e667bbb4f35c8e3d1ed6024d7ef6ae79_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

e667bbb4f35c8e3d1ed6024d7ef6ae79_JaffaCakes118
Size

624KB
MD5

e667bbb4f35c8e3d1ed6024d7ef6ae79
SHA1

5636390a8f3d81c8671f571398ad9ea70c9f85ea
SHA256

e7803bb4144b1b6d7bc76fac97ef39572841abfae8b051914aab4f2acb3f2bed
SHA512

1104a35970589aaddc43ba297f0785b42f670c4935ca47fb59fccd0b23e744c05cce4e8909f5c7431ab572026b462ea4a3b04f5e0e910d0c481e947d3ac3007e
SSDEEP

6144:hzTCYruA1ohrPv8FG0+DVg5w83gSkdwPU0YnG3Fx+GaJ5674pIbVg73zf7ewvNwm:hzBCAnFfG83qEU0YGTcJ47Fmreu+D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e667bbb4f35c8e3d1ed6024d7ef6ae79_JaffaCakes118

Files

e667bbb4f35c8e3d1ed6024d7ef6ae79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd3d928673975de5eabf64abf0fb4590

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
SHDeleteKeyA

kernel32

FileTimeToLocalFileTime
LocalFileTimeToFileTime
SetErrorMode
GetTickCount
RtlUnwind
HeapFree
HeapAlloc
FindNextFileA
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RaiseException
GetSystemTimeAsFileTime
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitThread
CreateThread
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
GetCurrentDirectoryA
GetStdHandle
SetHandleCount
GetFileType
GetACP
Sleep
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetShortPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
DeleteFileA
MoveFileA
SystemTimeToFileTime
FileTimeToSystemTime
GetThreadLocale
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
InterlockedDecrement
GetModuleFileNameW
SuspendThread
ResumeThread
SetThreadPriority
GlobalFree
GlobalAlloc
FreeResource
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GlobalLock
GlobalUnlock
GetCurrentProcessId
GlobalGetAtomNameA
GlobalAddAtomA
lstrcpynA
SetLastError
GetModuleHandleA
FormatMessageA
LocalFree
GetCurrentThreadId
GetModuleFileNameA
MulDiv
SetEvent
WaitForSingleObject
LoadLibraryW
GetVersionExA
GetStringTypeExA
lstrlenA
lstrcmpiA
CompareStringW
CompareStringA
GetVersion
MultiByteToWideChar
InterlockedExchange
LoadLibraryA
FreeLibrary
GetProcAddress
PulseEvent
GetDriveTypeA
FindFirstChangeNotificationA
FindCloseChangeNotification
FindNextChangeNotification
SetFilePointer
ReadFile
CreateFileA
GetFileSize
CreateEventA
OpenEventA
WaitForMultipleObjects
CloseHandle
GetLastError
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource

user32

PostQuitMessage
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
GetSysColorBrush
UnregisterClassA
DestroyIcon
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
SetParent
DeleteMenu
IsRectEmpty
GetMenuItemInfoA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetMessageA
TranslateMessage
ValidateRect
WindowFromPoint
SetRect
EndPaint
BeginPaint
GetWindowDC
GetMenuStringA
AppendMenuA
InsertMenuA
MoveWindow
IsDialogMessageA
GetDlgItemTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
CheckMenuItem
SendDlgItemMessageA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
GetClassInfoExA
RegisterClassA
DeferWindowPos
GetScrollInfo
SetScrollInfo
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
UnpackDDElParam
ReuseDDElParam
DestroyMenu
GetClassNameA
WinHelpA
SetFocus
GetWindowThreadProcessId
IsWindowEnabled
EqualRect
GetDlgItem
GetKeyState
GetDlgCtrlID
LoadIconA
PeekMessageA
GetCapture
LoadAcceleratorsA
SetActiveWindow
IsWindowVisible
InsertMenuItemA
CreatePopupMenu
GetClassInfoA
IntersectRect
CopyRect
GetLastActivePopup
SetMenu
GetDesktopWindow
GetParent
SendMessageA
PtInRect
SetRectEmpty
InflateRect
OffsetRect
GetWindow
AdjustWindowRectEx
SetWindowPos
TranslateAcceleratorA
TranslateMDISysAccel
GetActiveWindow
DrawMenuBar
CreateWindowExA
GetMenuItemCount
GetMenuItemID
DefMDIChildProcA
DefFrameProcA
GetFocus
DrawEdge
FrameRect
FillRect
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
SetScrollPos
KillTimer
ScreenToClient
BringWindowToTop
LoadMenuA
GetSubMenu
IsIconic
DrawFrameControl
GetWindowRect
GetClientRect
ClientToScreen
ReleaseDC
InvalidateRect
GetDCEx
LockWindowUpdate
RedrawWindow
SetCapture
GetSystemMetrics
GetSysColor
EnableWindow
GetCursorPos
IsWindow
SetCursor
LoadCursorA
ReleaseCapture
MessageBoxA
SetWindowTextA
EnableMenuItem
GetMenu
GetSystemMenu
SetForegroundWindow
SetWindowLongA
GetWindowLongA
LoadBitmapA
UpdateWindow
SetTimer
CharUpperA
ShowWindow
LoadStringA
PostMessageA
MessageBeep
GetDC

gdi32

CreatePen
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
CreateFontA
StretchDIBits
GetTextColor
GetRgnBox
GetStockObject
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
SetViewportOrgEx
ScaleViewportExtEx
SetViewportExtEx
PatBlt
GetCharWidthA
CreateSolidBrush
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
DeleteObject
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreateRectRgn
CreateFontIndirectA
GetTextExtentPoint32A
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetCurrentObject
GetBkColor
CreateCompatibleBitmap
GetDeviceCaps
BitBlt
CreateCompatibleDC
GetObjectA
SelectObject
OffsetViewportOrgEx

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

SetFileSecurityA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueA
RegOpenKeyExW
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
GetFileSecurityA

shell32

ExtractIconA
SHGetFileInfoA
DragQueryFileA
DragFinish
DragAcceptFiles
Shell_NotifyIconA

oledlg

ord8

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromProgID

oleaut32

SysAllocString
OleCreateFontIndirect
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime

Sections

.text
Size: 356KB - Virtual size: 355KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd3d928673975de5eabf64abf0fb4590

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

oledlg

ole32

oleaut32

Sections

.text Size: 356KB - Virtual size: 355KB

.rdata Size: 100KB - Virtual size: 97KB

.data Size: 16KB - Virtual size: 27KB

.rsrc Size: 148KB - Virtual size: 145KB

.text
Size: 356KB - Virtual size: 355KB

.rdata
Size: 100KB - Virtual size: 97KB

.data
Size: 16KB - Virtual size: 27KB

.rsrc
Size: 148KB - Virtual size: 145KB