e8df4f444def00328deba49c2ae2b892_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

e8df4f444def00328deba49c2ae2b892_JaffaCakes118
Size

564KB
MD5

e8df4f444def00328deba49c2ae2b892
SHA1

2641a726d7f5f5449a03196e64b5bb57c9946c9c
SHA256

7838c9662cbb26d06099f980a2e9ecec906bce913c28b24a28eec3cfa2f2e39c
SHA512

617e7a5280975cbe4dc8ecfce342fc909233e900228391b6d2bec2dcc8ad4a81fb4be307a5790f244ef0797f402f85314549a21ad2313af637b0f347cfa9d0f4
SSDEEP

6144:GpNop9zzvccdbw/Fi1xum4AlIwvJv4l9b8LhwNpHb0HvZrCbEhJddxanelsU+BV2:Gfopdrc8xknwvJv4lZtZ4ZlhJtKXBemU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8df4f444def00328deba49c2ae2b892_JaffaCakes118

Files

e8df4f444def00328deba49c2ae2b892_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b07466b671a57620acf9207c01245289

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
lstrcpyA
VirtualQuery
VirtualUnlock
VirtualAlloc
CreateEventA
WaitForSingleObject
LoadLibraryA
SetConsoleTitleA
GetProcessHeap
HeapAlloc
HeapFree
EnumDateFormatsA
GetCommandLineW
lstrlenA
CompareStringW
CompareStringA
GetVersion
FindResourceA
LoadResource
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
Sleep
GetFileType
SetHandleCount
IsValidCodePage
GetACP
GetStdHandle
HeapCreate
HeapDestroy
VirtualFree
HeapSize
ExitProcess
GetStartupInfoA
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
GetSystemTimeAsFileTime
GetSystemInfo
VirtualProtect
HeapReAlloc
RtlUnwind
GetTickCount
GetFileTime
GetFileAttributesA
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
FileTimeToLocalFileTime
SetErrorMode
CreateFileA
SetLastError
MulDiv
LocalFree
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
GetProcAddress
GetModuleFileNameW
InterlockedDecrement
FreeLibrary
GetVersionExA
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
FreeResource
GetModuleFileNameA
GetCurrentProcessId
lstrcmpA
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
CloseHandle
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
GlobalFlags
GetCPInfo
GetOEMCP
GetThreadLocale
FileTimeToSystemTime
WritePrivateProfileStringA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA

user32

GetMenuState
UnhookWindowsHookEx
ClientToScreen
ReleaseDC
GetWindowDC
CopyRect
GetWindowPlacement
IntersectRect
SetWindowPos
SetWindowLongA
CallWindowProcA
GetDlgCtrlID
PtInRect
EqualRect
AdjustWindowRectEx
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
PostMessageA
GetMenu
IsWindowVisible
SetForegroundWindow
GetKeyState
MapWindowPoints
PeekMessageA
GetMessagePos
GetMessageTime
DestroyWindow
GetTopWindow
DispatchMessageA
SetActiveWindow
GetLastActivePopup
GetForegroundWindow
GetWindowTextLengthA
SetFocus
IsWindow
GetFocus
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetCapture
IsChild
WinHelpA
RegisterWindowMessageA
EndDialog
GetNextDlgTabItem
IsWindowEnabled
CreateDialogIndirectParamA
GetActiveWindow
GetDesktopWindow
CheckMenuItem
ModifyMenuA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
IsDialogMessageA
SetWindowTextA
ShowWindow
GetWindowThreadProcessId
PostQuitMessage
ValidateRect
TranslateMessage
GetMessageA
MapDialogRect
SetWindowContextHelpId
UnregisterClassA
SetCapture
ReleaseCapture
CharNextA
CopyAcceleratorTableA
IsRectEmpty
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
GetMenuItemID
GetMenuItemCount
DrawIcon
AppendMenuA
SendMessageA
GetSystemMenu
IsIconic
GetClientRect
InvalidateRect
LoadIconA
EnableWindow
GetSystemMetrics
CharUpperA
SendDlgItemMessageA
GetDC
LoadCursorA
SetCursor
ScrollDC
GetWindowTextA
UpdateWindow
BeginPaint
EndPaint
CreatePopupMenu
CreateMenu
SetMenu
LoadMenuA
GetSubMenu
RemoveMenu
DestroyMenu
GetDlgItem
TrackPopupMenu
MessageBoxA
GetCursorPos
IsDlgButtonChecked
CheckMenuRadioItem
SystemParametersInfoA
GetWindowLongA
GetSysColorBrush
EnableMenuItem
UnionRect
LoadStringA
wsprintfA
GetSysColor
DefWindowProcA
GetWindow
GetWindowRect
GetParent
MoveWindow
KillTimer
SetTimer
LoadBitmapA
OffsetRect
SetRect
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA

gdi32

CreateFontA
SetBkMode
SetTextColor
GetDeviceCaps
StartPage
StretchBlt
CreateDIBSection
GetClipBox
RestoreDC
SaveDC
DeleteObject
GetRgnBox
GetTextColor
GetBkColor
GetMapMode
CreateBitmap
ExtSelectClipRgn
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA
SelectObject
GetPixel
SetBkColor
CreateSolidBrush
CreateRectRgnIndirect
DeleteMetaFile
CloseMetaFile
LineTo
MoveToEx
CreateFontIndirectA
SetWindowOrgEx
SetWindowExtEx
SetMapMode
CreateMetaFileA
GetStockObject
DeleteDC

shell32

CommandLineToArgvW
Shell_NotifyIconA
SHGetSpecialFolderLocation
SHParseDisplayName
SHEmptyRecycleBinA
SHQueryRecycleBinA

ole32

CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal
CoRevokeClassObject
OleInitialize

msimg32

GradientFill

comctl32

ord17
InitCommonControlsEx

shlwapi

PathStripToRootA
PathFindExtensionA
PathFindFileNameA
PathIsUNCA

oledlg

ord8

gdiplus

GdipCreateMatrix
GdipCreateFromHDC
GdipDeleteGraphics
GdipDeleteMatrix
GdipSetSmoothingMode
GdipTranslateMatrix
GdipSetTextRenderingHint
GdipAlloc
GdipDeleteBrush
GdipSetLinePresetBlend
GdipCreatePath
GdiplusStartup
GdiplusShutdown
GdipFillEllipse
GdipResetWorldTransform
GdipTransformPath
GdipAddPathPolygon
GdipAddPathEllipse
GdipAddPathRectangle
GdipGetPathLastPoint
GdipCreateLineBrushFromRect
GdipCreateSolidFill
GdipRotateMatrix
GdipScaleMatrix
GdipSetPathGradientBlend
GdipClonePath
GdipCloneBrush
GdipFillPath
GdipCreatePathGradientFromPath
GdipAddPathPath
GdipAddPathEllipseI
GdipAddPathRectangleI
GdipAddPathArcI
GdipClosePathFigure
GdipResetPath
GdipFree
GdipCreateLineBrushFromRectI
GdipSetWorldTransform
GdipSetPathGradientFocusScales
GdipSetPathGradientLinearBlend
GdipDeletePath
GdipSetPathGradientCenterColor
GdipGetPathGradientPointCount
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientCenterPointI

ws2_32

WSAStartup

avifil32

AVIMakeCompressedStream

avicap32

capGetDriverDescriptionA

winmm

timeBeginPeriod

activeds

ord9

traffic

TcEnumerateFlows
TcModifyFlow

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysAllocStringByteLen
SysFreeString
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear

Sections

.text
Size: 304KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b07466b671a57620acf9207c01245289

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

msimg32

comctl32

shlwapi

oledlg

gdiplus

ws2_32

avifil32

avicap32

winmm

activeds

traffic

winspool.drv

comdlg32

advapi32

oleaut32

Sections

.text Size: 304KB - Virtual size: 300KB

.rdata Size: 84KB - Virtual size: 82KB

.data Size: 16KB - Virtual size: 29KB

.rsrc Size: 156KB - Virtual size: 155KB

.text
Size: 304KB - Virtual size: 300KB

.rdata
Size: 84KB - Virtual size: 82KB

.data
Size: 16KB - Virtual size: 29KB

.rsrc
Size: 156KB - Virtual size: 155KB