0e2f1d07c68eb4790611baa0822514fd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0e2f1d07c68eb4790611baa0822514fd_JaffaCakes118
Size

634KB
MD5

0e2f1d07c68eb4790611baa0822514fd
SHA1

0ba7e4295fd8be3cf490c4349a6bfdb9d37deaed
SHA256

5c1828f4fbae564a727ecd124faa075e72e06c9029f7a004a899f6b6ae281fea
SHA512

00014223b855bfaa05bccd135d15746587740aebc6f813d0eda45b71b7b6418c3c046b6e94594c776eef6fd62beb2f902a065845818b349caefcdc51892e6dd8
SSDEEP

12288:OT6h7Npv8/J7hIAY/ztzCqhpkZoMLLKWNxcp1Y:Omh7Hv8/JuT/zFhpkyW7iG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e2f1d07c68eb4790611baa0822514fd_JaffaCakes118

Files

0e2f1d07c68eb4790611baa0822514fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

045ec106a7f23275741a27af2c801a4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryW
VirtualAlloc
IsValidLocale
SetEnvironmentVariableW
GetHandleInformation
SwitchToFiber
GetDiskFreeSpaceExW
RtlUnwind
GetProfileSectionW
ScrollConsoleScreenBufferA
GetDefaultCommConfigA
GetSystemPowerStatus
FillConsoleOutputCharacterW
InterlockedIncrement
FindAtomA
GetConsoleScreenBufferInfo
ChangeTimerQueueTimer
GetLocalTime
FatalAppExitA
CancelTimerQueueTimer
GetSystemInfo
SearchPathW
ResetEvent
DebugBreak
LocalFree
DeleteAtom
QueryPerformanceCounter
InterlockedCompareExchange
GetProcAddress
InvalidateConsoleDIBits
TlsFree
GetUserDefaultLangID
SleepEx
GetVersionExW
InitializeCriticalSectionAndSpinCount
GetLogicalDriveStringsW
SetHandleCount
GetAtomNameA
TerminateProcess
EnumDateFormatsExA
SetThreadIdealProcessor
SignalObjectAndWait
CreateJobObjectW
GetLargestConsoleWindowSize
GetDiskFreeSpaceA
SetConsoleCursorPosition
VerLanguageNameW
SetCommTimeouts
VerLanguageNameA
GetThreadPriority
GetVersion
GetModuleHandleA
VirtualProtectEx
EscapeCommFunction
PeekConsoleInputA
LoadLibraryA
GetStringTypeW
GetConsoleInputWaitHandle
GetLongPathNameW
VDMOperationStarted
WaitNamedPipeA
FindNextChangeNotification
HeapFree
GlobalLock
lstrcatW
GetSystemDefaultLCID
GetConsoleWindow
FreeLibrary
GetFileAttributesA
GetSystemTime
QueryPerformanceFrequency
RegisterWowExec
GetCommTimeouts
_hread
GetProfileStringW

user32

IsMenu
GetMenuItemID
GetClassInfoExA
GetClassWord
InsertMenuA
CreateMDIWindowA
TileWindows
IMPGetIMEW
GetClipboardOwner
GetTopWindow
IsWindowEnabled
GetKeyState
IsClipboardFormatAvailable
SystemParametersInfoW
DdeCreateStringHandleW
GetAltTabInfoA
ChangeMenuW
GetWindowLongW
GetKeyboardLayout
GetKeyNameTextW
GetLastInputInfo
GetCursorPos
SetDlgItemInt
DlgDirListA
WINNLSGetIMEHotkey
DrawEdge

gdi32

ExtFloodFill
GetObjectType
ExcludeClipRect
SelectObject
GetBkMode
GetPolyFillMode
RemoveFontResourceExA
BitBlt
PolyDraw
SetPixelFormat
ExtTextOutW
GdiStartPageEMF
GetEnhMetaFileDescriptionA
CombineRgn
GetEnhMetaFileW
EnumFontFamiliesA
SetMagicColors
GetMapMode
GetGlyphOutlineW
CreateFontIndirectExW
GetFontData
SetArcDirection
GdiArtificialDecrementDriver
GetCharABCWidthsFloatW
EnumICMProfilesW
RoundRect
SetWindowOrgEx
GetCharABCWidthsW
GetTextAlign
SetMetaRgn
PolyPolygon
RemoveFontMemResourceEx
SetViewportExtEx
GetTextExtentExPointW
UnrealizeObject
GdiPlayPrivatePageEMF
FixBrushOrgEx
EnumFontsW
SelectClipRgn
PatBlt
GetPixel
GetLogColorSpaceW
CreateRectRgnIndirect
GetWinMetaFileBits
SetTextAlign
RectInRegion
SetColorSpace
GetObjectA
CreateCompatibleBitmap
GetRelAbs
CreateCompatibleDC
CloseFigure
GdiGetPageHandle
GetViewportOrgEx
EnumMetaFile
GetPixelFormat
SwapBuffers
EnumFontFamiliesExW
GetFontUnicodeRanges
GdiPlayPageEMF
GetStockObject
CreateFontIndirectExA
MaskBlt
UpdateICMRegKeyA
GdiComment
GetCharacterPlacementW
DeleteDC
EnumFontsA
SetDCBrushColor
AngleArc
AnimatePalette
PtVisible

comctl32

ImageList_DragShowNolock
ImageList_DragLeave
InitializeFlatSB
ImageList_Write
ImageList_BeginDrag
ImageList_GetImageRect
ord5
ImageList_Read
ImageList_SetFilter
FlatSB_SetScrollRange
ImageList_SetOverlayImage
ord6
ImageList_GetBkColor
ImageList_ReplaceIcon
ImageList_DragMove
ImageList_Draw
ord4
FlatSB_GetScrollProp
ord16
ord17
_TrackMouseEvent
CreatePropertySheetPageW
FlatSB_ShowScrollBar
ImageList_GetImageCount
PropertySheetW
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
ImageList_GetIconSize
ImageList_SetBkColor
DrawStatusTextW
ord8

shell32

StrRChrIW
StrStrW
StrRChrIA
StrCmpNIW
StrChrIW
StrRChrA
StrCmpNIA

shlwapi

PathCreateFromUrlA
SHQueryValueExW
PathIsUNCServerShareW
PathCommonPrefixA
PathFindExtensionW
StrDupW
UrlCompareW
PathSetDlgItemPathW
UrlGetLocationW
SHRegQueryUSValueW
PathCompactPathW
PathRemoveFileSpecA
PathIsContentTypeW
PathAppendA
PathIsContentTypeA
PathIsFileSpecW
PathCompactPathA
SHRegQueryInfoUSKeyW
SHEnumKeyExW
PathIsFileSpecA
PathFindOnPathW
UrlUnescapeW
StrCmpIW
StrCmpW
SHSetValueW
SHRegEnumUSKeyW
SHRegCreateUSKeyW
IntlStrEqWorkerA
UrlHashA
SHRegSetUSValueW
SHQueryInfoKeyW
PathFindFileNameA
UrlGetPartW
StrPBrkW
SHRegSetUSValueA
StrNCatA
PathIsSameRootA
PathBuildRootW
SHQueryInfoKeyA
UrlCanonicalizeW
PathIsUNCServerA
PathIsDirectoryA
PathRelativePathToW
StrIsIntlEqualA
PathIsURLW
UrlCanonicalizeA
PathRemoveArgsA
PathAddExtensionA
PathStripPathA
SHRegGetBoolUSValueW
StrTrimW
SHRegDeleteUSValueW
StrIsIntlEqualW
ChrCmpIA
PathCommonPrefixW
SHEnumValueA
PathUnquoteSpacesW
StrSpnA
PathRemoveBlanksA
StrToIntW
StrFromTimeIntervalW
UrlEscapeA
HashData
PathParseIconLocationW
PathGetCharTypeW
PathGetCharTypeA
StrCpyW
PathQuoteSpacesW
PathFindExtensionA
PathSkipRootW
StrFormatByteSizeA
PathRenameExtensionW
PathIsUNCServerW
PathGetDriveNumberA
PathParseIconLocationA
StrToIntExA
UrlGetPartA
UrlApplySchemeA
PathUnquoteSpacesA
SHRegCreateUSKeyA
PathIsSystemFolderA
SHDeleteValueW
SHRegWriteUSValueA
PathFindNextComponentW
SHRegEnumUSKeyA

version

GetFileVersionInfoA
VerFindFileW
GetFileVersionInfoSizeW
VerQueryValueW
VerQueryValueA
GetFileVersionInfoW

opengl32

glTexCoord2f
glPixelMapuiv
GlmfBeginGlsBlock
glTexCoord2d
glMaterialf
glVertex4f
glColor3usv
glFrustum
glGetTexGenfv
wglCreateContext
glMap2d
glGetTexParameterfv
glAlphaFunc
wglGetCurrentContext
glEdgeFlag
glColorPointer
glMateriali
glBegin
GlmfEndPlayback
glEdgeFlagPointer
glGetIntegerv
glMapGrid1f
glPixelZoom
glGetTexGendv
glLightModelfv
glTexCoord1fv
glVertex4fv
glStencilOp
glColor4iv
glPassThrough
glCallLists
glColor3dv
glRectiv
glClearDepth
glEvalCoord1f
wglGetPixelFormat
glColor3ub
wglUseFontOutlinesA
glEvalMesh2
glRenderMode
wglDescribeLayerPlane
glVertex3iv
glLogicOp
glScaled
glStencilFunc
glTexCoord1iv
glLineWidth
glVertex3s
wglGetProcAddress
glRasterPos3dv
glRasterPos3f
wglDeleteContext
glPixelTransferi
glVertex3dv
glEdgeFlagv
glOrtho
glCopyTexImage1D
glRasterPos4s
glListBase
glColor3f
glCopyTexSubImage1D
glColor3i
glColor3d
glMap1f
glRasterPos4f
glGetDoublev
wglGetLayerPaletteEntries
wglMakeCurrent
glGetTexGeniv
glColor4f
glGetBooleanv
glEnd
wglRealizeLayerPalette
glPopMatrix
glFogi
glPixelMapfv
glMaterialiv
glNormal3sv
glTexEnvfv
glEvalCoord2f
wglGetDefaultProcAddress
glEvalMesh1
glNormal3d
glClearColor
glTexCoord2fv
glColor3ui
glLoadName
wglUseFontBitmapsA
glVertex2f
glEnableClientState

msvcrt

fsetpos
ferror
fprintf
fread
fclose
fseek
feof
fputc
_mktemp
_unlink
_getdrive
memset
sqrt
_commit
printf
_wspawnle
fputs
fwprintf
fopen
fwrite
wprintf
_adj_fdiv_m32i
ftell
sprintf
_wspawnlpe

Sections

.text
Size: 604KB - Virtual size: 600KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

045ec106a7f23275741a27af2c801a4e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

shell32

shlwapi

version

opengl32

msvcrt

Sections

.text Size: 604KB - Virtual size: 600KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 12KB - Virtual size: 10KB

.text
Size: 604KB - Virtual size: 600KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 12KB - Virtual size: 10KB