d387c4efd09b5d16b9bee6a949f50b2d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d387c4efd09b5d16b9bee6a949f50b2d_JaffaCakes118
Size

612KB
MD5

d387c4efd09b5d16b9bee6a949f50b2d
SHA1

d07bb82f283f6cd6530cd285bc84452328410e08
SHA256

15e52e92d47c94640312553fef61bef6ce09dd0347b811ba877612e2db49dbb4
SHA512

8cb2be3eb739478be13dba1387277b1c04d3450e496b0bd356ff0f6a488aef7f8e74e1313fbf4cc93bb06e7eb0c342d39ffafc5584b3d9afd60ec1de6a99a584
SSDEEP

6144:hpMLnUOubHZiyvKH/L3ix1SjExv1z9aJ3H2FHJ4F3HK8plGoi:hpbsixRv1JaBW7OPpY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d387c4efd09b5d16b9bee6a949f50b2d_JaffaCakes118

Files

d387c4efd09b5d16b9bee6a949f50b2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7b833860aee200155199263fc86c275b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

joyGetPosEx

kernel32

GetFileAttributesA
GetFileTime
WritePrivateProfileStringA
HeapAlloc
HeapFree
RtlUnwind
GetSystemTimeAsFileTime
HeapReAlloc
GetTimeFormatA
GetDateFormatA
GetStartupInfoA
RaiseException
ExitProcess
TerminateProcess
SetStdHandle
GetFileType
SetErrorMode
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetTimeZoneInformation
LCMapStringA
LCMapStringW
VirtualQuery
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoW
SetEnvironmentVariableA
GetOEMCP
GetCPInfo
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GlobalFlags
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
InterlockedDecrement
VirtualProtect
GetModuleFileNameA
CreateFileA
GetFullPathNameA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
lstrcpyA
MulDiv
GlobalAlloc
FormatMessageA
lstrcpynA
LocalFree
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetWindowsDirectoryA
ExpandEnvironmentStringsA
CloseHandle
OpenProcess
GetModuleHandleA
OutputDebugStringA
Sleep
GetSystemInfo
SetThreadPriority
GetCurrentThread
GetTickCount
GetLogicalDriveStringsA
GetDriveTypeA
GetDiskFreeSpaceA
GetVolumeInformationA
GetTempPathA
GlobalMemoryStatus
CreateMutexA
GetUserDefaultLangID
GetCommandLineA
FreeLibrary
LoadLibraryA
GetProcAddress
GetProfileIntA
SearchPathA
GetCurrentDirectoryA
GetSystemDirectoryA
SetCurrentDirectoryA
CreateProcessA
GetLastError
FindResourceA
LoadResource
LockResource
SizeofResource
SetLastError
lstrlenA
lstrcmpiA
CompareStringW
CompareStringA
GetVersion
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapSize

user32

DestroyMenu
LoadCursorA
GetSysColorBrush
SetTimer
KillTimer
WaitMessage
GetMessageA
GetCursorPos
ValidateRect
SetCursor
PostQuitMessage
MapDialogRect
GetAsyncKeyState
EndPaint
BeginPaint
ReleaseDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
wsprintfA
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
ShowWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
GetWindowTextLengthA
GetWindowTextA
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessagePos
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
PostMessageA
GetSysColor
AdjustWindowRectEx
ScreenToClient
GetClassInfoA
RegisterClassA
UnregisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
CopyRect
PtInRect
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
EnumDisplaySettingsA
GetDesktopWindow
GetKeyboardType
GetSystemMetrics
LoadIconA
GetClientRect
GetPropA
GetWindowRect
IsIconic
DrawIcon
MessageBoxA
SetFocus
ReleaseCapture
GetForegroundWindow
SetCapture
SetActiveWindow
TranslateMessage
DispatchMessageA
PeekMessageA
GetDC
LoadImageA
MessageBeep
SendMessageA
GetParent
EnableWindow
CharUpperA
GetMessageTime

gdi32

RectVisible
PtVisible
DeleteObject
GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
GetBitmapDimensionEx
GetDeviceCaps
GetBitmapBits
SetBitmapBits
CreateDIBitmap
SetMapMode
RestoreDC
SaveDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
TextOutA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegQueryValueExA

comctl32

ord17
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Destroy

shlwapi

PathIsUNCA
PathFindExtensionA
PathStripToRootA
PathFindFileNameA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

VariantClear
VariantChangeType
VariantInit

wsock32

socket
gethostbyname
htonl
htons
ioctlsocket
bind
WSAGetLastError
accept
closesocket
WSACleanup
WSAStartup
inet_addr
connect
sendto
WSASetLastError
recvfrom
WSAAsyncSelect
send
recv
select
ntohs

oleacc

CreateStdAccessibleObject
LresultFromObject

Sections

.text
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 236KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b833860aee200155199263fc86c275b

Headers

File Characteristics

Imports

version

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

ole32

oleaut32

wsock32

oleacc

Sections

.text Size: 240KB - Virtual size: 236KB

.rdata Size: 96KB - Virtual size: 95KB

.data Size: 36KB - Virtual size: 240KB

.rsrc Size: 236KB - Virtual size: 234KB

.text
Size: 240KB - Virtual size: 236KB

.rdata
Size: 96KB - Virtual size: 95KB

.data
Size: 36KB - Virtual size: 240KB

.rsrc
Size: 236KB - Virtual size: 234KB