44d7554cbc26ff2a375536e62d966bbd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

44d7554cbc26ff2a375536e62d966bbd_JaffaCakes118
Size

4.1MB
MD5

44d7554cbc26ff2a375536e62d966bbd
SHA1

6e6664c1bef8644a090257a8830547493541023a
SHA256

6d18bedc99e95f219821f381c76a19663e6a69ea42ce0a84197cbfe2c58760d5
SHA512

e09765bffc81af2c36efd229078a926a2ad195cfb41117974093946c58411ba3c537dbd925bf8b8e0a94e84fabf7975dfd2d87755102044bc5ec0b6e8832991f
SSDEEP

98304:4R6jDpG12tkuCtUWTyhpyEIgyd73jjQ+uhtPrYCKy:lo2Mp+ebJzihhG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44d7554cbc26ff2a375536e62d966bbd_JaffaCakes118

Files

44d7554cbc26ff2a375536e62d966bbd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

00dbc3d699c708e3afe7484eeba2e3cf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileW

kernel32

GetStartupInfoW
GetExitCodeProcess
TerminateProcess
WaitForSingleObject
MoveFileExW
MoveFileW
LocalFree
GetCurrentThreadId
DeleteCriticalSection
RaiseException
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
InitializeCriticalSection
FreeLibrary
MultiByteToWideChar
LoadLibraryExW
lstrcmpiW
FlushInstructionCache
GetCurrentProcess
GetVersionExW
CreateDirectoryW
GlobalUnlock
GlobalLock
GlobalAlloc
WideCharToMultiByte
lstrcmpW
MulDiv
GlobalFree
GlobalHandle
SetEvent
CreateEventW
TerminateThread
GetExitCodeThread
SetEndOfFile
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
FindClose
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
SetFilePointer
ReadFile
GetStartupInfoA
GetFileType
SizeofResource
HeapCreate
GetModuleFileNameA
GetStdHandle
IsValidCodePage
GetOEMCP
GetModuleHandleA
ExitProcess
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
lstrlenA
GetCPInfo
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
CreateThread
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
FormatMessageA
FindFirstFileW
FindNextFileW
RemoveDirectoryW
GetModuleHandleW
GetTempPathW
GetFileAttributesW
CreateProcessW
IsBadWritePtr
FindResourceExW
LoadResource
GetUserDefaultLCID
LockResource
FindResourceW
WriteFile
GetLastError
CreateFileW
CloseHandle
DeleteFileW
GetTickCount
lstrlenW
SetLastError
GetACP
FormatMessageW
CreateFileA
GetFileAttributesExW
Sleep
FreeResource
GetProcAddress
LoadLibraryW
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
HeapDestroy
HeapReAlloc
SetHandleCount
GetStringTypeW
HeapSize
InterlockedExchange

user32

GetDlgItem
SetTimer
SetWindowTextW
SetWindowPos
MapWindowPoints
GetClientRect
SendMessageW
MonitorFromWindow
GetWindowLongW
GetWindowRect
GetWindow
GetParent
SetWindowLongW
MessageBoxW
DefWindowProcW
DestroyWindow
CharNextW
EndDialog
wsprintfW
UnregisterClassA
ScreenToClient
MoveWindow
GetSystemMetrics
GetMonitorInfoW
EndPaint
DialogBoxIndirectParamW
InvalidateRgn
InvalidateRect
SetCapture
ReleaseCapture
ClientToScreen
CreateAcceleratorTableW
GetDC
ReleaseDC
GetDesktopWindow
GetClassNameW
RedrawWindow
BeginPaint
FillRect
ShowWindow
IsChild
SetFocus
GetFocus
GetSysColor
DestroyAcceleratorTable
GetWindowTextLengthW
GetWindowTextW
RegisterWindowMessageW
GetClassInfoExW
LoadCursorW
RegisterClassExW
SetWindowContextHelpId
CallWindowProcW
MapDialogRect
PostThreadMessageW
IsDialogMessageW
DialogBoxParamW
GetActiveWindow
IsWindow
KillTimer
CreateWindowExW
IsWindowVisible
LoadImageW

gdi32

GetDeviceCaps
CreateSolidBrush
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
CreateFontIndirectW
GetObjectW
GetStockObject

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW

shell32

FindExecutableW
CommandLineToArgvW
ShellExecuteExW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteW

ole32

CLSIDFromProgID
OleInitialize
StringFromGUID2
OleLockRunning
OleUninitialize
CoTaskMemRealloc
CoGetClassObject
CreateStreamOnHGlobal
CoTaskMemAlloc
CoCreateInstance
CoInitialize
CLSIDFromString
CoUninitialize
CoTaskMemFree

oleaut32

SysStringLen
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysFreeString
VariantCopy
SafeArrayUnlock
SafeArrayLock
SafeArrayDestroy
SafeArrayCreate
VarUI4FromStr
VariantInit
VariantChangeType
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear

shlwapi

PathIsURLW

comctl32

InitCommonControlsEx

gdiplus

GdiplusShutdown
GdiplusStartup

wininet

InternetOpenW
InternetOpenUrlW
InternetReadFile
InternetCloseHandle

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 354KB - Virtual size: 353KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00dbc3d699c708e3afe7484eeba2e3cf

Headers

DLL Characteristics

File Characteristics

Imports

urlmon

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

gdiplus

wininet

version

Sections

.text Size: 354KB - Virtual size: 353KB

.rdata Size: 65KB - Virtual size: 65KB

.data Size: 13KB - Virtual size: 22KB

.rsrc Size: 3.6MB - Virtual size: 3.6MB

.reloc Size: 31KB - Virtual size: 31KB

.text
Size: 354KB - Virtual size: 353KB

.rdata
Size: 65KB - Virtual size: 65KB

.data
Size: 13KB - Virtual size: 22KB

.rsrc
Size: 3.6MB - Virtual size: 3.6MB

.reloc
Size: 31KB - Virtual size: 31KB