165ea37e4dbfa521de180cc73146af20_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

165ea37e4dbfa521de180cc73146af20_JaffaCakes118
Size

835KB
MD5

165ea37e4dbfa521de180cc73146af20
SHA1

651279f9ccb47fb34fea3fe6a9c14152bee9458b
SHA256

35c3739d2fe321740556616c130c6a62f388351e1b671985fb63ce91c11a6519
SHA512

c884e20a94ee25ca52df0a6fd91a270000ff3b070536e2d8a915860a0214e5f58dd74d1023bd252fc1657055bb6c86f1baf4fe27d20577150077c7fe5225971e
SSDEEP

24576:VyYP8ckNwqceiMH4PTxzkkEEgr8c0JFftqn4eA:VyYUhmfMH4TEEgr8c0DYJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
165ea37e4dbfa521de180cc73146af20_JaffaCakes118

Files

165ea37e4dbfa521de180cc73146af20_JaffaCakes118
.exe windows:5 windows x86 arch:x86

090831da4e1c9f4355c3f3135c7bd297

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
GetWindowsDirectoryA
QueryPerformanceCounter
SetEnvironmentVariableA
CreateFileA
GetEnvironmentStrings
CompareStringA
FlushFileBuffers
RtlUnwind
GetSystemInfo
VirtualAlloc
GetConsoleMode
InterlockedExchange
HeapAlloc
GlobalFlags
LocalAlloc
FindClose
HeapSize
GetVersionExA
IsDebuggerPresent
LoadResource
GetCurrentThreadId
ReadFile
GlobalAlloc
Sleep
GetModuleFileNameA
lstrlenA
TlsFree
VirtualProtect
GetCommandLineA
GlobalHandle
FileTimeToSystemTime
GetVersion
SetStdHandle
TlsSetValue
GetCurrentThread
LockFile
GetFileSize
LocalFree
GetSystemTimeAsFileTime
GetFileTime
GetCommandLineW
VirtualFree
GlobalLock
GetACP
GetThreadLocale
CloseHandle
LockResource
lstrcmpA
SetHandleCount
GetFileType
SizeofResource
DeleteCriticalSection
HeapFree
SetLastError
MulDiv
GetConsoleCP
LocalReAlloc
HeapCreate
GetLastError
TlsAlloc
SetFilePointer
GetStringTypeA
GetProcessHeap
GetLocaleInfoA
LeaveCriticalSection
WriteFile
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SetErrorMode
ExitProcess
RaiseException
FreeEnvironmentStringsA
InterlockedDecrement
HeapReAlloc
EnterCriticalSection
VirtualQuery
GlobalUnlock
InterlockedIncrement
DuplicateHandle
GetStdHandle
GetTimeZoneInformation
TlsGetValue
SetFileTime
GlobalDeleteAtom
UnlockFile
InitializeCriticalSection
UnhandledExceptionFilter
TerminateProcess
FreeLibrary
ConvertDefaultLocale
LCMapStringA
HeapDestroy
GlobalFree
SetEndOfFile
GlobalReAlloc
GetConsoleOutputCP
SetUnhandledExceptionFilter
LoadLibraryA
GetCurrentProcessId
EnumResourceLanguagesW
GetSystemDirectoryA
SystemTimeToFileTime
LoadLibraryExA
GetModuleHandleA
GetOEMCP
FindAtomA
AddAtomA
WriteConsoleA
GetProcAddress
FreeConsole
ReadConsoleInputA
GetTickCount
GetStartupInfoA
AllocConsole

user32

GetLastActivePopup
GetMenu
WindowFromPoint
BeginPaint
SetScrollInfo
LockWindowUpdate
SetScrollRange
SystemParametersInfoA
SetCapture
DeferWindowPos
IsIconic
GetMessageTime
GetWindowPlacement
IsWindowVisible
GetDlgItem
SetActiveWindow
GetDCEx
GetSysColor
AdjustWindowRectEx
PostQuitMessage
ReleaseCapture
InvalidateRect
GetWindowDC
GetKeyState
BringWindowToTop
UnpackDDElParam
UnhookWindowsHookEx
GetMenuItemCount
EndDeferWindowPos
EnableMenuItem
IntersectRect
KillTimer
GetNextDlgTabItem
ShowScrollBar
GetMenuState
GetSystemMetrics
ReleaseDC
ClientToScreen
SetRect
MapWindowPoints
CopyRect
SetFocus
GetCursorPos
ValidateRect
ReuseDDElParam
GetDC
EndPaint
MapDialogRect
DrawIcon
SetMenu
IsWindow
SetWindowContextHelpId
SetTimer
ShowWindow
SetRectEmpty
IsZoomed
PtInRect
GetScrollInfo
GetMessagePos
SetParent
IsWindowEnabled
OffsetRect
GetWindowRect
TrackPopupMenu
InvalidateRgn
GetSystemMenu
SetWindowPos
GetWindowRgn
GetScrollPos
DeleteMenu
GetFocus
UpdateWindow
InflateRect
GetCapture
SetScrollPos
DestroyMenu
IsChild
SetCursor
MessageBeep
GetMenuCheckMarkDimensions
MoveWindow
UnregisterClassA
SetMenuItemBitmaps
GetClientRect
GetSubMenu
GetWindowThreadProcessId
CheckMenuItem
IsRectEmpty
GetParent
BeginDeferWindowPos
GetDlgCtrlID
SetForegroundWindow
ScreenToClient
TranslateMessage
DestroyIcon
EqualRect
GetNextDlgGroupItem
SendDlgItemMessageA
CreatePopupMenu
ScrollWindow
GetScrollRange
GetDesktopWindow
GetTopWindow
DestroyWindow
GetForegroundWindow
FillRect
GetWindow
CallNextHookEx
ShowOwnedPopups
GetMenuItemID
GetSysColorBrush
GetActiveWindow
RedrawWindow
EndDialog
SetWindowRgn

gdi32

GetMapMode
CreateSolidBrush
GetRgnBox
BitBlt
ExcludeClipRect
CreateBitmap
IntersectClipRect
OffsetRgn
GetWindowExtEx
GetDeviceCaps
SetViewportExtEx
CreatePatternBrush
CreateRectRgn
SelectObject
Ellipse
DeleteObject
SetRectRgn
ExtSelectClipRgn
DeleteDC
StretchDIBits
SetTextColor
SaveDC
CreateCompatibleDC
PatBlt
SelectClipRgn
GetPixel
OffsetViewportOrgEx
CombineRgn
CreateEllipticRgn
SetMapMode
CreateCompatibleBitmap
SetBkMode
GetStockObject
GetTextColor
ScaleViewportExtEx
SetWindowExtEx
PtVisible
RestoreDC
GetClipBox
RectVisible
SetViewportOrgEx
CreateRectRgnIndirect
GetBkColor
SetBkColor
DPtoLP
Escape
ScaleWindowExtEx

advapi32

SetFileSecurityW
RegCloseKey

shell32

DragAcceptFiles
DragFinish

ole32

CreateILockBytesOnHGlobal
CoCreateInstance
OleInitialize
CLSIDFromString
StgCreateDocfileOnILockBytes
OleIsCurrentClipboard
CreateStreamOnHGlobal
OleUninitialize
CLSIDFromProgID
CoTaskMemFree
StgOpenStorageOnILockBytes
OleFlushClipboard
CoGetClassObject
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries

oleaut32

VariantChangeType
OleCreateFontIndirect
OleLoadPicture
SafeArrayDestroy
SysAllocString
VariantInit
VariantCopy
VariantClear
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
SysStringLen
SysFreeString

comctl32

ImageList_LoadImageW

shlwapi

PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathRemoveExtensionW
PathFindExtensionW
PathFileExistsW

wldap32

ord201

userenv

UnloadUserProfile

Sections

.text
Size: 474KB - Virtual size: 474KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 344KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

090831da4e1c9f4355c3f3135c7bd297

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

wldap32

userenv

Sections

.text Size: 474KB - Virtual size: 474KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 344KB - Virtual size: 364KB

.rsrc Size: 1024B - Virtual size: 840B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 474KB - Virtual size: 474KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 344KB - Virtual size: 364KB

.rsrc
Size: 1024B - Virtual size: 840B

.reloc
Size: 3KB - Virtual size: 3KB