04660ec19def16fa888006cdbe188cf4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

04660ec19def16fa888006cdbe188cf4_JaffaCakes118
Size

244KB
MD5

04660ec19def16fa888006cdbe188cf4
SHA1

ba4f7c614a3c26fda79037142a15861d60e6bbe2
SHA256

f41e5d5bed84faba8cc4536b28d6a7e198cd0a0c9f65ac1375bca3860a8cb588
SHA512

5a9933ecd37f963a95e222307096212d58b7dcf01d114c249adcc5d79dac361cc8da56000e7daaf7228f8959b679cdaa86def2108429115e516104114b243cac
SSDEEP

3072:wePkQpRxIS4AR83IxYfWi7G0LHs1J8QzVZZ/UiusGFHgPQZoqa54XV:rsMvR83IxYfn7tLM1J9vAA4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04660ec19def16fa888006cdbe188cf4_JaffaCakes118

Files

04660ec19def16fa888006cdbe188cf4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cb6143eb48663b27b84d28c1f8705976

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA

kernel32

RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapFree
RaiseException
SetStdHandle
GetFileType
GetACP
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetTickCount
CompareStringA
CompareStringW
SetEnvironmentVariableA
lstrcpyA
CloseHandle
WriteFile
SetErrorMode
GetOEMCP
GetCPInfo
SizeofResource
GetProfileStringA
GetProcessVersion
GlobalFlags
CreateFileA
lstrcatA
lstrlenA
DeleteFileA
MoveFileA
GetModuleFileNameA
CreateDirectoryA
GetTempPathA
lstrcpynA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
CreateMutexA
InterlockedDecrement
lstrcmpA
InterlockedIncrement
GetPrivateProfileStringA
WritePrivateProfileStringA
LocalFree
FormatMessageA
EnterCriticalSection
FreeLibrary
LocalAlloc
LoadLibraryA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
SetLastError
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
GlobalDeleteAtom
GlobalAlloc
GlobalLock
WaitForSingleObject
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
GetFileSize
GetFileAttributesA
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetCurrentProcess
DuplicateHandle
FindFirstFileA
FindClose
MulDiv
lstrlenW
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetModuleHandleA
GetProcAddress
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource

user32

InvalidateRect
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
DestroyMenu
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
PtInRect
LoadCursorA
CharUpperA
LoadStringA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
SendMessageA
wsprintfA
LoadIconA
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
UnregisterClassA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
MapDialogRect
SetWindowPos
GetWindow
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
SetTimer
KillTimer
PostMessageA
GetClassNameA
EnableWindow
GetDesktopWindow
PostQuitMessage
SetCursor
MessageBoxA
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
GetParent
SetWindowsHookExA
GetCursorPos
PeekMessageA
IsWindowVisible
ValidateRect
CallNextHookEx
GetKeyState
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
GetNextDlgTabItem
GetFocus
SetWindowContextHelpId
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem

gdi32

DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
IntersectClipRect
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
GetClipBox
SetBkMode
GetStockObject
SelectObject
RestoreDC
CreateBitmap
SaveDC
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateDIBitmap

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

shell32

ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateInstance
OleRun
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoDisconnectObject
CoTaskMemAlloc
CoTaskMemFree

olepro32

ord253

oleaut32

SysFreeString
SysAllocStringLen
SysStringLen
VariantClear
VariantCopy
VariantChangeType
SysAllocString
VariantTimeToSystemTime
SysAllocStringByteLen
LoadTypeLi
GetErrorInfo

wsock32

WSAStartup
gethostname
gethostbyname
inet_addr
WSACleanup

wininet

InternetQueryDataAvailable
InternetGetLastResponseInfoA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetSetOptionExA
InternetConnectA
InternetReadFile
InternetOpenUrlA
HttpQueryInfoA
InternetOpenA
InternetCloseHandle

rpcrt4

RpcStringFreeA
UuidCreate
UuidToStringA

Sections

.text
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb6143eb48663b27b84d28c1f8705976

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

wininet

rpcrt4

Sections

.text Size: 172KB - Virtual size: 169KB

.rdata Size: 44KB - Virtual size: 41KB

.data Size: 12KB - Virtual size: 27KB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 172KB - Virtual size: 169KB

.rdata
Size: 44KB - Virtual size: 41KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 12KB - Virtual size: 9KB