e1880c02d31c7c2516de453d9a2b65c8_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

e1880c02d31c7c2516de453d9a2b65c8_JaffaCakes118
Size

540KB
MD5

e1880c02d31c7c2516de453d9a2b65c8
SHA1

446f8e6641f7506956b3911a1bd4baab5ac2b494
SHA256

d9c346f01f30a157082337c42002739eed034cfac31e5cd506c3e035030b6125
SHA512

47aca2cd91620bc4b06e03a9521480f28182dc76a9cfe4a00326cfc6a6c5f550fffbe0814cb3c7786f5ec5466e09dcc90fc310a582d83ec586a31ca2f082fa3f
SSDEEP

6144:ep3L2QXYf/A90xnOXmXDAfQ/FIN8NhwtXj3HiIWJrGlF:z4Yn5xnOXoG+FIYmHu8lF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1880c02d31c7c2516de453d9a2b65c8_JaffaCakes118

Files

e1880c02d31c7c2516de453d9a2b65c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d9ecd1bc636e5604ccbf71b0820f8293

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
HeapAlloc
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
HeapFree
CreateThread
ExitThread
TerminateProcess
HeapReAlloc
HeapSize
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
HeapDestroy
HeapCreate
VirtualFree
FatalAppExitA
VirtualAlloc
IsBadWritePtr
SetErrorMode
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
SetConsoleCtrlHandler
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
CopyFileA
GlobalSize
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetOEMCP
GetCPInfo
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
SizeofResource
GetLastError
GlobalFlags
GetProcessVersion
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetTickCount
GetModuleFileNameA
GlobalAlloc
lstrcmpA
GetCurrentThread
CreateEventA
SuspendThread
InterlockedExchange
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
CloseHandle
MulDiv
SetLastError
FormatMessageA
LocalFree
InterlockedDecrement
lstrcpynA
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
InterlockedIncrement
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
UnhandledExceptionFilter
LoadResource

user32

GetClassNameA
PtInRect
GetDesktopWindow
GetDialogBaseUnits
DestroyIcon
InsertMenuA
DeleteMenu
GetMenuStringA
SetCapture
ReleaseCapture
WaitMessage
GetWindowThreadProcessId
WindowFromPoint
PostThreadMessageA
CharUpperA
wvsprintfA
SetRectEmpty
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
TranslateMessage
ValidateRect
GetCursorPos
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
DestroyMenu
LoadStringA
OemToCharA
CharToOemA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
GetSysColorBrush
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
EndDialog
LoadCursorA
RegisterClipboardFormatA
SetCursor
ShowOwnedPopups
PostQuitMessage
DispatchMessageA
GetMessageA
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
TranslateAcceleratorA
IsIconic
SendMessageA
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
RemoveMenu
LoadIconA
LoadAcceleratorsA
EnableWindow
LoadStringW
MessageBoxA
UnregisterClassA

gdi32

GetViewportExtEx
GetWindowExtEx
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
TextOutA
ExtTextOutA
ArcTo
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
CopyMetaFileA
CreateDCA
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx
GetDeviceCaps
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
DeleteObject
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
Escape
CreateBitmap
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
GetStockObject
SelectObject
RestoreDC
SaveDC
StartDocA
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
SetArcDirection

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
RegCreateKeyA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
SetFileSecurityW
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueA
RegSetValueA
RegOpenKeyA
RegCloseKey

shell32

DragFinish
SHGetFileInfoA
ExtractIconA
DragAcceptFiles
CommandLineToArgvW
DragQueryFileA

comctl32

ord17

oledlg

ord8

ole32

WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
OleDuplicateData
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
ReleaseStgMedium
CoGetClassObject
OleRegGetUserType
CoCreateInstance
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoDisconnectObject
CoRevokeClassObject
CoRegisterClassObject
ReadFmtUserTypeStg
ReadClassStg
CoTreatAsClass
CLSIDFromProgID
CLSIDFromString
OleRun
CoRegisterMessageFilter
CreateStreamOnHGlobal

oleaut32

LoadTypeLi
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromDate
VarDateFromStr
VarBstrFromCy
VarCyFromStr
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocStringByteLen
SysStringLen
SysAllocString
SysReAllocStringLen
SysAllocStringLen
VariantChangeType
VariantClear
VariantCopy
SysStringByteLen
SysFreeString
RegisterActiveObject
RevokeActiveObject

Exports

Exports

LayvXBcOppdgzCgnncA

Sections

.text
Size: 336KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9ecd1bc636e5604ccbf71b0820f8293

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

Exports

Exports

Sections

.text Size: 336KB - Virtual size: 335KB

.rdata Size: 48KB - Virtual size: 45KB

.data Size: 96KB - Virtual size: 110KB

.idata Size: 16KB - Virtual size: 13KB

.rsrc Size: 16KB - Virtual size: 13KB

.reloc Size: 24KB - Virtual size: 21KB

.text
Size: 336KB - Virtual size: 335KB

.rdata
Size: 48KB - Virtual size: 45KB

.data
Size: 96KB - Virtual size: 110KB

.idata
Size: 16KB - Virtual size: 13KB

.rsrc
Size: 16KB - Virtual size: 13KB

.reloc
Size: 24KB - Virtual size: 21KB