17cb08d712f6b0c5ce3da27da6fe68e1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

17cb08d712f6b0c5ce3da27da6fe68e1_JaffaCakes118
Size

268KB
MD5

17cb08d712f6b0c5ce3da27da6fe68e1
SHA1

57f034aefe9d08adf41ed15584cb190b8e42641b
SHA256

6dbed509e941c45bbf1f669fccb96be04291ee41b5ca1f5a613752de514fb076
SHA512

4cd89d395fc77cf7896928b700a08eb3b2044ed99d0a59eaff7cffe58b7830a30fe345c50303ebf3449747c62b6db6cff8f28f523b267e4e903849ae69fed288
SSDEEP

3072:IKp4bcE/n2Ydvj4RmxZnsfT+nSQyx8/5Q7Xlm8lNKzrqYXQ+1JHhsxTJ2RYuYLu:Iq4bppdvjhxGx8+XlxmOTJ2F0eIQx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17cb08d712f6b0c5ce3da27da6fe68e1_JaffaCakes118

Files

17cb08d712f6b0c5ce3da27da6fe68e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5758a635414a75f47dd6b2198aa57d8b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveFileSpecA
PathAddBackslashA
PathFileExistsA
PathFindExtensionA

kernel32

HeapAlloc
HeapFree
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
TerminateProcess
HeapReAlloc
HeapSize
SetStdHandle
GetFileType
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCommandLineA
GetStartupInfoA
RtlUnwind
GetProfileStringA
GetTickCount
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
FreeLibrary
LoadLibraryA
GetWindowsDirectoryA
lstrcpyA
WinExec
lstrlenA
lstrcatA
GetProcAddress
GetSystemDirectoryA
GetFileAttributesA
GetVersion
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
LocalFree
FormatMessageA
LoadResource
FindResourceA
LockResource
GlobalFree
GlobalUnlock
GlobalLock
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetCurrentThreadId
GetLastError
DuplicateHandle
GetCurrentProcess
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
CreateFileA
ReadFile
ExitProcess
WriteFile
SetFilePointer
FlushFileBuffers
CloseHandle
LockFile
UnlockFile
SetEndOfFile
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
SizeofResource
GlobalFlags
WaitForSingleObject
GlobalAlloc
GetCurrentThread
lstrcmpA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
EnterCriticalSection
MulDiv
SetLastError
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
GetFileSize
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose

user32

RegisterClipboardFormatA
PostThreadMessageA
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
GetClassNameA
DestroyMenu
MapDialogRect
SetWindowContextHelpId
GetMessageA
ValidateRect
PostQuitMessage
GetDesktopWindow
GetCursorPos
WindowFromPoint
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
CharUpperA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
SendMessageA
EnableWindow
GetClientRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
DefDlgProcA
IsWindowUnicode
SetCapture
InvalidateRect
ReleaseCapture
PtInRect
SetCursor
GetSysColor
IsWindow
InflateRect
ReleaseDC
GetDC
GetParent
GetWindowRect
CopyIcon
LoadCursorA
MessageBeep
LoadIconA
AppendMenuA
GetSystemMenu
DrawIcon
GetSystemMetrics
IsIconic
TranslateMessage
DispatchMessageA
PeekMessageA
LoadStringA
IsWindowEnabled
GetDlgItem
GetWindowLongA
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
GetActiveWindow
EndDialog
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
DrawTextA

gdi32

ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
SetViewportExtEx
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetTextExtentPoint32A
GetStockObject
GetObjectA
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateFontIndirectA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

DragQueryFileA
DragFinish
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc

comctl32

ord17
ImageList_Destroy

oledlg

ord8

ole32

CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoTaskMemFree
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoUninitialize

olepro32

ord253

oleaut32

SysStringLen
SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen

wininet

InternetGetLastResponseInfoA
HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
InternetErrorDlg
HttpOpenRequestA
InternetConnectA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetOpenA
InternetCloseHandle

Sections

.text
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5758a635414a75f47dd6b2198aa57d8b

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

Sections

.text Size: 188KB - Virtual size: 185KB

.rdata Size: 48KB - Virtual size: 46KB

.data Size: 12KB - Virtual size: 29KB

.rsrc Size: 16KB - Virtual size: 12KB

.text
Size: 188KB - Virtual size: 185KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 12KB - Virtual size: 29KB

.rsrc
Size: 16KB - Virtual size: 12KB