f6e865d9c1f86878a305fe9165f22d92_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f6e865d9c1f86878a305fe9165f22d92_JaffaCakes118
Size

978KB
MD5

f6e865d9c1f86878a305fe9165f22d92
SHA1

2800442576bafed822d991d5aaf31cca8631471d
SHA256

ccf8c4a634d48a32c020f00958dcf62247d2bcbc9cb19f95812007617549cc63
SHA512

40da790b6bbf918040ae102124b25ca8c377fc9ff87093277658eb02c5b4b16bca10a797d0ac515fc2eac5afb4d4d599e3d7c37f2707dcf6acfc3c92f2ed2d31
SSDEEP

12288:SG1bzYBA6KomZSyw8ddycpvfrukRWpb8UDB5w9D0OkN7o8ggDZ4jmxTYLvfPuC:R56KomZhw8H7Tj0RN/gsM72C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6e865d9c1f86878a305fe9165f22d92_JaffaCakes118

Files

f6e865d9c1f86878a305fe9165f22d92_JaffaCakes118
.exe windows:4 windows x86 arch:x86

23be57a136f073d0e0b3c2f3dbfdeee7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationA
GetStringTypeExA
GetShortPathNameA
FindFirstFileA
FindClose
GetFileSize
SystemTimeToFileTime
SetErrorMode
LocalFileTimeToFileTime
RtlUnwind
GetTimeZoneInformation
GetDriveTypeA
GetLocalTime
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapAlloc
HeapFree
RaiseException
GetSystemTime
HeapSize
HeapReAlloc
UnhandledExceptionFilter
SetEndOfFile
GetACP
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
LeaveCriticalSection
GlobalReAlloc
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
DeleteFileA
SetEnvironmentVariableA
MoveFileA
FlushFileBuffers
UnlockFile
LockFile
ReadFile
SetFilePointer
WriteFile
SizeofResource
CreateFileA
DuplicateHandle
GlobalFlags
GetOEMCP
GetCPInfo
FileTimeToLocalFileTime
GetProcessVersion
GetThreadLocale
GetDiskFreeSpaceA
FileTimeToSystemTime
lstrlenW
GetFullPathNameA
GetFileTime
SetFileTime
TlsGetValue
GetFileAttributesA
lstrcpynA
EnterCriticalSection
LocalReAlloc
TlsSetValue
TlsFree
lstrcpyA
lstrcatA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetTempFileNameA
_lcreat
_lwrite
_lopen
_lread
_llseek
GetCurrentProcess
TerminateProcess
_lclose
GetTickCount
GetWindowsDirectoryA
GetSystemDirectoryA
GetTempPathA
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GlobalAlloc
GetCurrentThread
GlobalFree
GlobalLock
GlobalUnlock
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
lstrcmpA
GetCurrentThreadId
CloseHandle
InterlockedDecrement
InterlockedIncrement
FormatMessageA
LocalFree
lstrlenA
WideCharToMultiByte
RemoveDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
CreateDirectoryA
WinExec
CreateMutexA
GetLastError
ReleaseMutex
MultiByteToWideChar
CompareStringA
GetProfileStringA
WriteProfileStringA
GetPrivateProfileIntA
SetFileAttributesA
HeapCreate
VirtualFree
FreeEnvironmentStringsA
FreeEnvironmentStringsW
CompareStringW
GetModuleFileNameA

user32

WindowFromPoint
PtInRect
RegisterClipboardFormatA
InflateRect
GetSysColorBrush
GetClassNameA
KillTimer
InsertMenuA
DeleteMenu
GetMenuStringA
DestroyIcon
CharUpperA
GetDCEx
LockWindowUpdate
SetCapture
PostThreadMessageA
SetParent
TranslateAcceleratorA
LoadAcceleratorsA
IsRectEmpty
FindWindowA
GetDesktopWindow
SetRect
CopyAcceleratorTableA
MapDialogRect
SetWindowContextHelpId
MessageBeep
GetNextDlgGroupItem
SetCursor
ShowOwnedPopups
PostQuitMessage
MoveWindow
SetWindowTextA
IsDialogMessageA
EndDialog
CreateDialogIndirectParamA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetActiveWindow
IsWindow
SetFocus
UnpackDDElParam
UnionRect
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
ReleaseCapture
WinHelpA
wsprintfA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
OffsetRect
IsZoomed
SetRectEmpty
UnhookWindowsHookEx
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
LoadStringA
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
CallNextHookEx
ValidateRect
IsWindowVisible
CharNextA
DestroyMenu
ReuseDDElParam
LoadMenuA
AdjustWindowRectEx
ScreenToClient
GetCapture
PeekMessageA
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetTimer
LoadImageA
FindWindowExA
IsIconic
ShowWindow
BringWindowToTop
SetForegroundWindow
LoadIconA
LoadCursorA
CreatePopupMenu
AppendMenuA
GetCursorPos
InvalidateRect
GetKeyState
GetClientRect
SetMenu
MessageBoxA
GetSystemMetrics
EnableWindow
CreateWindowExA
UpdateWindow
GetParent
DestroyWindow
SendMessageA
GetClassInfoA
PostMessageA
HideCaret
ShowCaret
UnregisterClassA
DrawFocusRect
DefDlgProcA
ExcludeUpdateRgn
IsWindowUnicode

gdi32

DeleteObject
CreateRectRgn
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
DPtoLP
LPtoDP
GetTextColor
GetBkColor
StretchDIBits
CreateCompatibleBitmap
GetCharWidthA
CreateFontA
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
CreateFontIndirectA
CreateDIBitmap
GetTextExtentPointA
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetViewportExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
SetMapMode
SetViewportOrgEx
SetBkMode
GetStockObject
RestoreDC
DeleteDC
SaveDC
SetTextColor
GetClipBox
SetBkColor
SelectObject
CreateBitmap
BitBlt
GetObjectA
CreateCompatibleDC
GetTextMetricsA
GetTextExtentPoint32A

comdlg32

PrintDlgA
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA
CommDlgExtendedError

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueExA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
GetFileSecurityA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
RegCreateKeyA
RegSetValueA

shell32

SHGetFileInfoA
ExtractIconA
DragFinish
DragQueryFileA
ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleInitialize
CoTaskMemAlloc
OleUninitialize
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoRegisterMessageFilter
OleFlushClipboard
StgOpenStorageOnILockBytes
CoRevokeClassObject
OleIsCurrentClipboard
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes

olepro32

ord253

oleaut32

SysStringLen
SafeArrayGetLBound
VariantChangeType
SysAllocStringByteLen
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SysAllocStringLen
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantTimeToSystemTime
SysFreeString
SysAllocString
VariantInit
VariantClear

Exports

Exports

?interfaceMap@CCustomControlSite@@1UAFX_INTERFACEMAP@@B

Sections

.text
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

23be57a136f073d0e0b3c2f3dbfdeee7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Exports

Exports

Sections

.text Size: 264KB - Virtual size: 263KB

.rdata Size: 68KB - Virtual size: 65KB

.data Size: 20KB - Virtual size: 175KB

.rsrc Size: 156KB - Virtual size: 156KB

.text
Size: 264KB - Virtual size: 263KB

.rdata
Size: 68KB - Virtual size: 65KB

.data
Size: 20KB - Virtual size: 175KB

.rsrc
Size: 156KB - Virtual size: 156KB