16de0ccdb136d5b77f272cb17a9971b6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

16de0ccdb136d5b77f272cb17a9971b6_JaffaCakes118
Size

154KB
MD5

16de0ccdb136d5b77f272cb17a9971b6
SHA1

e54084ec392ef846bcfdde50f6d34b4697eb504c
SHA256

bd0b792d13670fa3c96dced7b1929c537e90a6b46623f6e12a65f15ebd691cd1
SHA512

aad2e94f8b0df3e45d2b48569e9e6b55fe86eab7a4d6eaab95c852f559b002b7d7975644eeb246d6816a1d44b3a1a8309ff32f430aa8c3cacc443000e475d51a
SSDEEP

3072:e7FRCN7/GB+gYnxBSOhP7jz8WekG/8T6JFVx0I19gr+S2n:e7FRI7uBPgxBSuukS7d12+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16de0ccdb136d5b77f272cb17a9971b6_JaffaCakes118

Files

16de0ccdb136d5b77f272cb17a9971b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c65eb225ee41a1a54163321cc4d82c74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
RaiseException
HeapFree
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
HeapSize
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
UnhandledExceptionFilter
GetCommandLineA
TerminateProcess
ExitProcess
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetStdHandle
GetLocaleInfoA
GetLocaleInfoW
lstrlenA
InterlockedDecrement
InterlockedIncrement
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
RtlUnwind
GetStartupInfoA
GetModuleHandleA
SetErrorMode
GetVersionExA
GlobalGetAtomNameA
GlobalAddAtomA
GetModuleFileNameA
GetFullPathNameA
FindClose
GetVolumeInformationA
FindFirstFileA
FreeLibrary
LoadLibraryA
GetProcAddress
SetEndOfFile
FlushFileBuffers
ReadFile
SetFilePointer
WriteFile
CreateFileA
GetCurrentProcess
SetLastError
GetProcessVersion
GetLastError
VirtualAlloc
WritePrivateProfileStringA
lstrcpyA
LCMapStringA
GlobalFlags
MulDiv
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
lstrcpynA
LocalFree
GetVersion
lstrcatA
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
SetUnhandledExceptionFilter
VirtualFree
GetCurrentThreadId
GlobalAlloc
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
GlobalLock
CloseHandle

user32

IsDialogMessageA
SetWindowTextA
ShowWindow
LoadCursorA
ReleaseCapture
GetDesktopWindow
PtInRect
GetDC
ReleaseDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetSysColorBrush
LoadStringA
WindowFromPoint
ClientToScreen
DestroyMenu
GetClassNameA
InvalidateRect
CharUpperA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
IsIconic
BringWindowToTop
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScreenToClient
ScrollWindow
SetScrollInfo
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
FindWindowA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetMenu
GetSubMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
SetPropA
UnhookWindowsHookEx
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
GetWindowRect
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
EndDialog
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
MessageBoxA
SetCursor
ShowOwnedPopups
PostQuitMessage
PostMessageA
EnableWindow
SendMessageA
LoadIconA
UpdateWindow
SendDlgItemMessageA
SystemParametersInfoA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetMenuItemID
WinHelpA
GetClientRect
wsprintfA
CreateWindowExA
UnregisterClassA

gdi32

CreateBitmap
SetBkColor
GetObjectA
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
GetClipBox
ScaleWindowExtEx
GetDeviceCaps
PtVisible
TextOutA
ExtTextOutA
RectVisible
Escape
SetTextColor

comdlg32

GetOpenFileNameA
GetSaveFileNameA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA

shell32

DragFinish
DragQueryFileA

comctl32

ord17
ImageList_Destroy

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c65eb225ee41a1a54163321cc4d82c74

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 95KB - Virtual size: 94KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 18KB - Virtual size: 31KB

.idata Size: 7KB - Virtual size: 6KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 95KB - Virtual size: 94KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 18KB - Virtual size: 31KB

.idata
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 12KB - Virtual size: 12KB