2e49e7ce57c563a8f6d5a346a40b4779_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2e49e7ce57c563a8f6d5a346a40b4779_JaffaCakes118
Size

155KB
MD5

2e49e7ce57c563a8f6d5a346a40b4779
SHA1

3bd86725bcfb9752e39e0d319270e30dc1391da6
SHA256

e2bf6155ad0c82bfc00bc9ec7734a80d809ecfe68fd4ffd74ce6ed57991e2b7d
SHA512

08261f4b1576c02b2dfe25ced19953507f030a9c031c997a621a76a211d4af08494771b23fded882805c604ac783e70152fbb2becf63675340ccfe0a048d931b
SSDEEP

3072:/uv2RLe0Py9jCngy7xA6gJNQqMuvNYD/5SnQ+TrVe2TGyMW2+8G5ojviuSct:/qCg9jUdeJNkqLQobxl5ojv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e49e7ce57c563a8f6d5a346a40b4779_JaffaCakes118

Files

2e49e7ce57c563a8f6d5a346a40b4779_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4106cc9a5e17e393784af62b99fe5fba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetBkColor
ImageList_DrawEx
ImageList_Destroy
ImageList_Write
ImageList_Read
ImageList_Add
ImageList_Create
ImageList_DragShowNolock
ImageList_Draw
ImageList_Remove
ImageList_DragShowNolock
ImageList_Destroy
ImageList_Read
ImageList_Remove
ImageList_DragShowNolock
ImageList_Write
ImageList_Write
ImageList_Add
ImageList_Read
ImageList_DrawEx
ImageList_Remove
ImageList_DragShowNolock
ImageList_Write
ImageList_Create
ImageList_Read
ImageList_DragShowNolock

advapi32

RegDeleteValueA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA
GetLengthSid
RegEnumKeyA
RegQueryInfoKeyA
RegEnumKeyA
RegLoadKeyA
RegEnumKeyExA

ole32

MkParseDisplayName
CoRegisterClassObject
CoRevokeClassObject
GetHGlobalFromStream
CoTaskMemFree
StgOpenStorage
CLSIDFromString
OleRegGetUserType
StgCreateDocfileOnILockBytes
CoCreateInstanceEx
CreateOleAdviseHolder
StgOpenStorage
OleCreateStaticFromData
CoReleaseMarshalData
CoGetMalloc
GetHGlobalFromStream
CoCreateGuid
CoFreeUnusedLibraries
OleCreateStaticFromData
CreateStreamOnHGlobal
CoCreateInstanceEx
CoDisconnectObject
CLSIDFromString
CreateStreamOnHGlobal
ReleaseStgMedium
CoGetObjectContext
CLSIDFromProgID
CoRevokeClassObject
CoFreeUnusedLibraries
CoReleaseMarshalData
CLSIDFromString
ReleaseStgMedium
CoRegisterClassObject
CoUnmarshalInterface
CreateBindCtx
StringFromIID
OleRun
CLSIDFromString
CoFreeUnusedLibraries

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
FindTextA
GetOpenFileNameA
ChooseColorA
ChooseColorA
GetOpenFileNameA
GetFileTitleA

version

VerFindFileA
GetFileVersionInfoA
GetFileVersionInfoA
VerInstallFileA
VerQueryValueA
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoA

user32

GetClassNameA
ScreenToClient
MapVirtualKeyA
WaitMessage
GetClipboardData
SetWindowPos
PeekMessageW
GetKeyboardLayoutList
SetPropA
EnumThreadWindows
DestroyWindow
CheckMenuItem
PostMessageA
GetParent
CreateWindowExA
GetSysColor
GetWindowPlacement
DeleteMenu
DispatchMessageA
MoveWindow
FindWindowA
PeekMessageA
GetWindow
DrawIcon
MsgWaitForMultipleObjects
SetWindowsHookExA
TranslateMessage
RemovePropA
ShowWindow
IntersectRect
PtInRect
EqualRect
IsChild
SetWindowPlacement
IsWindowEnabled
GetDesktopWindow
GetWindowLongA
RedrawWindow
EnableWindow
GetLastActivePopup
LoadStringA
GetKeyNameTextA
GetWindowLongW
GetDC
EmptyClipboard
GetMenuState
EnableScrollBar
DefFrameProcA
MessageBeep
GetCursor
GetMenuItemID
SetScrollInfo
GetLastActivePopup
EndPaint
ScreenToClient
IsWindow
DestroyCursor
DefWindowProcA
GetPropA
SetWindowPos
DefFrameProcA
EnumThreadWindows
CharNextW
GetMessagePos
SetParent
TrackPopupMenu
GetClientRect
KillTimer
GetKeyboardType
PeekMessageW
IsDialogMessageW
GetCapture
CharNextA
GetIconInfo
GetSystemMetrics
RegisterClassA
ShowScrollBar
BeginPaint
DefMDIChildProcA
ScrollWindow
GetWindowLongW
EqualRect
SetMenu
SetClipboardData
RegisterClipboardFormatA
RemovePropA
SetCursor
GetTopWindow
GetKeyState
RemoveMenu
GetMessagePos
EnableWindow
SetWindowTextA
EnumWindows
LoadStringA
LoadCursorA
LoadIconA
EnumChildWindows
GetCursorPos
SetScrollInfo
DestroyIcon
SetParent
ReleaseCapture
GetParent
GetKeyNameTextA
DefMDIChildProcA
PtInRect
SetRect
IsWindowUnicode
IsDialogMessageA
GetDC
CreateMenu
CharNextA
WindowFromPoint
SetMenuItemInfoA
DestroyMenu
SetWindowPlacement
GetMenuStringA
GetKeyboardState
DrawEdge
SetWindowsHookExA
LoadKeyboardLayoutA
GetWindowTextA
GetSysColorBrush
CallNextHookEx
GetActiveWindow
ShowOwnedPopups
SetCursor
GetSubMenu
UpdateWindow
MapWindowPoints
CreatePopupMenu
SetScrollPos
DrawMenuBar
DefFrameProcA
IsWindow
GetScrollInfo
IsDialogMessageW
GetClassInfoA
LoadStringA
DrawIconEx
CreateIcon
GetClientRect
GetWindowPlacement
KillTimer
RedrawWindow
GetCursor
LoadBitmapA
GetFocus
FindWindowA
wsprintfA
IsIconic
ClientToScreen
GetClassLongA
SetScrollInfo
IsChild
EnumWindows
GetSystemMenu
OpenClipboard
GetKeyboardLayoutList
FillRect
CreateWindowExA
GetCursorPos
GetKeyboardLayout
GetWindowTextA
SetClipboardData
GetKeyState
GetSubMenu
IsWindowUnicode
MapWindowPoints
EqualRect
DrawTextA
DestroyWindow
LoadIconA
SetMenu
ReleaseCapture
GetMenuItemInfoA
MsgWaitForMultipleObjects
DefMDIChildProcA
GetClipboardData
GetKeyboardState
EnableWindow
DrawIcon
GetClassInfoA

kernel32

GetACP
SetThreadLocale
SetEvent
GetStringTypeW
GlobalFindAtomA
LocalReAlloc
ReadFile
GetModuleHandleW
WriteFile
LocalFree
GetDateFormatA
WaitForSingleObject
GetFullPathNameA
VirtualAlloc
HeapDestroy
SizeofResource
GetVersionExA
lstrcmpA
SetFilePointer
WriteFile
GetDateFormatA
GetProcAddress
GetModuleHandleW
VirtualAlloc
GetFullPathNameA
SetEndOfFile
CreateEventA
ReadFile
GetCurrentThreadId
GetVersion
DeleteFileA
GetThreadLocale
GlobalAlloc
EnterCriticalSection
GlobalFindAtomA
CloseHandle
LocalFree
GetProcessHeap
HeapDestroy
CreateFileA
HeapAlloc
GetFullPathNameA
GetCommandLineA
lstrcpyA
LoadLibraryA
GetVersionExA
VirtualAlloc
ExitThread
GetProcAddress
LockResource
LoadResource
LocalAlloc
ExitProcess
GetModuleHandleA
FindClose
LoadResource
MoveFileA
FreeLibrary
GetProcAddress
SetThreadLocale
GetTickCount
GetProcessHeap
SetHandleCount
FormatMessageA
MoveFileExA
HeapAlloc
GetModuleHandleA
GetCurrentThreadId
VirtualFree
Sleep
WaitForSingleObject
GetSystemDefaultLangID
VirtualAlloc
lstrcpyA
lstrlenW
GetDiskFreeSpaceA
CreateThread
SetEndOfFile
SetEvent
VirtualQuery
DeleteCriticalSection
CreateFileA
HeapDestroy
GetLastError
GetModuleHandleA
SetThreadLocale
GlobalAlloc
Sleep
FreeResource

shlwapi

SHStrDupA
SHQueryInfoKeyA
SHGetValueA
PathIsDirectoryA
SHEnumValueA
SHQueryValueExA
PathIsContentTypeA
SHEnumValueA
SHDeleteKeyA
SHQueryInfoKeyA
SHSetValueA
SHGetValueA
SHStrDupA
SHEnumValueA
SHDeleteKeyA
SHSetValueA
PathIsContentTypeA
SHGetValueA

shell32

SHGetFolderPathA
SHGetSpecialFolderLocation
DragQueryFileA
SHGetDiskFreeSpaceA
SHGetSpecialFolderLocation
SHGetDesktopFolder
Shell_NotifyIconA
SHGetFileInfoA
SHGetFolderPathA

gdi32

CreateCompatibleDC
CreatePenIndirect
CreateBitmap
SaveDC
GetBitmapBits
SelectPalette
LineTo
GetClipBox
CreateDIBitmap
BitBlt
GetPixel

oleaut32

OleLoadPicture
VariantChangeType
VariantCopyInd
GetErrorInfo
SysStringLen
SafeArrayUnaccessData

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4106cc9a5e17e393784af62b99fe5fba

Headers

File Characteristics

Imports

comctl32

advapi32

ole32

comdlg32

version

user32

kernel32

shlwapi

shell32

gdi32

oleaut32

Sections

.text Size: 68KB - Virtual size: 67KB

.data Size: 2KB - Virtual size: 2KB

.rdata Size: 73KB - Virtual size: 73KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 68KB - Virtual size: 67KB

.data
Size: 2KB - Virtual size: 2KB

.rdata
Size: 73KB - Virtual size: 73KB

.rsrc
Size: 10KB - Virtual size: 9KB