f09af1205a42359fd98bd4ff25daabed_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f09af1205a42359fd98bd4ff25daabed_JaffaCakes118
Size

2.3MB
MD5

f09af1205a42359fd98bd4ff25daabed
SHA1

9351c54d62e16241e8a5975bfef1ef10a5fcc56b
SHA256

5d1a363247283fca5e041b9ff8b3346f6bb2ab0b20eea6178456f37b7a581c53
SHA512

663165829cec78ec4e766c350c77f7a252680d433dd6bd8cd19a2982a1070ce2f37812b280432030f4f23cf29d14cbe3d6f0224a1ba6a7bb5194d1dd396dac5c
SSDEEP

24576:4Ab2TOWsJMXTVySATL4dSHoOnlrGNhKlzwNVfbohz+GK:4YzWsJgTkdTFrg8lzSWzg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f09af1205a42359fd98bd4ff25daabed_JaffaCakes118

Files

f09af1205a42359fd98bd4ff25daabed_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3bc596e0c89b5c3aa3b35162a0b06266

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\WorkSpace\client\reeiss3\build\Release\pdb\UpdateUI.pdb

Imports

kernel32

LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetModuleHandleW
InterlockedIncrement
GlobalFlags
GetCPInfo
GetOEMCP
RaiseException
RtlUnwind
ExitThread
CreateThread
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCommandLineA
VirtualProtect
VirtualAlloc
VirtualQuery
HeapReAlloc
ExitProcess
HeapSize
HeapCreate
GetACP
IsValidCodePage
GetFileTime
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
GetFileSizeEx
GetFileAttributesA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
GetCurrentProcessId
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
FormatMessageA
LocalFree
FreeLibrary
GetModuleFileNameW
CreateFileA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
LoadLibraryA
SetLastError
MultiByteToWideChar
GetThreadLocale
CreateMutexA
CreateToolhelp32Snapshot
Process32First
Process32Next
lstrcatA
GetTickCount
WinExec
DeleteFileA
MoveFileA
WritePrivateProfileStringA
InterlockedDecrement
GetProcessHeap
HeapAlloc
HeapFree
GetProcAddress
GetSystemInfo
GetVersionExA
GlobalLock
GlobalUnlock
GlobalFree
MulDiv
GlobalAlloc
GetPrivateProfileIntA
GetUserDefaultUILanguage
SetThreadUILanguage
SetThreadLocale
GetPrivateProfileStringA
FindResourceA
LoadResource
LockResource
SizeofResource
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSection
GetLastError
QueryPerformanceFrequency
Sleep
lstrlenA
lstrcpyA
FindFirstFileA
lstrcmpA
FindNextFileA
FindClose
GetModuleHandleA
GetModuleFileNameA
CreateDirectoryA
TerminateThread
GetSystemDirectoryA
GetStartupInfoA
CreateProcessA
WaitForSingleObject
VirtualFree
CloseHandle

user32

InvalidateRgn
IsRectEmpty
CopyAcceleratorTableA
CharNextA
ReleaseCapture
SetCapture
GetSysColorBrush
UnregisterClassA
SetWindowContextHelpId
MapDialogRect
TranslateMessage
ValidateRect
PostQuitMessage
DestroyMenu
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
IsWindowEnabled
MoveWindow
SetWindowTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
GetNextDlgGroupItem
GetFocus
SetFocus
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
GetKeyState
SetMenu
IsWindowVisible
UpdateWindow
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
IsWindow
FindWindowA
DispatchMessageA
GetMessageA
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
GetWindowLongA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
PostThreadMessageA
RegisterClipboardFormatA
GetWindow
EndPaint
BeginPaint
RemovePropA
MessageBeep
SetTimer
SendMessageA
GetClientRect
MapWindowPoints
InvalidateRect
GetParent
EnableWindow
PostMessageA
GetWindowRect
SetForegroundWindow
LoadCursorA
SetCursor
GetCursorPos
LoadBitmapA
LoadIconA
GetSysColor
ReleaseDC
GetDC
CopyRect
SetRect
ShowWindow
GetSubMenu
IsIconic
GetSystemMetrics
CharUpperA
UnhookWindowsHookEx
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetMenuState
GetMenuItemID
GetMenuItemCount
IsDialogMessageA

gdi32

CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
CreateBitmap
GetStockObject
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
DeleteObject
DeleteDC
SelectObject
GetObjectA
OffsetViewportOrgEx

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegDeleteKeyA
RegSetValueExA
RegQueryValueA
RegEnumKeyA
RegCloseKey
RegOpenKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA

comctl32

ord17

shlwapi

PathFileExistsA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathAppendA

oledlg

ord8

ole32

CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CLSIDFromProgID
CoRevokeClassObject
CoTaskMemFree
CoUninitialize
CoInitialize
CoTaskMemAlloc
CoFreeUnusedLibraries
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
OleInitialize
CLSIDFromString

oleaut32

SysStringLen
SysAllocStringByteLen
VariantCopy
SysAllocStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
VariantInit
VariantChangeType
VariantClear
SysFreeString
SysAllocString

urlmon

URLDownloadToFileA

wininet

InternetQueryDataAvailable
InternetReadFile
InternetOpenA
InternetSetOptionA
InternetSetStatusCallback
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetCloseHandle
HttpAddRequestHeadersA
InternetQueryOptionA

ws2_32

getpeername
inet_ntoa
inet_addr

oleacc

CreateStdAccessibleObject
LresultFromObject

Sections

.text
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3bc596e0c89b5c3aa3b35162a0b06266

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

wininet

ws2_32

oleacc

Sections

.text Size: 257KB - Virtual size: 257KB

.rdata Size: 69KB - Virtual size: 69KB

.data Size: 12KB - Virtual size: 44KB

.rsrc Size: 2.0MB - Virtual size: 2.0MB

.text
Size: 257KB - Virtual size: 257KB

.rdata
Size: 69KB - Virtual size: 69KB

.data
Size: 12KB - Virtual size: 44KB

.rsrc
Size: 2.0MB - Virtual size: 2.0MB