e26d4cf058faee51a5b909089cf0e4ca_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e26d4cf058faee51a5b909089cf0e4ca_JaffaCakes118
Size

1.3MB
MD5

e26d4cf058faee51a5b909089cf0e4ca
SHA1

93d7b3815838f9facc605db92273aa559ba44a0c
SHA256

48cd88b3c74c492538924e38c2efc7e9fbe7669b4984b1c0e99ff0d0adb2db46
SHA512

bca5014e679b84963d93862a358369a754633add0bf1affce5adfc1392b6624713f275cbc0e3d3c4f917860ea59c74ac23bee28435793325461507a2097496ae
SSDEEP

24576:zjPgaCaac5m/SmbeTLp9qKGTlViIODCH4uNeu2PPWiwg:Q0aD/SmbeTLelVbYuMZWY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e26d4cf058faee51a5b909089cf0e4ca_JaffaCakes118

Files

e26d4cf058faee51a5b909089cf0e4ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e040e8a153a20e7f723c6bd4f7d43a67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringA
SetErrorMode
GetTickCount
RtlUnwind
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
RaiseException
GetACP
GetTimeZoneInformation
HeapSize
HeapReAlloc
SetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
InterlockedExchange
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
EnterCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
GetFileTime
GetFileAttributesA
FindNextFileA
FindFirstFileA
GetLastError
FindClose
WaitForSingleObject
lstrcmpA
GetCurrentThread
GetThreadLocale
FormatMessageA
LocalFree
lstrcpynA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
MulDiv
SetLastError
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
CreateToolhelp32Snapshot
Process32First
Process32Next
EnumResourceLanguagesA
GetFileSize
ReadFile
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
DeleteFileA
GetTempPathA
GetModuleFileNameA
GlobalLock
GlobalUnlock
GlobalAlloc
GlobalFree
GetVolumeInformationA
Sleep
GetCurrentDirectoryA
FindResourceA
LoadResource
LockResource
CreateFileA
SizeofResource
WriteFile
CloseHandle
GetProcAddress
lstrcatA
lstrlenA
WinExec
lstrcpyA
LoadLibraryA
VirtualAlloc
FreeLibrary

user32

MapDialogRect
CharUpperA
GetDesktopWindow
GetClassNameA
GetSysColorBrush
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
IsWindowVisible
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
SetWindowContextHelpId
GetMessageTime
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
RedrawWindow
IsIconic
GetSystemMetrics
DrawIcon
GetSystemMenu
LoadBitmapA
LoadIconA
GetKeyState
MessageBoxA
LoadCursorA
GetDC
ReleaseDC
IsWindow
GetMessagePos
ScreenToClient
PtInRect
SetTimer
MessageBeep
SetWindowLongA
KillTimer
EnableWindow
FillRect
DrawStateA
GetClientRect
CopyRect
DestroyMenu
UnregisterClassA
HideCaret
TabbedTextOutA
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
FrameRect
InflateRect
GetSysColor
OffsetRect
DrawFocusRect
GetSubMenu
GetWindowRect
TrackPopupMenuEx
ClientToScreen
WindowFromPoint
GetActiveWindow
InvalidateRect
SetCursor
GetParent
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
CharNextA
EndDialog
CreateDialogIndirectParamA
DefWindowProcA
LoadStringA
GetNextDlgTabItem
SendMessageA
GetWindowLongA
DestroyCursor
DestroyIcon
GetCursorPos
GrayStringA
DrawTextA
EndPaint
BeginPaint
GetWindowDC
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
SetFocus
GetLastActivePopup
AdjustWindowRectEx

gdi32

SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
PatBlt
DPtoLP
GetTextColor
GetBkColor
LPtoDP
GetClipBox
CreatePatternBrush
GetObjectA
CreateBitmap
SetBkColor
SetTextColor
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetStockObject
CreateDIBitmap
GetTextExtentPointA
DeleteObject

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA

shell32

ShellExecuteA
ShellExecuteExA

comctl32

_TrackMouseEvent
ord17

oledlg

ord8

ole32

CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CLSIDFromProgID
OleIsCurrentClipboard
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard

olepro32

ord253

oleaut32

VariantClear
SysFreeString
SysAllocStringLen
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
VariantTimeToSystemTime
SysStringLen

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024KB - Virtual size: 1020KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e040e8a153a20e7f723c6bd4f7d43a67

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

iphlpapi

Sections

.text Size: 196KB - Virtual size: 195KB

.rdata Size: 52KB - Virtual size: 49KB

.data Size: 20KB - Virtual size: 41KB

.rsrc Size: 1024KB - Virtual size: 1020KB

.text
Size: 196KB - Virtual size: 195KB

.rdata
Size: 52KB - Virtual size: 49KB

.data
Size: 20KB - Virtual size: 41KB

.rsrc
Size: 1024KB - Virtual size: 1020KB