d750e46439bb50aa3de8ba1516f820aa_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d750e46439bb50aa3de8ba1516f820aa_JaffaCakes118
Size

1.2MB
MD5

d750e46439bb50aa3de8ba1516f820aa
SHA1

85528de0e812a09d18f64259ba4a526726ad482f
SHA256

f26696d8aa9c250d37c571cfa60013808c49bb91680df6490f62c0acda4350b9
SHA512

087c88a550b26b15f3232672940c389ec60f5b64aaaccbc874ad14eac9ddfcc410299bb7c8394203939354f0d7e4e46a9c48d7acd6a01e827566fd7bcec5fde5
SSDEEP

12288:Xm1CB8MolZpsvxHaDc8DbW8vvJE/LNGsb0Ypx9RsggJJAywGToGt6g8MUDeOUIoc:W8BasvpeTf/vJE/LNGNgtn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d750e46439bb50aa3de8ba1516f820aa_JaffaCakes118

Files

d750e46439bb50aa3de8ba1516f820aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0505ff6a3684176aa11ef1b1c2b4e5e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

ws2_32

send
gethostbyname
listen
WSAAsyncSelect
bind
htons
socket
closesocket
inet_addr
recvfrom
getpeername
recv
accept
connect
getsockname
ntohs
WSAGetLastError
inet_ntoa
gethostname

kernel32

GlobalHandle
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SetErrorMode
SizeofResource
GetCurrentDirectoryA
RtlUnwind
TlsAlloc
TlsFree
ExitProcess
RaiseException
HeapAlloc
HeapFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
CreateThread
ExitThread
TerminateProcess
HeapSize
HeapReAlloc
SetStdHandle
GetStartupInfoA
GetCommandLineA
GetTempFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
FindNextFileA
GetDiskFreeSpaceA
GetCurrentThread
lstrcmpA
LocalFileTimeToFileTime
SetFileTime
SystemTimeToFileTime
GetFileAttributesA
GetFileTime
GetFileSize
SetThreadPriority
CreateEventA
SuspendThread
FileTimeToLocalFileTime
ResumeThread
SetEvent
GetThreadLocale
FileTimeToSystemTime
GetShortPathNameA
FindFirstFileA
GetStringTypeExA
GetFullPathNameA
SetEndOfFile
FindClose
MoveFileA
FlushFileBuffers
UnlockFile
LockFile
ReadFile
SetFilePointer
WriteFile
MultiByteToWideChar
GetCurrentProcess
DuplicateHandle
InterlockedIncrement
WideCharToMultiByte
InterlockedDecrement
LocalAlloc
FormatMessageA
LocalFree
WaitForSingleObject
lstrcpynA
lstrlenA
LoadLibraryA
MulDiv
SetLastError
LoadResource
FreeLibrary
FindResourceA
GetFileType
lstrcatA
LockResource
GetProfileStringA
GetVersion
lstrcmpiA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
GetProcAddress
lstrcpyA
GetModuleHandleA
SetFileAttributesA
GetVolumeInformationA
SetVolumeLabelA
GlobalUnlock
GlobalAlloc
GlobalLock
CloseHandle
GlobalFree
CreateFileA
GetWindowsDirectoryA
GetDiskFreeSpaceExA
GetDriveTypeA
ReleaseMutex
CreateMutexA
GetLastError
CreateDirectoryA
TerminateThread
GetExitCodeThread
UnhandledExceptionFilter
DeleteFileA
GetModuleFileNameA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
Sleep

user32

GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
ReleaseDC
DrawTextA
GrayStringA
IsDialogMessageA
SetWindowTextA
ShowWindow
IsWindowEnabled
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
GetDesktopWindow
CharUpperA
CreateDialogIndirectParamA
GetActiveWindow
EndDialog
ValidateRect
TranslateMessage
GetMessageA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
DestroyMenu
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
PtInRect
IsZoomed
InflateRect
RedrawWindow
SetCapture
SetCursorPos
DestroyCursor
SetParent
IsRectEmpty
AppendMenuA
DeleteMenu
GetSystemMenu
WindowFromPoint
SetRect
FindWindowA
FillRect
PostQuitMessage
ShowOwnedPopups
MapDialogRect
GetClassNameA
GetSysColorBrush
LoadStringA
InvertRect
GetDCEx
LockWindowUpdate
InsertMenuA
GetMenuStringA
SetActiveWindow
ClientToScreen
GetDC
SetScrollInfo
ShowScrollBar
DispatchMessageA
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemCount
SendDlgItemMessageA
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetWindow
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetParent
IsClipboardFormatAvailable
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
MessageBoxA
GetWindowLongA
SetWindowLongA
LoadImageA
DestroyIcon
RegisterClipboardFormatA
UpdateWindow
GetAsyncKeyState
SetCursor
IsIconic
LoadIconA
GetForegroundWindow
SetForegroundWindow
LoadMenuA
SetMenuDefaultItem
GetCursorPos
MessageBeep
CopyRect
UnregisterHotKey
LoadBitmapA
GetMenu
GetSubMenu
CheckMenuRadioItem
RegisterHotKey
LoadCursorA
KillTimer
SetTimer
PostMessageA
SendMessageA
EnableWindow
MapWindowPoints
GetSysColor
PeekMessageA
GetScrollInfo
GetScrollRange
IsWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
IsWindowVisible
EndDeferWindowPos
ScrollWindow
GetMenuItemID
UnhookWindowsHookEx
SetPropA
GetFocus
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowUnicode

gdi32

GetTextExtentPointA
GetClipBox
CreateSolidBrush
SetBkColor
GetObjectA
SetTextColor
SaveDC
DeleteDC
SelectObject
GetStockObject
RestoreDC
SetBkMode
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SelectClipRgn
SetWindowExtEx
IntersectClipRect
ExcludeClipRect
SetTextAlign
CreateDIBitmap
DeleteObject
CreateRectRgn
GetDeviceCaps
CreatePatternBrush
RectVisible
TextOutA
PtVisible
Escape
CreateBitmap
ExtTextOutA
CreateRectRgnIndirect
StretchDIBits
PatBlt
CreateCompatibleBitmap
GetCharWidthA
CreateCompatibleDC
GetTextExtentPoint32A
GetTextMetricsA
CreateFontA
LPtoDP
CombineRgn
CreateFontIndirectA
SetRectRgn
BitBlt

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

SetFileSecurityA
RegDeleteValueA
GetFileSecurityA
RegSetValueA
RegCreateKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA

shell32

DragQueryFileA
DragFinish
ExtractIconA
ShellExecuteA
Shell_NotifyIconA
SHFileOperationA
SHGetFileInfoA

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Destroy
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_ReplaceIcon
ord17

wsock32

WSACleanup
WSAStartup

wininet

InternetReadFile
InternetQueryDataAvailable
InternetSetStatusCallback
HttpQueryInfoA
InternetOpenA
FtpSetCurrentDirectoryA
InternetOpenUrlA
InternetGetLastResponseInfoA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetConnectA
InternetCloseHandle
FtpOpenFileA
FtpCreateDirectoryA
InternetSetFilePointer
InternetWriteFile

Sections

.text
Size: 432KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sec
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0505ff6a3684176aa11ef1b1c2b4e5e3

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

wsock32

wininet

Sections

.text Size: 432KB - Virtual size: 432KB

.rdata Size: 84KB - Virtual size: 84KB

.data Size: 240KB - Virtual size: 240KB

.rsrc Size: 404KB - Virtual size: 404KB

.sec Size: 80KB - Virtual size: 80KB

.text
Size: 432KB - Virtual size: 432KB

.rdata
Size: 84KB - Virtual size: 84KB

.data
Size: 240KB - Virtual size: 240KB

.rsrc
Size: 404KB - Virtual size: 404KB

.sec
Size: 80KB - Virtual size: 80KB