1421bae05fc528a0cb0cb16237cfc204_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1421bae05fc528a0cb0cb16237cfc204_JaffaCakes118
Size

1.1MB
MD5

1421bae05fc528a0cb0cb16237cfc204
SHA1

989fac27a74bc3f8847482984b989003a0627db4
SHA256

132bf064902e1bff980439a3748bf9e986550b07021aeb510a6ac19f8f4ab43c
SHA512

a768e5277b1e97ee6156792fe487e800705b9efcfc505f647fbf4d43065cceabfab268fd986fa81d1d42a11f4be808ceee57bbff507b20b73d72034e8f17fb29
SSDEEP

12288:F2QKqHbw9pvqmOHFd0uJVD5hANuJlOU29K3jX5wvp3I5VwToPjcjSWb1xK3:FFKqbw9pvniFd0+VfouvOJQ6iVtHU1Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1421bae05fc528a0cb0cb16237cfc204_JaffaCakes118

Files

1421bae05fc528a0cb0cb16237cfc204_JaffaCakes118
.exe windows:5 windows x86 arch:x86

14630c86b2fe81ecba1ce88b5baf23fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

inet_addr
gethostbyname
WSACleanup
socket
WSAStartup
htons
listen
bind
__WSAFDIsSet
select
connect
closesocket
ioctlsocket
recv
accept
send

gdi32

DeleteDC
GetStockObject
GetMapMode
SetMapMode
LPtoDP
GetDeviceCaps
DPtoLP
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutA
RectVisible
PtVisible
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
DeleteObject
ExtTextOutA
SaveDC
RestoreDC

wininet

InternetSetOptionA

kernel32

lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetCurrentProcess
GetFullPathNameA
GlobalFlags
GetLocaleInfoA
GetCPInfo
GetOEMCP
FileTimeToLocalFileTime
GetFileAttributesA
FileTimeToSystemTime
GetCurrentDirectoryA
GetSystemTimeAsFileTime
ExitProcess
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetDriveTypeA
HeapAlloc
HeapFree
VirtualAlloc
HeapReAlloc
HeapSize
GetACP
IsValidCodePage
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
VirtualFree
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetExitCodeProcess
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GetProcessHeap
lstrcmpA
GlobalGetAtomNameA
InterlockedIncrement
GetModuleHandleW
CompareStringA
GetCurrentThreadId
MultiByteToWideChar
lstrlenA
GetCurrentProcessId
FreeLibrary
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
InterlockedDecrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalFree
LocalAlloc
SetLastError
VirtualQuery
VirtualProtect
GetEnvironmentVariableA
CreateMutexA
GetCommandLineA
TerminateThread
GetModuleFileNameA
CreateThread
GetVersionExA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
MoveFileA
Module32First
ResetEvent
CreateToolhelp32Snapshot
Process32First
CreateDirectoryA
OpenProcess
Process32Next
CopyFileA
CreateFileA
ReadFile
WriteFile
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
WaitForDebugEvent
TerminateProcess
GetThreadContext
SetThreadContext
ContinueDebugEvent
GetModuleHandleA
MulDiv
SetFileAttributesA
SetEvent
OutputDebugStringA
GetLocalTime
FormatMessageA
ReleaseMutex
CreateEventA
WaitForSingleObject
CloseHandle
GetLastError
CreateProcessA
GetTempPathA
Sleep
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose
GetWindowsDirectoryA

user32

SetMenu
SetForegroundWindow
GetClientRect
PostMessageA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetClassInfoA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
EnableMenuItem
CheckMenuItem
GetWindowTextA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
SetWindowsHookExA
CallNextHookEx
GetKeyState
PeekMessageA
ValidateRect
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
ClientToScreen
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
MessageBoxA
ShowWindow
GetTitleBarInfo
GetDesktopWindow
GetWindowRect
MoveWindow
SetWindowTextA
BeginPaint
EndPaint
InvalidateRect
UpdateWindow
SetFocus
GetWindowDC
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
PostQuitMessage
CreateIconFromResourceEx
ModifyMenuA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
CreateServiceA
ChangeServiceConfig2A
StartServiceA
SetServiceStatus
RegOpenKeyA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenSCManagerA
EnumServicesStatusA
OpenServiceA
ControlService
CloseServiceHandle

shell32

Shell_NotifyIconA

ole32

CreateStreamOnHGlobal

oleaut32

VariantInit
VariantChangeType
VariantClear
OleLoadPicture

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 378KB - Virtual size: 377KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 749KB - Virtual size: 786KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

14630c86b2fe81ecba1ce88b5baf23fc

Headers

DLL Characteristics

File Characteristics

Imports

wsock32

gdi32

wininet

kernel32

user32

winspool.drv

advapi32

shell32

ole32

oleaut32

oleacc

Sections

.text Size: 378KB - Virtual size: 377KB

.rdata Size: 44KB - Virtual size: 44KB

.data Size: 749KB - Virtual size: 786KB

.text
Size: 378KB - Virtual size: 377KB

.rdata
Size: 44KB - Virtual size: 44KB

.data
Size: 749KB - Virtual size: 786KB