bfc07d23a33867b683755aef0aed8b91_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bfc07d23a33867b683755aef0aed8b91_JaffaCakes118
Size

3.3MB
MD5

bfc07d23a33867b683755aef0aed8b91
SHA1

7ae1389bd914c9eb84cefa2fb508c4d3168b651c
SHA256

139d072e0c3d46a9d70de7ed8c08043820ef3d031e88dca540ff630ed8a88c73
SHA512

e84476e16b8ae19b01bea80ad60adfa356e221fca05a5d29da6f5027a34004677a54546c4d89656626d2227abcdd0075fae5b5c892f15986e643eff55d409db9
SSDEEP

24576:umfiGYqrZlw2W7Y+UQVISyb/rqJJLLBRt+QzliFa9rmZwNZi8rFnZWhTyZjTZZmw:uBq81UQVISmqJNLEQoFa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfc07d23a33867b683755aef0aed8b91_JaffaCakes118

Files

bfc07d23a33867b683755aef0aed8b91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19025a3f9a7cefff1382f5ac5fd0da35

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

avifil32

AVIFileExit
AVIFileRelease
AVIStreamRelease
AVIStreamWrite
AVISaveOptions
AVIMakeCompressedStream
AVIStreamSetFormat
AVIFileCreateStreamA
AVIFileOpenA
AVIFileInit

msvfw32

ord2

comctl32

PropertySheetA
ImageList_Destroy
ord17
ImageList_ReplaceIcon
ImageList_Create
ImageList_GetIconSize
ImageList_DrawEx
ord6
ImageList_LoadImageA
CreateToolbarEx

kernel32

GetCurrentProcessId
HeapAlloc
HeapFree
HeapCreate
HeapDestroy
GetTimeZoneInformation
GetComputerNameA
ResetEvent
CreateDirectoryA
MoveFileA
LocalReAlloc
lstrcmpA
ReleaseMutex
CreateMutexA
GetPrivateProfileStringA
GetVersionExA
RemoveDirectoryA
FormatMessageA
GetWindowsDirectoryA
GetShortPathNameA
GetThreadPriority
GlobalFree
GlobalAlloc
RtlUnwind
RaiseException
HeapSize
GetSystemTime
CreateThread
TlsSetValue
ExitThread
GetSystemTimeAsFileTime
SetEnvironmentVariableA
GetModuleFileNameA
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
IsBadCodePtr
SetStdHandle
FlushFileBuffers
CompareStringA
CompareStringW
LoadLibraryA
GetCurrentThreadId
FreeLibrary
WaitForSingleObject
CreateSemaphoreA
CloseHandle
MulDiv
GetSystemDirectoryA
DeleteFileA
GetVersion
GetTickCount
GetLastError
GetFullPathNameA
GetProcAddress
TerminateProcess
Sleep
OpenProcess
ResumeThread
GetLocaleInfoA
GetLocalTime
lstrcpyA
lstrcmpiA
LocalAlloc
LocalFree
GetDateFormatA
GetTimeFormatA
lstrcpynA
MultiByteToWideChar
WideCharToMultiByte
IsBadReadPtr
IsBadWritePtr
lstrlenA
InterlockedDecrement
GlobalLock
GlobalUnlock
GetCurrentProcess
OutputDebugStringA
VirtualFree
CreateEventA
InterlockedIncrement
InterlockedExchange
VirtualAlloc
CreateFileMappingA
SetEvent
MapViewOfFile
UnmapViewOfFile
SetFilePointer
SetEndOfFile
SetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
TerminateThread
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetFileAttributesA
FindFirstFileA
FindNextFileA
FindClose
GetLogicalDrives
GetDriveTypeA
GetVolumeInformationA
CopyFileA
SetFileTime
ReadFile
GetTempPathA
GetTempFileNameA
GetFileTime
WriteFile
CreateFileA
GetFileSize
GetFileInformationByHandle
GetDiskFreeSpaceA

user32

IsIconic
GetWindow
PeekMessageA
SetMenu
GetWindowPlacement
SetWindowPlacement
SetParent
IsZoomed
LoadImageA
DrawMenuBar
RemoveMenu
InsertMenuA
GetCursor
LoadBitmapA
ReleaseCapture
GetCapture
SetCapture
MapWindowPoints
PostQuitMessage
DestroyIcon
ClipCursor
IsWindowEnabled
DrawEdge
GetMessagePos
GetWindowDC
RegisterWindowMessageA
GetSysColorBrush
LockWindowUpdate
WinHelpA
GetDesktopWindow
EnumDisplaySettingsA
ExitWindowsEx
SetClipboardData
EmptyClipboard
CopyRect
SetScrollInfo
ScrollWindowEx
SetScrollRange
mouse_event
DestroyAcceleratorTable
ModifyMenuA
ActivateKeyboardLayout
LoadKeyboardLayoutA
GetKeyboardLayoutNameA
ToAsciiEx
CharLowerA
GetKeyNameTextA
EnumChildWindows
GetMenuItemCount
GetMenuItemID
GetMenuState
EnableMenuItem
DeleteMenu
LoadIconA
GetMenu
DestroyMenu
GetDlgCtrlID
SystemParametersInfoA
PtInRect
DrawFocusRect
InflateRect
DrawFrameControl
UpdateWindow
OffsetRect
BeginDeferWindowPos
LoadStringA
OpenClipboard
GetClipboardData
CloseClipboard
IsWindowVisible
GetKeyState
GetKeyboardLayout
MapVirtualKeyExA
SendDlgItemMessageA
CheckRadioButton
GetFocus
ClientToScreen
ScreenToClient
BringWindowToTop
EnableWindow
GetWindowTextLengthA
IsDlgButtonChecked
GetDlgItemInt
CheckDlgButton
GetClientRect
DrawTextA
CallWindowProcA
GetWindowTextA
SetTimer
SetDlgItemInt
SetWindowTextA
PostThreadMessageA
ReleaseDC
SetDlgItemTextA
SetFocus
GetDlgItemTextA
SetWindowPos
GetWindowRect
GetSystemMetrics
MoveWindow
GetParent
KillTimer
GetCursorPos
GetWindowLongA
UnregisterClassA
SetWindowLongA
EnumWindows
GetClassNameA
GetWindowThreadProcessId
SendMessageA
EndDialog
CreateDialogParamA
DialogBoxParamA
BeginPaint
FillRect
EndPaint
RemovePropA
GetPropA
DefWindowProcA
SetPropA
CreateWindowExA
DestroyWindow
RegisterClassExA
InvalidateRect
RedrawWindow
GetSysColor
GetDC
SetRect
MessageBeep
MessageBoxA
CallNextHookEx
DeferWindowPos
EndDeferWindowPos
LoadMenuA
GetSubMenu
TrackPopupMenuEx
GetClassInfoA
CheckMenuItem
wsprintfA
GetForegroundWindow
GetDlgItem
LoadCursorA
SetForegroundWindow
ShowWindow
GetMessageA
IsWindow
IsDialogMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
UnhookWindowsHookEx
SetWindowsHookExA
LoadAcceleratorsA
FindWindowA
PostMessageA
SetCursor
RegisterClassA
GetActiveWindow

gdi32

GetStockObject
SelectClipRgn
RectVisible
SetBkColor
IntersectClipRect
GetTextExtentPointA
Rectangle
MoveToEx
SetMapMode
GetMapMode
RealizePalette
SelectPalette
CreateHalftonePalette
GetTextMetricsA
EndDoc
GetObjectA
SetTextJustification
SetViewportExtEx
SetWindowExtEx
StartPage
StartDocA
GetDIBits
Ellipse
StretchBlt
GetClipBox
UnrealizeObject
StretchDIBits
SetStretchBltMode
RestoreDC
SaveDC
CreateBrushIndirect
LineTo
SetBkMode
TextOutA
GetTextExtentPoint32A
DeleteObject
CreatePen
CreateFontIndirectA
SetTextColor
PatBlt
CreateCompatibleBitmap
BitBlt
CreateDIBSection
DeleteDC
CreateCompatibleDC
EndPage
SelectObject
CreateSolidBrush
GetDeviceCaps
DPtoLP
CreateFontA

comdlg32

GetSaveFileNameA
PrintDlgA
GetOpenFileNameA

advapi32

RegConnectRegistryA
RegSetValueExA
RegDeleteValueA
RegQueryValueExA
RegEnumValueA
RegOpenKeyExA
RegCreateKeyExA
GetUserNameA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
InitiateSystemShutdownA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
DeleteService
RegCloseKey

shell32

FindExecutableA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
SHGetSpecialFolderLocation

ole32

CoReleaseMarshalData
StringFromCLSID
CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
OleUninitialize
OleInitialize
CoGetClassObject
CoUnmarshalInterface
OleSetContainedObject
CoInitialize
CoTaskMemAlloc
CoMarshalInterface

mpr

WNetAddConnection3A

wininet

HttpOpenRequestA
InternetConnectA
InternetGetConnectedState
InternetOpenA
InternetAttemptConnect
HttpQueryInfoA
InternetCloseHandle
HttpSendRequestA

oleaut32

DispGetParam
SafeArrayCreate
SafeArrayPutElement
SafeArrayDestroy
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysStringLen
SysAllocStringByteLen
SysFreeString
VariantClear
SysAllocStringLen
SysAllocString
VariantInit

Sections

.text
Size: 860KB - Virtual size: 859KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 976KB - Virtual size: 975KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19025a3f9a7cefff1382f5ac5fd0da35

Headers

File Characteristics

Imports

avifil32

msvfw32

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

mpr

wininet

oleaut32

Sections

.text Size: 860KB - Virtual size: 859KB

.rdata Size: 976KB - Virtual size: 975KB

.data Size: 160KB - Virtual size: 159KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.text
Size: 860KB - Virtual size: 859KB

.rdata
Size: 976KB - Virtual size: 975KB

.data
Size: 160KB - Virtual size: 159KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB