e5b99de55f5fd681e88a447b685eecf8_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

e5b99de55f5fd681e88a447b685eecf8_JaffaCakes118
Size

321KB
MD5

e5b99de55f5fd681e88a447b685eecf8
SHA1

eadb7f4a3553b316b8db3460dd6a0450b70b0a57
SHA256

64a6ad3bf578dcbed8831d8486018040a2f36357b82ec31038c6ee618cbf1964
SHA512

842b3e2f0fb597ca0320c9a642ad241576a27c008a0370ba1ae663de09c57bad72f908546650715642e9216ae7d99646d3e4410e23b9fa225f2a9b1efd0d9ed5
SSDEEP

6144:CA/jyyUeD7DZX5Xo2csBsIIdtd0/0KF4XUKwHktRlAiZyt1:B/uyJZX5ss9YdifqXjwHkrlc1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e5b99de55f5fd681e88a447b685eecf8_JaffaCakes118

Files

e5b99de55f5fd681e88a447b685eecf8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3db9f190a29554c3dbaead4ca266a6ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\Project\Module\TrayNotification\CLUpdater\Release\CLUpdater.pdb

Imports

wininet

InternetCanonicalizeUrlW
HttpAddRequestHeadersW
HttpQueryInfoW
InternetOpenW
InternetReadFile
InternetSetFilePointer
HttpOpenRequestW
HttpSendRequestW
InternetConnectW

ws2_32

WSAStartup
socket
WSAIoctl
closesocket
WSACleanup

sensapi

IsNetworkAlive

kernel32

CreateEventW
SetEvent
OutputDebugStringA
OutputDebugStringW
LoadLibraryExW
FreeLibrary
CopyFileW
WritePrivateProfileStringW
GetSystemTime
LoadLibraryW
GetProcAddress
GetPrivateProfileIntW
SetFileAttributesW
lstrlenW
WideCharToMultiByte
CreateFileW
GetFileSize
WaitForSingleObject
DeleteFileW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
LocalFree
lstrcpynW
FormatMessageW
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpyW
SizeofResource
LockResource
LoadResource
GetThreadLocale
GlobalFree
SetLastError
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
GetVersion
LocalAlloc
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetCurrentProcess
lstrcmpW
GlobalFlags
GetCurrentThreadId
lstrcatW
GetVersionExA
LoadLibraryA
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
ExitProcess
HeapFree
RtlUnwind
ExitThread
CreateThread
CreateDirectoryW
GetSystemTimeAsFileTime
GetModuleFileNameA
GetStartupInfoW
HeapAlloc
HeapReAlloc
SetStdHandle
GetFileType
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
TerminateProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetACP
InterlockedExchange
CloseHandle
GetModuleHandleW
GetModuleFileNameW
GetPrivateProfileStringW
CreateMutexW
GetLastError
FindResourceW

user32

CallWindowProcW
RegisterClassW
GetClassInfoW
AdjustWindowRectEx
PostMessageW
GetMenu
GetClientRect
SetForegroundWindow
MapWindowPoints
GetMessagePos
GetMessageTime
GetTopWindow
GetForegroundWindow
RemovePropW
GetPropW
SetPropW
GetClassLongW
GetClassInfoExW
GetCapture
WinHelpW
RegisterWindowMessageW
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
SetWindowLongW
DestroyMenu
GetSysColor
GetSysColorBrush
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
CopyRect
SetMenuItemBitmaps
ModifyMenuW
EnableMenuItem
GetDlgItem
CheckMenuItem
SetWindowsHookExW
GetMenuCheckMarkDimensions
LoadBitmapW
SetWindowPos
wsprintfW
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
UnregisterClassW
FindWindowW
SendMessageW
LoadIconW
LoadCursorW
RegisterClassExW
BeginPaint
EndPaint
PostQuitMessage
DefWindowProcW
DestroyWindow
CreateWindowExW
ShowWindow
UpdateWindow
CallNextHookEx
GetKeyState
PeekMessageW
ValidateRect
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetFocus
SetWindowTextW
GetClassNameW
GetWindowTextW
MessageBoxW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
GetSystemMetrics
GetDC
ReleaseDC

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

SHGetSpecialFolderPathW
ShellExecuteW

ole32

CoInitialize
CoUninitialize

oleaut32

VariantClear
SysFreeString
SysAllocStringLen
SysAllocString
SysStringLen
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
VariantInit

comctl32

ord17

shlwapi

PathFileExistsW
StrToIntW

oleacc

CreateStdAccessibleObject
LresultFromObject

gdi32

GetStockObject
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetDeviceCaps
SaveDC
RestoreDC
SetMapMode
DeleteObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3db9f190a29554c3dbaead4ca266a6ad

Headers

File Characteristics

PDB Paths

Imports

wininet

ws2_32

sensapi

kernel32

user32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

oleacc

gdi32

winspool.drv

Sections

.text Size: 116KB - Virtual size: 115KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 8KB - Virtual size: 21KB

.rsrc Size: 88KB - Virtual size: 86KB

.rrdata Size: 72KB - Virtual size: 72KB

.text
Size: 116KB - Virtual size: 115KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 8KB - Virtual size: 21KB

.rsrc
Size: 88KB - Virtual size: 86KB

.rrdata
Size: 72KB - Virtual size: 72KB