17080c98e0cd3f7faf2669c8b60fce8c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

17080c98e0cd3f7faf2669c8b60fce8c_JaffaCakes118
Size

192KB
MD5

17080c98e0cd3f7faf2669c8b60fce8c
SHA1

17b47e74018503b9c91b19f21cd6ebc703dadf81
SHA256

dd990a9fd70cc32d8be8d9da3f46848fd65eecd064ae51c8e2e75d5afa19514b
SHA512

101eb0ac0236fea1023d049a26ba72c3e755cd70184d89dab1ee9fe412c19a7cded92a7b34ecfc587b079f8e19de960979959b5f44153f9eb68e3a8196709b11
SSDEEP

3072:TN3D9ol+8fa+/RPgN6QUDn4daZ6lL8jETdNobAx/0:RYf/Fu1IZw84kkd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17080c98e0cd3f7faf2669c8b60fce8c_JaffaCakes118

Files

17080c98e0cd3f7faf2669c8b60fce8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

42b0947446c9d8b29a653d491abb4767

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

htons
htonl
inet_addr
inet_ntoa
WSAGetLastError
connect
select
__WSAFDIsSet
bind
send
shutdown
WSAStartup
WSACleanup
setsockopt
listen
accept
gethostbyname
socket
closesocket
recv

kernel32

lstrcatA
FreeLibrary
LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCPInfo
GetOEMCP
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetCurrentProcess
CreateFileA
lstrcmpW
HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
RtlUnwind
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
SetStdHandle
IsBadReadPtr
IsBadCodePtr
GetModuleHandleA
GetProcAddress
lstrcpyA
GlobalFlags
GetCurrentThreadId
lstrcmpA
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
LocalFree
SetLastError
lstrcpynA
GetLocalTime
TerminateThread
FindResourceA
LoadResource
LockResource
SizeofResource
WaitForSingleObject
CreateEventA
OpenEventA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
GetCurrentProcessId
ProcessIdToSessionId
CloseHandle
UnmapViewOfFile
CreateThread
GetVersion
GetVersionExA
GetModuleFileNameA
LocalAlloc
GetThreadLocale
lstrcmpiA
GetLastError
InterlockedExchange
MultiByteToWideChar
GetACP
Sleep
WideCharToMultiByte
FormatMessageA
InterlockedDecrement
GetLocaleInfoA
lstrlenA

user32

DestroyMenu
PostQuitMessage
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
PostMessageA
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
CopyRect
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowPos
SetWindowLongA
GetDlgItem
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetFocus
SetWindowTextA
SetWindowsHookExA
CallNextHookEx
GetKeyState
PeekMessageA
ValidateRect
GetWindowTextA
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
UnregisterClassA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
DispatchMessageA
TranslateMessage
GetMessageA
wsprintfA
MessageBoxA
GetClassNameA

gdi32

DeleteDC
GetStockObject
SetMapMode
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
DeleteObject
Escape
ExtTextOutA
TextOutA
GetDeviceCaps
RectVisible
PtVisible

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegQueryValueExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegOpenKeyExA

comctl32

ord17

iphlpapi

GetAdaptersInfo

ole32

CoCreateInstance
CoInitialize
OleRun

oleaut32

GetErrorInfo
VariantChangeType
SysFreeString
VariantInit
VariantCopy
VariantClear
SysAllocString

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

42b0947446c9d8b29a653d491abb4767

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

iphlpapi

ole32

oleaut32

Sections

.text Size: 100KB - Virtual size: 97KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 8KB - Virtual size: 19KB

.rsrc Size: 56KB - Virtual size: 56KB

.text
Size: 100KB - Virtual size: 97KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 8KB - Virtual size: 19KB

.rsrc
Size: 56KB - Virtual size: 56KB