080499cb199ad822dc6bed884d185c6e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

080499cb199ad822dc6bed884d185c6e_JaffaCakes118
Size

1.2MB
MD5

080499cb199ad822dc6bed884d185c6e
SHA1

9ff33d922df5e13e9303df35d42495e98d5c2a7a
SHA256

ed5cb3ffee9f0ef440606a24a23d52b53acfa620792db7ddca1cf9d6f9a618db
SHA512

a8cd808e458fb0a75c2f0cb386f12aa25fef8b9dcdaba47e383f3b9c677215e6795f844af7ef17a57b482fc08c17f0e60e1551da586760defbd4e24ebe919491
SSDEEP

12288:UJWldPZUBpyLY/4zRYHIvhR2Uk2hK78q7KO53xcY+U7OVwba8lDePd:4BQLY/4zRCgI6KpKO53Ge6VwHDA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
080499cb199ad822dc6bed884d185c6e_JaffaCakes118

Files

080499cb199ad822dc6bed884d185c6e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2e2b7f6c6880a8e49f3b1d8d85500f6f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

inet_addr
gethostbyname
WSACleanup
socket
WSAStartup
htons
listen
bind
__WSAFDIsSet
select
connect
closesocket
ioctlsocket
recv
accept
send

gdi32

DeleteDC
GetStockObject
GetMapMode
SetMapMode
LPtoDP
GetDeviceCaps
DPtoLP
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutA
RectVisible
PtVisible
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
DeleteObject
ExtTextOutA
SaveDC
RestoreDC

wininet

InternetSetOptionA

kernel32

lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetCurrentProcess
GetFullPathNameA
GlobalFlags
GetLocaleInfoA
GetCPInfo
GetOEMCP
FileTimeToLocalFileTime
GetFileAttributesA
FileTimeToSystemTime
GetCurrentDirectoryA
GetSystemTimeAsFileTime
HeapAlloc
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
HeapFree
GetDriveTypeA
VirtualAlloc
HeapReAlloc
HeapSize
GetACP
IsValidCodePage
GetTimeZoneInformation
VirtualFree
HeapCreate
GetStdHandle
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetExitCodeProcess
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GetProcessHeap
lstrcmpA
GlobalGetAtomNameA
InterlockedIncrement
GetModuleHandleW
CompareStringA
GetCurrentThreadId
MultiByteToWideChar
lstrlenA
GetCurrentProcessId
FreeLibrary
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
InterlockedDecrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalFree
LocalAlloc
SetLastError
VirtualQuery
VirtualProtect
GetEnvironmentVariableA
CreateMutexA
GetCommandLineA
TerminateThread
GetModuleFileNameA
CreateThread
GetVersionExA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
MoveFileA
Module32First
ResetEvent
CreateToolhelp32Snapshot
Process32First
CreateDirectoryA
OpenProcess
Process32Next
CopyFileA
CreateFileA
ReadFile
WriteFile
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
WaitForDebugEvent
TerminateProcess
GetThreadContext
SetThreadContext
ContinueDebugEvent
GetModuleHandleA
MulDiv
SetFileAttributesA
SetEvent
OutputDebugStringA
GetLocalTime
CreateEventA
CloseHandle
FormatMessageA
ReleaseMutex
WaitForSingleObject
GetLastError
CreateProcessA
GetTempPathA
Sleep
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose
GetWindowsDirectoryA

user32

SetMenu
SetForegroundWindow
GetClientRect
PostMessageA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetClassInfoA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
EnableMenuItem
CheckMenuItem
GetWindowTextA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
SetWindowsHookExA
CallNextHookEx
GetKeyState
PeekMessageA
ValidateRect
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
ClientToScreen
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
MessageBoxA
ShowWindow
GetTitleBarInfo
GetDesktopWindow
GetWindowRect
MoveWindow
SetWindowTextA
BeginPaint
EndPaint
InvalidateRect
UpdateWindow
SetFocus
GetWindowDC
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
PostQuitMessage
CreateIconFromResourceEx
ModifyMenuA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
CreateServiceA
ChangeServiceConfig2A
StartServiceA
SetServiceStatus
RegOpenKeyA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenSCManagerA
EnumServicesStatusA
OpenServiceA
ControlService
CloseServiceHandle

shell32

Shell_NotifyIconA

ole32

CreateStreamOnHGlobal

oleaut32

VariantInit
VariantChangeType
VariantClear
OleLoadPicture

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 526KB - Virtual size: 526KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 620KB - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2e2b7f6c6880a8e49f3b1d8d85500f6f

Headers

DLL Characteristics

File Characteristics

Imports

wsock32

gdi32

wininet

kernel32

user32

winspool.drv

advapi32

shell32

ole32

oleaut32

oleacc

Sections

.text Size: 526KB - Virtual size: 526KB

.rdata Size: 46KB - Virtual size: 46KB

.data Size: 620KB - Virtual size: 696KB

.text
Size: 526KB - Virtual size: 526KB

.rdata
Size: 46KB - Virtual size: 46KB

.data
Size: 620KB - Virtual size: 696KB