eb812d5d49ae5cc154503335349608e5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

eb812d5d49ae5cc154503335349608e5_JaffaCakes118
Size

265KB
MD5

eb812d5d49ae5cc154503335349608e5
SHA1

a34e5acfbce69a21a7e11de7d73d978a3e628eb5
SHA256

55028d7412928417f06b3ac4bd099bda6b499f003ee3bf7f8ed52654f039bf7f
SHA512

ae863800c370aaa8b9a85008c603223d89aac72448fb10d0a044ee3175b07011f1c9c5b63ba6052c3d1ce12636e21829aad0bf099dd40be2507bf613c0b1c271
SSDEEP

6144:L+Ud3frQWcQjmQnf6CPc/OY8fmT3DvPoWxLHOyYEkhDkF+HX4zr:L+UXDakfRPk/Hvw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb812d5d49ae5cc154503335349608e5_JaffaCakes118

Files

eb812d5d49ae5cc154503335349608e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9fe823480a9b9f73d77388cf3482c7a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetFileTitleW
ChooseFontW

oleaut32

OleCreateFontIndirect
SysAllocString
SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
VarR8Pow
VariantChangeType
VariantClear
VariantCopy
VariantInit
VariantTimeToSystemTime
SafeArrayDestroy

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW
EnumPrinterDataW

ole32

CoTaskMemFree
CoUninitialize
CoRegisterMessageFilter
CoRegisterChannelHook
CoInitializeEx
CoGetClassObject
CoFreeUnusedLibraries
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleIsCurrentClipboard
OleUninitialize
StgCreateDocfileOnILockBytes
CoTaskMemAlloc

gdi32

TextOutW
StartPage
SetViewportOrgEx
SetViewportExtEx
SetTextColor
SetMapMode
SetBkColor
SelectObject
OffsetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
GetTextColor
GetStockObject
GetMapMode
GetDeviceCaps
GetClipBox
ExtTextOutW
ExtSelectClipRgn
Escape
DeleteObject
CreateSolidBrush
CreateRectRgnIndirect
CreateFontIndirectW
CreateCompatibleDC
CreateBitmap

oledlg

OleUIBusyW

comctl32

InitCommonControlsEx
ImageList_SetFilter

wininet

RunOnceUrlCache
InternetReadFile
InternetGetLastResponseInfoW
InternetCloseHandle
HttpSendRequestW
HttpOpenRequestW
GetUrlCacheEntryInfoExW

advapi32

RegQueryValueW
RegQueryValueExW
RegOpenKeyW
RegOpenKeyExW
RegEnumKeyW
RegCreateKeyExW
RegCloseKey
OpenTraceW
ConvertSecurityDescriptorToAccessA

user32

MessageBeep
MessageBoxW
ModifyMenuW
OffsetRect
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PtInRect
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemovePropW
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCapture
SetCursor
SetFocus
SetForegroundWindow
SetMenuItemBitmaps
SetRect
SetWindowContextHelpId
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoA
TabbedTextOutW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
WinHelpW
MapWindowPoints
MapDialogRect
LoadImageW
GetWindowDC
GetWindow
GetTopWindow
LoadIconW
GetSysColor
GetSubMenu
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetActiveWindow
EqualRect
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawTextExW
DispatchMessageW
DestroyWindow
DestroyMenu
DefWindowProcW
CreateWindowExW
CopyRect
CopyAcceleratorTableW
ClientToScreen
CharUpperW
CharNextW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
LoadCursorW
LoadBitmapW
IsWindowVisible
IsWindow
IsWindowEnabled
IsRectEmpty
IsIconic
IsDialogMessageW
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
GrayStringW
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetSysColorBrush
GetWindowRect
GetSystemMetrics

shell32

ShellExecuteW
SHGetFolderPathW

kernel32

SetStdHandle
SetLastError
SetFilePointer
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualFree
VirtualProtect
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringW
lstrcmpA
lstrcmpW
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
SetFileAttributesW
SetErrorMode
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
SetEnvironmentVariableA
RtlUnwind
ReadFile
RaiseException
QueryPerformanceCounter
MulDiv
LockResource
LockFile
IsDBCSLeadByteEx
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryW
LoadResource
lstrcpynA
lstrlenW
GlobalFlags
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVolumeInformationW
GetVersion
GetTimeZoneInformation
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemInfo
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetOEMCP
GetModuleHandleA
GetModuleFileNameW
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileSize
GetFileAttributesW
GetEnvironmentStringsW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetCommandLineA
GetCPInfo
GetBinaryTypeW
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushFileBuffers
FindResourceW
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitProcess
EnumSystemLocalesA
DuplicateHandle
DeleteCriticalSection
LocalReAlloc
CreateFileW
CreateDirectoryW
ConvertDefaultLocale

Sections

.text
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 145KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9fe823480a9b9f73d77388cf3482c7a4

Headers

File Characteristics

Imports

comdlg32

oleaut32

shlwapi

winspool.drv

ole32

gdi32

oledlg

comctl32

wininet

advapi32

user32

shell32

kernel32

Sections

.text Size: 56KB - Virtual size: 60KB

.rdata Size: 145KB - Virtual size: 148KB

.data Size: 33KB - Virtual size: 148KB

.idata Size: 8KB - Virtual size: 7KB

.rsrc Size: 21KB - Virtual size: 23KB

.text
Size: 56KB - Virtual size: 60KB

.rdata
Size: 145KB - Virtual size: 148KB

.data
Size: 33KB - Virtual size: 148KB

.idata
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 21KB - Virtual size: 23KB