fb1b2ff55a950eeaeb4e512607e7441d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fb1b2ff55a950eeaeb4e512607e7441d_JaffaCakes118
Size

248KB
MD5

fb1b2ff55a950eeaeb4e512607e7441d
SHA1

b26916274725618fc62b9b102d9d11c2e18d581d
SHA256

d549742c2058c7a9aa4d6eb46a33216c2663decf2d7dac46bc5899795b0aed02
SHA512

d2867101fec1ce2c40731a7e9d4d5e96dfd8fa553b13453f69c7e17e16bb3b86a3a8320718f4e05294389af91402accdef95d03e4a4e7f4cc08db69db068fdf0
SSDEEP

3072:N9CHVfIxh8QRzz4grRz1cJ7HBze+Zev0E0uF8nr84rJenflJp2ftRm6:2iUQR/ncJbBzeme8Ex2nr84r8nfem6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb1b2ff55a950eeaeb4e512607e7441d_JaffaCakes118

Files

fb1b2ff55a950eeaeb4e512607e7441d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f90e9a622f37c81b484bd5788af516b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathAppendA
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathFileExistsA
SHGetValueA
SHSetValueA

kernel32

FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
GetCurrentThreadId
GlobalFlags
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GetLocaleInfoA
GetCPInfo
GetOEMCP
HeapAlloc
HeapFree
HeapReAlloc
VirtualAlloc
RtlUnwind
RaiseException
ExitProcess
GetCommandLineA
GetProcessHeap
lstrcmpA
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetStdHandle
GetFileType
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetACP
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
InterlockedIncrement
InterlockedDecrement
GetModuleHandleA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GlobalGetAtomNameA
ReleaseSemaphore
CreateSemaphoreA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
lstrcatA
FindFirstFileA
FindNextFileA
FindClose
SetLastError
CreateDirectoryA
Sleep
GetComputerNameA
CreateMutexA
WaitForSingleObject
DeleteFileA
RemoveDirectoryA
GetTempPathA
CreateFileA
GetModuleFileNameA
WriteFile
CloseHandle
CreateProcessA
SetThreadPriority
GetCurrentThread
GetCurrentProcess
SetPriorityClass
ResumeThread
LoadLibraryA
GetProcAddress
GetCurrentProcessId
FreeLibrary
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetVersionExA
lstrlenA
CompareStringW
CompareStringA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
GetStartupInfoA

user32

DestroyMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
LoadIconA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
PostMessageA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
CopyRect
SetWindowPos
SetWindowLongA
IsWindow
GetDlgItem
GetFocus
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
UnregisterClassA
SetWindowsHookExA
GetKeyState
PeekMessageA
ValidateRect
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowTextA
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetSystemMetrics
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
RegisterWindowMessageA
RegisterClassExA
CreateWindowExA
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
SetMessageExtraInfo
KillTimer
DefWindowProcA
GetMessageExtraInfo
PostQuitMessage
MessageBoxA
wsprintfA
CharUpperA
CallNextHookEx

gdi32

ScaleWindowExtEx
SetWindowExtEx
GetStockObject
CreateBitmap
DeleteDC
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
DeleteObject
GetClipBox
SetMapMode
SetTextColor

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegQueryInfoKeyA
RegEnumValueA
RegOpenKeyA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA

shell32

SHGetSpecialFolderPathA
SHGetFolderPathA
ShellExecuteA

ole32

CoInitializeEx

oleaut32

VariantChangeType
VariantClear
VariantInit

wininet

HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetReadFile

Exports

Exports

InetFunctionForRecover
InetFunctionForRemover

Sections

.text
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f90e9a622f37c81b484bd5788af516b

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

ole32

oleaut32

wininet

Exports

Exports

Sections

.text Size: 168KB - Virtual size: 165KB

.rdata Size: 60KB - Virtual size: 59KB

.data Size: 12KB - Virtual size: 24KB

.rsrc Size: 4KB - Virtual size: 620B

.text
Size: 168KB - Virtual size: 165KB

.rdata
Size: 60KB - Virtual size: 59KB

.data
Size: 12KB - Virtual size: 24KB

.rsrc
Size: 4KB - Virtual size: 620B