dd96bad77aff830a8692a4a5f9d19869_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

dd96bad77aff830a8692a4a5f9d19869_JaffaCakes118
Size

266KB
MD5

dd96bad77aff830a8692a4a5f9d19869
SHA1

02d9ad6c05dec4a95aa8495edb2f3af012080c57
SHA256

3f772bf8c62e654c0df39d5b8285ff0746e85d81966f426a1192c55222614048
SHA512

e7cb7e5bede3859da1dea86cc307fc10a01a0b81fa5d55f61107410880b42b82308a0f97b3004363411c7255b8f24c2f0e15119f5a9ca72153c4348f2f66146d
SSDEEP

6144:Zu1jS+dG5DlwSsjF4yzMFYczBB77uOpaTz3ilTqt:UeBiCyzJcz3HpaT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd96bad77aff830a8692a4a5f9d19869_JaffaCakes118

Files

dd96bad77aff830a8692a4a5f9d19869_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7dd76736fa3a40e3b13b461a4e5cd1e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

shell32

ShellExecuteW
SHGetFolderPathW

advapi32

RegCreateKeyExW
RegSetValueExW
RegQueryValueW
RegQueryValueExW
RegOpenKeyW
OpenTraceW
RegCloseKey
RegEnumKeyW
RegOpenKeyExW

wininet

InternetGetLastResponseInfoW
HttpOpenRequestW
HttpSendRequestW
InternetCloseHandle
InternetOpenW
InternetReadFile
GetUrlCacheEntryInfoExW

winspool.drv

DocumentPropertiesW
EnumPrinterDataW
OpenPrinterW
ClosePrinter

user32

SetMenuItemBitmaps
SetForegroundWindow
SetFocus
SetCursor
SetCapture
SetActiveWindow
SendMessageW
SendDlgItemMessageW
SendDlgItemMessageA
RemovePropW
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageW
OffsetRect
ModifyMenuW
MessageBoxW
MessageBeep
MapWindowPoints
MapDialogRect
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
GrayStringW
GetWindowThreadProcessId
SetRect
GetWindowTextLengthW
GetWindowRect
GetWindowDC
GetWindow
GetTopWindow
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetSubMenu
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetActiveWindow
EqualRect
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawTextExW
DispatchMessageW
DestroyWindow
DestroyMenu
SetWindowContextHelpId
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoA
TabbedTextOutW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
WinHelpW
GetWindowTextW
DefWindowProcW
CreateWindowExW
CopyRect
CopyAcceleratorTableW
ClientToScreen
CharUpperW
CharNextW
CallNextHookEx
BeginPaint
AdjustWindowRectEx

shlwapi

PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathFindExtensionW

kernel32

lstrlenW
lstrcmpW
lstrcmpA
WritePrivateProfileStringW
WriteFile
WriteConsoleW
WriteConsoleA
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
UnlockFile
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TerminateProcess
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetStdHandle
SetLastError
SetFilePointer
SetFileAttributesW
SetErrorMode
SetEnvironmentVariableA
RtlUnwind
ReadFile
RaiseException
QueryPerformanceCounter
MulDiv
LockResource
LockFile
LocalReAlloc
LocalFree
LoadResource
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsDebuggerPresent
IsDBCSLeadByteEx
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
HeapReAlloc
HeapFree
HeapAlloc
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalFree
GlobalFlags
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVolumeInformationW
GetVersion
GetTimeZoneInformation
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemInfo
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileSize
GetFileAttributesW
GetEnvironmentStringsW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetCommandLineA
GetCPInfo
GetBinaryTypeW
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushFileBuffers
FindResourceW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitProcess
EnumSystemLocalesA
DuplicateHandle
DeleteCriticalSection
CreateFileW
CreateFileA
CloseHandle
CompareStringW
ConvertDefaultLocale
CreateDirectoryW

oleaut32

VariantCopy
SafeArrayDestroy
SysAllocString
SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
VarR8Pow
VariantTimeToSystemTime
VariantInit
OleCreateFontIndirect
VariantClear
VariantChangeType

comdlg32

GetFileTitleW
ChooseFontW

gdi32

TextOutW
StartPage
SetViewportOrgEx
SetViewportExtEx
SetTextColor
SetMapMode
SetBkColor
SelectObject
OffsetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
GetTextColor
GetStockObject
GetMapMode
GetDeviceCaps
GetClipBox
ExtTextOutW
ExtSelectClipRgn
Escape
DeleteObject
CreateSolidBrush
CreateRectRgnIndirect
CreateFontIndirectW
CreateCompatibleDC
CreateBitmap

oledlg

OleUIBusyW

ole32

StgCreateDocfileOnILockBytes
CLSIDFromProgID
CLSIDFromString
CoDisconnectObject
CoFreeUnusedLibraries
CoGetClassObject
CoInitializeEx
CoRegisterChannelHook
CoRegisterMessageFilter
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
OleInitialize
OleIsCurrentClipboard
OleUninitialize

Exports

Exports

DllCanUnloadNow
DllGetClassObject
Tok33enizerInit
Tok33enizerTerminate
Tok33tnizerTokenize

Sections

.text
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f7dd76736fa3a40e3b13b461a4e5cd1e

Headers

File Characteristics

Imports

comctl32

shell32

advapi32

wininet

winspool.drv

user32

shlwapi

kernel32

oleaut32

comdlg32

gdi32

oledlg

ole32

Exports

Exports

Sections

.text Size: 58KB - Virtual size: 60KB

.rdata Size: 136KB - Virtual size: 140KB

.data Size: 41KB - Virtual size: 156KB

.idata Size: 8KB - Virtual size: 11KB

.rsrc Size: 21KB - Virtual size: 23KB

.text
Size: 58KB - Virtual size: 60KB

.rdata
Size: 136KB - Virtual size: 140KB

.data
Size: 41KB - Virtual size: 156KB

.idata
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 21KB - Virtual size: 23KB