3d8b051e4b245ec7b8fcdb8ec0593c52_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3d8b051e4b245ec7b8fcdb8ec0593c52_JaffaCakes118
Size

282KB
MD5

3d8b051e4b245ec7b8fcdb8ec0593c52
SHA1

f412159f0a87e8e1a07fc4f509a5fac3ad850f59
SHA256

6c980f142585de83bf9a09b1971e762bb438c18ebf41e664166bca8d03cf1ba9
SHA512

5a6a3383653f6abeff5833ae082f5a75275a9aa03027a6e0883f68eeada394efba7348f9ede5e6c6a5738c695915a0b42da39103456914f014509b7b0fa9a1af
SSDEEP

6144:EsgY9vO5mrg8BnV66bBlmyDoXADbLrU1MJOLkWhhIP+n8:mPIbB46bB82oXSfA+JO4WfIP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d8b051e4b245ec7b8fcdb8ec0593c52_JaffaCakes118

Files

3d8b051e4b245ec7b8fcdb8ec0593c52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc8864f5b407b187b3ecdf89f677ddab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantTimeToSystemTime
VariantInit
VariantCopy
VariantClear
VariantChangeType
SystemTimeToVariantTime
SysStringLen
OleCreateFontIndirect
SysFreeString
SysAllocStringLen
SysAllocString
SafeArrayDestroy

gdi32

SetViewportOrgEx
CreateBitmap
CreateFontIndirectW
CreateRectRgnIndirect
CreateSolidBrush
DeleteDC
DeleteObject
Escape
ExtTextOutW
GetDeviceCaps
GetMapMode
GetStockObject
GetTextColor
GetViewportExtEx
GetWindowExtEx
OffsetViewportOrgEx
RectVisible
RestoreDC
ScaleViewportExtEx
ScaleWindowExtEx
SelectObject
SetBkMode
SetMapMode
SetPaletteEntries
SetTextColor
SetViewportExtEx
SetBkColor
SetWindowExtEx
StretchBlt
TextOutW

ole32

CLSIDFromProgID
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
OleUninitialize
OleIsCurrentClipboard
OleInitialize
HDC_UserMarshal
CreateILockBytesOnHGlobal
CoUninitialize
CoTaskMemFree
CoRevokeClassObject
CoRegisterMessageFilter
CoInitializeEx
CoGetClassObject
CoFreeUnusedLibraries
CLSIDFromString

shell32

ShellExecuteW
SHGetFolderPathW

comctl32

InitCommonControlsEx

comdlg32

GetFileTitleW
PrintDlgW

wininet

HttpOpenRequestW
HttpSendRequestW
InternetReadFile
InternetQueryOptionA
InternetGetLastResponseInfoW
InternetConnectW
InternetCloseHandle

shlwapi

PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW

oledlg

OleUIBusyW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

user32

SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCapture
SetCursor
SetFocus
SetForegroundWindow
SetMenuItemBitmaps
SetPropW
SetRect
SetWindowContextHelpId
SetWindowLongW
SetWindowPos
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoA
TabbedTextOutW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
WinHelpW
PtInRect
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageW
MoveWindow
ModifyMenuW
MessageBoxW
MessageBeep
MapWindowPoints
MapDialogRect
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
GrayStringW
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowPlacement
GetWindowLongW
SendDlgItemMessageA
GetWindow
GetTopWindow
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetSubMenu
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetClassInfoA
GetCapture
GetActiveWindow
EqualRect
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawTextExW
DispatchMessageW
DestroyWindow
DestroyMenu
DefWindowProcW
CreateWindowExW
CreateDialogIndirectParamW
CopyRect
CopyAcceleratorTableW
ClientToScreen
CheckMenuItem
CharUpperW
CharNextW
CallWindowProcW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
RemovePropW
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
GetWindowDC
RedrawWindow
OffsetRect

advapi32

CryptDestroyHash
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW
RegQueryValueW
RegSetValueExW

kernel32

CompareStringA
lstrlenW
lstrlenA
lstrcmpW
lstrcmpA
WritePrivateProfileStringW
WriteFile
WriteConsoleW
WriteConsoleA
WideCharToMultiByte
VirtualQuery
VirtualProtect
VirtualAlloc
UnlockFile
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
Sleep
SizeofResource
SetUnhandledExceptionFilter
CloseHandle
CompareStringW
SetLastError
SetHandleCount
SetFilePointer
SetErrorMode
SetEnvironmentVariableA
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
MultiByteToWideChar
MulDiv
LockResource
LockFile
LocalFree
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsValidCodePage
IsDebuggerPresent
IsDBCSLeadByteEx
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalFree
GlobalFlags
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVolumeInformationW
GetVersionExA
GetVersion
GetTimeZoneInformation
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemInfo
GetStdHandle
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetPrivateProfileSectionNamesA
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileSize
GetFileAttributesW
GetEnvironmentStringsW
GetEnvironmentStringsA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetCommandLineA
GetACP
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushFileBuffers
FindResourceW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitProcess
EnumSystemLocalesA
EnumResourceLanguagesW
EnterCriticalSection
DuplicateHandle
DeleteCriticalSection
CreateFileW
CreateFileA
CreateDirectoryW
ConvertDefaultLocale

Exports

Exports

DeleteConfigFiles

Sections

.text
Size: 102KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc8864f5b407b187b3ecdf89f677ddab

Headers

File Characteristics

Imports

oleaut32

gdi32

ole32

shell32

comctl32

comdlg32

wininet

shlwapi

oledlg

winspool.drv

user32

advapi32

kernel32

Exports

Exports

Sections

.text Size: 102KB - Virtual size: 104KB

.rdata Size: 136KB - Virtual size: 136KB

.data Size: 12KB - Virtual size: 116KB

.idata Size: 9KB - Virtual size: 12KB

.rsrc Size: 21KB - Virtual size: 23KB

.text
Size: 102KB - Virtual size: 104KB

.rdata
Size: 136KB - Virtual size: 136KB

.data
Size: 12KB - Virtual size: 116KB

.idata
Size: 9KB - Virtual size: 12KB

.rsrc
Size: 21KB - Virtual size: 23KB