d4e3b4b62e2683019343b2660f81e241_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d4e3b4b62e2683019343b2660f81e241_JaffaCakes118
Size

396KB
MD5

d4e3b4b62e2683019343b2660f81e241
SHA1

404a0c4617991d8cffe4ea48f62e00474fffeb74
SHA256

b60dc4739bc57e624f54393667fdbaedf89aebab1a8ff05be24d64b6c73c6184
SHA512

eccf5956a59697c030a9ba36995215110de042e96b51330f23bb86f6904dc14fa19ec61ae24218c1b56303e3e38d684ed11f4c7031d7ee9b212fab15a59acc9d
SSDEEP

6144:w7TJboTAz/HCykoK7H5OaVoo2A5F8HmtILrpeoNpfkAEVP5m:ccqCzj5OaB2A5gfY+FAP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4e3b4b62e2683019343b2660f81e241_JaffaCakes118

Files

d4e3b4b62e2683019343b2660f81e241_JaffaCakes118
.exe windows:4 windows x86 arch:x86

35ad1125bd0ca0a65288ecc1d6a2b27e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
TerminateProcess
GetACP
HeapReAlloc
HeapSize
GetTimeZoneInformation
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
ExitProcess
GetFileType
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCommandLineA
GetStartupInfoA
RaiseException
HeapAlloc
RtlUnwind
SetErrorMode
FileTimeToLocalFileTime
FileTimeToSystemTime
GetOEMCP
GetFileAttributesA
GetCPInfo
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetProcessVersion
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
SetLastError
LocalFree
MulDiv
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
CloseHandle
GetModuleFileNameA
GlobalDeleteAtom
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GlobalFree
LockResource
FindResourceA
LoadResource
WideCharToMultiByte
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
GlobalReAlloc
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcpyA
lstrcmpA
GetModuleHandleA
GetProcAddress
lstrlenA
MultiByteToWideChar
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
lstrcpynA
GetStdHandle

user32

GetDCEx
InflateRect
SetRect
WindowFromPoint
KillTimer
SetTimer
DestroyIcon
GetMenuStringA
DeleteMenu
InsertMenuA
GetClassNameA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
LoadStringA
GetSysColorBrush
LoadCursorA
CharUpperA
PtInRect
GetDC
ReleaseDC
IsZoomed
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
DestroyMenu
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
FindWindowA
InvalidateRect
SetWindowTextA
IsDialogMessageA
LockWindowUpdate
LoadIconA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
ScreenToClient
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
SetCapture
SetParent
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
SetCursor
ShowOwnedPopups
PostMessageA
PostQuitMessage
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetDesktopWindow
wsprintfA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
IsWindowVisible
SendMessageA
EnableWindow
MessageBoxA
LoadStringW
ShowWindow
AdjustWindowRectEx
UnregisterClassA

gdi32

CreateRectRgnIndirect
CombineRgn
SetRectRgn
PatBlt
CreateFontIndirectA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreatePatternBrush
SetBkColor
CreateRectRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
GetStockObject
RestoreDC
SaveDC
GetDeviceCaps
CreateFontA
GetCharWidthA
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
StretchDIBits
DeleteDC
GetTextMetricsA
SelectObject
GetTextExtentPoint32A
LPtoDP
GetObjectA
CreateBitmap
GetClipBox
SetTextColor

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueExA
RegSetValueA
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
SetFileSecurityA
RegDeleteKeyA
RegOpenKeyA
RegCloseKey
RegQueryValueA
GetFileSecurityA

shell32

SHGetFileInfoA
DragQueryFileA
DragFinish
ExtractIconA

comctl32

ord17

odbc32

ord44
ord72
ord4
ord48
ord49
ord20
ord17
ord59
ord40
ord54
ord10
ord5
ord16
ord13
ord18
ord11
ord3
ord14
ord9
ord15
ord51
ord45
ord50
ord1
ord2
ord41
ord68
ord12
ord46
ord19
ord8

Sections

.text
Size: 184KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

35ad1125bd0ca0a65288ecc1d6a2b27e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

odbc32

Sections

.text Size: 184KB - Virtual size: 181KB

.rdata Size: 48KB - Virtual size: 44KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 148KB - Virtual size: 147KB

.text
Size: 184KB - Virtual size: 181KB

.rdata
Size: 48KB - Virtual size: 44KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 148KB - Virtual size: 147KB