fec233fc73cbd9689060013ed775e470_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fec233fc73cbd9689060013ed775e470_JaffaCakes118
Size

1.2MB
MD5

fec233fc73cbd9689060013ed775e470
SHA1

28fa340821e57b5f56aebe1678f670d04bd97a90
SHA256

0df423d9f69c08e8e2f4ee28215ad41834d2596bbe9d9ee216a61e77a87dc462
SHA512

a57de5efe35fafafebb0b8e54e4f7ce8bb47f9594b6afabefdc7f6da72f43fa3de5ca097f5cf99c43dee1e85cca81f3822fcd7d0d7c85a3c57167c0dda1b16f7
SSDEEP

12288:as8U49Ww7LkfuiAWI1GxZ7R8vQrXo8DSO29e:R8vA6k2j1GxZV8v+XjSO29

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fec233fc73cbd9689060013ed775e470_JaffaCakes118

Files

fec233fc73cbd9689060013ed775e470_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f2878a1cc37d3a1ce8e0b5866e3e2f3f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

inet_addr
gethostbyname
WSACleanup
socket
WSAStartup
htons
listen
bind
__WSAFDIsSet
select
connect
closesocket
ioctlsocket
recv
accept
send

gdi32

DeleteDC
GetStockObject
GetMapMode
SetMapMode
LPtoDP
GetDeviceCaps
DPtoLP
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutA
RectVisible
PtVisible
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
DeleteObject
ExtTextOutA
SaveDC
RestoreDC

wininet

InternetSetOptionA

kernel32

FileTimeToSystemTime
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetFullPathNameA
GlobalFlags
GetLocaleInfoA
GetCPInfo
GetOEMCP
FileTimeToLocalFileTime
GetFileAttributesA
lstrcmpA
GetCurrentDirectoryA
GetSystemTimeAsFileTime
HeapAlloc
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
HeapFree
GetDriveTypeA
VirtualAlloc
HeapReAlloc
HeapSize
GetACP
IsValidCodePage
GetTimeZoneInformation
VirtualFree
HeapCreate
GetStdHandle
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetExitCodeProcess
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GetProcessHeap
GlobalGetAtomNameA
InterlockedIncrement
GetModuleHandleW
CompareStringA
GetCurrentThreadId
MultiByteToWideChar
lstrlenA
GetCurrentProcessId
FreeLibrary
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
InterlockedDecrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalFree
LocalAlloc
SetLastError
GetCurrentProcess
FlushInstructionCache
VirtualQuery
VirtualProtect
GetEnvironmentVariableA
CreateMutexA
GetCommandLineA
TerminateThread
GetModuleFileNameA
CreateThread
GetVersionExA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
MoveFileA
Module32First
ResetEvent
CreateToolhelp32Snapshot
CreateDirectoryA
Process32First
OpenProcess
Process32Next
CopyFileA
CreateFileA
ReadFile
WriteFile
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
WaitForDebugEvent
TerminateProcess
GetThreadContext
SetThreadContext
ContinueDebugEvent
GetModuleHandleA
MulDiv
SetFileAttributesA
SetEvent
OutputDebugStringA
GetLocalTime
CreateEventA
CloseHandle
FormatMessageA
ReleaseMutex
WaitForSingleObject
GetLastError
CreateProcessA
GetTempPathA
Sleep
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose
GetWindowsDirectoryA

user32

SetMenu
SetForegroundWindow
GetClientRect
PostMessageA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetClassInfoA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
CheckMenuItem
GetWindowTextA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
SetWindowsHookExA
CallNextHookEx
GetKeyState
PeekMessageA
ValidateRect
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
ClientToScreen
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
MessageBoxA
ShowWindow
GetTitleBarInfo
GetDesktopWindow
GetWindowRect
MoveWindow
SetWindowTextA
BeginPaint
EndPaint
InvalidateRect
UpdateWindow
SetFocus
GetWindowDC
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
PostQuitMessage
CreateIconFromResourceEx
EnableMenuItem

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
CreateServiceA
ChangeServiceConfig2A
StartServiceA
SetServiceStatus
RegOpenKeyA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenSCManagerA
EnumServicesStatusA
OpenServiceA
ControlService
CloseServiceHandle

shell32

Shell_NotifyIconA

ole32

CreateStreamOnHGlobal

oleaut32

VariantInit
VariantChangeType
VariantClear
OleLoadPicture

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 422KB - Virtual size: 422KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 732KB - Virtual size: 808KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f2878a1cc37d3a1ce8e0b5866e3e2f3f

Headers

DLL Characteristics

File Characteristics

Imports

wsock32

gdi32

wininet

kernel32

user32

winspool.drv

advapi32

shell32

ole32

oleaut32

oleacc

Sections

.text Size: 422KB - Virtual size: 422KB

.rdata Size: 46KB - Virtual size: 46KB

.data Size: 732KB - Virtual size: 808KB

.text
Size: 422KB - Virtual size: 422KB

.rdata
Size: 46KB - Virtual size: 46KB

.data
Size: 732KB - Virtual size: 808KB