36e186370401508da8da04a7eab90b72_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

36e186370401508da8da04a7eab90b72_JaffaCakes118
Size

383KB
MD5

36e186370401508da8da04a7eab90b72
SHA1

633fde67002a770df09362b0a2cb6b6e9739db1b
SHA256

eb0a46922a8af506871e81df5d221c8fd4a6c5f9ea43a381092796c2c8fbc172
SHA512

ee99d6ca2b9f6367289baaeabfac283dec66588f051d4fd90956acb0647aeb2288c138d1e8be071b4ea4d7d0135446d09f78645ef4f45316313517e11d7d02b7
SSDEEP

6144:MJT7Owv7s+/FqCXOql6MUaVg37oo48CcvXmr9q8x3unDO4hy6liFO5jroEyg:MsG7n/F+a6MNq37oo4tcx1ogjJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36e186370401508da8da04a7eab90b72_JaffaCakes118

Files

36e186370401508da8da04a7eab90b72_JaffaCakes118
.exe windows:4 windows x86 arch:x86

126b2c96751fd265fbadf841a480cefc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynW
lstrlenA
lstrcpyW
lstrcmpiW
lstrcmpW
lstrcatW
_lwrite
_lread
_lopen
_llseek
_lcreat
_lclose
WriteProfileStringW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
VirtualQuery
VirtualFree
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TlsGetValue
TerminateThread
TerminateProcess
SystemTimeToFileTime
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetThreadPriority
SetLastError
SetHandleCount
SetFileTime
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
SetCurrentDirectoryW
CloseHandle
ResumeThread
ResetEvent
RemoveDirectoryW
ReleaseSemaphore
ReleaseMutex
ReadFile
RaiseException
QueueUserWorkItem
QueryPerformanceFrequency
QueryPerformanceCounter
ProcessIdToSessionId
OutputDebugStringW
OutputDebugStringA
OpenThread
OpenProcess
OpenEventW
MultiByteToWideChar
MulDiv
MoveFileW
MapViewOfFile
LockResource
LocalFree
LocalFileTimeToFileTime
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
IsDebuggerPresent
IsDBCSLeadByte
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalMemoryStatus
GlobalLock
GlobalHandle
GlobalFree
GlobalAlloc
GetVersionExW
GetVersionExA
GetVersion
GetTimeZoneInformation
GetTimeFormatW
GetTickCount
GetThreadPriority
GetThreadLocale
GetTempPathW
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDirectoryA
GetSystemDefaultLangID
GetStringTypeExW
GetStdHandle
GetStartupInfoW
GetProfileStringW
GetProcessHeap
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetMailslotInfo
GetLogicalDrives
GetLocaleInfoW
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameA
GetFileTime
GetFileSize
GetFileInformationByHandle
GetFileAttributesW
GetFileAttributesExW
GetExitCodeProcess
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetComputerNameExA
GetCommandLineW
GetACP
FreeLibrary
FormatMessageW
FormatMessageA
FlushFileBuffers
FindResourceW
FindNextFileW
FindFirstFileW
FindFirstFileExW
FindFirstFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
FatalAppExitA
ExitThread
ExitProcess
EnterCriticalSection
DuplicateHandle
DosDateTimeToFileTime
DeleteFileW
DeleteFileA
DeleteCriticalSection
DebugBreak
CreateThread
CreateSemaphoreW
CreateProcessW
CreateMutexA
CreateMailslotA
CreateFileW
CreateFileMappingW
CreateFileA
CreateEventW
CreateEventA
CreateDirectoryW
CopyFileW
CompareStringW
CompareFileTime
lstrlenW

advapi32

ConvertSidToStringSidA
CryptAcquireContextA
CryptCreateHash
CryptDestroyHash
CryptGenRandom
CryptGetHashParam
CryptHashData
CryptReleaseContext
FreeSid
IsValidSid
LookupAccountNameA
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegEnumValueW
RegOpenKeyA
RegOpenKeyExA
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExA
RegQueryValueExW
RegQueryValueW
RegSetValueExW
RegSetValueW
GetUserNameA

gdi32

SetGraphicsMode
SetDIBitsToDevice
SetDIBits
SetBrushOrgEx
SetBkMode
SetBkColor
SetBitmapBits
SelectPalette
SelectObject
SelectClipRgn
SelectClipPath
SaveDC
RoundRect
RestoreDC
Rectangle
RectVisible
RealizePalette
PtVisible
PolylineTo
Polyline
Polygon
PolyPolygon
PolyBezierTo
PlayEnhMetaFileRecord
PatBlt
PaintRgn
OffsetRgn
MoveToEx
ModifyWorldTransform
MaskBlt
LineTo
LPtoDP
IntersectClipRect
GetWorldTransform
GetWindowOrgEx
GetWindowExtEx
GetViewportOrgEx
GetViewportExtEx
GetTextMetricsW
GetTextExtentPoint32W
GetTextExtentExPointW
GetTextColor
GetTextCharset
GetTextAlign
GetSystemPaletteEntries
GetStockObject
GetPolyFillMode
GetPixel
GetPath
GetPaletteEntries
GetOutlineTextMetricsW
GetObjectW
SetMapMode
GetNearestColor
GetMetaFileBitsEx
GetMapMode
GetKerningPairsW
GetGlyphOutlineW
GetFontData
GetEnhMetaFileW
GetEnhMetaFileHeader
GetDeviceCaps
GetDIBits
GetCurrentObject
GetClipRgn
GetClipBox
GetCharWidthW
GetBkMode
GetBkColor
GetBitmapBits
GdiFlush
FrameRgn
FillRgn
FillPath
ExtTextOutW
ExtCreatePen
Escape
EnumFontFamiliesW
EnumFontFamiliesExW
EnumEnhMetaFile
EndPath
EndPage
EndDoc
Ellipse
DeleteObject
DeleteMetaFile
DeleteEnhMetaFile
DeleteDC
DPtoLP
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePolygonRgn
CreatePen
CreatePatternBrush
CreatePalette
CreateMetaFileW
CreateHatchBrush
CreateFontIndirectW
CreateEnhMetaFileW
CreateDIBitmap
CreateDIBSection
CreateDIBPatternBrushPt
CreateCompatibleDC
CreateBrushIndirect
CreateBitmapIndirect
CreateBitmap
CombineRgn
CloseMetaFile
CloseFigure
CloseEnhMetaFile
BitBlt
BeginPath
SetPixel
SetPixelV
SetPolyFillMode
SetRectRgn
SetStretchBltMode
SetTextAlign
SetTextColor
SetWinMetaFileBits
StartDocW
StartPage
StretchBlt
StretchDIBits
StrokePath
TextOutW
TranslateCharsetInfo
UnrealizeObject
GetNearestPaletteIndex
CreateCompatibleBitmap

shell32

ShellExecuteA
ShellExecuteW
CommandLineToArgvW
DragAcceptFiles
DragFinish
SHGetSpecialFolderPathA
SHBrowseForFolderW
SHChangeNotify
SHCreateDirectoryExW
SHGetDesktopFolder
SHGetFolderPathW
SHGetMalloc
DragQueryFileW

comdlg32

ChooseColorW
CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW
PrintDlgW
GetFileTitleW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

winmm

waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite
waveOutOpen
timeSetEvent
mmioRead
waveOutGetDevCapsW
mmioOpenA
mmioDescend
mmioCreateChunk
mmioClose
mmioAscend
timeKillEvent
timeGetTime
timeGetDevCaps
mmioWrite
mmioOpenW
timeEndPeriod
timeBeginPeriod
waveOutClose

msvfw32

ICCompressorFree
ICCompressorChoose

rpcrt4

UuidCreate

imm32

ImmSetCompositionWindow
ImmSetCompositionFontW
ImmSetCandidateWindow
ImmReleaseContext
ImmNotifyIME
ImmGetVirtualKey
ImmGetContext
ImmGetCompositionStringW

ws2_32

WSAStartup
WSACleanup

shlwapi

SHDeleteKeyW
PathFileExistsW

wininet

InternetErrorDlg
HttpAddRequestHeadersW

ole32

CoTaskMemFree
CoTaskMemAlloc
OleDraw
ReleaseStgMedium
StgCreateDocfile
StgIsStorageFile
StgOpenStorage
CoInitialize
CoFreeUnusedLibraries
CoCreateInstance
CoUninitialize

oleaut32

SysAllocString
SysFreeString
VariantClear

Exports

Exports

DjInvolkerSrtgtyuh
MM_InitWrapper_324d
Plug1PlugExtensionCall
Plug1PlugGetVersion
Plug1PlugLoadExtension
Plug1PlugMenuCall
Plug1PlugNotifyStateChange
Plug2PlugTerminate
Plug2PlugUnloadExtension
PlugPlugSetFlashPanelList
PlugPlugSetup

Sections

.text
Size: 262KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

126b2c96751fd265fbadf841a480cefc

Headers

File Characteristics

Imports

kernel32

advapi32

gdi32

shell32

comdlg32

version

winmm

msvfw32

rpcrt4

imm32

ws2_32

shlwapi

wininet

ole32

oleaut32

Exports

Exports

Sections

.text Size: 262KB - Virtual size: 264KB

.rdata Size: 74KB - Virtual size: 76KB

.data Size: 14KB - Virtual size: 16KB

.idata Size: 11KB - Virtual size: 12KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 262KB - Virtual size: 264KB

.rdata
Size: 74KB - Virtual size: 76KB

.data
Size: 14KB - Virtual size: 16KB

.idata
Size: 11KB - Virtual size: 12KB

.rsrc
Size: 20KB - Virtual size: 20KB