158fa635e4a3a33d185fe1396c627588_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

158fa635e4a3a33d185fe1396c627588_JaffaCakes118
Size

2.4MB
MD5

158fa635e4a3a33d185fe1396c627588
SHA1

d3f0de9f713168f5b32601daca5f568a260e218f
SHA256

5c9e14a02d5ef6d76a44d88d3a88db53366796f88a88c971bafb8a1e9cc8bfb1
SHA512

6fe49edb23ea1b2ef0cccfb45869134a0c6f370c4c9f4aeea5241686453e173cc1e441cd3be9024f3a9b05cbc3fd3625d4c598238cd479c136331ef19ec6c7df
SSDEEP

49152:JVagG1TC9d7vvvTsbe3RE73Qfz2uskzc3M:Tap+d7vXTsw03e2G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
158fa635e4a3a33d185fe1396c627588_JaffaCakes118

Files

158fa635e4a3a33d185fe1396c627588_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d015265d62c40bfbeb9669e96573b88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
GetSystemTime
GetLocalTime
TerminateProcess
GetACP
HeapSize
HeapReAlloc
SetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
ExitProcess
GetProfileStringA
InterlockedExchange
GetStartupInfoA
RaiseException
HeapAlloc
HeapFree
RtlUnwind
GetOEMCP
GetCPInfo
GetProcessVersion
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GlobalFlags
FileTimeToLocalFileTime
FileTimeToSystemTime
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GlobalFree
WaitForSingleObject
GlobalAlloc
GetCurrentThread
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FormatMessageA
LocalFree
LocalAlloc
EnterCriticalSection
WideCharToMultiByte
InterlockedIncrement
FreeLibrary
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpiA
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
lstrcpyA
lstrlenA
MultiByteToWideChar
LoadLibraryA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
InterlockedDecrement
GlobalLock
GlobalUnlock
MulDiv
GetModuleHandleA
GetProcAddress
SetLastError
GetDiskFreeSpaceA
SetVolumeLabelA
GetDriveTypeA
CreateDirectoryA
GetFileAttributesA
SetFileAttributesA
ResumeThread
CreateThread
FindResourceA
SizeofResource
LoadResource
LockResource
CreateMutexA
GetCommandLineA
GetVersionExA
GetModuleFileNameA
GetLastError
GetTickCount
Sleep
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetSystemInfo
GetPrivateProfileStringA
lstrcmpA
lstrcatA
GetPrivateProfileIntA
WritePrivateProfileStringA
DeleteFileA
GetFileSize
SetFilePointer
WriteFile
CreateFileA
ReadFile
CloseHandle
FindFirstFileA
FindNextFileA
FindClose
GetCurrentDirectoryA
GetEnvironmentStrings
SetCurrentDirectoryA

user32

LoadIconA
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetActiveWindow
IsWindow
AdjustWindowRectEx
IsWindowVisible
GetTopWindow
IsChild
GetParent
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
CharUpperA
wsprintfA
UnhookWindowsHookEx
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
CharToOemBuffA
OemToCharBuffA
CharLowerA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
FillRect
GetSysColor
GetCursorPos
WindowFromPoint
SetFocus
GetClassNameA
LoadStringA
PostQuitMessage
InvalidateRect
UpdateWindow
CopyRect
PostMessageA
MessageBoxA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
GetNextDlgTabItem
EnableWindow
KillTimer
RedrawWindow
GetClientRect
SendMessageA
SetTimer
SetWindowRgn
GetDesktopWindow
LoadImageA
PeekMessageA
DispatchMessageA
TranslateMessage
PostThreadMessageA
RegisterClipboardFormatA
MessageBeep
GetNextDlgGroupItem
SetRect
IsWindowEnabled
DestroyMenu
GetSysColorBrush
LoadCursorA
PtInRect
CharNextA
InflateRect
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
GetMessageA
GetActiveWindow
ValidateRect
SetCursor
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetWindowLongA
CopyAcceleratorTableA

gdi32

SetBkMode
SetStretchBltMode
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
IntersectClipRect
MoveToEx
LineTo
DeleteObject
SetBkColor
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
PatBlt
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
SelectPalette
SelectObject
RestoreDC
SaveDC
DeleteDC
Rectangle
SetPixel
CreateCompatibleBitmap
CreateFontIndirectA
GetStockObject
CreateRectRgn
RealizePalette
StretchDIBits
GetDIBits
BitBlt
CreateCompatibleDC
CreatePalette
CreateDIBitmap
GetTextExtentPointA
GetObjectA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA

shell32

ShellExecuteA
ShellExecuteExA

comctl32

ord17

oledlg

ord8

ole32

CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID

olepro32

ord253

oleaut32

VariantClear
SysAllocStringLen
SysFreeString
VariantTimeToSystemTime
VariantChangeType
SysAllocString
SysStringLen
VariantCopy
SysAllocStringByteLen

wsock32

send
ntohs
inet_ntoa
recv
gethostbyname
htons
socket
setsockopt
connect
WSAGetLastError
WSAAsyncSelect
closesocket
WSACleanup
WSAStartup
ioctlsocket

wininet

FtpFindFirstFileA
FtpOpenFileA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetConnectA

msvcrt

setvbuf
fsetpos
fgetpos
fgetc
fputc
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
free
calloc
ungetwc
fgetwc

Sections

.text
Size: 252KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d015265d62c40bfbeb9669e96573b88

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

wininet

msvcrt

Sections

.text Size: 252KB - Virtual size: 248KB

.rdata Size: 56KB - Virtual size: 54KB

.data Size: 28KB - Virtual size: 44KB

.rsrc Size: 2.0MB - Virtual size: 2.0MB

.text
Size: 252KB - Virtual size: 248KB

.rdata
Size: 56KB - Virtual size: 54KB

.data
Size: 28KB - Virtual size: 44KB

.rsrc
Size: 2.0MB - Virtual size: 2.0MB