4003b61e0d67ae9682de38833000bc30_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4003b61e0d67ae9682de38833000bc30_JaffaCakes118
Size

295KB
MD5

4003b61e0d67ae9682de38833000bc30
SHA1

ec6fccde55cbeb620e3341da208760a1ba0456dd
SHA256

c1df6358c22b504f2f047d84a1c97bd92c5ab341f6f14049fa025004ff2f362e
SHA512

e181dc28199cef2727b5e6df3c6331bd20ac2b5b8b8123acf9ee6f1dc9eecb4ea11cfe677421cdddd568048261e88b9927dd7139b5e546981dbb5656ba6691a4
SSDEEP

3072:IkRH5jPhfraS5Vw4bA361K+aloIWtV1Jf3ZgkP4haUVTgkB5gzgi+pJ2/TQ1uDbF:ImV2ZRWvvfJ9PoFgkY8CLem7Icj1rd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4003b61e0d67ae9682de38833000bc30_JaffaCakes118

Files

4003b61e0d67ae9682de38833000bc30_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7047c82eb459953fdca6e38a3c8dbd70

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyboardLayoutList
IsWindowEnabled
WindowFromPoint
WinHelpA
WaitMessage
UnionRect
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoA
ShowWindow
ShowOwnedPopups
ShowCursor
ShowCaret
SetMenu
SetKeyboardState
SetForegroundWindow
SetFocus
SetClipboardData
SetClassLongA
SetCapture
SetActiveWindow
SendMessageA
SendDlgItemMessageA
ScrollWindowEx
RedrawWindow
PostQuitMessage
PostMessageA
PeekMessageA
OffsetRect
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageA
IsClipboardFormatAvailable
IsChild
IsCharAlphaNumericA
IsCharAlphaA
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextA
GetWindowRgn
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindowDC
GetUpdateRect
GetSystemMetrics
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyboardState
GetSysColor
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EnableWindow
EnableMenuItem
DrawTextExA
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
CreateWindowExA
CreatePopupMenu
CreateMenu
CreateIconFromResourceEx
CreateIconFromResource
CreateIcon
CreateDialogIndirectParamA
CopyIcon
CharUpperBuffA
CharUpperA
CharToOemA
AdjustWindowRectEx
ActivateKeyboardLayout
EqualRect
PeekMessageW
MessageBeep
SetCursor
PtInRect
IsWindowUnicode
InvertRect
OpenClipboard
EmptyClipboard
GetWindowRgnBox
GetSystemMenu
GetClipboardViewer
GetClipboardFormatNameW
CreateAcceleratorTableW
IsWindowVisible
UpdateLayeredWindow
GetClassLongA
RegisterHotKey
GetClipCursor
IsWinEventHookInstalled
GetMessageTime

ole32

CoDisconnectObject

gdi32

LineTo
UnrealizeObject
TextOutA
StretchDIBits
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
PlayEnhMetaFile
PatBlt
MoveToEx
MaskBlt
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsA
GetTextExtentPointA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetPixel
GetPaletteEntries
GetObjectType
GetObjectA
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileBits
ExcludeClipRect
EnumFontsA
EnumFontFamiliesExA
EndPage
EndDoc
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateFontIndirectA
CreateFontA
CreateDIBitmap
CreateDIBSection
CreateDCA
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
SetBkMode
CreateCompatibleDC
GetDeviceCaps
StretchBlt
SetViewportExtEx
Rectangle
SetTextAlign
SetWindowOrgEx
CreateRoundRectRgn
SetBoundsRect
GetBitmapDimensionEx
PtInRegion
GetBrushOrgEx
BitBlt
GetRasterizerCaps
GetROP2
ExtTextOutW

kernel32

LoadLibraryA
HeapUnlock
HeapLock
HeapCompact
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalHandle
GlobalLock
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetWindowsDirectoryA
GetVersionExA
GetVersion
GetUserDefaultLangID
GetTickCount
GetSystemInfo
GetProfileStringA
GetProcessHeap
GetProcAddress
GetPrivateProfileStringA
GetModuleHandleA
GetLocalTime
GetFullPathNameA
GetFileAttributesA
GetExitCodeThread
FreeResource
FormatMessageA
LoadResource
FindResourceA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
CreateEventA
CreateDirectoryA
CompareStringA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpyA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
FreeLibrary
ExitProcess
ExitThread
CreateThread
LockResource
MapViewOfFile
MoveFileA
MulDiv
OpenMutexA
OpenProcess
PulseEvent
ResumeThread
SearchPathA
SetCurrentDirectoryA
SetErrorMode
SetEvent
SetThreadLocale
SetThreadPriority
WaitForSingleObject
WriteProcessMemory
lstrcmpA
lstrlenW
HeapAlloc
HeapFree
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushInstructionCache
SetHandleCount
ResetWriteWatch
GetThreadContext
GetSystemDefaultLangID
GetSystemTimeAsFileTime
GetWindowsDirectoryW
FileTimeToDosDateTime
SetFilePointer
CreateEventW
DebugActiveProcessStop
GetSystemDirectoryW
FreeEnvironmentStringsW
GetLogicalDrives
GetStartupInfoW
WritePrivateProfileStringW
DeleteCriticalSection
GetExitCodeProcess
CompareFileTime
GetCommandLineA
FindFirstFileA
GetComputerNameA
CloseHandle
CreateFileA
GetFileType
GetSystemTime
GetFileSize
GetStdHandle
RaiseException
ReadFile
RtlUnwind
SetEndOfFile
WriteFile

Sections

.text
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7047c82eb459953fdca6e38a3c8dbd70

Headers

DLL Characteristics

File Characteristics

Imports

user32

ole32

gdi32

kernel32

Sections

.text Size: 171KB - Virtual size: 171KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 24KB - Virtual size: 47KB

.rsrc Size: 83KB - Virtual size: 82KB

.text
Size: 171KB - Virtual size: 171KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 24KB - Virtual size: 47KB

.rsrc
Size: 83KB - Virtual size: 82KB