bfc522c7d5a38741e90e5a246aa7a7c0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bfc522c7d5a38741e90e5a246aa7a7c0_JaffaCakes118
Size

668KB
MD5

bfc522c7d5a38741e90e5a246aa7a7c0
SHA1

12c238a7a110c79c1bd878322a31b740315396e2
SHA256

8962f7ca0e8d92dc98e6a84f88b603d39dfd13f9ccaee03d3a2c53307be04f9d
SHA512

5d271ac3b0a9e64aa9d1ae73d20c44bf7a361fa1843579e17a829fe218117d61328e1eb433181df0d16a4dc85467441bd5f6c9ec11ee7e4b28a48bbc7dc88af6
SSDEEP

12288:JbQ3fAAGKU5iwLMPIwloStOzd2hjcY+2mt:5ndipPIVzd2xA2m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfc522c7d5a38741e90e5a246aa7a7c0_JaffaCakes118

Files

bfc522c7d5a38741e90e5a246aa7a7c0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

70e4a247106309ee244dc5af629a3f5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

user32

GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
wvsprintfW
UpdateWindow
UnregisterClassW
TranslateMessage
TrackPopupMenu
TrackMouseEvent
SystemParametersInfoW
ShowWindow
ShowCursor
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowLongW
SetTimer
SetRectEmpty
SetPropW
SetParent
SetMenuItemInfoW
SetMenuInfo
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClassLongW
SetCapture
SetActiveWindow
SendMessageW
ScreenToClient
RemovePropW
ReleaseDC
ReleaseCapture
RegisterClassW
PtInRect
PostMessageW
OpenClipboard
OffsetRect
MoveWindow
MessageBoxW
MessageBeep
MapWindowPoints
LoadImageW
LoadIconW
LoadCursorW
KillTimer
IsWindowVisible
IsWindowEnabled
IsWindow
IsIconic
InvalidateRect
IntersectRect
InsertMenuItemW
InflateRect
GetWindowThreadProcessId
GetWindowTextLengthW
GetWindowTextW
GetWindowRect
GetWindowLongW
GetWindowDC
GetSystemMenu
GetPropW
GetParent
GetWindow
GetMessageTime
GetMessageW
GetMenuItemInfoW
GetMenuItemCount
GetMenuInfo
GetKeyState
GetForegroundWindow
GetDesktopWindow
GetDC
GetCursorPos
GetClipboardData
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetActiveWindow
FindWindowW
FillRect
ExitWindowsEx
EnumWindows
EndPaint
EnableWindow
DrawTextW
DrawIconEx
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
CreatePopupMenu
CopyRect
CloseClipboard
ChangeDisplaySettingsExW
CallWindowProcW
BeginPaint
AppendMenuW
AdjustWindowRectEx

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
lstrcmpiW
lstrcmpW
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
UnmapViewOfFile
Sleep
SizeofResource
SetEvent
ReleaseMutex
ReadFile
OutputDebugStringW
OpenProcess
MultiByteToWideChar
MulDiv
MapViewOfFile
LockResource
LoadResource
LoadLibraryW
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetWindowsDirectoryW
GetVolumeInformationW
GetVersionExW
GetUserDefaultLangID
GetTickCount
GetSystemInfo
GetSystemDirectoryW
GetShortPathNameW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocalTime
GetLastError
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetCurrentProcessId
GetCurrentProcess
GetComputerNameW
InterlockedIncrement
InterlockedDecrement
FreeLibrary
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
EnumResourceNamesW
DeviceIoControl
DeleteFileW
CreateProcessW
CreateMutexW
CreateFileMappingW
CreateFileW
CreateEventW
CopyFileW
CompareStringW
CloseHandle
GetUserDefaultUILanguage

gdi32

SetTextColor
SetDCPenColor
SetBkMode
SelectObject
PatBlt
MoveToEx
LineTo
GetStockObject
GetDeviceCaps
ExcludeClipRect
DeleteObject
DeleteDC
CreateSolidBrush
CreatePolygonRgn
CreateFontIndirectW
CreateFontW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

gdiplus

GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipCreateStringFormat
GdipMeasureString
GdipDrawString
GdipGetLogFontW
GdipDeleteFont
GdipCreateFontFromLogfontW
GdipCreateFontFromDC
GdipDrawImageRectI
GdipDrawImageRect
GdipDrawImageI
GdipDrawImage
GdipFillPath
GdipFillRectangle
GdipDrawPath
GdipDrawRectangle
GdipSetInterpolationMode
GdipSetPixelOffsetMode
GdipSetSmoothingMode
GdipReleaseDC
GdipGetDC
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipLoadImageFromFileICM
GdipLoadImageFromStreamICM
GdipLoadImageFromFile
GdipLoadImageFromStream
GdipDeletePen
GdipCreatePen1
GdipCreateLineBrushFromRect
GdipSetSolidFillColor
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipAddPathPolygon
GdipAddPathRectangle
GdipAddPathLine
GdipDeletePath
GdipCreatePath
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc

ole32

CreateStreamOnHGlobal
CoCreateInstance
OleUninitialize
OleInitialize
CreateStreamOnHGlobal

wininet

InternetReadFile
InternetOpenUrlW
InternetOpenW
InternetCloseHandle
HttpQueryInfoW

comdlg32

GetSaveFileNameW

crypt32

CryptBinaryToStringW
CryptStringToBinaryA

ntdll

NtShutdownSystem
RtlAdjustPrivilege

shell32

SHGetSpecialFolderPathW
Shell_NotifyIconW
ShellExecuteExW
ShellExecuteW
ExtractIconW

comctl32

InitCommonControls
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create

Sections

.text
Size: 640KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

70e4a247106309ee244dc5af629a3f5c

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

gdiplus

ole32

wininet

comdlg32

crypt32

ntdll

shell32

comctl32

Sections

.text Size: 640KB - Virtual size: 640KB

.rsrc Size: 24KB - Virtual size: 24KB

.text
Size: 640KB - Virtual size: 640KB

.rsrc
Size: 24KB - Virtual size: 24KB