0a58718d270331f1ec35cac9144ef312_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0a58718d270331f1ec35cac9144ef312_JaffaCakes118
Size

412KB
MD5

0a58718d270331f1ec35cac9144ef312
SHA1

bb81758e0176bb2ed0f1304fa23e4ecdb2df2362
SHA256

e28b9cc4d554caf85eb3d9305b47b39de7b981e8067ef15291a0ae204a604c5a
SHA512

380b1468380f44c6e3ecd91c69745edd65f9e7506c8ff78ff989a8a37180a73757e128e90674b4dda2523358310385af55e340c6c1b8a516653877b23391f0e2
SSDEEP

6144:+vmihhMiyhCc5WfBnfUPTcng+oNDEHIIL8NSsQLH5Adl:+vW8c5WZnfULcKuHL8NSsPdl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a58718d270331f1ec35cac9144ef312_JaffaCakes118

Files

0a58718d270331f1ec35cac9144ef312_JaffaCakes118
.exe windows:4 windows x86 arch:x86

084b8122e86b698095463eb7718b8c57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

FileTimeToLocalFileTime
RtlUnwind
SetEnvironmentVariableA
FileTimeToSystemTime
GetOEMCP
HeapFree
GetStartupInfoA
GetCommandLineA
ExitProcess
TlsGetValue
GetCPInfo
RaiseException
GetProcessVersion
SetStdHandle
GetFileType
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
HeapDestroy
TerminateProcess
IsBadWritePtr
LCMapStringA
HeapAlloc
HeapCreate
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
VirtualFree
EnterCriticalSection
LocalFree
RemoveDirectoryA
SetFileAttributesA
CopyFileA
DeleteFileA
FindNextFileA
FindClose
MultiByteToWideChar
LocalReAlloc
TlsSetValue
TlsFree
GlobalReAlloc
LeaveCriticalSection
TlsAlloc
GlobalHandle
DeleteCriticalSection
SizeofResource
InitializeCriticalSection
LocalAlloc
GetShortPathNameA
GlobalFlags
MulDiv
GetVolumeInformationA
GetThreadLocale
GetStringTypeExA
UnlockFile
MoveFileA
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
GetCurrentProcess
WriteFile
ReadFile
CreateFileA
DuplicateHandle
SetLastError
GetFileSize
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFullPathNameA
GetFileTime
SetFileTime
LoadLibraryA
GetTempFileNameA
lstrcpynA
GlobalGetAtomNameA
GetVersion
lstrcatA
WideCharToMultiByte
GlobalFindAtomA
lstrcpyA
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GlobalAddAtomA
LCMapStringW
GetFileAttributesA
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
SetCurrentDirectoryA
SetErrorMode
LoadLibraryExA
FreeLibrary
FormatMessageA
CompareStringA
CompareStringW
VirtualAlloc
CreateDirectoryA
OpenMutexA
GetProfileStringA
IsDBCSLeadByte
GetModuleFileNameA
GetCurrentDirectoryA
CreateMutexA
CloseHandle
FindFirstFileA
GetVersionExA
ReleaseMutex
GetLastError
GetDiskFreeSpaceA
GetProcAddress
GetModuleHandleA

user32

DeferWindowPos
AdjustWindowRectEx
GetSysColor
MapWindowPoints
LoadIconA
BeginDeferWindowPos
EqualRect
TranslateAcceleratorA
ReleaseCapture
GetDesktopWindow
DestroyMenu
LoadMenuA
SetMenu
SetRectEmpty
LoadAcceleratorsA
InvalidateRect
ReuseDDElParam
CharUpperA
ReleaseDC
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetClassNameA
PtInRect
UnpackDDElParam
InsertMenuA
BringWindowToTop
GetMenuStringA
LoadCursorA
GetSysColorBrush
InflateRect
DefWindowProcA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
GetWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
LoadStringA
wsprintfA
SetWindowPos
MoveWindow
DeleteMenu
DestroyIcon
CopyRect
GetMenuCheckMarkDimensions
EndDeferWindowPos
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
GetFocus
GetMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
SetCursor
ShowOwnedPopups
PostQuitMessage
GetNextDlgTabItem
GetActiveWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetParent
IsWindowEnabled
IsWindow
TranslateMessage
PeekMessageA
DispatchMessageA
GetSystemMenu
EnableMenuItem
SetWindowTextA
GetWindowLongA
SetWindowLongA
ShowWindow
ScreenToClient
CreateWindowExA
GetWindowTextA
EndDialog
SetFocus
GetClientRect
LoadImageA
GetDlgItem
GetWindowRect
GetDC
SetForegroundWindow
SendMessageA
MessageBoxA
EnableWindow
PostMessageA
FindWindowA
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
CharNextA
UpdateWindow
SendDlgItemMessageA
GetWindowTextLengthA
IsDialogMessageA
SetDlgItemTextA
LoadBitmapA
GetDlgCtrlID
ShowCaret
IsWindowUnicode
DefDlgProcA
DrawFocusRect
UnregisterClassA
HideCaret
ExcludeUpdateRgn

gdi32

GetTextExtentPoint32A
BitBlt
CreateCompatibleDC
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
PatBlt
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
GetDeviceCaps
CreateSolidBrush
PtVisible
TextOutA
ExtTextOutA
RectVisible
Escape
GetTextExtentPointA
CreateDIBitmap
GetObjectA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegEnumKeyA
RegSetValueA
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegDeleteValueA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegQueryValueA
RegEnumKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyExA

shell32

SHGetFileInfoA
SHGetMalloc
DragFinish
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHBrowseForFolderA
ExtractIconA
DragQueryFileA

comctl32

ord17

ole32

CoCreateInstance
CoInitialize
OleInitialize
CoUninitialize
OleUninitialize

Sections

.text
Size: 188KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

084b8122e86b698095463eb7718b8c57

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

Sections

.text Size: 188KB - Virtual size: 186KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 12KB - Virtual size: 25KB

.rsrc Size: 168KB - Virtual size: 165KB

.text
Size: 188KB - Virtual size: 186KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 12KB - Virtual size: 25KB

.rsrc
Size: 168KB - Virtual size: 165KB