fe231593a0724abb9b4b6b7f7071f7f9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fe231593a0724abb9b4b6b7f7071f7f9_JaffaCakes118
Size

10.9MB
MD5

fe231593a0724abb9b4b6b7f7071f7f9
SHA1

292b85d53e5bbd068c212ffb196f7a72506d81dc
SHA256

2b7450e536d3ae45e60d486655d3f086b0d4cd0ae9ccc4f5acace41bdbe47d92
SHA512

2abe6b04163c944585119d251f64654dffd04693bf18d762841ff9a8682b77f36ff3ce3a20dabfcb691eb0cb21494788c2a277d8170f7419c0c563fd4d221d0c
SSDEEP

49152:l+y4dadyaIEOwaZtYIJuljziAwxk5Acb4A+gtYIJjbVZ1BpQIYI:85adyHXSjzJwmOc8A+yZVtL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe231593a0724abb9b4b6b7f7071f7f9_JaffaCakes118

Files

fe231593a0724abb9b4b6b7f7071f7f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0032c43946bb785538856ae120ba5ed4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpQueryInfoA
HttpEndRequestA
InternetWriteFile
HttpSendRequestExA
FindFirstUrlCacheEntryA
DeleteUrlCacheEntry
InternetAttemptConnect
InternetConnectA
InternetOpenA
InternetCloseHandle
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
FindNextUrlCacheEntryA
InternetReadFile

ws2_32

ntohl
ntohs

comctl32

ord17

kernel32

lstrlenW
InterlockedIncrement
lstrcmpiA
IsDBCSLeadByte
SetLastError
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
CopyFileA
DeleteFileA
SetCurrentDirectoryA
GetCommandLineA
ResetEvent
SetEvent
GlobalAlloc
GlobalFree
MulDiv
GlobalUnlock
GlobalLock
LockResource
FreeResource
GetLocalTime
LocalFree
GetFileSize
ReadFile
LocalAlloc
SetFileAttributesA
MoveFileA
InterlockedExchange
WriteFile
SetFilePointer
SetEndOfFile
CompareStringA
CompareStringW
GetEnvironmentVariableA
GetTimeFormatA
GetDateFormatA
FindNextFileA
FindFirstFileA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
GetOEMCP
SetHandleCount
HeapCreate
WideCharToMultiByte
GetModuleFileNameW
WriteConsoleW
LCMapStringW
LCMapStringA
GetTimeZoneInformation
GetFullPathNameA
SetStdHandle
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStartupInfoA
ExitThread
VirtualQuery
VirtualProtect
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
OutputDebugStringA
GetStdHandle
TerminateProcess
SetEnvironmentVariableA
IsValidCodePage
GetCPInfo
GetCurrentProcessId
GetThreadLocale
GetLocaleInfoA
IsValidLocale
GetUserDefaultLCID
GetACP
ExitProcess
GetProcAddress
TlsAlloc
TlsSetValue
TlsFree
TlsGetValue
MultiByteToWideChar
GetCurrentThreadId
CreateMutexA
InterlockedDecrement
GetCurrentProcess
FlushInstructionCache
lstrlenA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
CreateEventA
WaitForSingleObject
GetCurrentDirectoryA
GetFileAttributesA
GetLastError
DeviceIoControl
CreateFileA
CloseHandle
GetModuleFileNameA
SystemTimeToFileTime
Sleep
CreateThread
TerminateThread
SuspendThread
ResumeThread
GetLogicalDrives
GetDriveTypeA
GetTempPathA
GetWindowsDirectoryA
WritePrivateProfileStringA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
WriteConsoleA
GetConsoleOutputCP
CreateFileW
EnumSystemLocalesA
LoadLibraryW
GetLocaleInfoW
FindClose
GetTempFileNameA
GetFileType
GetVersionExA
ExpandEnvironmentStringsA
LoadLibraryA
GetSystemInfo
FormatMessageA

user32

UnregisterClassA
DdePostAdvise
DdeConnect
DdeNameService
DdeCreateStringHandleA
DdeClientTransaction
DdeDisconnect
DdeInitializeA
DdeGetLastError
DdeCreateDataHandle
DdeGetData
DdeFreeDataHandle
DdeUninitialize
BringWindowToTop
SetRect
InvalidateRect
GetUpdateRect
ReleaseDC
GetDC
ValidateRect
GetComboBoxInfo
MessageBeep
IsWindowVisible
GetParent
SystemParametersInfoA
MapWindowPoints
GetWindowDC
FillRect
DrawTextA
IsWindowEnabled
GetSysColor
GetDlgItem
SetWindowPos
wsprintfA
MessageBoxA
GetClientRect
EndPaint
BeginPaint
DrawStateA
GetWindowLongA
DestroyIcon
RegisterClassExA
DefWindowProcA
CharNextA
GetCursorPos
SetForegroundWindow
TrackPopupMenu
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
CallWindowProcA
DestroyMenu
AppendMenuA
CreatePopupMenu
DestroyWindow
LoadBitmapA
PostQuitMessage
LoadImageA
LoadStringA
CopyRect
LoadCursorA
GetClassInfoExA
IsWindow
SetWindowRgn
SetFocus
EnableWindow
KillTimer
SetTimer
RedrawWindow
ShowWindow
SetWindowTextA
CreateWindowExA
SetWindowLongA
PostMessageA
GetSystemMetrics
SendMessageA
GetWindow
GetWindowTextA
FindWindowA
GetWindowRect
DdeQueryStringA
DdeFreeStringHandle

gdi32

CreateDIBSection
ExcludeClipRect
CombineRgn
GetDeviceCaps
CreateCompatibleBitmap
BitBlt
GetTextMetricsA
Rectangle
TextOutA
SetBkMode
CreateRectRgn
CreateEllipticRgn
CreatePen
SelectObject
MoveToEx
LineTo
GetBkColor
GetTextColor
SetBkColor
SetTextColor
GetObjectA
SelectClipRgn
CreateCompatibleDC
DeleteDC
CreateRoundRectRgn
CreateFontA
DeleteObject
CreateSolidBrush

advapi32

RegEnumKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegDeleteValueA
CreateServiceA
StartServiceA
DeleteService
OpenSCManagerA
OpenServiceA
ControlService
CloseServiceHandle
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

SHGetSpecialFolderLocation
SHQueryRecycleBinA
SHEmptyRecycleBinA
ShellExecuteA
Shell_NotifyIconA
SHGetFolderPathA
ShellExecuteExA
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderPathA

ole32

CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
CreateStreamOnHGlobal
CoFreeUnusedLibraries

oleaut32

OleLoadPicture
VarUI4FromStr

winmm

PlaySoundA

shlwapi

StrChrA

msimg32

TransparentBlt

Sections

.text
Size: 728KB - Virtual size: 724KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10.0MB - Virtual size: 10.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0032c43946bb785538856ae120ba5ed4

Headers

File Characteristics

Imports

wininet

ws2_32

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

winmm

shlwapi

msimg32

Sections

.text Size: 728KB - Virtual size: 724KB

.rdata Size: 140KB - Virtual size: 138KB

.data Size: 32KB - Virtual size: 47KB

.rsrc Size: 10.0MB - Virtual size: 10.0MB

.text
Size: 728KB - Virtual size: 724KB

.rdata
Size: 140KB - Virtual size: 138KB

.data
Size: 32KB - Virtual size: 47KB

.rsrc
Size: 10.0MB - Virtual size: 10.0MB