dac96a0b7f57c11e86c3189af70d60ef_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

dac96a0b7f57c11e86c3189af70d60ef_JaffaCakes118
Size

392KB
MD5

dac96a0b7f57c11e86c3189af70d60ef
SHA1

366d6b22768dc6a38f50758e2c3c9f62a7f46042
SHA256

70900b5777ea48f4c635f78b597605e9bdbbee469b3052f1bd0088a1d18f85d3
SHA512

36af342b4c1e847f3beb2490fbebea819ac432e35e30ebe7387b1dd992a9049e2082adfc1329505dcb76d45c64db6afa40aa89bd0261f7e27aeab91abcaeab5a
SSDEEP

6144:LPKVDs/Oy3gWZ2c3gU6HC7Ck0Low+VaYdKt6QXI+JtKIPT8qNnpK4x:mVDsWy3z2cwU6HUCFLW3d/+DHb8qNpjx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dac96a0b7f57c11e86c3189af70d60ef_JaffaCakes118

Files

dac96a0b7f57c11e86c3189af70d60ef_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8c3a6abf52dba35c50533e49a51ca3b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
HeapReAlloc
IsDebuggerPresent
HeapSize
AreFileApisANSI
ExitProcess
WriteFile
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineA
RtlUnwind
WriteConsoleW
GetModuleHandleExW
GetModuleFileNameW
LoadLibraryExW
ExitThread
CreateThread
VirtualQuery
VirtualProtect
EncodePointer
GetConsoleMode
VirtualFree
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
InterlockedCompareExchange
GetProcessHeap
HeapFree
HeapAlloc
OutputDebugStringW
LoadLibraryW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
ReadConsoleW
SetFilePointer
CompareStringW
LCMapStringW
Process32Next
Process32First
CreateToolhelp32Snapshot
GetDateFormatA
GetTimeFormatA
WideCharToMultiByte
MultiByteToWideChar
IsDBCSLeadByte
GetVersionExA
GetPriorityClass
GetVolumeInformationA
FindFirstFileA
CreateFileA
GetDiskFreeSpaceA
GetExitCodeProcess
CreateProcessA
GetFileAttributesExW
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetCurrentDirectoryA
GetProfileStringA
FindResourceW
FindResourceA
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
LoadLibraryExA
LoadLibraryA
OpenFile
lstrlenA
lstrcatA
lstrcpyA
lstrcmpiA
lstrcmpA
CreatePipe
FileTimeToSystemTime
SetStdHandle
SetEnvironmentVariableA
CreateFileW
SetEndOfFile
SystemTimeToFileTime
SetFilePointerEx
SystemTimeToTzSpecificLocalTime
GetSystemTimes
GetSystemInfo
GetSystemTime
MulDiv
SetHandleInformation
CloseHandle
GetFileTime
FindClose
ReadFile
GetStdHandle
GetFileSize
GetFileType
SizeofResource
LoadResource
Sleep
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetLastError
GetCurrentThreadId
RaiseException
GetCurrentProcessId
GetCurrentProcess
OpenProcess
GetProcessTimes
VirtualAlloc
FlushInstructionCache
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetProcAddress
FreeLibrary
LockResource
InterlockedDecrement
InterlockedIncrement
DecodePointer
RtlCaptureContext

user32

UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
GetClassNameA
FindWindowExW
FindWindowExA
FindWindowA
GetParent
SetWindowLongA
GetWindowLongA
PtInRect
OffsetRect
InflateRect
SetRectEmpty
SetRect
FrameRect
FillRect
GetSysColorBrush
GetSysColor
WindowFromPoint
CallNextHookEx
ScreenToClient
ClientToScreen
GetCursorPos
MessageBeep
LoadBitmapA
LoadCursorA
LoadImageA
CopyImage
LoadStringA
MessageBoxA
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextW
SetWindowTextA
InvalidateRect
LoadStringW
SystemParametersInfoA
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
CheckMenuRadioItem
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
UpdateWindow
DrawTextA
DrawIcon
SetMenuDefaultItem
SetMenuItemInfoA
GetMenuItemInfoA
TrackPopupMenuEx
DeleteMenu
RemoveMenu
ModifyMenuA
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
EnumDisplayMonitors
EnableMenuItem
DestroyMenu
CreatePopupMenu
GetMenuStringA
SetMenu
GetMenu
LoadMenuA
GetSystemMetrics
TranslateAcceleratorA
LoadAcceleratorsA
IsWindowEnabled
EnableWindow
KillTimer
SetTimer
OemKeyScan
GetKeyState
GetFocus
GetActiveWindow
SetFocus
CharNextA
CharLowerA
IsClipboardFormatAvailable
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
GetDialogBaseUnits
SendDlgItemMessageA
SetDlgItemTextA
SetDlgItemInt
GetDlgItem
EndDialog
DialogBoxParamA
IsWindowVisible
SetWindowPos
MoveWindow
ShowWindow
DestroyWindow
IsMenu
IsWindow
CreateWindowExA
GetClassInfoExA
RegisterClassExA
CallWindowProcA
PostQuitMessage
DefWindowProcA
PostMessageA
SendMessageA
GetMessagePos
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
DrawFrameControl
DrawEdge
RegisterWindowMessageA
EnumWindowStationsW
wsprintfA
GetWindowThreadProcessId
UnregisterClassA

gdi32

EndDoc
StartPage
EndPage
DeleteDC
GetObjectA
OffsetWindowOrgEx
SetBrushOrgEx
CreateDIBSection
PlayEnhMetaFile
CreateSolidBrush
GetEnhMetaFileHeader
DeleteEnhMetaFile
CreateEnhMetaFileA
DeleteObject
FillRgn
GetCurrentObject
GetDeviceCaps
GetStockObject
PatBlt
Rectangle
RestoreDC
ResetDCA
SaveDC
SelectClipRgn
CloseEnhMetaFile
SetTextColor
StretchBlt
SetBkMode
BitBlt
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateFontIndirectA
CreatePen
CreatePatternBrush
CreateRectRgnIndirect
StartDocA
AbortDoc
SetBkColor
SelectObject

winspool.drv

GetPrinterA
ClosePrinter
OpenPrinterA

comdlg32

PageSetupDlgA
PrintDlgA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA

advapi32

RegOpenKeyExA
LsaQueryInformationPolicy
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyW
RegCloseKey
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA

shell32

SHGetDesktopFolder
SHGetSpecialFolderLocation
SHCreateShellItem
Shell_NotifyIconA

ole32

WriteClassStg
StgCreateDocfile
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance

oleaut32

VarUI4FromStr

odbc32

ord75

shlwapi

PathUnquoteSpacesA

comctl32

ord6
ord8
ImageList_LoadImageA
ImageList_DrawIndirect
ImageList_AddMasked
ImageList_Draw
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControlsEx
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA

ws2_32

htons
socket
gethostbyname
WSAGetLastError

netapi32

NetWkstaGetInfo

avifil32

AVIStreamWrite

dbghelp

SymGetSearchPath
SymGetSymFromAddr
SymInitialize

wsnmp32

ord602
ord600

urlmon

RevokeFormatEnumerator

Sections

.text
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c3a6abf52dba35c50533e49a51ca3b2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

odbc32

shlwapi

comctl32

ws2_32

netapi32

avifil32

dbghelp

wsnmp32

urlmon

Sections

.text Size: 199KB - Virtual size: 198KB

.rdata Size: 56KB - Virtual size: 56KB

.data Size: 9KB - Virtual size: 17KB

.rsrc Size: 126KB - Virtual size: 126KB

.text
Size: 199KB - Virtual size: 198KB

.rdata
Size: 56KB - Virtual size: 56KB

.data
Size: 9KB - Virtual size: 17KB

.rsrc
Size: 126KB - Virtual size: 126KB