40b1ab563458d382aba90f1834dfe7c4_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

40b1ab563458d382aba90f1834dfe7c4_JaffaCakes118
Size

584KB
MD5

40b1ab563458d382aba90f1834dfe7c4
SHA1

c9b28e93a8427119db47821534a781e45b09d2f7
SHA256

86872d1bfcc437c5267894c86b5bf9939521341835fcd1dcb5937db4b0ccac23
SHA512

5e1d056bd247db08c54ef570b6c8a1e6f31c7af211ef7403ec369486b30d4a582b0c1f3e6896c3106cb0c59498c30069a4cc8814575fb00cb082be8b1f35442a
SSDEEP

12288:Pw3ft5DbJqELBIRCtFbyc4H6wY5MWhoS:IvtfLfP3VMWhoS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40b1ab563458d382aba90f1834dfe7c4_JaffaCakes118

Files

40b1ab563458d382aba90f1834dfe7c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2ba0861fb995aa165ae0c732ec8e17f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

winmm

timeBeginPeriod
timeSetEvent
timeEndPeriod
timeKillEvent

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

MoveFileA
DeleteFileA
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetStringTypeExA
GetShortPathNameA
lstrlenW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
GlobalSize
CopyFileA
RtlUnwind
GetStartupInfoA
GetCommandLineA
RaiseException
CreateThread
ExitThread
TerminateProcess
HeapReAlloc
HeapSize
SetEndOfFile
GetTimeZoneInformation
GetSystemTime
GetLocalTime
FatalAppExitA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
SetConsoleCtrlHandler
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
SetErrorMode
GetThreadLocale
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetOEMCP
GetCPInfo
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GlobalFlags
GetProcessVersion
FindResourceExA
SizeofResource
MulDiv
SetLastError
GlobalAlloc
lstrcmpA
lstrcpynA
SuspendThread
ResumeThread
MultiByteToWideChar
WideCharToMultiByte
GetVersion
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GlobalLock
GlobalUnlock
VirtualProtect
FindResourceA
LoadResource
LockResource
GlobalFree
LocalFree
LocalAlloc
GetProcessHeap
HeapAlloc
HeapFree
QueryPerformanceFrequency
QueryPerformanceCounter
GetFileAttributesA
GetModuleFileNameA
GetLocaleInfoA
GetUserDefaultLCID
lstrlenA
lstrcatA
InterlockedDecrement
InterlockedIncrement
GetProcAddress
FormatMessageA
GetCurrentThreadId
CreateFileMappingA
GetLastError
lstrcpyA
CreateEventA
LoadLibraryA
OpenEventA
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
FreeLibrary
OutputDebugStringA
ExitProcess
SetEvent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
OpenMutexA
OpenFileMappingA
MapViewOfFile
CloseHandle
UnmapViewOfFile
WaitForSingleObject
ReleaseMutex
GetTickCount
GetACP

user32

SetWindowContextHelpId
GetDialogBaseUnits
GetSysColorBrush
GetClassNameA
PtInRect
InsertMenuA
DeleteMenu
GetMenuStringA
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
CharUpperA
InflateRect
RegisterClipboardFormatA
AppendMenuA
RemoveMenu
DestroyIcon
ShowOwnedPopups
PostQuitMessage
BringWindowToTop
InvalidateRect
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
DestroyMenu
SetCursor
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
TranslateMessage
ValidateRect
LoadStringA
OemToCharA
CharToOemA
wvsprintfA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
UnregisterClassA
DispatchMessageA
AdjustWindowRectEx
ScreenToClient
GrayStringA
DeferWindowPos
GetDC
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetMenuItemID
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
MapDialogRect
SetWindowPos
ShowWindow
GetCapture
GetActiveWindow
SetActiveWindow
GetAsyncKeyState
GetWindowLongA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
EqualRect
ReleaseDC
GetFocus
SetFocus
GetDlgItem
IsWindowEnabled
GetParent
GetClientRect
ClientToScreen
LoadIconA
UpdateWindow
LoadCursorA
LoadBitmapA
wsprintfA
GetDesktopWindow
GetWindowRect
GetMessageA
PostMessageA
SendMessageA
GetMenu
GetSubMenu
MessageBoxA
GetCursorPos
PostThreadMessageA
PeekMessageA
MsgWaitForMultipleObjects
EnableWindow
TrackPopupMenu
GetSysColor

gdi32

SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
SetTextJustification
TextOutA
ExtTextOutA
Escape
GetTextExtentPoint32A
CreateRectRgn
CreateFontIndirectA
EnumFontFamiliesExA
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
CopyMetaFileA
CreateDCA
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
GetClipRgn
DeleteObject
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
DeleteDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
BitBlt
CreateCompatibleDC
GetTextMetricsA
GetObjectA
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
GetStockObject
SelectObject
RestoreDC
SaveDC
StartDocA
SetTextCharacterExtra

comdlg32

GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegEnumKeyA
RegQueryValueA
RegSetValueA
RegOpenKeyA
RegQueryValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyA
RegDeleteValueA
RegCreateKeyExA

shell32

SHGetFileInfoA
DragQueryFileA
DragFinish
DragAcceptFiles
Shell_NotifyIconA
ExtractIconA

comctl32

DestroyPropertySheetPage
CreatePropertySheetPageA
PropertySheetA
ord17

olepro32

ord253

oledlg

ord8

oleaut32

SysAllocStringByteLen
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromDate
VarDateFromStr
VarBstrFromCy
VarCyFromStr
SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysReAllocStringLen
SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysStringLen
LoadTypeLi
SysStringByteLen

ole32

CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
OleRun
CoDisconnectObject
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
OleDuplicateData
CreateBindCtx
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
ReleaseStgMedium
CoRegisterMessageFilter
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal

Sections

.text
Size: 348KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2ba0861fb995aa165ae0c732ec8e17f

Headers

File Characteristics

Imports

winmm

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

olepro32

oledlg

oleaut32

ole32

Sections

.text Size: 348KB - Virtual size: 344KB

.rdata Size: 68KB - Virtual size: 67KB

.data Size: 28KB - Virtual size: 40KB

.rsrc Size: 136KB - Virtual size: 134KB

.text
Size: 348KB - Virtual size: 344KB

.rdata
Size: 68KB - Virtual size: 67KB

.data
Size: 28KB - Virtual size: 40KB

.rsrc
Size: 136KB - Virtual size: 134KB