c0315e06c3965be1ff051edd520a5718_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c0315e06c3965be1ff051edd520a5718_JaffaCakes118
Size

420KB
MD5

c0315e06c3965be1ff051edd520a5718
SHA1

2948dd2ce381f4a1b5693e2144b1ac06a6b63719
SHA256

8a7f9183c515e07cc5092a45ee98362d602c6dc09e0fac48b9c7f527364ff188
SHA512

24a008f36a3c299dc540fbc986842029e71600a0e8f6b83c734be00cc26515ecf5086fb12b240af44c2483213da1a122a1d54e8f7c896454adbdfbad57c7011f
SSDEEP

12288:Uxu4vPa6ifIw1xHRdOa+gP70p0TK6LNAT:YigYxHRdH+2T9k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0315e06c3965be1ff051edd520a5718_JaffaCakes118

Files

c0315e06c3965be1ff051edd520a5718_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df23bc97319cee64a6c53638517ddebb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetStdHandle
GetLocaleInfoA
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
InterlockedExchange
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetTimeZoneInformation
GetOEMCP
GetACP
GetCPInfo
HeapSize
HeapReAlloc
TerminateProcess
ExitProcess
RaiseException
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageA
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetModuleFileNameA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetCurrentDirectoryA
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
SizeofResource
GetLastError
SetLastError
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
GlobalFlags
GetProcessVersion
InterlockedDecrement
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
MulDiv
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
CloseHandle
GlobalAlloc
GlobalDeleteAtom
lstrcmpiA
GetCurrentThread
lstrcmpA
GetCurrentThreadId
GlobalFree
LockResource
FindResourceA
LoadResource
lstrcatA
GlobalLock
lstrcpynA
GlobalUnlock
GlobalGetAtomNameA
GlobalAddAtomA
GetVersion
lstrcpyA
lstrlenA
GetModuleFileNameW

user32

CopyAcceleratorTableA
GetTabbedTextExtentA
RegisterClipboardFormatA
PostThreadMessageA
AppendMenuA
SetParent
IntersectRect
PtInRect
ClientToScreen
GetDC
ReleaseDC
OffsetRect
IsZoomed
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
SystemParametersInfoA
MapWindowPoints
GetSysColor
DispatchMessageA
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScreenToClient
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
RegisterClassA
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
SetWindowsHookExA
CallNextHookEx
SetPropA
UnhookWindowsHookEx
GetForegroundWindow
SetForegroundWindow
CharNextA
CallWindowProcA
RemovePropA
GetMessageTime
InsertMenuA
GetWindowRect
GetNextDlgTabItem
EndDialog
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetLastActivePopup
IsWindowVisible
IsIconic
GetFocus
EqualRect
CopyRect
GetDlgItem
InvalidateRect
GetKeyState
GetDlgCtrlID
UnpackDDElParam
ReuseDDElParam
SetActiveWindow
WinHelpA
SetMenu
LoadIconA
GetClassInfoA
LoadMenuA
DestroyMenu
SetFocus
ShowWindow
GetDesktopWindow
GetWindow
IsWindowEnabled
SetCursor
PeekMessageA
PostMessageA
GetCapture
ReleaseCapture
LoadAcceleratorsA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
LoadStringW
UpdateWindow
LockWindowUpdate
GetDCEx
SetRectEmpty
RegisterWindowMessageA
GetActiveWindow
wsprintfA
GetParent
GetMenuItemID
AdjustWindowRectEx
RedrawWindow
SetWindowPos
GetClientRect
GetWindowLongA
SetWindowLongA
IsWindow
DefMDIChildProcA
SendMessageA
GetNextDlgGroupItem
MessageBeep
DestroyIcon
CharUpperA
GetPropA
GetMenuStringA
DrawMenuBar
TranslateAcceleratorA
TranslateMDISysAccel
DefFrameProcA
CreateWindowExA
BringWindowToTop
GetMenu
GetMenuItemCount
GetSubMenu
EnableWindow
InvertRect
SetCapture
InflateRect
WindowFromPoint
KillTimer
SetTimer
FindWindowA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
LoadStringA
GetClassNameA
GetSysColorBrush
FillRect
SetRect
LoadCursorA
DestroyCursor
MapDialogRect
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
MessageBoxA
ShowOwnedPopups
PostQuitMessage
GetSystemMenu
GetMessagePos
DeleteMenu
IsRectEmpty

gdi32

DeleteObject
CreateFontIndirectA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
CreateDCA
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
LPtoDP
BitBlt
GetTextColor
GetBkColor
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetCharWidthA
GetWindowOrgEx
CreateRectRgnIndirect
GetMapMode
SetRectRgn
CombineRgn
SetAbortProc
StartDocA
StartPage
EndPage
EndDoc
AbortDoc
GetViewportOrgEx
CreatePen
DPtoLP
Rectangle
GetStockObject
PatBlt
GetDeviceCaps
CreateCompatibleBitmap
CreateCompatibleDC
StretchDIBits
DeleteDC
GetTextMetricsA
SelectObject
GetTextExtentPointA
CreateBitmap
GetObjectA
SetBkColor
CreateRectRgn
CreateDIBitmap
SetTextColor

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
CommDlgExtendedError
PrintDlgA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

GetFileSecurityA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegSetValueA
RegCreateKeyA
RegQueryValueA
SetFileSecurityA
RegDeleteValueA

shell32

SHGetFileInfoA
DragQueryFileA
DragFinish
ExtractIconA

comctl32

ord17
ImageList_Destroy

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CoGetClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

oleaut32

SysFreeString
OleCreateFontIndirect
VariantClear
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
SysAllocStringLen

Exports

Exports

utmbNyvFd

Sections

.text
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

df23bc97319cee64a6c53638517ddebb

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

Exports

Exports

Sections

.text Size: 248KB - Virtual size: 248KB

.rdata Size: 54KB - Virtual size: 54KB

.data Size: 20KB - Virtual size: 37KB

.idata Size: 11KB - Virtual size: 10KB

.rsrc Size: 85KB - Virtual size: 85KB

.text
Size: 248KB - Virtual size: 248KB

.rdata
Size: 54KB - Virtual size: 54KB

.data
Size: 20KB - Virtual size: 37KB

.idata
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 85KB - Virtual size: 85KB