ba68605607502b9519a07612690fe3c8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ba68605607502b9519a07612690fe3c8_JaffaCakes118
Size

1008KB
MD5

ba68605607502b9519a07612690fe3c8
SHA1

22c7b90b8564b8310d80c813fa6ab205268f2699
SHA256

4f6dbc47236f23cb08f6c47227a3598249de2ad2b34b387e87130b51aeb4e2c8
SHA512

8d1eb5a55a3725e93ff403f2b0948171623d0ec129cff4b1d327154b8fc9691ed9195bade70071afa5b4a2af01ab6d54751ab193b07430b8eaceaf8dd9b2113f
SSDEEP

12288:UqFcULbbGlN+spIfzvE5sMzfj3fqv2H2Rx2SS0kbAPPAtiYH/MW/Wm7MDgTuaZx8:nLbzOSEfj3qRxgAQt5Jt7kgqSM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba68605607502b9519a07612690fe3c8_JaffaCakes118

Files

ba68605607502b9519a07612690fe3c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9132adaf0f762071751e0cb4d9095c12

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
SetStdHandle
FlushFileBuffers
ReadFile
CreateFileA
GetStringTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
CloseHandle
RtlUnwind
LCMapStringW
LCMapStringA
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetCurrentProcess
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapAlloc
MoveFileA
GetLastError
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapFree
SetErrorMode
GetSystemDefaultLangID
GetCPInfo
GetACP
FreeLibrary
LoadLibraryA
WinExec
WideCharToMultiByte
GetSystemDirectoryA
GetLocaleInfoA
MultiByteToWideChar
SizeofResource
LockResource
FreeResource
FindResourceA
LoadResource
SetEndOfFile
SetFilePointer
_lread
_lwrite
OpenFile
_llseek
_lclose
GetWindowsDirectoryA
GetTickCount
FatalAppExitA
GlobalFlags
LocalReAlloc
LocalUnlock
LocalLock
LocalFree
GetVersion
GetProfileStringA
lstrcmpA
GlobalHandle
RaiseException
IsDBCSLeadByte
IsBadReadPtr
LocalAlloc
lstrlenA
OutputDebugStringA
GetModuleFileNameA
lstrcmpiA
GlobalSize
GlobalReAlloc
GlobalAlloc
GlobalLock
GlobalUnlock
GetProcAddress
GlobalFree
MulDiv
lstrcpyA
GetModuleHandleA
GetOEMCP

user32

GetNextDlgTabItem
SetScrollRange
SetDlgItemTextA
GetDlgItemTextA
GetDoubleClickTime
CheckRadioButton
ReleaseCapture
SetCapture
RegisterClassW
SetMenu
SetWindowTextA
GetWindowTextA
InvalidateRgn
ScrollDC
IsZoomed
AppendMenuA
GetSystemMenu
GetClassLongA
GetClassLongW
DispatchMessageA
DispatchMessageW
GetMessageW
GetMessageA
DefWindowProcW
VkKeyScanA
GetKeyboardLayout
LoadKeyboardLayoutA
ActivateKeyboardLayout
GetKeyboardLayoutList
InvertRect
GetMenuCheckMarkDimensions
RegisterClipboardFormatA
CloseClipboard
EmptyClipboard
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
SetClipboardData
HiliteMenuItem
GetMenuState
GetMenuItemID
DeleteMenu
DrawMenuBar
EqualRect
UnionRect
GetDesktopWindow
GetMessagePos
GetMessageTime
SetParent
GetClassInfoA
EnableWindow
MessageBoxA
DialogBoxParamA
BringWindowToTop
GetActiveWindow
SetTimer
MessageBeep
SendMessageA
GetAsyncKeyState
InvalidateRect
GetScrollPos
GetScrollRange
SetScrollPos
SetCursor
GetCursorPos
InflateRect
PtInRect
CheckDlgButton
IsWindowVisible
GetMenuItemCount
LoadStringA
IsWindowUnicode
UpdateWindow
GetMenu
FindWindowA
GetKeyState
PeekMessageA
KillTimer
DefWindowProcA
LoadIconA
LoadCursorA
IsDialogMessageA
GetSysColor
GetFocus
BeginPaint
EndPaint
ScreenToClient
GetWindowDC
FillRect
CopyRect
SetWindowLongA
DestroyWindow
CheckMenuItem
SetRectEmpty
RemoveMenu
GetSubMenu
CreateMenu
EnableMenuItem
GetMenuStringA
ModifyMenuA
InsertMenuA
TranslateMessage
wsprintfA
SetForegroundWindow
SetFocus
PostQuitMessage
PostMessageA
CreateWindowExA
RegisterClassA
GetDC
ReleaseDC
LoadMenuA
IsIconic
GetWindowLongA
ClientToScreen
GetClassNameA
DestroyMenu
IsRectEmpty
IsWindow
OffsetRect
SetWindowPos
GetClientRect
LoadBitmapA
GetParent
MoveWindow
ShowWindow
GetDlgItem
SetRect
DrawTextA
EndDialog
WindowFromDC
MapWindowPoints
IntersectRect
SystemParametersInfoA
GetWindowRect
GetSystemMetrics
GetDialogBaseUnits
IsDlgButtonChecked
ShowCursor
SendDlgItemMessageA
GetCaretBlinkTime

gdi32

SetBkColor
CreatePatternBrush
CreateBitmap
PtVisible
GetTextFaceA
CreateFontA
ExtTextOutA
LineTo
MoveToEx
SetMapMode
GetMapMode
GetCharWidthA
GetCharWidth32A
GetCharWidthW
GetCharWidth32W
GetBitmapBits
TextOutA
TextOutW
SetTextAlign
CreateCompatibleBitmap
GetTextMetricsA
Escape
CreateICA
EnumFontsA
EnumFontFamiliesExA
CreateSolidBrush
CreateRectRgn
PatBlt
SetRectRgn
CreateRectRgnIndirect
RectVisible
SetROP2
Ellipse
Polygon
Arc
CreatePen
SetMapperFlags
ExtTextOutW
GetTextExtentPoint32A
SetWindowExtEx
SetWindowOrgEx
CreateMetaFileA
CloseMetaFile
RestoreDC
EnumMetaFile
SaveDC
StretchBlt
SetStretchBltMode
PlayMetaFile
SetViewportExtEx
GetMetaFileBitsEx
FillRgn
CombineRgn
Rectangle
GetStockObject
CopyMetaFileA
DeleteMetaFile
CreateCompatibleDC
DPtoLP
BitBlt
DeleteDC
GetObjectA
GetDeviceCaps
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
DeleteObject
SelectClipRgn
GetClipBox

advapi32

RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueExA
RegSetValueExA
RegEnumValueA
RegCreateKeyExA
RegSetValueA
RegEnumKeyExA
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegCloseKey

ole32

CreateILockBytesOnHGlobal
GetHGlobalFromILockBytes
CoDisconnectObject
CoLockObjectExternal
OleUninitialize
CoRegisterMessageFilter
CoRevokeClassObject
CoRegisterClassObject
OleInitialize
CreateOleAdviseHolder
OleRegEnumFormatEtc
CreateDataAdviseHolder
WriteFmtUserTypeStg
OleTranslateAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
GetRunningObjectTable
CoGetMalloc
OleDuplicateData
ReleaseStgMedium
OleGetClipboard
WriteClassStg
OleFlushClipboard
OleSetClipboard
StgCreateDocfileOnILockBytes

oleaut32

SysFreeString

shell32

DragAcceptFiles

comctl32

ord17

Sections

.text
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 426KB - Virtual size: 426KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�9
Size: 235KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9132adaf0f762071751e0cb4d9095c12

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

shell32

comctl32

Sections

.text Size: 303KB - Virtual size: 303KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 31KB - Virtual size: 75KB

.rsrc Size: 426KB - Virtual size: 426KB

�9 Size: 235KB - Virtual size: 236KB

.text
Size: 303KB - Virtual size: 303KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 31KB - Virtual size: 75KB

.rsrc
Size: 426KB - Virtual size: 426KB

�9
Size: 235KB - Virtual size: 236KB