11672ad899fe1855b3155da27f19c171_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

11672ad899fe1855b3155da27f19c171_JaffaCakes118
Size

229KB
MD5

11672ad899fe1855b3155da27f19c171
SHA1

420bcb6066069fb20652ca5536e3b0f413424897
SHA256

d339ef1266fa387b000c515806d1ccbf23693c125793750351d3326c8009155a
SHA512

ab3ecfdbd402bcf4bf98b25a3c0bfffa7c66c33345f15034edf8da1c6ccc7fc3f34fef77e16c8aa0d165a6eb8b0836b9d1c3333102c78d879e724f5bf67abab0
SSDEEP

3072:DulnSInI02w2369Jmjlfu7gjfETj4QuYdMFJlf5GLRGM9oUd8Q0ZjFIdjjLrDJm:DupnZ2w7JmsM8Tdulf5GESoUqZEI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11672ad899fe1855b3155da27f19c171_JaffaCakes118

Files

11672ad899fe1855b3155da27f19c171_JaffaCakes118
.exe windows:4 windows x86 arch:x86

087a1ba52b357c0f5c0ceb67ee94d7bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowRgn
SetWindowLongA
EndDeferWindowPos
CreateDialogParamW
CreateDialogIndirectParamW
GetPropW
AdjustWindowRect
DdeUnaccessData
GetSysColorBrush
RegisterClassExA
GetMenuStringW
GetScrollPos
DdeCreateDataHandle
IsCharAlphaNumericW
GetCaretPos
SetDlgItemTextA
CharUpperBuffA
GetTopWindow
BeginDeferWindowPos
GetClassNameA
MsgWaitForMultipleObjects
FlashWindow
GetWindowTextLengthA
DdeInitializeW
SetMessageQueue
ShowCaret
UnpackDDElParam
UpdateWindow
KillTimer
MonitorFromWindow
DrawIcon
GetDlgItemTextW
GetPropA
CharToOemA
IsWindow
CreateAcceleratorTableW
GetDlgItemInt
GetMenuItemInfoW
DialogBoxParamA
CreateIconIndirect
CallNextHookEx
GetScrollRange
CharUpperA
GetWindowLongA
GrayStringW
DdeFreeStringHandle
GetActiveWindow
CreateMenu
FrameRect
FillRect
LoadAcceleratorsW
LoadCursorW
LoadBitmapA
SetCaretPos
MoveWindow
SetWindowTextA
GetDlgItemTextA
IsRectEmpty
DefMDIChildProcA
WinHelpW
SendMessageW
CreateCaret
DdeConnect
ClipCursor
PostThreadMessageW
DefWindowProcW
OffsetRect
GetCursor
WaitForInputIdle
DeleteMenu
BroadcastSystemMessageA
ReleaseDC
OemToCharA
SetWindowContextHelpId
GetMessageTime

winspool.drv

DocumentPropertiesW
GetPrinterDriverA
GetPrinterDriverDirectoryA
GetPrinterA

kernel32

SuspendThread
GetModuleHandleA
GetVersion
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetTempPathW
GetDateFormatA
GetACP
SystemTimeToFileTime
GetUserDefaultLangID
lstrcmpiW
GetWindowsDirectoryA
IsValidCodePage
QueryDosDeviceW
CreateFileW
LocalReAlloc
GetFullPathNameA
LCMapStringA
GetVersionExW
SystemTimeToTzSpecificLocalTime
DeleteFileA
SetFilePointer
_llseek
GetStringTypeExA
IsProcessorFeaturePresent
CompareStringA
HeapSize
CompareStringW
SetFileAttributesA
FindCloseChangeNotification
GetStartupInfoA
GetPrivateProfileStringA
GetTimeFormatW
Beep
GlobalHandle
GetFileSizeEx
GetSystemDefaultLCID
CreateFileMappingA
OpenEventW
TlsAlloc
SetEnvironmentVariableW
WriteFile
GetProcessAffinityMask
SwitchToThread
SetFileAttributesW
FindFirstFileA
WideCharToMultiByte
GlobalUnlock
FreeLibrary
GetLongPathNameW
GetLastError
GetStringTypeExW
GetLogicalDriveStringsW
GetTimeZoneInformation
GetFileTime
GetWindowsDirectoryW
GetVolumeInformationA
LoadLibraryA
GetCurrentThread
lstrcatW
BackupRead
GetConsoleCP
GlobalMemoryStatus
VirtualAlloc

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
GetFileVersionInfoSizeW

advapi32

GetSidIdentifierAuthority
IsValidSecurityDescriptor
RegCreateKeyExA
RegQueryInfoKeyA
ReportEventA
CryptAcquireContextA
LookupPrivilegeValueW
RegisterEventSourceW

msvcrt

__p__commode
_initterm
__getmainargs
_except_handler3
_acmdln
exit
_XcptFilter
atol
_wtoi
calloc
_ecvt
_CxxThrowException
_vsnwprintf
_fpreset
time
wcsstr
tolower
_c_exit
_splitpath
_vsnprintf
_iob
_snwprintf
_wcsupr
_wcsnicmp
_mbsrchr
_itoa
_cexit
wcsspn
iswalnum
_beginthreadex
wcsncpy
_msize
wcslen
_errno
iswdigit
wcschr
_strnicmp
_setmbcp
_exit
wcstol
ctime
realloc
_expand
_wsplitpath
_controlfp
fclose
localtime
fread
_wtoi64
swprintf
toupper
wcstok
wcstoul
_wcsdup
sprintf
_strlwr
wcspbrk
srand
towlower
wcsrchr
_wcsicmp
strncmp
_adjust_fdiv
__setusermatherr
__p__fmode
__set_app_type

Sections

.text
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

087a1ba52b357c0f5c0ceb67ee94d7bc

Headers

File Characteristics

Imports

user32

winspool.drv

kernel32

version

advapi32

msvcrt

Sections

.text Size: 191KB - Virtual size: 191KB

.rdata Size: 34KB - Virtual size: 34KB

.data Size: 2KB - Virtual size: 2KB

.text
Size: 191KB - Virtual size: 191KB

.rdata
Size: 34KB - Virtual size: 34KB

.data
Size: 2KB - Virtual size: 2KB