bb3a65acd59e6f99c6d1b0dcf2ac0ec3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bb3a65acd59e6f99c6d1b0dcf2ac0ec3_JaffaCakes118
Size

1.9MB
MD5

bb3a65acd59e6f99c6d1b0dcf2ac0ec3
SHA1

9a34885dcdaa53c59d126aff74bb92cc50bc3a80
SHA256

57ce63ac03dc7805bb64ced1f15bb0db823b21eab9839e5eb7f7d2b3236c1249
SHA512

fa5572d49099aef3a0cd0c72402932876275e4c03ece800f8b2a33d9391504cdbb546fc21276416645183c2d9b2630baf94f39a71e6ec2f15f2793e693f340c9
SSDEEP

12288:RMS/N0GAuF/ezNKJ3IHFECv2iM5YAxQcgIshD:RBAuF/QgdIH/v2iM5YvcgI6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb3a65acd59e6f99c6d1b0dcf2ac0ec3_JaffaCakes118

Files

bb3a65acd59e6f99c6d1b0dcf2ac0ec3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b782044ff787e69e2e19a2f7a9743b03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
ExitProcess
RaiseException
HeapSize
GetACP
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
HeapFree
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
LCMapStringA
LCMapStringW
SetEnvironmentVariableA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapAlloc
RtlUnwind
GetTickCount
FileTimeToLocalFileTime
SetErrorMode
GetFileTime
GetFileAttributesA
FindResourceExA
GetOEMCP
GetCPInfo
FileTimeToSystemTime
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
WritePrivateProfileStringA
InterlockedDecrement
GetModuleFileNameW
VirtualProtect
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
FreeResource
GlobalFree
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
GetCurrentProcessId
GlobalAddAtomA
CloseHandle
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetModuleFileNameA
EnumResourceLanguagesA
GetLocaleInfoA
GlobalLock
lstrcmpA
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
lstrlenA
CompareStringW
CompareStringA
GetVersion
GetLastError
MultiByteToWideChar
InterlockedExchange
Sleep
GetStartupInfoA
CreateProcessA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
GetEnvironmentStringsW
SizeofResource

user32

UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
IsRectEmpty
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ReleaseDC
GetDC
SetWindowContextHelpId
MoveWindow
SetWindowTextA
IsDialogMessageA
MapDialogRect
ShowWindow
GetAsyncKeyState
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
CopyRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetDesktopWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetMenuItemID
GetMenuItemCount
EnableWindow
DdeUninitialize
DdeFreeStringHandle
DdeDisconnect
DdeConnect
DdeCreateStringHandleA
GetSubMenu
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
GetNextDlgGroupItem
InvalidateRgn
SetRect
CopyAcceleratorTableA
CharNextA
DestroyMenu
ValidateRect
SetMenuItemBitmaps
GetSysColorBrush
DdeInitializeA
GetParent
SendMessageA
CharUpperA
PostMessageA
LoadBitmapA
FillRect
GetWindowRect
MessageBeep
PtInRect
GetClientRect
InvalidateRect
RedrawWindow
SetCapture
LoadCursorA
ReleaseCapture
SetCursor
IsWindow
DestroyCursor
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
LoadIconA
OffsetRect
PostQuitMessage
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
GetFocus
GetMenuCheckMarkDimensions
SetFocus

gdi32

ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
SelectPalette
SetWindowExtEx
DPtoLP
GetMapMode
EnumFontFamiliesExA
GetBkColor
GetTextColor
GetRgnBox
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
DeleteObject
CreateSolidBrush
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateRectRgnIndirect
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
CreateFontIndirectA
RealizePalette
GetDeviceCaps
CreatePalette
GetObjectA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA

shell32

ShellExecuteA

comctl32

_TrackMouseEvent

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CoTaskMemAlloc
CoTaskMemFree
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromProgID

oleaut32

SysStringLen
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysAllocString
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysFreeString

Sections

.text
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b782044ff787e69e2e19a2f7a9743b03

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 252KB - Virtual size: 251KB

.rdata Size: 76KB - Virtual size: 75KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 1.5MB - Virtual size: 1.5MB

.text
Size: 252KB - Virtual size: 251KB

.rdata
Size: 76KB - Virtual size: 75KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 1.5MB - Virtual size: 1.5MB