bcb3f9506f527982e378209864fbb22f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

bcb3f9506f527982e378209864fbb22f_JaffaCakes118
Size

420KB
MD5

bcb3f9506f527982e378209864fbb22f
SHA1

6581f52e10b168664afc9f19d03594af7f20d967
SHA256

d86bac1351bfac527ef059cf2ffb46a1c0eef32b7f69531efc8e54600268c3da
SHA512

966f93e4a1f729de3f5167a9b13455c46a7c4070c7479197e20ae7445b0cc0f67826890208b46139dcf018657efb38efc8b11d6b8fdb92fd8eedbaf352dd6269
SSDEEP

6144:WNB/OwQBy8MaN7yMcsQevkFAMfWYkDNbWUwNilgfQCaT8VwqlA8:WN9OhNIevIAMfWYwNiUwXrVwB8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcb3f9506f527982e378209864fbb22f_JaffaCakes118

Files

bcb3f9506f527982e378209864fbb22f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e289becaf5a236b6a18d4251d2fbbc43

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\LocalSvnForDailyBuild\lonely_pl\bin\pl_release\Update.pdb

Imports

psapi

GetModuleFileNameExW
EnumProcessModules

wininet

InternetOpenUrlW
HttpQueryInfoW
InternetReadFile
InternetCloseHandle
InternetOpenW

kernel32

FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
GetTickCount
FileTimeToLocalFileTime
GetFileAttributesW
GetFileTime
SetErrorMode
HeapFree
HeapAlloc
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
HeapReAlloc
RaiseException
ExitProcess
HeapSize
SetFilePointer
VirtualAlloc
GetSystemInfo
VirtualQuery
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
CreateFileA
SetEnvironmentVariableA
FileTimeToSystemTime
GetThreadLocale
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetModuleHandleA
InterlockedDecrement
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
WritePrivateProfileStringW
GlobalAddAtomW
GetCurrentProcessId
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrcmpW
GetModuleHandleW
LocalFree
lstrlenW
MulDiv
GetCurrentThreadId
SetLastError
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetStartupInfoW
ReadFile
lstrlenA
GetTempPathW
DeleteFileW
GetProcAddress
GetModuleFileNameA
LoadLibraryW
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
GetACP
FormatMessageW
GetFileSize
CreateFileW
CreateToolhelp32Snapshot
CloseHandle
TerminateThread
CreateProcessW
LoadResource
SizeofResource
OpenProcess
GetLastError
Sleep
FindResourceW
GetModuleFileNameW
CreateThread
Process32NextW
WriteFile
Process32FirstW
GetStdHandle
WaitForSingleObject
LockResource
VirtualProtect

user32

MessageBeep
CharUpperW
UnregisterClassW
RegisterClipboardFormatW
PostThreadMessageW
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
GetDlgItemInt
DestroyMenu
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetNextDlgGroupItem
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxW
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
PostMessageW
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
GetKeyState
ReleaseCapture
SetCapture
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
PeekMessageW
GetCursorPos
CopyAcceleratorTableW
CharNextW
LoadCursorW
GetSysColorBrush
GetForegroundWindow
ValidateRect
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
EnableWindow
GetSystemMetrics
DrawIcon
IsIconic
GetSystemMenu
SetTimer
SendMessageW
AppendMenuW
GetClientRect
LoadImageW
GetWindowRect
GetSysColor
UnregisterClassA

gdi32

SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
OffsetViewportOrgEx
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
GetWindowExtEx
GetViewportExtEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
GetObjectW
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps
DeleteObject
SetMapMode
RestoreDC
SaveDC
ExtTextOutW
PtVisible

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegEnumKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW

shell32

SHFileOperationW

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject

oleaut32

VariantCopy
SysFreeString
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
VariantInit
VariantChangeType
VariantClear
SysStringLen
SysAllocStringLen

Sections

.text
Size: 300KB - Virtual size: 298KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e289becaf5a236b6a18d4251d2fbbc43

Headers

File Characteristics

PDB Paths

Imports

psapi

wininet

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 300KB - Virtual size: 298KB

.rdata Size: 84KB - Virtual size: 81KB

.data Size: 16KB - Virtual size: 33KB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 300KB - Virtual size: 298KB

.rdata
Size: 84KB - Virtual size: 81KB

.data
Size: 16KB - Virtual size: 33KB

.rsrc
Size: 16KB - Virtual size: 15KB