c80ed69bf106d4e516e088b6fb9ebc4e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c80ed69bf106d4e516e088b6fb9ebc4e_JaffaCakes118
Size

4.8MB
MD5

c80ed69bf106d4e516e088b6fb9ebc4e
SHA1

9caa595d4d4abecb36abdc86aaaab792fd59939f
SHA256

4ed9f4afb0df13247c4882f6472d0a4971453f21ca574230a36d9c82ecf80411
SHA512

0396150825c283dc4347854be816f99e6116723f2d5a065c0db4029090445bc145e86a7d1264a1da7fd1edd0d8d9ed75bcf05efa58729faf35dbe697c9849af3
SSDEEP

98304:qYESjvEqDrgwNJrldQ+kuk73yFhaXyV2sCCXPcYLVNPZyf9GA3k4QV:Pj8jwDRnkX8cYNA3ktV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c80ed69bf106d4e516e088b6fb9ebc4e_JaffaCakes118

Files

c80ed69bf106d4e516e088b6fb9ebc4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

934543d446cf80015b5041258a567c79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17
CreateToolbarEx

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

GetLastError
GetUserDefaultLangID
SetLastError
LeaveCriticalSection
EnterCriticalSection
lstrlenW
CreateFileA
InitializeCriticalSection
WideCharToMultiByte
MultiByteToWideChar
lstrcpynA
LocalAlloc
SetEndOfFile
ReadFile
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
SetFilePointer
Sleep
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
TerminateProcess
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
TlsAlloc
GetCurrentThreadId
HeapReAlloc
VirtualAlloc
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
GetCommandLineA
GetStartupInfoA
InterlockedIncrement
InterlockedDecrement
ExitThread
TlsSetValue
CreateThread
ResumeThread
RtlUnwind
OpenProcess
ReadProcessMemory
CloseHandle
GetModuleHandleA
GetProcessHeap
HeapAlloc
lstrcpyA
lstrlenA
HeapFree
lstrcatA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GetTickCount
GetVersion
GetCurrentProcess
GetSystemTime
SystemTimeToFileTime
LoadLibraryA
GetProcAddress
FreeLibrary
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTimeFormatA
FormatMessageA
LocalFree
WriteFile

user32

OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetFocus
DrawTextA
LoadCursorA
InvalidateRect
GetDlgItemTextA
EnableWindow
IsWindowEnabled
SetDlgItemTextA
GetSysColorBrush
ChildWindowFromPoint
GetSysColor
ClientToScreen
GetDlgItem
MoveWindow
GetWindowRect
GetParent
SetCursor
CallWindowProcA
GetClientRect
DrawIconEx
SetWindowLongA
SetWindowTextA
DestroyIcon
IsZoomed
DialogBoxIndirectParamA
InflateRect
ScreenToClient
CheckDlgButton
IsDlgButtonChecked
CheckRadioButton
RegisterWindowMessageA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
IsDialogMessageA
TranslateMessage
DispatchMessageA
CreateWindowExA
UpdateWindow
LoadIconA
RegisterClassA
SetCapture
DialogBoxParamA
ReleaseCapture
SetTimer
SetFocus
GetMenu
CheckMenuItem
GetCursorPos
LoadMenuA
GetSubMenu
TrackPopupMenu
DestroyMenu
EnableMenuItem
LoadStringA
GetDC
GetSystemMetrics
ReleaseDC
WinHelpA
SetWindowPos
PostMessageA
ShowWindow
InvalidateRgn
KillTimer
DefWindowProcA
SendMessageA
DestroyWindow
MessageBoxA
PostQuitMessage
EndDialog
IsIconic

gdi32

EndDoc
EndPage
ExtTextOutA
StartDocA
SetMapMode
GetDeviceCaps
GetTextExtentPoint32A
SetBkColor
SelectObject
SetTextColor
SetBkMode
CreateFontIndirectA
GetObjectA
GetStockObject
DeleteObject
CreateCompatibleDC
GetTextMetricsA
StartPage
CreateSolidBrush

comdlg32

GetSaveFileNameA
FindTextA
ChooseColorA
ChooseFontA
PrintDlgA

advapi32

LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
LookupAccountSidW
RegOpenKeyA
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
GetTokenInformation
LookupAccountSidA
AdjustTokenPrivileges

shell32

SHGetFileInfoA
Shell_NotifyIconA
ShellExecuteA

ole32

CoCreateInstance
CoInitialize
CoSetProxyBlanket

oleaut32

SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VariantChangeType
SafeArrayGetElement
VariantInit
VariantClear
SysAllocString
SysFreeString
SafeArrayGetLBound

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text0
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

934543d446cf80015b5041258a567c79

Headers

File Characteristics

Imports

comctl32

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 76KB - Virtual size: 72KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 112KB - Virtual size: 134KB

.rsrc Size: 12KB - Virtual size: 11KB

.text0 Size: 5.1MB - Virtual size: 5.1MB

.text
Size: 76KB - Virtual size: 72KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 112KB - Virtual size: 134KB

.rsrc
Size: 12KB - Virtual size: 11KB

.text0
Size: 5.1MB - Virtual size: 5.1MB