b812eb8d58d560ed79097131f1747e73_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b812eb8d58d560ed79097131f1747e73_JaffaCakes118
Size

233KB
MD5

b812eb8d58d560ed79097131f1747e73
SHA1

5826d3a3b466c204b145de4ad033c83f723c6970
SHA256

3d1c5f35012be1f2e47f4d68afd1c3806c09f97e30ef530adcdf86f35b3437f7
SHA512

914cc249dd82ed9ed2cff52600e1cbee1750c1d8d97a7a4ef5b9e409d13f537902e9c259700fb7aae7996dabbc43b1da1bdeb739047388cccde9a4fb245e3df6
SSDEEP

3072:fYGp4H5+i9tficaES3Pp6YZ6U+dcuHfl1dFAJR66qkFyBErdwBhBZ2WPaHaZI8UL:fYS4HBacaESfScWveR66vyqSDZPaHa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b812eb8d58d560ed79097131f1747e73_JaffaCakes118

Files

b812eb8d58d560ed79097131f1747e73_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ef897b5762a56845da7ef71ea2890e9b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsW
GlobalAlloc
DeleteCriticalSection
UnmapViewOfFile
GlobalDeleteAtom
lstrcpyW
GetFullPathNameW
QueryPerformanceFrequency
SetFileAttributesW
CreateDirectoryW
RtlUnwind
CreateFileW
GetLocalTime
FindNextFileW
GetStringTypeW
GetModuleFileNameW
IsBadCodePtr
GetEnvironmentStrings
HeapAlloc
VirtualFree
CompareStringA
SetErrorMode
LeaveCriticalSection
FindClose
GetVersion
GetLocaleInfoW
SetWaitableTimer
LCMapStringA
SetStdHandle
InterlockedExchange
GetCommandLineA
SetHandleCount
ReadFile
GetTempPathW
HeapDestroy
TlsGetValue
QueryPerformanceCounter
InitializeCriticalSection
WriteFile
GetStringTypeA
GetFileTime
GetEnvironmentStringsW
EnumResourceLanguagesW
InterlockedDecrement
HeapFree
GlobalAddAtomA
OutputDebugStringW
GetProcessHeap
ActivateActCtx
GetEnvironmentVariableA
VirtualProtectEx
LoadLibraryExA
GetFileSize
lstrcmpW
GetACP
GetFileAttributesW
FormatMessageW
GetSystemTimeAsFileTime
LockResource
DuplicateHandle
GetTimeZoneInformation
WaitForMultipleObjects
IsBadReadPtr
LCMapStringW
FileTimeToLocalFileTime
VirtualAlloc
ExitProcess
FindFirstFileW
FreeEnvironmentStringsA
MulDiv
CompareStringW
GetCurrentThread
CopyFileW
GetDriveTypeW
VirtualProtect
WritePrivateProfileStringW
SetFilePointer
lstrcmpA
TerminateProcess
GlobalFree
GetDateFormatW
HeapCreate
GetTimeFormatA
GetSystemInfo
SetEndOfFile
HeapSize
UnlockFile
LockFile
DeleteFileW
lstrlenA
GetCurrentProcessId
lstrcatW
TlsFree
LocalAlloc
GetStartupInfoW
RaiseException
GetPrivateProfileIntW
GetStdHandle
GetUserDefaultLCID
SetUnhandledExceptionFilter
GetPrivateProfileSectionW
GetPrivateProfileStringW
CreateWaitableTimerW
GetCurrentThreadId
GetDateFormatA
GetOEMCP
GetModuleHandleW
lstrcpynW
GlobalFindAtomW
IsBadWritePtr
LoadResource
GetVersionExW
ExpandEnvironmentStringsW
LocalReAlloc
GetTimeFormatW
GetLocaleInfoA
GetCurrentProcess
InterlockedIncrement
GetVersionExA
TlsAlloc
SizeofResource
CreateProcessW
GlobalFlags
SetEnvironmentVariableA
HeapReAlloc
UnhandledExceptionFilter
GetTickCount
GlobalHandle
FileTimeToSystemTime
GetVolumeInformationW
TlsSetValue
GetFileType
GetCPInfo
GetThreadLocale
FlushFileBuffers
EnterCriticalSection
CloseHandle
GetFileAttributesA
GetStartupInfoA
MultiByteToWideChar
SetLastError
LocalFree
lstrcpyA
lstrcpynA
GetLastError
LoadLibraryA
CreateMutexA
GetModuleFileNameA
GetProcAddress
lstrlenW
GetFullPathNameA
GetModuleHandleA
FreeLibrary
WideCharToMultiByte
AreFileApisANSI
LoadLibraryW

user32

GetWindowDC
GetForegroundWindow
GetWindowTextW
GetClassInfoW
GetWindowTextLengthW
InvalidateRgn
BeginPaint
GetClassInfoExW
DrawTextExW
SendDlgItemMessageA
CopyRect
SetWindowPos
GetMenuState
GetClassLongW
GetNextDlgTabItem
SetCursor
ScreenToClient
GetKeyState
MapWindowPoints
MapDialogRect
CallWindowProcW
GetWindow
ValidateRect
SystemParametersInfoA
GetCapture
PeekMessageW
RegisterWindowMessageW
RegisterClassW
AdjustWindowRectEx
TranslateMessage
GetPropW
SetWindowTextW
WindowFromPoint
SetActiveWindow
GetSysColorBrush
GetWindowPlacement
GetAsyncKeyState
CreateWindowExW
CheckMenuItem
InvalidateRect
SetDlgItemTextW
MessageBoxW
GetClassNameW
GetMenuCheckMarkDimensions
EndPaint
GetFocus
GetActiveWindow
GetMessagePos
ClientToScreen
IsRectEmpty
EqualRect
GetMessageTime
WinHelpW
IsDialogMessageW
CreateDialogIndirectParamW
PostMessageW
SendDlgItemMessageW
GrayStringW
PostQuitMessage
DispatchMessageW
IsWindowEnabled
SetFocus
SetMenuItemBitmaps
GrayStringA
OffsetRect
SetRect
GetWindowRect
EnableWindow
IsZoomed
PtInRect
DrawTextA
TabbedTextOutA
ReleaseCapture
FillRect
GetParent
GetSystemMenu
GetWindowLongW
IsChild
SetWindowContextHelpId
RemovePropW
GetNextDlgGroupItem
TabbedTextOutW
EndDialog
DrawTextW
GetTopWindow
IntersectRect
SetWindowLongW
SetPropW
GetDesktopWindow
IsWindowVisible
CharUpperW
LoadIconA
wsprintfW
UnregisterClassW
IsWindowUnicode
SendMessageA
GetDlgCtrlID
GetSystemMetrics
SetCapture
UpdateWindow
SetForegroundWindow
GetWindowTextA
SetWindowTextA
EnumChildWindows
DefWindowProcA
IsWindow
GetDlgItemTextW

gdi32

CloseFigure
BeginPath
AnimatePalette
CancelDC
ColorCorrectPalette
AbortPath
AngleArc
CheckColorsInGamut
AddFontMemResourceEx
GetStockObject
AbortDoc
SaveDC
CreateDIBSection
GetWindowExtEx
GetTextExtentPoint32W
CreateBitmap
SetDIBColorTable
GetObjectW
SetBkColor
GetDeviceCaps
RestoreDC
DeleteObject
SetMapMode
CreateRectRgnIndirect
CreateCompatibleDC
DeleteDC
GetClipBox
TextOutW
PtVisible
TextOutA
CreatePalette
PtInRegion
CreatePolygonRgn
LPtoDP
GetTextColor
SetPixel
CombineRgn
CreateRectRgn
BitBlt
CreateFontIndirectA
DPtoLP
RectVisible
GetObjectA
SetRectRgn
GetViewportExtEx
Polyline

comdlg32

GetOpenFileNameW
GetSaveFileNameW
GetFileTitleW

advapi32

CryptDecrypt
RegSetValueExA
RegSetValueExW
RegQueryValueExW
FreeSid
EqualSid
LsaFreeMemory
RegEnumValueA
CryptReleaseContext
RegDeleteValueA
RegOpenKeyExA
RegOpenKeyA
RegOpenKeyW
RegQueryInfoKeyW
RegQueryValueW
RegEnumKeyExW
RegConnectRegistryW
RegLoadKeyW
RegUnLoadKeyW
RegCreateKeyExA
RegOpenKeyExW
CryptDestroyHash
RegQueryValueExA
RegCreateKeyExW
CryptDeriveKey
CryptDestroyKey
RegEnumValueW
RegCloseKey
RegOpenCurrentUser
RegEnumKeyW
CryptCreateHash
LsaOpenPolicy
LsaClose
CryptAcquireContextA
CryptHashData
IsTextUnicode
RegDeleteValueW
CryptEncrypt
RegDeleteKeyW

shell32

SHGetFileInfoW
SHGetMalloc
SHGetPathFromIDListA
SHGetDesktopFolder
SHFileOperationW
ShellExecuteA
SHGetFolderLocation
SHGetPathFromIDListW
SHBindToParent
SHBrowseForFolderW

ole32

CoRevokeClassObject
StgOpenStorageOnILockBytes
OleUninitialize
CoCreateInstance
CLSIDFromProgID
StringFromCLSID
CoInitialize
CoUninitialize
CoTaskMemFree
CreateILockBytesOnHGlobal
CLSIDFromString
CoFreeUnusedLibraries
StgCreateDocfileOnILockBytes
CoTaskMemAlloc
CoGetClassObject
OleIsCurrentClipboard
CoRegisterMessageFilter
OleInitialize
OleFlushClipboard

comctl32

ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
PropertySheetW
ImageList_AddMasked
CreatePropertySheetPageW
ImageList_SetBkColor
ord17
DestroyPropertySheetPage
InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathFindExtensionW
StrRetToBufW

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

mpr

WNetAddConnection2W
WNetCancelConnectionW

oledlg

ord8
OleUIBusyW

gdiplus

GdipCreateBitmapFromScan0
GdipFree
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipGetImagePalette
GdipGetImageHeight
GdipCloneImage
GdipGetImagePixelFormat
GdiplusStartup
GdipCreateBitmapFromFile
GdipDeleteGraphics
GdipDrawImageI
GdipGetImageWidth
GdipGetImagePaletteSize
GdipDisposeImage
GdipAlloc
GdiplusShutdown
GdipBitmapLockBits
GdipCreateBitmapFromFileICM

msvcrt

_mbsicmp
__set_app_type
_adjust_fdiv
_XcptFilter
__p__fmode
_setmbcp
_initterm
?terminate@@YAXXZ
_vsnprintf
__dllonexit
_controlfp
_splitpath
__p__commode
_CIsin
_acmdln
free
__setusermatherr
_CxxThrowException
__getmainargs
??1type_info@@UAE@XZ
__CxxFrameHandler
_onexit
_except_handler3
_mbscmp
_exit
exit
_strdup

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef897b5762a56845da7ef71ea2890e9b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

comctl32

shlwapi

version

mpr

oledlg

gdiplus

msvcrt

Sections

.text Size: 61KB - Virtual size: 60KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 35KB - Virtual size: 40KB

.rsrc Size: 98KB - Virtual size: 97KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 61KB - Virtual size: 60KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 35KB - Virtual size: 40KB

.rsrc
Size: 98KB - Virtual size: 97KB

.reloc
Size: 12KB - Virtual size: 12KB