c18250da5e806856adf10fee24794f1d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c18250da5e806856adf10fee24794f1d_JaffaCakes118
Size

939KB
MD5

c18250da5e806856adf10fee24794f1d
SHA1

ba39de025b1fc6dc719b1d205c23f1e9b0cfe0a6
SHA256

17865c17481eb1ebefac867230f7951d9057d4da4d8d766bff193ec1df6b5fe4
SHA512

f9298a20750ee7e0cb7dcbcb60d391d30dbd3719cf0fd98b03273bf57e9dc712f2c2d895a6c76caa69b61d784e788f83f5e12d0cbf03d248b17aa5b91419b9ae
SSDEEP

12288:AcKdCM8RaVleuauJkT8XRgYPLS7Q9TIzY7In9q1SZjCp8drW/0GjCLcznaJFwkuZ:lKdv8R8Pa31lJVYjpyW/zCY+JFxfRSTf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c18250da5e806856adf10fee24794f1d_JaffaCakes118

Files

c18250da5e806856adf10fee24794f1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bf1f8ae75e05316165aae1a971759b4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceExW
FlushInstructionCache
SetEvent
CreateEventW
CreateThread
lstrcmpiA
lstrcmpA
CreateFileW
InterlockedDecrement
OutputDebugStringW
DebugBreak
lstrlenA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InterlockedIncrement
GetStartupInfoW
GetModuleHandleW
ReadFile
SetFileTime
SetFilePointer
SetEndOfFile
CreateWaitableTimerW
SetWaitableTimer
HeapDestroy
CancelWaitableTimer
IsBadReadPtr
IsBadWritePtr
TlsSetValue
GetPrivateProfileIntW
FreeResource
FindResourceW
SizeofResource
LoadResource
LockResource
MoveFileW
MultiByteToWideChar
WaitForMultipleObjects
LocalAlloc
FindFirstFileW
FindNextFileW
FindClose
RemoveDirectoryW
GlobalAlloc
GlobalFree
OpenProcess
TerminateProcess
MoveFileExW
InterlockedExchange
RaiseException
GetTickCount
GetTempPathW
GetFileAttributesW
SetFileAttributesW
GetPrivateProfileStringW
GetLocalTime
WritePrivateProfileStringW
CreateDirectoryW
DeleteFileW
GetModuleFileNameW
WriteFile
CopyFileW
InitializeCriticalSection
GetCurrentThreadId
CreateMutexW
GetLastError
WaitForSingleObject
DeviceIoControl
GetCurrentProcess
lstrlenW
GetVersionExW
GetTempFileNameW
GetSystemTime
SystemTimeToFileTime
LoadLibraryA
WideCharToMultiByte
GetProcAddress
Sleep
CreateProcessW
CloseHandle
ResetEvent
FreeLibrary

user32

SetCapture
GetCapture
IsWindowEnabled
FillRect
DrawEdge
GetSystemMetrics
InflateRect
DrawFocusRect
OffsetRect
CreateDialogParamW
UpdateWindow
ReleaseCapture
GetSysColor
EndPaint
BeginPaint
DrawTextW
SetFocus
GetFocus
KillTimer
SetTimer
GetSystemMenu
EnableMenuItem
RedrawWindow
LoadStringW
GetWindow
SystemParametersInfoW
InvalidateRect
GetWindowTextW
GetDlgCtrlID
GetWindowRect
PtInRect
MapWindowPoints
GetParent
GetClientRect
GetMenu
AdjustWindowRectEx
IsWindow
GetDlgItem
SetWindowPos
IsDialogMessageW
CreateWindowExW
CallWindowProcW
GetWindowLongW
SetWindowLongW
GetClassInfoExW
SetCursor
SendMessageTimeoutW
LoadCursorW
ClientToScreen
GetWindowTextLengthW
LoadImageW
wsprintfW
RegisterClassExW
SendMessageW
PostQuitMessage
CharNextW
wvsprintfW
DestroyWindow
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
IsIconic
BringWindowToTop
MessageBoxW
DefWindowProcW
ShowWindow
GetWindowDC
ReleaseDC
CharLowerW
PostMessageW
FindWindowW
GetDesktopWindow
SetWindowTextW
SetForegroundWindow

gdi32

GetBitmapBits
CreateDIBPatternBrushPt
CreateFontW
CreateCompatibleDC
DeleteDC
GetCurrentObject
CreateSolidBrush
SelectObject
SetTextColor
DeleteObject
CreateFontIndirectW
GetObjectW
SetBkMode
GetStockObject
CreateDIBSection

advapi32

RegOpenKeyExW
RegEnumKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderPathW

ole32

CoCreateInstance
CoTaskMemFree
CreateStreamOnHGlobal
CoInitialize
CoUninitialize

oleaut32

SysAllocStringLen
SysAllocString
SysFreeString

comctl32

ImageList_Create
ImageList_Add
ImageList_SetImageCount
_TrackMouseEvent
ImageList_Draw
ImageList_GetIconSize
InitCommonControlsEx

msimg32

AlphaBlend

shlwapi

StrStrIW
PathFileExistsW
PathAppendW
PathGetDriveNumberW
PathIsDirectoryW
SHGetValueW
SHSetValueW
SHDeleteValueW
SHGetValueA
PathIsDirectoryEmptyW
SHDeleteKeyW
PathRemoveFileSpecW
PathMatchSpecW

msvcrt

strcpy
_snprintf
memcmp
_controlfp
__set_app_type
__p__fmode
_strlwr
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
sprintf
strcat
wcslen
_wcsicmp
memset
memcpy
strlen
_wtoi
wcschr
isprint
isspace
tolower
wcsstr
wcscmp
wcsncpy
??2@YAPAXI@Z
_snwprintf
realloc
memmove
free
iswdigit
_vsnwprintf
strncpy
malloc
__CxxFrameHandler
_vsnprintf
_except_handler3
strncat
_purecall
fclose
fwrite
_wfopen
wcsrchr
_ftol
wcscat
_wcsnicmp
swscanf
wcscpy
_beginthreadex
_wtol
_ui64tow
time
wcsncat
_wtoi64

netapi32

Netbios

wininet

GetUrlCacheEntryInfoW
InternetCrackUrlW
InternetSetOptionW
InternetQueryOptionW
FtpCommandW
InternetGetLastResponseInfoW
InternetWriteFile
FtpOpenFileW
HttpEndRequestW
CreateUrlCacheEntryW
InternetReadFileExA
InternetSetStatusCallbackW
InternetSetOptionA
InternetConnectW
HttpSendRequestExW
HttpOpenRequestW
FtpGetFileSize
HttpQueryInfoW
InternetCloseHandle
CommitUrlCacheEntryW
InternetOpenW
InternetReadFile

psapi

EnumProcessModules
EnumProcesses
GetModuleBaseNameW
GetModuleFileNameExW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

urlmon

ObtainUserAgentString

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bf1f8ae75e05316165aae1a971759b4d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

msimg32

shlwapi

msvcrt

netapi32

wininet

psapi

version

urlmon

Sections

.text Size: 88KB - Virtual size: 87KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 24KB - Virtual size: 38KB

.rsrc Size: 3.3MB - Virtual size: 3.3MB

.text
Size: 88KB - Virtual size: 87KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 24KB - Virtual size: 38KB

.rsrc
Size: 3.3MB - Virtual size: 3.3MB