feb7a09614d8a5be9204fc36601a4f4c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

feb7a09614d8a5be9204fc36601a4f4c_JaffaCakes118
Size

282KB
MD5

feb7a09614d8a5be9204fc36601a4f4c
SHA1

1b69903695b8e936c1ea159e3057656ff48627b6
SHA256

1a98f196fe54d3fa6fb027352e31901fcdc5e0a81fbb1b310409f4d9c6da766f
SHA512

6ca8447988d46696a2e4be38fa6f7738042e4828ccdbd4fa481f9595d48cd21d8441ef6ee786b1f21b24359607f69baf12517743cae8f152554e209bfa3877f4
SSDEEP

3072:OLSfVGS7xEklp4WXGeWu2EjlCQvt2CcMEHbRidCy4dzqWP3wAHbuNgcxRup6lpBR:OS7ekp1WqP0CcbbRi0WWPgAH7cMR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feb7a09614d8a5be9204fc36601a4f4c_JaffaCakes118

Files

feb7a09614d8a5be9204fc36601a4f4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6488cbf8fa571da2f04ca652cc1a6ea8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyAcceleratorTableW
CopyRect
ClientToScreen
CheckMenuItem
CharUpperW
CreateDialogIndirectParamW
CreateWindowExW
DefMDIChildProcA
DestroyMenu
DestroyWindow
DispatchMessageW
DrawTextExW
CharNextW
CallWindowProcW
CallNextHookEx
BeginPaint
IsWindowEnabled
DrawTextW
EnableMenuItem
EnableWindow
EndDialog
EndPaint
EqualRect
WinHelpW
ValidateRect
UpdateWindow
UnregisterClassW
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TabbedTextOutW
SystemParametersInfoA
ShowWindow
SetWindowsHookExW
SetWindowTextW
SetWindowLongW
SetWindowContextHelpId
SetRect
SetPropW
SetMenuItemBitmaps
SetForegroundWindow
SetFocus
SetCursor
SetCapture
SetActiveWindow
SendMessageW
SendDlgItemMessageW
SendDlgItemMessageA
ScreenToClient
RemovePropW
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
PtInRect
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageW
OffsetRect
MoveWindow
ModifyMenuW
MessageBoxW
MessageBeep
MapWindowPoints
MapDialogRect
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
IsWindowVisible
AdjustWindowRectEx
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
GrayStringW
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindow
GetTopWindow
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetSubMenu
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassInfoW
GetClassInfoExW
GetCapture
GetActiveWindow

gdi32

SetWindowExtEx
SetViewportOrgEx
SetTextColor
SetMapMode
SetBkMode
SetBkColor
ScaleWindowExtEx
ScaleViewportExtEx
SaveDC
RestoreDC
RectVisible
PtVisible
OffsetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
GetTextColor
GetStockObject
GetRgnBox
GetObjectW
GetMapMode
GetDeviceCaps
ExtTextOutW
ExtSelectClipRgn
CreateSolidBrush
CreateRectRgnIndirect
CreateFontIndirectW
CreateCompatibleDC
StretchBlt

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

oledlg

OleUIBusyW

shlwapi

PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFindFileNameW

oleaut32

SysAllocStringLen
SysFreeString
SysStringLen
SystemTimeToVariantTime
VariantChangeType
VariantClear
VariantCopy
VariantInit
VariantTimeToSystemTime
SafeArrayDestroy
OleCreateFontIndirect
SysAllocString

comctl32

InitCommonControlsEx

ole32

OleFlushClipboard
OleInitialize
OleIsCurrentClipboard
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CLSIDFromProgID
CoFreeUnusedLibraries
CLSIDFromString
HMENU_UserMarshal
CreateILockBytesOnHGlobal
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterMessageFilter
CoGetClassObject

comdlg32

GetFileTitleW
FindTextA

kernel32

MulDiv
LockResource
LockFile
LocalReAlloc
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsValidCodePage
IsDebuggerPresent
IsDBCSLeadByteEx
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalFree
GlobalFlags
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVolumeInformationW
GetVersionExA
GetVersion
GetUserDefaultLCID
GetTimeZoneInformation
MultiByteToWideChar
lstrlenW
GetSystemTimeAsFileTime
GetSystemInfo
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileSize
GetFileAttributesW
GetEnvironmentStringsW
GetEnvironmentStringsA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetCommandLineA
GetCPInfo
GetACP
FreeResource
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FlushFileBuffers
FindFirstFileW
FindClose
Process32Next
RaiseException
ReadFile
RtlUnwind
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SizeofResource
TerminateProcess
TlsAlloc
TlsFree
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringW
lstrcmpA
lstrcmpW
GetTickCount
lstrlenA
FileTimeToSystemTime
ExitProcess
EnumSystemLocalesA
EnumResourceLanguagesW
EnterCriticalSection
DuplicateHandle
DeleteCriticalSection
CreateFileW
CreateFileA
CreateDirectoryW
ConvertDefaultLocale
GetThreadLocale
CloseHandle

shell32

ShellExecuteW
SHGetFolderPathW

wininet

HttpOpenRequestW
InternetCloseHandle
InternetGetLastResponseInfoW
InternetOpenW
InternetReadFile
HttpSendRequestW

advapi32

RegSetValueExW
RegQueryValueW
RegQueryValueExW
RegOpenKeyW
RegOpenKeyExW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW

Exports

Exports

DeleteConfigFiles

Sections

.text
Size: 101KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 135KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6488cbf8fa571da2f04ca652cc1a6ea8

Headers

File Characteristics

Imports

user32

gdi32

winspool.drv

oledlg

shlwapi

oleaut32

comctl32

ole32

comdlg32

kernel32

shell32

wininet

advapi32

Exports

Exports

Sections

.text Size: 101KB - Virtual size: 104KB

.rdata Size: 135KB - Virtual size: 136KB

.data Size: 14KB - Virtual size: 116KB

.idata Size: 9KB - Virtual size: 12KB

.rsrc Size: 21KB - Virtual size: 23KB

.text
Size: 101KB - Virtual size: 104KB

.rdata
Size: 135KB - Virtual size: 136KB

.data
Size: 14KB - Virtual size: 116KB

.idata
Size: 9KB - Virtual size: 12KB

.rsrc
Size: 21KB - Virtual size: 23KB