e20acffa205b7a7c332592a460f10926_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e20acffa205b7a7c332592a460f10926_JaffaCakes118
Size

255KB
MD5

e20acffa205b7a7c332592a460f10926
SHA1

55b0e26704214e7a164b624de3a812d94af0e3f9
SHA256

4fa088c43d69ac23d8a57fc374e16b30ce28e9a655c5bfccc3e7ec67bfdbd010
SHA512

2703e6efa1bafe01ebf281c5c3a0498c476d1847891071fa4f8a5eb06b07ac0f6d337cbe3712a99bef0333c0d1ff1764645f4a62cc3d1fe3e7cedf4235b68afc
SSDEEP

3072:Johzxij44sqiAyHYa6b4LbJASeqXU/FimbfQozjSA2dk:JopIjrsqZvb4/JyYo7fGA2dk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e20acffa205b7a7c332592a460f10926_JaffaCakes118

Files

e20acffa205b7a7c332592a460f10926_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab34f4790818934e38c94d3fb42b2cd9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
lstrlenA
GetWindowsDirectoryA
ExpandEnvironmentStringsA
CreateDirectoryA
GetModuleFileNameA
SetCurrentDirectoryA
OpenMutexA
CreateMutexA
GetLastError
ReleaseMutex
GetVersionExA
_lread
WaitForSingleObject
_lopen
FindClose
FindFirstFileA
EnterCriticalSection
lstrcpynA
lstrcpyA
FreeLibrary
LocalAlloc
LocalFree
FormatMessageA
LoadLibraryA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
DuplicateHandle
GetCurrentProcess
CreateFileA
ReadFile
_lclose
SetFilePointer
FlushFileBuffers
CloseHandle
LockFile
UnlockFile
SetEndOfFile
GetProcAddress
MultiByteToWideChar
GetVolumeInformationA
GetFullPathNameA
lstrcmpiA
SetLastError
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
GetFileAttributesA
GetFileSize
GetFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrcatA
TlsAlloc
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetVersion
lstrcmpA
GetCurrentThreadId
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetProcessVersion
GlobalFlags
GetCPInfo
GetOEMCP
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
CreateThread
ExitThread
GetStartupInfoA
ExitProcess
RaiseException
HeapAlloc
HeapFree
SetStdHandle
GetFileType
GetACP
HeapSize
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetFileAttributesA
DeleteFileA
CopyFileA
_llseek
_lwrite
TerminateProcess
WriteFile
Sleep

user32

GetLastActivePopup
LoadStringA
SetWindowsHookExA
PeekMessageA
CallNextHookEx
GetKeyState
DispatchMessageA
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
SetWindowPos
SetWindowLongA
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
DefWindowProcA
GetDlgCtrlID
GetWindowTextA
GetDlgItem
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
IsWindowEnabled
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetSystemMetrics
CharUpperA
MessageBoxA
GetWindowLongA
GetParent
GetWindow
SendMessageA
EnableWindow
UnhookWindowsHookEx

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

shell32

ShellExecuteA
ShellExecuteExA

ws2_32

gethostbyname
socket
send
setsockopt
recv
WSAGetLastError
connect
closesocket
htons
ioctlsocket
sendto
WSAStartup
WSACleanup

winmm

timeGetTime

comctl32

ord17

wininet

InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenUrlA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
InternetGetLastResponseInfoA

gdi32

RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SaveDC
DeleteDC
DeleteObject
GetDeviceCaps
GetObjectA
SetBkColor
SetTextColor
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetClipBox
CreateBitmap
ScaleWindowExtEx
SetWindowExtEx

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comdlg32

GetFileTitleA

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab34f4790818934e38c94d3fb42b2cd9

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

winmm

comctl32

wininet

gdi32

winspool.drv

comdlg32

Sections

.text Size: 100KB - Virtual size: 96KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 8KB - Virtual size: 25KB

.rsrc Size: 4KB - Virtual size: 168B

.text
Size: 100KB - Virtual size: 96KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 8KB - Virtual size: 25KB

.rsrc
Size: 4KB - Virtual size: 168B