be2152b30ce4092148b99dbef00bf1ef_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

be2152b30ce4092148b99dbef00bf1ef_JaffaCakes118
Size

625KB
MD5

be2152b30ce4092148b99dbef00bf1ef
SHA1

707345c0b59cb2c457766b3b54fb7120c76db13b
SHA256

0a7e8c1130f83154f8611d5e2207c50b587a010c31f298cd83e767c17b4d6eed
SHA512

1df455b419962098b66571849979a47a436845e1a8975d537d52fa575fbbbb2c93b00fec68f0c27ac4f17bbd8573b0dc209452eb1b33668c5edf9289a12cc296
SSDEEP

12288:OqKKSS2qZX4zQZwRMHvUSLV13uoYhle//PV0C0yLo:OOXyAwRMTruVhlGXVX0y0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be2152b30ce4092148b99dbef00bf1ef_JaffaCakes118

Files

be2152b30ce4092148b99dbef00bf1ef_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bb924edf5d34f1bbee061512cb363295

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
GetCPInfo
IsDebuggerPresent
InterlockedDecrement
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsGetValue
TlsSetValue
DecodePointer
GetModuleHandleW
SetLastError
GetCurrentThreadId
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetStringTypeW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
HeapFree
ExitProcess
Sleep
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
LoadLibraryW
RtlUnwind
GetProcAddress
GetLastError
HeapCreate
GlobalAlloc
HeapAlloc
SetUnhandledExceptionFilter
MulDiv

user32

ShowCaret
UnregisterClassA
RedrawWindow
EmptyClipboard
CharUpperBuffW
GetKeyNameTextA
MapVirtualKeyA
DestroyWindow
ModifyMenuA
SetClassLongA
CreateWindowExW
GetLastActivePopup
DrawTextA
GetClassInfoW
CharUpperBuffA
GetForegroundWindow
EnableScrollBar
DefWindowProcA
IsWindowEnabled
GetCaretPos
WaitForInputIdle
FindWindowA
GetClassInfoA
SetTimer
FlashWindow
DeferWindowPos
GetWindow
CheckMenuItem
EnumThreadWindows
HideCaret
SetForegroundWindow
CreateIcon
SetRect
RegisterClassW
PtInRect
DrawTextExA
ClientToScreen
SetFocus
IntersectRect
GetSubMenu
GetClipboardFormatNameA
EnumWindows
InvalidateRect
SetMenuItemInfoA
LoadBitmapA
CharNextW
IsClipboardFormatAvailable
SetActiveWindow
PeekMessageA
GetWindowDC
DestroyCursor
DrawEdge
CreateMenu
GetIconInfo
TabbedTextOutA
GetClipboardData
DefMDIChildProcA
CreateWindowExA
DialogBoxParamA
DrawMenuBar
TranslateMessage
CallWindowProcA
EnableWindow
ShowWindow
SystemParametersInfoA
ReleaseDC
ValidateRect
SetKeyboardState
RegisterWindowMessageA
CallNextHookEx
EqualRect
UpdateWindow
GetScrollInfo
DrawIcon
EndPaint
IsZoomed
EndDeferWindowPos
DispatchMessageA
DefWindowProcW
GetTopWindow
GetWindowTextLengthW
DestroyCaret
FrameRect
GetKeyboardLayout
GetPropA
DeleteMenu
BringWindowToTop
IsCharAlphaA
InvalidateRgn
GetScrollRange
SetWindowTextW
MoveWindow
SetMenu
UnhookWindowsHookEx
MessageBeep
GetMessageA
DefFrameProcA
BeginDeferWindowPos
LoadCursorA
GetMenuCheckMarkDimensions
DrawCaption
IsWindow
GetAsyncKeyState
ToUnicode
CloseClipboard
PostMessageA
DrawTextW
RegisterClipboardFormatA
WindowFromPoint
OffsetRect
GetScrollPos
IsWindowVisible
GetMessageTime
CallWindowProcW
OpenClipboard
ToAscii
GetActiveWindow
IsChild
LoadKeyboardLayoutA
CreateDialogParamA
GetKeyState
SendNotifyMessageA
OemToCharA
GetMenuItemCount
GetKeyboardLayoutList
WinHelpA
GetMenuItemID
GetWindowTextA
ScrollWindow
ChildWindowFromPoint
GetSysColor
GetCapture
PostThreadMessageA
SetWindowRgn
GetMenuState
EnableMenuItem
DestroyIcon
SetParent
RemoveMenu
SetClipboardData
CharNextA
GetDlgItem
CreateCaret
BeginPaint
GetTabbedTextExtentA
MapWindowPoints
GetDoubleClickTime
RemovePropA
TrackPopupMenu
RegisterClassA
SetWindowPos
ActivateKeyboardLayout
CharLowerBuffA
LoadIconA
GetMessagePos
EndDialog
SetWindowsHookExA
ScreenToClient
TranslateMDISysAccel
GetSystemMetrics
GetMenu
GetCursorPos
IsIconic
CharUpperA
SetScrollInfo
DestroyMenu
GetCursor
DrawFrameControl
SendMessageW
InsertMenuItemA
InsertMenuA
GetUpdateRect
GetDesktopWindow
SetCapture
SendDlgItemMessageA
GetWindowThreadProcessId
EnumClipboardFormats
WaitMessage
GetWindowLongA
SetWindowLongW
GetMenuItemInfoA
InflateRect
FindWindowExA
LoadCursorFromFileA
DrawTextExW
ShowOwnedPopups
IsWindowUnicode
SetCursor
CreatePopupMenu
GetSystemMenu
SetWindowTextA
SetWindowPlacement
SendMessageTimeoutA
ReleaseCapture
GetClassNameA
IsCharAlphaNumericA
DrawIconEx
CopyImage
GetSysColorBrush
mouse_event
SetWindowLongA
PostQuitMessage
InvertRect
SubtractRect
CopyRect
AdjustWindowRectEx
SetScrollPos
LockWindowUpdate
WindowFromDC
IsDialogMessageA
SetScrollRange
GetFocus
CharLowerA
IsRectEmpty
UnionRect
wsprintfA
GetParent
MessageBoxA
GetDCEx
SendMessageA
MsgWaitForMultipleObjects
FillRect
ShowCursor
GetMenuStringA
GetDC
GetMenuItemRect
DrawFocusRect
SetRectEmpty
CharPrevW
GetWindowPlacement
SetCaretPos
ScrollWindowEx
ScrollDC
SetPropA
GetKeyboardState
GetClientRect
KillTimer
GetWindowRgn
GetWindowTextW
GetWindowRect
ShowScrollBar

gdi32

GetRandomRgn

comdlg32

GetSaveFileNameA
ChooseFontA
PrintDlgA
GetOpenFileNameA
ChooseColorA

advapi32

RegEnumValueA
RegQueryValueA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyA
RegCloseKey
RegQueryInfoKeyA
RegSetValueExA
RegDeleteKeyA
RegFlushKey
RegOpenKeyExA
RegDeleteValueA
GetUserNameA
RegCreateKeyExA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder

ole32

OleUninitialize
OleInitialize

oleaut32

VarCmp
OleLoadPicture

comctl32

ImageList_Read
ImageList_DragShowNolock
ImageList_Write
ImageList_DrawEx
ImageList_DragEnter
ImageList_GetDragImage
ImageList_Add
ImageList_GetIcon
ImageList_SetIconSize
ImageList_GetBkColor
ImageList_SetDragCursorImage
ImageList_GetIconSize
ord17
ImageList_SetBkColor
ImageList_DragLeave
ImageList_Draw
ImageList_Destroy
ImageList_EndDrag
ImageList_DragMove
ImageList_GetImageCount
ImageList_Replace
ImageList_ReplaceIcon
ImageList_Remove
ImageList_Create
ImageList_BeginDrag
ImageList_GetImageInfo
ImageList_LoadImageA

winmm

timeEndPeriod
mciSendCommandA
mciGetErrorStringA
timeBeginPeriod
timeGetTime

msimg32

AlphaBlend

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

wsock32

WSAStartup
gethostbyname
recvfrom
select
listen
connect
WSACleanup
getsockname
getsockopt
setsockopt
WSAAsyncSelect
socket
closesocket
accept
ioctlsocket
htons
inet_ntoa
sendto
gethostname
bind

mpr

WNetGetUniversalNameA
WNetGetConnectionA
WNetEnumResourceA
WNetOpenEnumA
WNetCloseEnum

imm32

ImmSetCompositionFontA
ImmGetCompositionStringA
ImmGetCompositionStringW
ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

ws2_32

WSARecv
WSAGetOverlappedResult
WSAEventSelect
WSAStringToAddressA
WSASocketA
WSAAddressToStringA
WSASend

wldap32

ord315

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.zztop
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 591KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 753KB - Virtual size: 753KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xyu
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb924edf5d34f1bbee061512cb363295

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

winmm

msimg32

version

wsock32

mpr

imm32

ws2_32

wldap32

Sections

.text Size: 71KB - Virtual size: 71KB

.zztop Size: 19KB - Virtual size: 18KB

.rdata Size: 41KB - Virtual size: 40KB

.data Size: 28KB - Virtual size: 591KB

.reloc Size: 753KB - Virtual size: 753KB

.xyu Size: 10KB - Virtual size: 9KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 71KB - Virtual size: 71KB

.zztop
Size: 19KB - Virtual size: 18KB

.rdata
Size: 41KB - Virtual size: 40KB

.data
Size: 28KB - Virtual size: 591KB

.reloc
Size: 753KB - Virtual size: 753KB

.xyu
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 7KB - Virtual size: 7KB