0c25ae2c91419e97a5f2d2d5b06decd3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0c25ae2c91419e97a5f2d2d5b06decd3_JaffaCakes118
Size

2.5MB
MD5

0c25ae2c91419e97a5f2d2d5b06decd3
SHA1

ed255a3c33f118685aa2d0523caecbd973e932f5
SHA256

b00a01bd20a99e4539fba84e7f4ae50e278c9fcd338319caacab3075e3aeecce
SHA512

38e04bf89b722d079274e6f4242567849baf1d72291ac0e3b200c96b1c6212ee9f9334008abdb267622c3b1c4a27e6b000722e2ed91861e8d2bbfd0f078e98dd
SSDEEP

49152:ThP3voCTTtMm2erb10QeroHlogkuV9lp6Nil65tt8pK:tPfoCXnNDV9d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c25ae2c91419e97a5f2d2d5b06decd3_JaffaCakes118

Files

0c25ae2c91419e97a5f2d2d5b06decd3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

49a790a02e8aa25a65932b46268f7cf4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
SetConsoleCtrlHandler
LCMapStringW
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
LCMapStringA
VirtualAlloc
FatalAppExitA
VirtualFree
FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryA
FormatMessageA
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
HeapReAlloc
ExitThread
CreateThread
GetACP
GetDriveTypeA
GetSystemTime
GetTimeZoneInformation
HeapAlloc
RaiseException
TerminateProcess
HeapFree
IsBadReadPtr
RtlUnwind
ExitProcess
GetCommandLineA
GetStartupInfoA
SetErrorMode
FindResourceExA
LocalLock
LocalUnlock
GetOEMCP
GetCPInfo
TlsGetValue
GlobalFree
GlobalUnlock
InterlockedExchange
GetProfileStringA
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
GlobalFlags
GetProcessVersion
FindNextFileA
SetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
WaitForMultipleObjects
ReleaseMutex
CreateMutexA
ReleaseSemaphore
CreateSemaphoreA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
DuplicateHandle
VirtualProtect
SetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
GetCurrentThread
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
lstrcpynA
GlobalGetAtomNameA
GlobalAddAtomA
IsDBCSLeadByte
GetDateFormatA
GetUserDefaultLCID
EnumDateFormatsA
MulDiv
GetPrivateProfileSectionA
GetNumberFormatA
lstrcmpA
GlobalReAlloc
GlobalAlloc
DeviceIoControl
CreateEventA
GlobalMemoryStatus
lstrcmpiA
GetCurrentDirectoryA
SetCurrentDirectoryA
CreateFileA
GetFileSize
ReadFile
CloseHandle
IsBadWritePtr
GetVersionExA
GetVersion
lstrcatA
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetLastError
LockResource
WideCharToMultiByte
FindResourceA
SizeofResource
LoadResource
GetLocaleInfoA
GetUserDefaultLangID
GetSystemDefaultLangID
lstrcpyA
WinExec
GetWindowsDirectoryA
GetLocalTime
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrlenA
LocalAlloc
LocalFree
WaitForSingleObject
GetTickCount
MultiByteToWideChar
lstrlenW
GetModuleFileNameA
Sleep
GlobalSize
GlobalLock
CompareStringA

user32

EndPaint
TabbedTextOutA
GrayStringA
GetAsyncKeyState
GetWindowThreadProcessId
wvsprintfA
CharUpperA
MsgWaitForMultipleObjects
GetDialogBaseUnits
GetTabbedTextExtentA
GetDCEx
LockWindowUpdate
BeginPaint
EndDialog
CreateDialogIndirectParamA
OemToCharA
CharToOemA
ValidateRect
ShowOwnedPopups
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SendDlgItemMessageA
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
RegisterClassA
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
DefWindowProcA
GetMessageTime
GetForegroundWindow
GetLastActivePopup
IsIconic
GetDlgItem
GetDlgCtrlID
UnpackDDElParam
ReuseDDElParam
SetActiveWindow
GetClassInfoA
IsWindowEnabled
SetRectEmpty
SetWindowPos
DefMDIChildProcA
TranslateMDISysAccel
DefFrameProcA
ShowCursor
GetNextDlgTabItem
CreatePopupMenu
AppendMenuA
GetPriorityClipboardFormat
IsClipboardFormatAvailable
GetClipboardData
OpenClipboard
EmptyClipboard
GetClipboardOwner
CloseClipboard
SetClipboardData
RegisterClipboardFormatA
SetFocus
DrawFocusRect
DestroyMenu
TranslateAcceleratorA
SetClassLongA
GetMessagePos
UnionRect
MoveWindow
RegisterWindowMessageA
EqualRect
InvertRect
ModifyMenuA
GetCursor
WindowFromDC
IntersectRect
IsRectEmpty
CreateWindowExA
DestroyWindow
DestroyIcon
IsMenu
SetMenuItemInfoA
DrawTextA
DrawFrameControl
DrawIconEx
DrawStateA
MapWindowPoints
SetParent
SetWindowTextA
IsWindowVisible
GetWindowTextA
EnumChildWindows
MapDialogRect
GetWindowPlacement
ShowWindow
GetDesktopWindow
IsWindow
MessageBeep
DestroyCursor
WinHelpA
GetFocus
IsChild
GetWindow
MessageBoxA
LoadStringA
SetRect
AdjustWindowRect
LoadBitmapA
RedrawWindow
CopyIcon
SetForegroundWindow
wsprintfA
PostQuitMessage
FillRect
LoadImageA
KillTimer
GetSystemMenu
EnableMenuItem
GetSubMenu
DeleteMenu
GetMenuStringA
InsertMenuA
RemoveMenu
LoadMenuA
SetMenu
WaitMessage
SetCapture
PeekMessageA
DispatchMessageA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
CharNextA
IsWindowUnicode
ReleaseCapture
GetMessageA
TranslateMessage
AdjustWindowRectEx
GetMenuItemInfoA
GetWindowDC
GetActiveWindow
WindowFromPoint
GetCursorPos
ScreenToClient
ChildWindowFromPoint
GetClassNameA
PtInRect
SetCursor
ClientToScreen
GetMenu
SetTimer
GetSystemMetrics
IsZoomed
GetMenuItemCount
GetMenuItemID
CheckMenuItem
GetCapture
DrawEdge
GetKeyState
OffsetRect
GetWindowRect
GetDC
CopyRect
ReleaseDC
GetWindowLongA
SetWindowLongA
SystemParametersInfoA
CallWindowProcA
InvalidateRect
GetClientRect
GetSysColor
InflateRect
GetParent
PostMessageA
EnableWindow
BringWindowToTop
LoadCursorA
GetSysColorBrush
LoadIconA
SendMessageA
UpdateWindow
DrawMenuBar
LoadAcceleratorsA

gdi32

RestoreDC
SetMetaRgn
DeleteDC
SaveDC
CreateDIBSection
CreateICA
GetTextMetricsA
CreateBitmap
SetMiterLimit
GetMiterLimit
GetWindowOrgEx
GetViewportOrgEx
CreateHatchBrush
EnumFontFamiliesExA
CreateBrushIndirect
PaintRgn
Polygon
OffsetRgn
GetRgnBox
PtInRegion
StrokePath
EndPath
Polyline
BeginPath
PolyBezier
StrokeAndFillPath
Ellipse
GetPaletteEntries
ExtCreatePen
Arc
GetOutlineTextMetricsA
FillPath
CreateRectRgn
DPtoLP
Pie
PathToRegion
SetPixel
GetCharABCWidthsA
GetCharWidthW
GetCharABCWidthsW
TextOutW
GetTextExtentPoint32W
GetPath
GetCurrentPositionEx
CloseFigure
RoundRect
GetDCOrgEx
GetClipBox
SetTextColor
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
CreateEllipticRgnIndirect
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextCharacterExtra
SetMapperFlags
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
Escape
SetRectRgn
GetCharWidthA
GetTextFaceA
GetBkColor
SetTextJustification
CreateDIBitmap
GetTextExtentPointA
TextOutA
SelectObject
GetTextExtentPoint32A
ExtTextOutA
CreateCompatibleDC
CreateCompatibleBitmap
SetDIBits
StretchBlt
BitBlt
CreateRectRgnIndirect
CombineRgn
FillRgn
CreateRoundRectRgn
SelectPalette
GetDIBits
GetViewportExtEx
GetWindowExtEx
GetMapMode
StretchDIBits
DeleteObject
CreatePen
CreateSolidBrush
EndDoc
SetAbortProc
StartDocA
StartPage
EndPage
AbortDoc
CreateDCA
Rectangle
PatBlt
GetStockObject
GetObjectA
SetMapMode
CreateFontA
GetDeviceCaps
CreateHalftonePalette
RealizePalette
CreateFontIndirectA
LPtoDP

comdlg32

PrintDlgA
FindTextA
ReplaceTextA
PageSetupDlgA
ChooseFontA
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

winspool.drv

DeviceCapabilitiesA
OpenPrinterA
EnumJobsA
ClosePrinter
DocumentPropertiesA

shell32

DragQueryPoint
SHGetDesktopFolder
DragAcceptFiles
SHGetFileInfoA
ExtractIconA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
DragQueryFileA
ShellExecuteA
DragFinish

comctl32

DestroyPropertySheetPage
PropertySheetA
ImageList_Write
ImageList_Read
ImageList_Merge
ImageList_LoadImageA
ImageList_Create
ImageList_Destroy
ord14
ord13
ImageList_EndDrag
ImageList_DragLeave
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_BeginDrag
ImageList_DragMove
ImageList_DragEnter
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetIcon
ord17
CreatePropertySheetPageA

ole32

CoUninitialize
CoCreateInstance
CoInitializeEx
CoInitialize

oleaut32

SysAllocString
VariantChangeType
SetErrorInfo
GetErrorInfo
CreateErrorInfo
VariantInit
SysAllocStringLen
SysFreeString
VariantClear

shlwapi

SHDeleteKeyA

msvfw32

DrawDibSetPalette
DrawDibRealize
DrawDibBegin
DrawDibDraw
DrawDibClose
DrawDibOpen

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 300KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 584KB - Virtual size: 584KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

49a790a02e8aa25a65932b46268f7cf4

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

shell32

comctl32

ole32

oleaut32

shlwapi

msvfw32

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 300KB - Virtual size: 298KB

.data Size: 108KB - Virtual size: 130KB

.rsrc Size: 584KB - Virtual size: 584KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 300KB - Virtual size: 298KB

.data
Size: 108KB - Virtual size: 130KB

.rsrc
Size: 584KB - Virtual size: 584KB