dbe0d6e48f7c685ed55b752b2afdd18c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

dbe0d6e48f7c685ed55b752b2afdd18c_JaffaCakes118
Size

103KB
MD5

dbe0d6e48f7c685ed55b752b2afdd18c
SHA1

af3e19c1752be684e543edff7e008dbdd8dc5f89
SHA256

16c5b3b25a6a9e36a03e7c08d4c826f8b26aa679f8a8b5cdc7a050db0eb494f0
SHA512

0de93da7e68445a26011f92f8bf39317ecf8ac98dfe387e605a18abc782d4844445cb15625207f9ff36b4a4b59edd2018bc65af293878d784038afb745c92ec7
SSDEEP

1536:zrEkAbJGP3OQBF9PEmIGymnQBFmyst9uTNN3/x6wnhg/FcuE4MwV:zolNGPXamzt4fRnF4TV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbe0d6e48f7c685ed55b752b2afdd18c_JaffaCakes118

Files

dbe0d6e48f7c685ed55b752b2afdd18c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

24de9b6b6f3faa49c88c4b770f1b04ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
CreateFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
GetFileAttributesW
GetFileTime
GetTempFileNameW
GetDiskFreeSpaceW
SetErrorMode
GlobalFlags
InterlockedIncrement
UnlockFile
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetCommandLineA
GetProcessHeap
RtlUnwind
RaiseException
ExitProcess
HeapReAlloc
HeapSize
VirtualAlloc
Sleep
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
IsValidCodePage
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FindClose
InterlockedCompareExchange
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
DeleteFileW
MoveFileW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetProfileIntW
GetModuleHandleA
FreeResource
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
InterlockedDecrement
GetCurrentProcessId
GlobalAddAtomW
GetLastError
SetLastError
CloseHandle
GlobalFree
CopyFileW
GlobalSize
FormatMessageW
LocalFree
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryW
CompareStringA
InterlockedExchange
lstrcmpW
GlobalAlloc
FreeLibrary
GetModuleHandleW
GetProcAddress
GetVersion
GetTickCount
lstrlenW
WideCharToMultiByte
MulDiv
lstrlenA
GetOEMCP
GetACP
GlobalLock
GlobalUnlock
GetModuleFileNameW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
MultiByteToWideChar
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEnvironmentVariableA
SetEndOfFile
SizeofResource
FindResourceW
LoadResource
LockResource

user32

ShowWindow
CharUpperW
IsClipboardFormatAvailable
DestroyMenu
IsRectEmpty
EndDialog
CreateDialogIndirectParamW
GetSysColorBrush
CharLowerW
LoadStringA
UnregisterClassA
DefWindowProcW
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindow
UnhookWindowsHookEx
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
MessageBoxW
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
SetMenuItemBitmaps
MoveWindow
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetDialogBaseUnits
SetFocus
MapDialogRect
WindowFromPoint
GetNextDlgTabItem
BeginPaint
PeekMessageW
GetWindowLongW
DrawFocusRect
FrameRect
WindowFromDC
SetRect
CopyRect
SetClassLongW
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetRectEmpty
ReleaseDC
InflateRect
GetDC
LoadImageW
InvertRect
FillRect
InvalidateRgn
GetWindowRect
RegisterClipboardFormatW
LoadAcceleratorsW
GetCapture
ReleaseCapture
GetSubMenu
EmptyClipboard
CloseClipboard
GetSystemMetrics
DestroyCaret
GetCursorPos
SetCursor
SetCaretPos
CreateCaret
OpenClipboard
GetFocus
SetCapture
SetActiveWindow
KillTimer
SetTimer
ScreenToClient
ClientToScreen
PostMessageW
LoadMenuW
GetMenuItemID
GetMenuItemCount
TranslateAcceleratorW
GetSysColor
SetWindowTextW
IsDialogMessageW
GetMenuCheckMarkDimensions
EnableScrollBar
GetClassInfoW
LoadCursorW
SendMessageW
PtInRect
GetClassNameW
RegisterClassW
SetWindowLongW
GetWindowDC
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
GetParent
GetKeyState
EnableWindow
ShowCaret
HideCaret
IsWindow
GetUpdateRect
GetClientRect
ValidateRect
UpdateWindow
GetTabbedTextExtentW
InvalidateRect
UnregisterClassW
CallWindowProcW
OffsetRect
GetDlgCtrlID
EndPaint
SendDlgItemMessageA
WinHelpW
IsChild
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollPos
SetForegroundWindow
GetMenu
CreateWindowExW
GetClassInfoExW
AdjustWindowRectEx
GetScrollInfo
GetDesktopWindow
SetScrollInfo
IsIconic

gdi32

CreateRectRgn
GetObjectW
CombineRgn
InvertRgn
SetPixel
SetPixelV
GetViewportExtEx
GetWindowExtEx
GetDeviceCaps
CreateCompatibleDC
CreatePen
CreateFontIndirectW
GetTextMetricsW
GetTextExtentPoint32W
GetStockObject
CreatePatternBrush
GetBkColor
Ellipse
RoundRect
CreateICW
CreateSolidBrush
Rectangle
DPtoLP
LPtoDP
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
CreateCompatibleBitmap
GetViewportOrgEx
GetWindowOrgEx
BitBlt
CreateBitmap
CreatePalette
GetPaletteEntries
SetPaletteEntries
RealizePalette
Polygon
PatBlt
StretchDIBits
CopyMetaFileW
GetClipBox
SetTextColor
SetBkColor
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetMapMode
ExcludeClipRect
LineTo
MoveToEx
DeleteObject
SelectClipRgn
GetPixel
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
SelectPalette
CreateFontW

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext
ImmSetCompositionFontW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

comdlg32

GetFileTitleW

advapi32

RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyW
RegDeleteKeyW
RegEnumKeyW
GetFileSecurityW
SetFileSecurityW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueW

ole32

OleRun
DoDragDrop
OleSetClipboard
OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDuplicateData
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
ReleaseStgMedium
CLSIDFromString
CLSIDFromProgID
CreateStreamOnHGlobal

oleaut32

VariantInit
VariantClear
SysFreeString
SysStringLen
SysAllocString
VariantChangeType

comctl32

ord17

Sections

.text
Size: 36KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 116KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

24de9b6b6f3faa49c88c4b770f1b04ee

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shlwapi

imm32

winspool.drv

comdlg32

advapi32

ole32

oleaut32

comctl32

Sections

.text Size: 36KB - Virtual size: 68KB

.rdata Size: 4KB - Virtual size: 4KB

.bss Size: - Virtual size: 116KB

.idata Size: 10KB - Virtual size: 10KB

.rsrc Size: 47KB - Virtual size: 47KB

.reloc Size: 4KB - Virtual size: 240B

.text
Size: 36KB - Virtual size: 68KB

.rdata
Size: 4KB - Virtual size: 4KB

.bss
Size: - Virtual size: 116KB

.idata
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 47KB - Virtual size: 47KB

.reloc
Size: 4KB - Virtual size: 240B