d641200615f3bc1f2b909e31c0ca25e5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d641200615f3bc1f2b909e31c0ca25e5_JaffaCakes118
Size

2.4MB
MD5

d641200615f3bc1f2b909e31c0ca25e5
SHA1

d12e9cbc8d2886f8273992878eff55e0c04dbd4a
SHA256

23d66bbd9fbb80797154154b5149c418c483d0b2dddf39182bfa8c4c4a4702db
SHA512

a786d5d52358edc2f562644622fad7ea0f62002511c7dafbc7439c17bae056a22a03e204f83b93cf3f76dab1d44983c704938dc9b0c7106f352986446a5b5f16
SSDEEP

49152:+VagY1TC9d7vvvTsbe3RE73Qfz2uskzc3M:Aan+d7vXTsw03e2G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d641200615f3bc1f2b909e31c0ca25e5_JaffaCakes118

Files

d641200615f3bc1f2b909e31c0ca25e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d015265d62c40bfbeb9669e96573b88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
GetSystemTime
GetLocalTime
TerminateProcess
GetACP
HeapSize
HeapReAlloc
SetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
ExitProcess
GetProfileStringA
InterlockedExchange
GetStartupInfoA
RaiseException
HeapAlloc
HeapFree
RtlUnwind
GetOEMCP
GetCPInfo
GetProcessVersion
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GlobalFlags
FileTimeToLocalFileTime
FileTimeToSystemTime
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GlobalFree
WaitForSingleObject
GlobalAlloc
GetCurrentThread
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FormatMessageA
LocalFree
LocalAlloc
EnterCriticalSection
WideCharToMultiByte
InterlockedIncrement
FreeLibrary
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpiA
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
lstrcpyA
lstrlenA
MultiByteToWideChar
LoadLibraryA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
InterlockedDecrement
GlobalLock
GlobalUnlock
MulDiv
GetModuleHandleA
GetProcAddress
SetLastError
GetDiskFreeSpaceA
SetVolumeLabelA
GetDriveTypeA
CreateDirectoryA
GetFileAttributesA
SetFileAttributesA
ResumeThread
CreateThread
FindResourceA
SizeofResource
LoadResource
LockResource
CreateMutexA
GetCommandLineA
GetVersionExA
GetModuleFileNameA
GetLastError
GetTickCount
Sleep
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetSystemInfo
GetPrivateProfileStringA
lstrcmpA
lstrcatA
GetPrivateProfileIntA
WritePrivateProfileStringA
DeleteFileA
GetFileSize
SetFilePointer
WriteFile
CreateFileA
ReadFile
CloseHandle
FindFirstFileA
FindNextFileA
FindClose
GetCurrentDirectoryA
GetEnvironmentStrings
SetCurrentDirectoryA

user32

LoadIconA
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetActiveWindow
IsWindow
AdjustWindowRectEx
IsWindowVisible
GetTopWindow
IsChild
GetParent
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
CharUpperA
wsprintfA
UnhookWindowsHookEx
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
CharToOemBuffA
OemToCharBuffA
CharLowerA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
FillRect
GetSysColor
GetCursorPos
WindowFromPoint
SetFocus
GetClassNameA
LoadStringA
PostQuitMessage
InvalidateRect
UpdateWindow
CopyRect
PostMessageA
MessageBoxA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
GetNextDlgTabItem
EnableWindow
KillTimer
RedrawWindow
GetClientRect
SendMessageA
SetTimer
SetWindowRgn
GetDesktopWindow
LoadImageA
PeekMessageA
DispatchMessageA
TranslateMessage
PostThreadMessageA
RegisterClipboardFormatA
MessageBeep
GetNextDlgGroupItem
SetRect
IsWindowEnabled
DestroyMenu
GetSysColorBrush
LoadCursorA
PtInRect
CharNextA
InflateRect
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
GetMessageA
GetActiveWindow
ValidateRect
SetCursor
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetWindowLongA
CopyAcceleratorTableA

gdi32

SetBkMode
SetStretchBltMode
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
IntersectClipRect
MoveToEx
LineTo
DeleteObject
SetBkColor
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
PatBlt
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
SelectPalette
SelectObject
RestoreDC
SaveDC
DeleteDC
Rectangle
SetPixel
CreateCompatibleBitmap
CreateFontIndirectA
GetStockObject
CreateRectRgn
RealizePalette
StretchDIBits
GetDIBits
BitBlt
CreateCompatibleDC
CreatePalette
CreateDIBitmap
GetTextExtentPointA
GetObjectA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA

shell32

ShellExecuteA
ShellExecuteExA

comctl32

ord17

oledlg

ord8

ole32

CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID

olepro32

ord253

oleaut32

VariantClear
SysAllocStringLen
SysFreeString
VariantTimeToSystemTime
VariantChangeType
SysAllocString
SysStringLen
VariantCopy
SysAllocStringByteLen

wsock32

send
ntohs
inet_ntoa
recv
gethostbyname
htons
socket
setsockopt
connect
WSAGetLastError
WSAAsyncSelect
closesocket
WSACleanup
WSAStartup
ioctlsocket

wininet

FtpFindFirstFileA
FtpOpenFileA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetConnectA

msvcrt

setvbuf
fsetpos
fgetpos
fgetc
fputc
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
free
calloc
ungetwc
fgetwc

Sections

.text
Size: 252KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2d015265d62c40bfbeb9669e96573b88

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

wininet

msvcrt

Sections

.text Size: 252KB - Virtual size: 248KB

.rdata Size: 56KB - Virtual size: 54KB

.data Size: 28KB - Virtual size: 44KB

.rsrc Size: 2.0MB - Virtual size: 2.1MB

.text
Size: 252KB - Virtual size: 248KB

.rdata
Size: 56KB - Virtual size: 54KB

.data
Size: 28KB - Virtual size: 44KB

.rsrc
Size: 2.0MB - Virtual size: 2.1MB