0b7184350eef269481f652bf7e3f5724_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0b7184350eef269481f652bf7e3f5724_JaffaCakes118
Size

1.8MB
MD5

0b7184350eef269481f652bf7e3f5724
SHA1

edc4bad832cdf028b31448cdfa9ea7f98d577f85
SHA256

b86c688a5706e05f687144b0551c3457f68805826c903f7797992ca00abda63a
SHA512

9659238b8a45dcdd5c6875ae2ad70ea09f9a254a69f2cbe8610fc3da496b162f0d5982cee271b8e754ff4218a80d8ff4e7cb05c50deb8f16a6b52340e46d3ca7
SSDEEP

24576:vL+3gYiTsZ9uWh6nG3AKLBSxuQeUJd4MHanYlFMreyviUuy:awTsUG3AmYpLJdtdFy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b7184350eef269481f652bf7e3f5724_JaffaCakes118

Files

0b7184350eef269481f652bf7e3f5724_JaffaCakes118
.exe windows:4 windows x86 arch:x86

27840bb6d655443b51c92c02e2a41b1e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ace32

ord1
ord2
ord3
ord4
ord5
ord6
ord7
ord279
ord8
ord242
ord167
ord218
ord10
ord13
ord14
ord15
ord16
ord17
ord438
ord18
ord262
ord19
ord20
ord21
ord315
ord248
ord23
ord24
ord419
ord380
ord263
ord27
ord258
ord313
ord351
ord308
ord350
ord352
ord311
ord361
ord338
ord314
ord353
ord312
ord282
ord28
ord29
ord187
ord30
ord31
ord12
ord32
ord148
ord281
ord33
ord217
ord264
ord265
ord38
ord39
ord40
ord170
ord171
ord172
ord378
ord222
ord223
ord43
ord45
ord46
ord209
ord50
ord52
ord53
ord54
ord55
ord57
ord58
ord59
ord60
ord61
ord328
ord64
ord65
ord202
ord67
ord68
ord69
ord70
ord204
ord71
ord207
ord188
ord189
ord73
ord173
ord74
ord203
ord75
ord76
ord418
ord195
ord77
ord179
ord78
ord79
ord80
ord81
ord83
ord84
ord86
ord85
ord87
ord88
ord89
ord90
ord295
ord91
ord92
ord93
ord208
ord94
ord100
ord101
ord103
ord104
ord105
ord106
ord107
ord283
ord108
ord110
ord112
ord113
ord114
ord190
ord115
ord238
ord116
ord117
ord118
ord119
ord121
ord122
ord123
ord124
ord125
ord267
ord126
ord219
ord197
ord127
ord128
ord322
ord129
ord130
ord131
ord216
ord132
ord135
ord136
ord137
ord138
ord140
ord141
ord206
ord143
ord193
ord145
ord149
ord151
ord150
ord152
ord153
ord154
ord201
ord155
ord156
ord157
ord158
ord270
ord293
ord273
ord160
ord161
ord401
ord162
ord163
ord164

msvfw32

MCIWndCreateA

advapi32

GetUserNameA
RegCloseKey
RegConnectRegistryA
RegCreateKeyA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

kernel32

CloseHandle
CompareFileTime
CreateDirectoryA
CreateFileA
CreateMutexA
CreatePipe
CreateProcessA
DeleteFileA
DuplicateHandle
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FlushFileBuffers
FreeConsole
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCommandLineA
GetComputerNameA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentVariableA
GetExitCodeProcess
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetFileTime
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessTimes
GetProfileStringA
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetTempFileNameA
GetTempPathA
GetTimeZoneInformation
GetVersion
GetVersionExA
GetVolumeInformationA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapFree
LCMapStringA
LoadLibraryA
LoadLibraryExA
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LocalLock
LocalUnlock
LockFile
LockFileEx
LockResource
MoveFileA
MulDiv
MultiByteToWideChar
OutputDebugStringA
PeekNamedPipe
RaiseException
ReadFile
ReleaseMutex
RemoveDirectoryA
RtlUnwind
SearchPathA
SetConsoleCtrlHandler
SetCurrentDirectoryA
SetEndOfFile
SetErrorMode
SetFileAttributesA
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetProcessWorkingSetSize
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
UnlockFileEx
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
WriteProfileStringA
lstrcatA
lstrcmpiA
lstrcpyA
lstrlenA

wsock32

WSACleanup
WSAGetLastError
WSASetLastError
WSAStartup
__WSAFDIsSet
accept
closesocket
connect
gethostbyaddr
gethostbyname
getsockopt
htonl
htons
ioctlsocket
inet_addr
inet_ntoa
listen
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket
bind

winspool.drv

ClosePrinter
DeviceCapabilitiesA
DocumentPropertiesA
EndDocPrinter
EndPagePrinter
EnumJobsA
EnumPrintersA
ord201
GetPrinterA
OpenPrinterA
SetPrinterA
StartDocPrinterA
StartPagePrinter
WritePrinter

comctl32

ord6
ord15
ImageList_Add
ImageList_AddMasked
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_Draw
ImageList_EndDrag
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_LoadImageA
ImageList_Remove
ImageList_SetBkColor
ord17
InitCommonControlsEx
ord14
ord13
_TrackMouseEvent

comdlg32

ChooseColorA
ChooseFontA
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA

gdi32

AbortDoc
Arc
ArcTo
BitBlt
Chord
CloseEnhMetaFile
CombineRgn
CopyEnhMetaFileA
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDIBSection
CreateEllipticRgn
CreateEnhMetaFileA
CreateFontA
CreateFontIndirectA
CreateHatchBrush
CreatePatternBrush
CreatePen
CreatePenIndirect
CreatePolygonRgn
CreateRectRgn
CreateRoundRectRgn
CreateSolidBrush
DeleteDC
DeleteEnhMetaFile
DeleteObject
Ellipse
EndDoc
EndPage
ExtCreateRegion
ExtSelectClipRgn
ExtTextOutA
GetBkColor
GetCurrentObject
GetDIBits
GetDeviceCaps
GetEnhMetaFileBits
GetObjectA
GetObjectType
GetPixel
GetPolyFillMode
GetStockObject
GetTextAlign
GetTextCharacterExtra
GetTextColor
GetTextExtentPoint32A
GetTextMetricsA
GetViewportOrgEx
LineTo
MoveToEx
PatBlt
Pie
PlayEnhMetaFile
PolyBezier
PolyBezierTo
Polygon
RealizePalette
Rectangle
ResetDCA
RoundRect
SelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetBrushOrgEx
SetEnhMetaFileBits
SetPolyFillMode
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetTextJustification
SetViewportOrgEx
StartDocA
StartPage
StretchBlt
TextOutA

shell32

DragAcceptFiles
DragFinish
DragQueryFileA
SHBrowseForFolderA
SHGetSpecialFolderLocation
ShellAboutA
ShellExecuteA
Shell_NotifyIconA
SHGetPathFromIDListA

shfolder

SHGetFolderPathA

user32

AdjustWindowRect
AppendMenuA
ArrangeIconicWindows
BringWindowToTop
CallNextHookEx
CallWindowProcA
CharToOemBuffA
CheckDlgButton
CheckMenuItem
CheckRadioButton
ClientToScreen
CloseClipboard
CopyRect
CreateCaret
CreateDialogIndirectParamA
CreateDialogParamA
CreateMenu
CreatePopupMenu
CreateWindowExA
DefFrameProcA
DefMDIChildProcA
DefWindowProcA
DestroyCaret
DestroyIcon
DestroyWindow
DialogBoxIndirectParamA
DialogBoxParamA
DispatchMessageA
DrawEdge
DrawFocusRect
DrawFrameControl
DrawIconEx
DrawTextA
EmptyClipboard
EnableMenuItem
EnableWindow
EndDialog
EnumThreadWindows
EqualRect
FillRect
FindWindowExA
FrameRect
GetActiveWindow
GetClassLongA
GetClientRect
GetClipboardData
GetCursorPos
GetDC
GetDialogBaseUnits
GetDlgCtrlID
GetDlgItem
GetDlgItemTextA
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyNameTextA
GetKeyState
GetKeyboardState
GetMenu
GetMenuItemCount
GetMenuItemInfoA
GetMenuState
GetMessageA
GetNextDlgTabItem
GetParent
GetPropA
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMetrics
GetWindow
GetWindowDC
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
HideCaret
InflateRect
IntersectRect
InvalidateRect
InvertRect
IsClipboardFormatAvailable
IsDialogMessageA
IsDlgButtonChecked
IsMenu
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadCursorA
LoadCursorFromFileA
LoadIconA
LoadImageA
MapVirtualKeyA
MapWindowPoints
MessageBeep
MessageBoxA
MessageBoxIndirectA
MoveWindow
OemToCharBuffA
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassA
RegisterClipboardFormatA
RegisterHotKey
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemovePropA
ScreenToClient
ScrollWindow
SendMessageA
SendMessageTimeoutA
SetActiveWindow
SetCapture
SetClassLongA
SetClipboardData
SetCursor
SetCursorPos
SetDlgItemInt
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetKeyboardState
SetMenu
SetMenuItemBitmaps
SetMenuItemInfoA
SetPropA
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongA
SetWindowPos
SetWindowRgn
SetWindowTextA
SetWindowsHookExA
ShowCaret
ShowCursor
ShowWindow
SystemParametersInfoA
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterHotKey
UpdateWindow
WaitMessage
WinHelpA
WindowFromDC
keybd_event
wsprintfA

winmm

PlaySoundA

ole32

CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoGetClassObject
CreateStreamOnHGlobal
OleInitialize
OleUninitialize

oleaut32

GetActiveObject
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPutElement
SysAllocStringLen
SysFreeString
SysStringLen
VarR8FromCy
VarR8FromDec
VariantClear
VariantCopy
VariantInit

olepro32

OleCreatePictureIndirect
OleLoadPicture

Exports

Exports

__GetExceptDLLinfo
___CPPdebugHook
_hb_arrayAdd
_hb_arrayDel
_hb_arrayGet
_hb_arrayIns
_hb_arrayIsObject
_hb_arrayLast
_hb_arrayLen
_hb_arrayNew
_hb_arrayRelease
_hb_arraySet
_hb_arraySize
_hb_extIsArray
_hb_fsClose
_hb_fsCreate
_hb_fsDelete
_hb_fsOpen
_hb_fsRead
_hb_fsSeek
_hb_fsWrite
_hb_param
_hb_paramError
_hb_parc
_hb_parclen
_hb_parcsiz
_hb_pards
_hb_pardsbuff
_hb_parinfa
_hb_parinfo
_hb_parl
_hb_parnd
_hb_parni
_hb_parnl
_hb_pcount
_hb_ret
_hb_reta
_hb_retc
_hb_retclen
_hb_retd
_hb_retdl
_hb_retdts
_hb_retl
_hb_retnd
_hb_retndlen
_hb_retni
_hb_retnilen
_hb_retnl
_hb_retnlen
_hb_retnllen
_hb_storc
_hb_storclen
_hb_stords
_hb_storl
_hb_stornd
_hb_storni
_hb_stornl
_hb_vmExecute
_hb_vmProcessExeUsesDllSymbols
_hb_vmProcessPrgDllSymbols
_hb_vmProcessSymbols
_hb_vmProcessSysDllSymbols
_hb_xfree
_hb_xgrab

Sections

.text
Size: 791KB - Virtual size: 792KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 951KB - Virtual size: 988KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

27840bb6d655443b51c92c02e2a41b1e

Headers

File Characteristics

Imports

ace32

msvfw32

advapi32

kernel32

wsock32

winspool.drv

comctl32

comdlg32

gdi32

shell32

shfolder

user32

winmm

ole32

oleaut32

olepro32

Exports

Exports

Sections

.text Size: 791KB - Virtual size: 792KB

.data Size: 951KB - Virtual size: 988KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 13KB - Virtual size: 16KB

.edata Size: 1KB - Virtual size: 4KB

.rsrc Size: 27KB - Virtual size: 28KB

.reloc Size: 66KB - Virtual size: 68KB

.text
Size: 791KB - Virtual size: 792KB

.data
Size: 951KB - Virtual size: 988KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 13KB - Virtual size: 16KB

.edata
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 27KB - Virtual size: 28KB

.reloc
Size: 66KB - Virtual size: 68KB