterCriticalSection
GetFileAttributesA
GetFileTime
GetFileSize
GetFullPathNameA
GetEnvironmentStringsW
SetHandleCount
GetVolumeInformationA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
GetEnvironmentStrings
CreateProcessA
WaitForSingleObject
CloseHandle
GetCurrentDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetTempPathA
lstrcpynA
GetDiskFreeSpaceA
GetModuleHandleA
GetProcAddress
FindFirstFileA
SetUnhandledExceptionFilter
GetProfileStringA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
MulDiv
SetLastError
GetThreadLocale
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
GlobalAlloc
lstrcmpA
GetCurrentThread
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
lstrcatA
lstrlenA
WinExec
lstrcpyA
VirtualAlloc
IsBadWritePtr
GetStdHandle
GetLastError

user32

CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
CharUpperA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
DestroyMenu
LoadStringA
CharNextA
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
PostQuitMessage
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
GetSysColorBrush
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
CopyRect
IsWindowVisible
GetDesktopWindow
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
WindowFromPoint
GetClassNameA
PostMessageA
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
CopyIcon
GetWindowRect
GetParent
GetDC
ReleaseDC
InflateRect
IsWindow
GetSysColor
GetMessagePos
ScreenToClient
PtInRect
InvalidateRect
SetTimer
MessageBeep
SetWindowLongA
KillTimer
LoadCursorA
SetCursor
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
LoadIconA
EnableWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode

gdi32

DeleteObject
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
PatBlt
DPtoLP
LPtoDP
CreateDIBitmap
CreateCompatibleDC
BitBlt
GetTextExtentPointA
ScaleWindowExtEx
SetWindowExtEx
SetViewportExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
SetMapMode
SetViewportOrgEx
SetBkMode
SelectObject
RestoreDC
DeleteDC
SaveDC
GetBkColor
GetTextColor
GetDeviceCaps
SetBkColor
SetTextColor
CreateBitmap
GetTextExtentPoint32A
GetClipBox
GetStockObject
GetObjectA
CreateFontIndirectA
IntersectClipRect

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegCreateKeyExA

shell32

ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

OleUninitialize
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SafeArrayUnaccessData
SysStringLen
SysAllocStringByteLen
VariantTimeToSystemTime
VariantCopy
SysAllocString
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound

wininet

InternetSetFilePointer
InternetWriteFile
InternetGetLastResponseInfoA
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetQueryDataAvailable
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetReadFile
InternetConnectA
InternetSetStatusCallback

Sections

.text
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX0
Size: 104KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1750f4de21fa7bec36bbed29cd08a840

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

Sections

.text Size: 160KB - Virtual size: 158KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 20KB - Virtual size: 38KB

.rsrc Size: 28KB - Virtual size: 27KB

.UPX0 Size: 104KB - Virtual size: 252KB

.text
Size: 160KB - Virtual size: 158KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 20KB - Virtual size: 38KB

.rsrc
Size: 28KB - Virtual size: 27KB

.UPX0
Size: 104KB - Virtual size: 252KB