0785654a93f1121a57bf9e80552b5a65_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0785654a93f1121a57bf9e80552b5a65_JaffaCakes118
Size

106KB
MD5

0785654a93f1121a57bf9e80552b5a65
SHA1

3de66824356477c24043a8f4363feb44ca5b3011
SHA256

e0a722e0039a386c5729023302a9449b9ad427e43da0ea8d727898234513dcb4
SHA512

df204216f9b12cd4a404d7339ea28785238ab877101a5e84c14f3355348a018aa83644642deb852ebc7230a5187200b55a6580024671c2b2cae7d691d336d182
SSDEEP

3072:UE6CzblqdFJeip5MIIAPmc0CWgWjH1tzpyL4:UhCT/ALFWr1JY4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0785654a93f1121a57bf9e80552b5a65_JaffaCakes118

Files

0785654a93f1121a57bf9e80552b5a65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

491294c5cbad495067d4c157c81ac83c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegLoadKeyA
RegQueryValueA

kernel32

GetVersionExA
MoveFileExA
ReadFile
GlobalDeleteAtom
GetTickCount
GetStringTypeA
GetCurrentThreadId
SetLastError
GetCurrentProcess
GetStringTypeW
FormatMessageA
SetEvent
GetLastError
HeapFree
lstrcatA
ResetEvent
DeleteCriticalSection
MoveFileA
GetDateFormatA
WaitForSingleObject
EnumCalendarInfoA
WriteFile
FindResourceA
VirtualAlloc
GlobalFindAtomA
GlobalAlloc
LocalReAlloc
GetOEMCP
ExitThread
lstrcmpA
GetFullPathNameA
CreateThread
DeleteFileA
LoadLibraryExA
HeapAlloc
VirtualAllocEx
GetDiskFreeSpaceA
VirtualFree
LoadResource
MulDiv
GetACP
lstrlenA
RaiseException
FreeLibrary
GlobalAddAtomA
WideCharToMultiByte
FindClose
GetEnvironmentStrings
GetFileAttributesA
lstrcmpiA
CloseHandle
GetModuleFileNameA
lstrcpynA
GetProcAddress
GetVersion
HeapDestroy
FreeResource
SetErrorMode
LocalAlloc
LockResource
CreateFileA
GetThreadLocale
SetThreadLocale
SizeofResource
GetFileType
GetCurrentProcessId
lstrcpyA
FindFirstFileA
Sleep
GetStdHandle
GetLocaleInfoA
GetLocalTime
LocalFree
GetUserDefaultLCID
ExitProcess
InitializeCriticalSection
LoadLibraryA
SetFilePointer
VirtualFree
GlobalFindAtomA
LocalAlloc
VirtualAlloc
GetCurrentThread
GetCurrentProcessId
HeapFree
GetTickCount
WideCharToMultiByte
FreeResource
LocalFree
GetVersionExA
GetVersion
LockResource
SetLastError
GetStringTypeW
GlobalDeleteAtom
ReadFile
GetFileAttributesA
GetDiskFreeSpaceA
SetEvent
lstrcatA
GetModuleFileNameA
DeleteCriticalSection
CreateThread
GetEnvironmentStrings
MulDiv
CloseHandle
GetDateFormatA
SetEndOfFile
GetFullPathNameA
lstrcpynA
GetFileType
HeapAlloc
SetHandleCount
SetFilePointer
GetLocaleInfoA
FindFirstFileA
GetStringTypeA
CreateEventA
SizeofResource
lstrlenA
lstrcmpA
GetCurrentProcess
ResetEvent
FindResourceA
GlobalAlloc
MoveFileA
CompareStringA
HeapDestroy
Sleep
lstrcmpiA
GetCPInfo
GetOEMCP
GetCurrentThreadId
WriteFile
ExitProcess
GetModuleHandleA
LoadResource
EnumCalendarInfoA
VirtualQuery
DeleteFileA
GetCommandLineA
SetThreadLocale
ExitThread
LocalReAlloc
GetLocalTime
GetACP
GetThreadLocale
GetProcAddress
GetStdHandle
GetSystemDefaultLangID
GetLastError
InitializeCriticalSection
GetStartupInfoA
MoveFileExA
lstrcpyA
LoadLibraryExA
EnterCriticalSection
GetUserDefaultLCID
FreeLibrary
FormatMessageA
GetProcessHeap
LoadLibraryA
VirtualAllocEx
GlobalAddAtomA

comdlg32

ChooseColorA
FindTextA
FindTextA

gdi32

CreatePalette
GetPaletteEntries
GetDIBColorTable
CreateCompatibleBitmap
CreateBitmap
BitBlt
GetCurrentPositionEx
RestoreDC
CreateDIBSection
GetCurrentPositionEx
CreateBrushIndirect
GetDIBColorTable
CreateCompatibleBitmap
GetRgnBox

shell32

Shell_NotifyIconA
SHFileOperationA
SHGetDiskFreeSpaceA
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFolderPathA
DragQueryFileA
SHGetFileInfoA
SHFileOperationA

ole32

CLSIDFromString
CoGetContextToken
CoTaskMemFree
CoCreateGuid
PropVariantClear
CreateBindCtx
WriteClassStm
CLSIDFromProgID
CoGetMalloc
CoDisconnectObject
CoGetMalloc
WriteClassStm
CoCreateInstanceEx
ReleaseStgMedium
GetHGlobalFromStream
CLSIDFromProgID
CoReleaseMarshalData
CoDisconnectObject
CoRevokeClassObject
CoGetObjectContext
OleCreateStaticFromData
CLSIDFromProgID
CoUnmarshalInterface
StgOpenStorage
CreateBindCtx
CreateOleAdviseHolder
StringFromIID

ntdll

atol
wcscat
NtWaitForSingleObject
RtlDeleteCriticalSection
atoi
_wcsnicmp

shlwapi

SHQueryValueExA
SHQueryInfoKeyA
PathGetCharTypeA
SHGetValueA
SHEnumValueA
PathIsContentTypeA

msvcrt

mbstowcs
atol
memset
exit
wcsncmp
sqrt
memcpy
tolower
time
memmove
strlen
strcmp
strncmp

user32

MessageBoxA
CheckMenuItem
CharLowerA
GetFocus
DeferWindowPos
SystemParametersInfoA
GetLastActivePopup
CallNextHookEx
GetMenuStringA
SetWindowLongA
TrackPopupMenu
CallWindowProcA
DefWindowProcA
GetMenuState
GetCursor
IsWindowVisible
CharToOemA
FrameRect
GetMenuItemCount
DefFrameProcA
GetMenuItemInfoA
GetMessagePos
EnumWindows
EndDeferWindowPos
DispatchMessageA
DrawEdge
EnumThreadWindows
GetActiveWindow
GetDC
GetWindow
IsDialogMessageA
CharNextA
EnableWindow
RegisterClassA
EnumChildWindows
GetSysColor
SetCursor
DispatchMessageW
DrawMenuBar
GetCursorPos
ShowScrollBar
GetKeyState
IsWindowEnabled
EnableMenuItem
CreatePopupMenu
GetScrollRange
DefMDIChildProcA
FindWindowA
GetDlgItem
SetWindowTextA
GetWindowTextA
CreateIcon
GetDCEx
CreateMenu
GetForegroundWindow
DrawIconEx
GetSubMenu
ShowWindow
DrawFrameControl
GetMenuItemID
GetParent
FillRect
DrawTextA
GetDesktopWindow
GetMenu
IsMenu
ClientToScreen
IsChild
GetIconInfo
GetKeyNameTextA
BeginPaint
CreateWindowExA
EqualRect
GetScrollPos

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoA

comctl32

ImageList_Draw
ImageList_DrawEx
ImageList_Remove

oleaut32

GetErrorInfo
SysFreeString
SafeArrayGetElement
SafeArrayUnaccessData
OleLoadPicture

Sections

CODE
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

491294c5cbad495067d4c157c81ac83c

Headers

File Characteristics

Imports

advapi32

kernel32

comdlg32

gdi32

shell32

ole32

ntdll

shlwapi

msvcrt

user32

version

comctl32

oleaut32

Sections

CODE Size: 54KB - Virtual size: 54KB

.init Size: 40KB - Virtual size: 39KB

.idata Size: 8KB - Virtual size: 8KB

.data Size: 2KB - Virtual size: 1KB

CODE
Size: 54KB - Virtual size: 54KB

.init
Size: 40KB - Virtual size: 39KB

.idata
Size: 8KB - Virtual size: 8KB

.data
Size: 2KB - Virtual size: 1KB