e9cf61772927aca8ed10286d9e8051f1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e9cf61772927aca8ed10286d9e8051f1_JaffaCakes118
Size

1.1MB
MD5

e9cf61772927aca8ed10286d9e8051f1
SHA1

0e0faf8ab86c46236d37907e4263195c7e7b5492
SHA256

0d69cc038b3d8cc7e952dff7608a3f88f6ed5112018ea3f1d530cb3a0e8879de
SHA512

923ee30df5481f2aca5a7423d88c9130230c2e539084ac63f9e55f160b103eef7a7b586f4f0ad59bfc672ede76b21177f4677bd655afc19bdafa2e57e82adb20
SSDEEP

12288:dZQrMoBZ7KgtJfO9UC3j9WqiRWxl/xJLSunM2+sY5atwtJMvnbLw4TU9peoLAsbX:dAZ7KiFCxWfwl/lM/sovvqg4Me4txZb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9cf61772927aca8ed10286d9e8051f1_JaffaCakes118

Files

e9cf61772927aca8ed10286d9e8051f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

28a5882f8093db39212a4fba6d6b534e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetGetLastResponseInfoA
FtpCommandA
InternetCloseHandle
InternetOpenA
InternetFindNextFileA
FtpFindFirstFileA
FtpOpenFileA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
InternetConnectA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetSetOptionExA

msimg32

TransparentBlt

kernel32

RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapAlloc
HeapFree
CreateThread
ExitThread
TerminateProcess
SetStdHandle
GetFileType
HeapSize
HeapReAlloc
GetTimeZoneInformation
GetACP
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateEventA
CloseHandle
WaitForSingleObject
SetThreadPriority
SetEvent
GetTickCount
Sleep
ResumeThread
SuspendThread
GetModuleFileNameA
GetModuleHandleA
SetFilePointerEx
GetFileSizeEx
FreeLibrary
LoadLibraryA
GetWindowsDirectoryA
lstrcpyA
WinExec
lstrlenA
lstrcatA
MultiByteToWideChar
GetProcAddress
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetCurrentThreadId
GetVersion
LockResource
LoadResource
FindResourceA
SetLastError
MulDiv
SizeofResource
GetCurrentDirectoryA
WritePrivateProfileStringA
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GetFileTime
GlobalUnlock
GetProfileStringA
GetFileSize
GetFileAttributesA
GlobalFree
GlobalAlloc
lstrcmpA
GetCurrentThread
FindNextFileA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
EnterCriticalSection
FormatMessageA
LocalFree
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
GlobalLock
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement

user32

RegisterClipboardFormatA
PostThreadMessageA
GetSysColorBrush
GetClassNameA
WindowFromPoint
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
PostQuitMessage
GetDesktopWindow
CharUpperA
GetMessageA
GetActiveWindow
ValidateRect
GetCursorPos
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetNextDlgGroupItem
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
MessageBoxA
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
SetWindowsHookExA
CallNextHookEx
GetClassLongA
UnhookWindowsHookEx
CallWindowProcA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
SetRect
CopyAcceleratorTableA
CharNextA
LoadStringA
ClientToScreen
DestroyMenu
GetTopWindow
GetWindow
IsWindowVisible
RemovePropA
GetPropA
SetPropA
GetWindowLongA
MsgWaitForMultipleObjects
PeekMessageA
DispatchMessageA
TranslateMessage
LoadImageA
FrameRect
FillRect
IsRectEmpty
LoadCursorA
CopyIcon
InflateRect
GetSysColor
SetCursor
GetMessagePos
ScreenToClient
PtInRect
GetParent
MessageBeep
SetWindowLongA
ReleaseCapture
GetDC
ReleaseDC
LockWindowUpdate
SetTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetWindowRect
IsWindow
KillTimer
LoadIconA
wsprintfA
PostMessageA
EnableWindow
LoadBitmapA
InvalidateRect
CopyRect
SendMessageA
UnregisterClassA

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
SetMapMode
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
PatBlt
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
SetBkMode
RestoreDC
SaveDC
DeleteDC
SetBkColor
SetTextColor
GetClipBox
DeleteObject
GetTextExtentPoint32A
CreateFontIndirectA
GetStockObject
GetObjectA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetTextExtentPointA
CreateDIBitmap
BitBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
Shell_NotifyIconA
SHGetSpecialFolderPathA

comctl32

_TrackMouseEvent
ord17

oledlg

ord8

ole32

CoInitialize
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoCreateInstance
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
CoUninitialize
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysStringLen
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

wsock32

WSAGetLastError
WSAStartup
WSACleanup
gethostbyname
inet_addr

Sections

.text
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 672KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

llkuwdm
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

iqjhulo
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

28a5882f8093db39212a4fba6d6b534e

Headers

File Characteristics

Imports

wininet

msimg32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

Sections

.text Size: 180KB - Virtual size: 180KB

.rdata Size: 48KB - Virtual size: 45KB

.data Size: 12KB - Virtual size: 27KB

.rsrc Size: 672KB - Virtual size: 672KB

llkuwdm Size: 108KB - Virtual size: 108KB

iqjhulo Size: 68KB - Virtual size: 68KB

.text
Size: 180KB - Virtual size: 180KB

.rdata
Size: 48KB - Virtual size: 45KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 672KB - Virtual size: 672KB

llkuwdm
Size: 108KB - Virtual size: 108KB

iqjhulo
Size: 68KB - Virtual size: 68KB