826bac4a36729fbd2cae710adcec5a60_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

826bac4a36729fbd2cae710adcec5a60_JaffaCakes118
Size

2.3MB
MD5

826bac4a36729fbd2cae710adcec5a60
SHA1

4fca69b9ce3d2dd835d8b823300ca9a50c44cff0
SHA256

ec28a2158a01b865d15a95805eee56100061a9c5ad7262c078668016a7ff374b
SHA512

1fe2cfe5fdf92b448ada02e20c4737760e19d938d33f541d114dfd447510cc45648a641b994ab3dc91f3782d61a28a832f4574e7041e78461ec211926acbefc0
SSDEEP

49152:diXNYl1dnAUV3cfxPa5aHHW1vo5R8qa2Vb/jyR2hwrT4AV14T6fjCgfP+R3AxDgz:did/b2INT6fh+RwKlsY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
826bac4a36729fbd2cae710adcec5a60_JaffaCakes118

Files

826bac4a36729fbd2cae710adcec5a60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

117de28bb20443d268cc464f25be1ff4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

imagehlp

BindImageEx

kernel32

GetTempFileNameA
WritePrivateProfileStringA
IsBadReadPtr
GetCommandLineA
FreeEnvironmentStringsA
GetEnvironmentStrings
HeapCreate
HeapSize
TerminateProcess
GetExitCodeProcess
GetCurrentProcess
GetCurrentProcessId
GetLastError
SetLastError
GetVersionExA
GetTickCount
ExpandEnvironmentStringsA
LocalFree
FormatMessageA
GetWindowsDirectoryA
GetTempPathA
WaitForSingleObject
GetLocaleInfoA
LocalAlloc
GetSystemDirectoryA
InterlockedDecrement
GetCurrentThread
InterlockedIncrement
MoveFileA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapReAlloc
HeapAlloc
RtlUnwind
VirtualFree
VirtualAlloc
GetStartupInfoA
UnhandledExceptionFilter
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
LCMapStringA
GetStringTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CompareStringA
GetVersion
GetFileSize
lstrcmpA
lstrlenA
DeleteFileA
CreateDirectoryA
FindNextFileA
GetShortPathNameA
GetDiskFreeSpaceA
RemoveDirectoryA
GetCurrentDirectoryA
WriteFile
ReadFile
GetVolumeInformationA
FileTimeToSystemTime
FindFirstFileA
FileTimeToLocalFileTime
SetFileAttributesA
GetFileAttributesA
GetDriveTypeA
CreateFileA
SetCurrentDirectoryA
FindClose
UnlockFile
UnmapViewOfFile
SetFilePointer
GetFileInformationByHandle
FlushFileBuffers
SetFileTime
SetEndOfFile
LocalFileTimeToFileTime
SystemTimeToFileTime
RaiseException
SetUnhandledExceptionFilter
GetModuleHandleA
GetModuleFileNameA
GetTimeZoneInformation
GetLocalTime
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentThreadId
CreateProcessA
CloseHandle
ExitProcess
Sleep

user32

GetWindowTextLengthA
DestroyWindow
EnableWindow
GetWindowLongA
SetFocus
SetForegroundWindow
InvalidateRect
IsIconic
ShowWindow
GetClassNameA
GetWindowPlacement
SetWindowPlacement
GetWindowRect
MoveWindow
CharUpperA
CharLowerA
PeekMessageA
TranslateMessage
DispatchMessageA
GetWindowTextA
LoadCursorA
SetCursor
ExitWindowsEx
GetSystemMetrics
RegisterClassA
SystemParametersInfoA
CreateWindowExA
GetClientRect
DefWindowProcA
BeginPaint
EndPaint
LoadBitmapA
CreateDialogParamA
SetWindowLongA
DialogBoxParamA
SendDlgItemMessageA
SetWindowTextA
SendMessageA
EndDialog
SetDlgItemTextA
SetWindowsHookExA
CallNextHookEx
UnhookWindowsHookEx
EnumWindows
MessageBoxA
PostMessageA
SetActiveWindow
GetSysColor
FillRect
ReleaseDC
GetDC
GetDlgItem

gdi32

SetStretchBltMode
SetBkMode
SetBrushOrgEx
TextOutA
GetTextExtentPoint32A
EnumFontFamiliesExA
AddFontResourceA
RemoveFontResourceA
SelectObject
CreateFontA
SetTextColor
SetTextJustification
GetDeviceCaps
StretchDIBits
GetDIBits
DeleteObject
CreateSolidBrush

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegEnumKeyA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryInfoKeyA
RegDeleteValueA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

ole32

OleUninitialize
CoCreateInstance
CoInitialize
OleInitialize

oleaut32

SysFreeString
SysAllocStringLen

Exports

Exports

_CharLowerW@4
_CharUpperW@4
_CoInitializeEx@8
_CompareStringW@24
_GetFileSizeEx@8
_GetLocaleInfoW@16
_GetMenuBarInfo@16
_GetModuleHandleW@4
_GetStringTypeW@16
_InitializeCriticalSectionAndSpinCount@8
_IsDebuggerPresent@0
_LCMapStringW@24
_MultiByteToWideChar@24
_WideCharToMultiByte@32
_lstrcmpW@8
_lstrlenW@4

Sections

.text
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 306KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.setup
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

117de28bb20443d268cc464f25be1ff4

Headers

DLL Characteristics

File Characteristics

Imports

version

imagehlp

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 269KB - Virtual size: 269KB

.rdata Size: 92KB - Virtual size: 92KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 306KB - Virtual size: 308KB

.setup Size: 1.6MB - Virtual size: 1.6MB

.text
Size: 269KB - Virtual size: 269KB

.rdata
Size: 92KB - Virtual size: 92KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 306KB - Virtual size: 308KB

.setup
Size: 1.6MB - Virtual size: 1.6MB