f67365068fd8e56d1c1eb4cb7fc01f53_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f67365068fd8e56d1c1eb4cb7fc01f53_JaffaCakes118
Size

1.3MB
MD5

f67365068fd8e56d1c1eb4cb7fc01f53
SHA1

69f72f13d71d95cb1902d3a6f1f65eb42f5ebb4d
SHA256

b9ccc5812e4e5294b83be73fff04839a7f3254a55092c162141169e00a8ca1b8
SHA512

f675926ebe0ec1d4149f612f301a1d1573c3093938f198f58b6f49c071847d87b2ce2bb06c121a937981d0a3475b8aecc526c91ccf77889ba3a6701dd1253358
SSDEEP

24576:liOVZuFFHwtd8QnoUoyUlz9OLoZKXa7A:+iwjyy9tZ9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f67365068fd8e56d1c1eb4cb7fc01f53_JaffaCakes118

Files

f67365068fd8e56d1c1eb4cb7fc01f53_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef5ad5652ff052982aa57ed7192e3bdb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAAccept
WSAConnect
WSARecvFrom
getsockname
recvfrom
sendto
setsockopt
WSARecv
WSASend
select
__WSAFDIsSet
listen
WSASocketA
WSAGetLastError
htons
bind
gethostbyname
socket
WSASendTo
ntohs
shutdown
inet_ntoa
closesocket
ntohl
inet_addr
connect
send
htonl
recv

kernel32

GetThreadLocale
GetFileAttributesA
GetFileTime
SetErrorMode
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
ExitProcess
GetACP
TerminateProcess
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
DuplicateHandle
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
SizeofResource
GlobalFlags
WaitForSingleObject
GlobalAlloc
lstrcmpA
GetCurrentThread
lstrcpynA
MulDiv
SetLastError
FormatMessageA
FileTimeToLocalFileTime
WideCharToMultiByte
InterlockedIncrement
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalDeleteAtom
GetModuleHandleA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
LocalAlloc
LocalFree
HeapAlloc
HeapFree
MultiByteToWideChar
CreateEventA
SetEvent
WriteFile
GetTimeZoneInformation
FindFirstFileA
FindNextFileA
FindClose
lstrcatA
lstrlenA
WinExec
TerminateThread
GetModuleFileNameA
CreateFileA
GetFileSize
ReadFile
FileTimeToSystemTime
GetComputerNameA
GetLastError
SleepEx
LoadLibraryA
GetProcAddress
CreateThread
FreeLibrary
GetVersionExA
GetCurrentProcess
CloseHandle
lstrcpyA
GetTickCount
GlobalAddAtomA
GlobalFindAtomA
GetLocalTime
CreateDirectoryA
DeleteCriticalSection
InitializeCriticalSection
GetWindowsDirectoryA
GetPrivateProfileIntA
GetLocaleInfoA
Sleep
CreateMailslotA
GetSystemTime
DeleteFileA
InterlockedDecrement
CopyFileA
EnterCriticalSection
LeaveCriticalSection
WritePrivateProfileStringA
GetPrivateProfileStringA
GetProfileStringA
GetDriveTypeA

user32

GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
GetMessageA
TranslateMessage
ValidateRect
MapDialogRect
GetAsyncKeyState
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
wvsprintfA
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
EnableMenuItem
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
CopyRect
IsWindowVisible
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
GetMenu
SetRect
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
SetWindowContextHelpId
GetMessageTime
GetMessagePos
GetForegroundWindow
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
IsWindowEnabled
RegisterClassExA
GetMenuItemCount
GetMenuStringA
GetMenuItemID
ModifyMenuA
LoadStringA
LoadBitmapA
UpdateWindow
PostQuitMessage
FillRect
DefWindowProcA
RegisterClassA
LoadCursorA
CopyIcon
GetDC
ReleaseDC
InflateRect
GetSysColor
SetCursor
ReleaseCapture
RedrawWindow
SetCapture
MessageBeep
GetWindow
GetDesktopWindow
GetClassNameA
SetActiveWindow
GetPropA
SetWindowLongA
RemovePropA
GetWindowThreadProcessId
EnumThreadWindows
ExitWindowsEx
LoadMenuA
GetSubMenu
CheckMenuItem
GetCursorPos
RegisterHotKey
UnregisterHotKey
DrawIcon
GetSystemMenu
AppendMenuA
LoadIconA
LoadImageA
IsIconic
CopyAcceleratorTableA
CharNextA
CharUpperA
GetSysColorBrush
WindowFromPoint
TrackPopupMenu
DestroyMenu
ShowWindow
SetForegroundWindow
GetLastActivePopup
SetWindowTextA
MessageBoxA
wsprintfA
PostMessageA
FindWindowA
GetSystemMetrics
RegisterWindowMessageA
SetTimer
InvalidateRect
PtInRect
GetKeyState
MoveWindow
IsWindow
GetClientRect
GetDlgItem
GetWindowRect
ScreenToClient
EnableWindow
GetParent
SendMessageA
CallWindowProcA
IsWindowUnicode
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
SetWindowPos

gdi32

PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
DPtoLP
GetBkColor
LPtoDP
LineTo
MoveToEx
CreateHatchBrush
CreateSolidBrush
CreatePen
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
DeleteObject
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
DeleteDC
PatBlt
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetTextExtentPointA
CreateDIBitmap
GetTextExtentPoint32A
GetObjectA
CreateFontIndirectA
GetTextColor
GetStockObject
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegQueryValueA
RegOpenKeyExA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
DeleteService
QueryServiceStatus
ControlService
RegCreateKeyExA
AdjustTokenPrivileges
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegDeleteValueA
StartServiceA
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
SetServiceStatus
OpenServiceA

shell32

Shell_NotifyIconA
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA

comctl32

ord17
ImageList_Destroy
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA

oledlg

ord8

ole32

CoTaskMemFree
CoTaskMemAlloc
CreateILockBytesOnHGlobal
CLSIDFromProgID
CoInitialize
CoCreateInstance
CoUninitialize
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CLSIDFromString
CoGetClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize

olepro32

ord253

oleaut32

VariantChangeType
SysAllocString
VariantCopy
VariantClear
VariantTimeToSystemTime
SysStringLen
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysFreeString

wininet

InternetOpenUrlA
GetUrlCacheEntryInfoA
HttpAddRequestHeadersA
InternetCloseHandle
InternetReadFile
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
HttpQueryInfoA

wsock32

WSAStartup
WSACleanup

iphlpapi

GetIfTable
GetIpNetTable

rpcrt4

UuidCreate

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ef5ad5652ff052982aa57ed7192e3bdb

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

wsock32

iphlpapi

rpcrt4

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 48KB - Virtual size: 48KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 48KB - Virtual size: 48KB