d458d8b39d0c3880508fe75ab370363a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d458d8b39d0c3880508fe75ab370363a_JaffaCakes118
Size

711KB
MD5

d458d8b39d0c3880508fe75ab370363a
SHA1

93b4151b800ed0c74af8e38417baaa44a550e637
SHA256

179d95e51c82c23f95e4797aa77a0c4a9773238c8ea411ab40d6c382d57d6a01
SHA512

b37246bed781bd34d38b1f8912f8dca01e8b02bd40d2f7e01d95278ebc0800b2f358263279f25ccc06188f9fabfb3fa11a0039457b2c9828aa42d4284de3f6ff
SSDEEP

12288:nvd9C0cxUkWdIBHm3srvxtXJHeuLI6Ti2f2RoQpgn5JZKOXZLpvtoTEMn/khCHPy:nvd9xrdINm3+xtXJHeuLIG8oQpgnTXLh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d458d8b39d0c3880508fe75ab370363a_JaffaCakes118

Files

d458d8b39d0c3880508fe75ab370363a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

30c82fc1488780fc7e6226430b640d90

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Destroy
ImageList_DrawIndirect
PropertySheetA
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_GetImageInfo
ord17
_TrackMouseEvent

user32

SetTimer
RedrawWindow
OffsetRect
PtInRect
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
OpenClipboard
GetCursorPos
LockWindowUpdate
ClientToScreen
LoadMenuA
ModifyMenuA
GetSubMenu
GetWindow
GetClassNameA
LoadCursorA
InvalidateRect
CopyRect
KillTimer
SetCapture
GetSysColor
ReleaseCapture
IsWindow
PostThreadMessageA
RegisterClipboardFormatA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
SetRect
IsRectEmpty
LoadImageA
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
DestroyMenu
wsprintfA
SetMenuItemBitmaps
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
WinHelpA
GetCapture
CreateWindowExA
GetClassInfoExA
SetPropA
SetFocus
GetDlgItem
PostMessageA
UpdateWindow
CharNextA
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
CharUpperA
UnregisterClassA
DrawIcon
IsIconic
LoadIconA
GetSystemMetrics
BringWindowToTop
ScreenToClient
SetScrollPos
RegisterWindowMessageA
InflateRect
FrameRect
DrawEdge
GetDC
ReleaseDC
GetFocus
FindWindowA
AppendMenuA
EnableMenuItem
GetSystemMenu
ExitWindowsEx
SetClassLongA
GetClassLongA
SetActiveWindow
GetSysColorBrush
SetCursor
GetPropA
RemovePropA
IsChild
GetForegroundWindow
GetLastActivePopup
GetTopWindow
GetMessageTime
MessageBoxA
TrackPopupMenu
SetForegroundWindow
GetMenu
AdjustWindowRectEx
EqualRect
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
DefWindowProcA
CallWindowProcA
IntersectRect
GetWindowPlacement
GetWindowTextLengthA
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
EndPaint
BeginPaint
GetWindowLongA
SetWindowLongA
GetMessagePos
MapWindowPoints
SetWindowPos
EnableWindow
GetParent
GetClientRect
GetWindowRect
SendMessageA
FillRect
SystemParametersInfoA
MsgWaitForMultipleObjects
wvsprintfA
GetWindowTextA
EndDialog
GetNextDlgTabItem
IsWindowEnabled
DestroyWindow
CreateDialogIndirectParamA
GetActiveWindow
GetDesktopWindow
GetMenuItemCount
GetMenuItemID
GetMenuStringA
GetMenuState
ValidateRect
PeekMessageA
GetKeyState
IsWindowVisible
DispatchMessageA
TranslateMessage
GetMessageA
CallNextHookEx
SetWindowsHookExA
GetWindowDC
UnhookWindowsHookEx

autoupdate

_AuRunAutoUpdate@4
_AuQueryServerAsync@4
_AuInitialize@4
_AuSetup@4
_AuDownloadUpdateAsync@4
_AuAbort@4

shlwapi

PathRemoveExtensionA
PathFindExtensionA
PathFileExistsA
PathFindFileNameA
PathGetCharTypeA
PathUnquoteSpacesA
PathStripToRootA
PathIsUNCA

zlibwapi

ord2
ord26
ord84
ord83
ord82
ord81
ord80

shfolder

SHGetFolderPathA

kernel32

lstrcmpiA
CompareStringA
CompareStringW
GetEnvironmentVariableA
lstrcpynA
CreateMutexA
SetCurrentDirectoryA
GetTimeFormatA
GetDateFormatA
lstrcpyA
ReadFile
CopyFileA
FindClose
FindNextFileA
FindFirstFileA
lstrcatA
LocalFree
FormatMessageA
GetModuleHandleA
MulDiv
EnterCriticalSection
LeaveCriticalSection
SetFileAttributesA
ExpandEnvironmentStringsA
GetShortPathNameA
RemoveDirectoryA
GetFileAttributesA
GetTempPathA
WriteFile
SetFilePointer
SetLastError
GetCurrentThread
HeapFree
HeapAlloc
GetProcessHeap
DuplicateHandle
GetCurrentProcessId
VirtualFree
VirtualAlloc
FreeResource
GlobalFree
GlobalAlloc
SetThreadPriority
GetCurrentThreadId
SetEvent
CreateEventA
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
LocalAlloc
ConvertDefaultLocale
GlobalFlags
InterlockedIncrement
GlobalReAlloc
GlobalHandle
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetCPInfo
GetOEMCP
SetErrorMode
WritePrivateProfileStringA
GetCurrentDirectoryA
GetTickCount
RtlUnwind
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
VirtualQuery
ExitProcess
GetStartupInfoA
GetCommandLineA
ExitThread
CreateThread
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
LCMapStringA
LCMapStringW
GetTimeZoneInformation
SetHandleCount
GetStdHandle
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetSystemTime
MultiByteToWideChar
EnumResourceLanguagesA
GetFileSize
CreateFileA
GetFileTime
DeleteFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetModuleFileNameA
Process32First
OpenProcess
Process32Next
CreateToolhelp32Snapshot
Thread32First
GetProcAddress
LoadLibraryA
SuspendThread
ResumeThread
FreeLibrary
Thread32Next
TerminateProcess
WaitForSingleObject
GetCurrentProcess
CloseHandle
GetLastError
lstrlenA
Sleep
GlobalUnlock
InterlockedDecrement
GlobalLock
GetNumberFormatA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreateDirectoryA

gdi32

GetTextColor
GetRgnBox
CreateRectRgnIndirect
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SelectClipRgn
SetTextAlign
MoveToEx
LineTo
GetClipBox
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
DeleteDC
SetStretchBltMode
CreateRectRgn
GetTextExtentPoint32A
GetCurrentObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
BitBlt
LPtoDP
DPtoLP
GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor
SelectObject
CreateCompatibleBitmap
StretchBlt
CreateCompatibleDC
GetViewportOrgEx
SetViewportOrgEx
DeleteObject
GetObjectA
CreateFontIndirectA
CreatePen
CreateSolidBrush
GetStockObject

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCloseKey
GetTokenInformation
RegEnumValueA
RegQueryInfoKeyA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
GetUserNameA
FreeSid
EqualSid
RegQueryValueA
OpenThreadToken
RegEnumKeyExA
AllocateAndInitializeSid

shell32

ShellExecuteExA
ShellExecuteA
SHGetMalloc
SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetDesktopFolder

oledlg

ord8

ole32

CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysFreeString
OleCreateFontIndirect
SystemTimeToVariantTime
SafeArrayDestroy
SafeArrayCreate
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
DispCallFunc
VariantCopy
SysAllocStringByteLen
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
SysAllocString
VariantClear

wininet

HttpOpenRequestA
InternetConnectA
HttpSendRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
HttpQueryInfoA
HttpAddRequestHeadersA
InternetQueryDataAvailable

Sections

.text
Size: 538KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30c82fc1488780fc7e6226430b640d90

Headers

File Characteristics

Imports

comctl32

user32

autoupdate

shlwapi

zlibwapi

shfolder

kernel32

gdi32

comdlg32

winspool.drv

advapi32

shell32

oledlg

ole32

oleaut32

wininet

Sections

.text Size: 538KB - Virtual size: 537KB

.rdata Size: 117KB - Virtual size: 117KB

.data Size: 10KB - Virtual size: 25KB

.rsrc Size: 45KB - Virtual size: 44KB

.text
Size: 538KB - Virtual size: 537KB

.rdata
Size: 117KB - Virtual size: 117KB

.data
Size: 10KB - Virtual size: 25KB

.rsrc
Size: 45KB - Virtual size: 44KB