c79e03241b4826bc9d68b9ae1e7100da_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c79e03241b4826bc9d68b9ae1e7100da_JaffaCakes118
Size

532KB
MD5

c79e03241b4826bc9d68b9ae1e7100da
SHA1

7d3c556e37645299ab14bd9c3c86e0ce23203b02
SHA256

90104bca461772c21509348a1b2eb45f269a6f5b020463304319d0c4a82213f6
SHA512

af6104642560b2d51ce54d7d6889f92a5c128e447896065d00f43a13b74673f40635bda0f3c641c41f35715a38fd0c4289ffa6a7c70323f12e651f36dbb7a673
SSDEEP

6144:n766oEhow82Mm/ggcmOdLMojTjYPkLQ4uVGbZAzAGYIRrT+wBh+:n7F9oiimIvjYPkLQLVGmcJIRrrh+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c79e03241b4826bc9d68b9ae1e7100da_JaffaCakes118

Files

c79e03241b4826bc9d68b9ae1e7100da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d3c3e7ccb7d77dac2fad2d36b5119cda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

T:\Tools\GrdtWiz\Free\PDB\GrdtView.pdb

Imports

comctl32

ord17

kernel32

GetTimeZoneInformation
GetCPInfo
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
CreateFileA
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
DeviceIoControl
GetVersion
_lclose
_lopen
_lread
GetLastError
WideCharToMultiByte
lstrlenW
RaiseException
FreeConsole
CloseHandle
GetConsoleTitleW
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
GetStdHandle
FreeLibrary
GetProcAddress
LoadLibraryW
Sleep
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MulDiv
SizeofResource
LockResource
LoadResource
FindResourceW
LocalFree
FormatMessageW
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
SetLastError
MultiByteToWideChar
GetModuleHandleW
GetModuleFileNameW
InterlockedDecrement
lstrcmpW
LoadLibraryA
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GetCurrentThreadId
FreeResource
VirtualProtect
GetCurrentProcessId
CompareStringA
GetLocaleInfoW
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
GetTickCount
InterlockedIncrement
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
lstrlenA
FileTimeToSystemTime
GlobalFlags
GetModuleHandleA
FindResourceExW
WritePrivateProfileStringW
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
CreateFileW
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesW
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
ExitProcess
GetSystemTimeAsFileTime
HeapReAlloc
RtlUnwind
HeapSize
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent

shlwapi

StrStrIW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW

user32

ValidateRect
PostQuitMessage
GetWindowThreadProcessId
GetCursorPos
GetMessageW
SetCursor
RegisterClipboardFormatW
SetWindowContextHelpId
GetSysColorBrush
LoadCursorW
UnregisterClassW
ClientToScreen
DestroyMenu
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
GetWindowDC
BeginPaint
EndPaint
CharUpperW
PostThreadMessageW
CharNextW
CopyAcceleratorTableW
IsRectEmpty
FindWindowW
PostMessageW
MessageBoxW
SendMessageW
UnregisterDeviceNotification
GetParent
RegisterDeviceNotificationW
EnableWindow
LoadIconW
SetRect
InvalidateRect
InvalidateRgn
SetCapture
ReleaseCapture
GetNextDlgGroupItem
MessageBeep
TranslateMessage
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
UnhookWindowsHookEx
GetWindow
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
SetWindowLongW
GetWindowLongW
CallWindowProcW
DefWindowProcW
GetDlgCtrlID
UnregisterClassA
PtInRect
CopyRect
EqualRect
ScreenToClient
AdjustWindowRectEx
GetSysColor
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
GetMenu
GetClientRect
UpdateWindow
IsWindowVisible
SetForegroundWindow
GetKeyState
MapWindowPoints
PeekMessageW
GetMessagePos
GetMessageTime
DestroyWindow
GetTopWindow
GetDlgItem
DispatchMessageW
SetActiveWindow
GetLastActivePopup
GetForegroundWindow
GetWindowTextW
SetFocus
IsWindow
GetFocus
RemovePropW
GetPropW
SetPropW
GetClassNameW
GetClassLongW
CallNextHookEx
SetWindowsHookExW
GetCapture
IsChild
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
RegisterWindowMessageW
CheckMenuItem
EnableMenuItem
ModifyMenuW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetDC
ReleaseDC
EndDialog
GetNextDlgTabItem
IsWindowEnabled
CreateDialogIndirectParamW
GetActiveWindow
GetDesktopWindow
GetAsyncKeyState
ShowWindow
MapDialogRect
IsDialogMessageW
SetWindowTextW
MoveWindow

oledlg

OleUIBusyW

oleacc

CreateStdAccessibleObject
LresultFromObject

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
RegCloseKey

comdlg32

GetFileTitleW

gdi32

GetStockObject
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
PtVisible
GetMapMode
EnumFontFamiliesExW
GetBkColor
GetTextColor
GetRgnBox
GetWindowExtEx
GetDeviceCaps
GetClipBox
SetTextColor
SetBkColor
GetObjectW
CreateBitmap
CreateRectRgnIndirect
DeleteObject
ExtTextOutW
SaveDC
RestoreDC
SetMapMode
GetViewportExtEx

ole32

CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
StgOpenStorageOnILockBytes
OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries

oleaut32

VariantClear
SysFreeString
SysAllocStringLen
VariantChangeType
SysAllocString
OleCreateFontIndirect
VariantInit
SystemTimeToVariantTime
VariantTimeToSystemTime
SysStringLen
SafeArrayDestroy
VariantCopy

Sections

.text
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.decode
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3c3e7ccb7d77dac2fad2d36b5119cda

Headers

File Characteristics

PDB Paths

Imports

comctl32

kernel32

shlwapi

user32

oledlg

oleacc

winspool.drv

advapi32

comdlg32

gdi32

ole32

oleaut32

Sections

.text Size: 252KB - Virtual size: 252KB

.rdata Size: 60KB - Virtual size: 60KB

.data Size: 16KB - Virtual size: 32KB

.rsrc Size: 196KB - Virtual size: 196KB

.decode Size: 4KB - Virtual size: 4KB

.text
Size: 252KB - Virtual size: 252KB

.rdata
Size: 60KB - Virtual size: 60KB

.data
Size: 16KB - Virtual size: 32KB

.rsrc
Size: 196KB - Virtual size: 196KB

.decode
Size: 4KB - Virtual size: 4KB