f042b3a2a0f30c3d1ffe8738d62d1e60_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f042b3a2a0f30c3d1ffe8738d62d1e60_JaffaCakes118
Size

271KB
MD5

f042b3a2a0f30c3d1ffe8738d62d1e60
SHA1

bc0d00eebf2477f79d1f66dc064c09c0bb7ccd57
SHA256

432e7c42ad13c9993ebd4f2ac8fc124fa792426f48cfb5c21f640bccfa03d543
SHA512

b78c631510002237fd9a1a552de9694816af094cc40814a3de3be5d8d3d3ae4d2bb03019b9365983626b84e8a2bb89d1fc52bf7112e24ff11a206511d11dc044
SSDEEP

3072:LkXENUecBS/oN3c4OuLAVZH/SfDeeqNHXFyBErdwBiMGAOu8ov9:LkXUjcBSAN3c4QSLeeqvyqSK5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f042b3a2a0f30c3d1ffe8738d62d1e60_JaffaCakes118

Files

f042b3a2a0f30c3d1ffe8738d62d1e60_JaffaCakes118
.exe windows:5 windows x86 arch:x86

65f7e88485efc62e71905d78bff7c401

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
GetDateFormatA
EnumResourceLanguagesW
GlobalAlloc
GetDateFormatW
GetVolumeInformationW
GetCurrentProcessId
SetEnvironmentVariableA
GetPrivateProfileStringW
GlobalFlags
HeapAlloc
CopyFileW
GetDriveTypeW
ExpandEnvironmentStringsW
GetModuleFileNameW
GetLocaleInfoA
lstrcatW
IsBadWritePtr
InitializeCriticalSection
QueryPerformanceFrequency
FindNextFileW
FreeEnvironmentStringsA
DeleteCriticalSection
SetStdHandle
FreeEnvironmentStringsW
LocalReAlloc
GetTempPathW
ExitProcess
WritePrivateProfileStringW
GetCurrentProcess
GetStringTypeW
GetVersion
LCMapStringA
RtlUnwind
QueryPerformanceCounter
FindFirstFileW
lstrcmpW
GetLocalTime
TlsGetValue
FormatMessageW
GetFullPathNameW
HeapDestroy
CreateFileW
VirtualQuery
GetACP
IsBadCodePtr
IsValidCodePage
GetPrivateProfileIntW
GetStartupInfoW
ReadFile
SetUnhandledExceptionFilter
GetCurrentThread
WaitForMultipleObjects
LockResource
GetTickCount
LockFile
FindClose
GetTimeFormatW
LocalAlloc
GetLocaleInfoW
HeapSize
GetCurrentThreadId
CreateProcessW
HeapReAlloc
VirtualProtect
CreateDirectoryW
GetVersionExA
DeleteFileW
DuplicateHandle
HeapCreate
LCMapStringW
SetHandleCount
FileTimeToSystemTime
LoadResource
TlsFree
WriteFile
GetEnvironmentStringsW
TerminateProcess
GlobalFree
IsBadReadPtr
GetSystemTimeAsFileTime
LoadLibraryW
GlobalFindAtomW
GetFileType
CompareStringA
MapViewOfFile
FileTimeToLocalFileTime
GlobalAddAtomA
CancelWaitableTimer
ActivateActCtx
VirtualProtectEx
CancelIo
GetFileSize
VirtualFree
SizeofResource
MulDiv
RaiseException
VirtualAlloc
TlsAlloc
GetCPInfo
GetPrivateProfileSectionW
GetEnvironmentStrings
lstrcmpA
InterlockedDecrement
SetEndOfFile
GlobalHandle
lstrcpyW
GlobalDeleteAtom
UnhandledExceptionFilter
GetStringTypeA
GetCommandLineA
GetUserDefaultLCID
CreateWaitableTimerW
GetModuleHandleW
TlsSetValue
SetFileAttributesW
LeaveCriticalSection
SetFilePointer
InterlockedIncrement
InterlockedExchange
EnterCriticalSection
GetTimeZoneInformation
CompareStringW
UnmapViewOfFile
UnlockFile
GetStdHandle
GetFileTime
GetVersionExW
lstrcpynW
GetFileAttributesW
FlushFileBuffers
GetSystemInfo
GetTimeFormatA
SetWaitableTimer
SetErrorMode
HeapFree
CloseHandle
GetFileAttributesA
GetStartupInfoA
MultiByteToWideChar
SetLastError
LocalFree
lstrcpyA
lstrcpynA
GetLastError
LoadLibraryA
CreateMutexA
GetModuleFileNameA
GetProcAddress
lstrlenW
GetFullPathNameA
GetModuleHandleA
FreeLibrary
WideCharToMultiByte
AreFileApisANSI
GetThreadLocale
lstrlenA

user32

CheckMenuItem
CopyRect
CallWindowProcW
InvalidateRgn
GetAsyncKeyState
GetClassNameW
GetKeyState
SystemParametersInfoA
GetMessagePos
PeekMessageW
ClientToScreen
DrawTextExW
SetFocus
EndDialog
GetTopWindow
WinHelpW
IntersectRect
IsWindowVisible
IsWindowUnicode
wsprintfW
CharUpperA
GetWindowLongW
GetFocus
GetForegroundWindow
AdjustWindowRectEx
GetWindow
CreateWindowExW
IsRectEmpty
IsChild
MessageBoxW
GrayStringW
GetClassInfoW
SendDlgItemMessageW
SetWindowTextW
GetWindowTextLengthW
GetActiveWindow
SetCursor
IsWindowEnabled
RegisterWindowMessageW
GetPropW
SetWindowLongW
SetWindowPos
GetClassInfoExW
UnregisterClassW
SetWindowContextHelpId
SetDlgItemTextW
GetNextDlgGroupItem
TranslateMessage
GetWindowTextW
GetSysColorBrush
BeginPaint
TabbedTextOutW
MapDialogRect
GetClassLongW
SetActiveWindow
GetMenuCheckMarkDimensions
MapWindowPoints
WindowFromPoint
DispatchMessageW
SendDlgItemMessageA
InvalidateRect
DrawTextW
ScreenToClient
SetPropW
GetDesktopWindow
GrayStringA
OffsetRect
SetRect
GetWindowRect
EnableWindow
IsZoomed
PtInRect
DrawTextA
ReleaseCapture
GetWindowDC
RemovePropW
RegisterClassW
GetNextDlgTabItem
EqualRect
ValidateRect
PostMessageW
GetWindowPlacement
CreateDialogIndirectParamW
EndPaint
GetCapture
FillRect
GetParent
GetSystemMenu
SendMessageA
GetDlgCtrlID
GetSystemMetrics
SetCapture
UpdateWindow
SetForegroundWindow
GetWindowTextA
SetWindowTextA
EnumChildWindows
GetMenuState
PostQuitMessage
GetMessageTime
IsDialogMessageW
GetDlgItemTextW
SetMenuItemBitmaps
DefWindowProcA
IsWindow
TabbedTextOutA

gdi32

GetObjectW
CreateDIBSection
DeleteDC
TextOutW
CreateCompatibleDC
SetBkColor
CreateBitmap
CreateRectRgnIndirect
GetTextExtentPoint32W
GetClipBox
SetDIBColorTable
SetMapMode
GetDeviceCaps
DeleteObject
ExtTextOutW
GetViewportExtEx
AbortDoc
GetStockObject
AddFontMemResourceEx
AbortPath
ColorCorrectPalette
CancelDC
AnimatePalette
BeginPath
CloseFigure
GetWindowExtEx
SaveDC
TextOutA
RectVisible
PtVisible
CreatePalette
PtInRegion
CreatePolygonRgn
LPtoDP
GetTextColor
SetPixel
CombineRgn
CreateRectRgn
BitBlt
CreateFontIndirectA
RestoreDC
Polyline
GetObjectA
SetRectRgn
DPtoLP

comdlg32

GetSaveFileNameW
GetOpenFileNameW
GetFileTitleW

shell32

SHBrowseForFolderW
SHGetDesktopFolder
SHGetPathFromIDListA
SHGetMalloc
SHBindToParent
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteA
SHGetFolderLocation
SHFileOperationW

comctl32

ImageList_Destroy
PropertySheetW
ImageList_ReplaceIcon
ord17
ImageList_SetBkColor
ImageList_AddMasked
ImageList_Create
CreatePropertySheetPageW
_TrackMouseEvent
InitCommonControlsEx
DestroyPropertySheetPage

shlwapi

PathStripToRootW
StrRetToBufW
PathIsUNCW
PathFindExtensionW
PathFindFileNameW

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

mpr

WNetCancelConnectionW
WNetAddConnection2W

oledlg

OleUIBusyW

gdiplus

GdiplusStartup
GdipGetImagePaletteSize
GdipDrawImageI
GdipCreateBitmapFromScan0
GdipDisposeImage
GdipBitmapUnlockBits
GdipCreateBitmapFromFileICM
GdipGetImagePixelFormat
GdipGetImageWidth
GdipGetImagePalette
GdipCloneImage
GdipFree
GdipCreateBitmapFromFile
GdipGetImageHeight
GdipGetImageGraphicsContext
GdipBitmapLockBits
GdiplusShutdown
GdipAlloc
GdipDeleteGraphics

msvcrt

__CxxFrameHandler
_except_handler3
_mbscmp
_exit
exit
_strdup
_adjust_fdiv
__set_app_type
_mbsicmp
_onexit
_XcptFilter
__p__fmode
_setmbcp
_initterm
?terminate@@YAXXZ
_vsnprintf
__dllonexit
_controlfp
_splitpath
__p__commode
_acmdln
free
__setusermatherr
_CxxThrowException
__getmainargs
??1type_info@@UAE@XZ
_CIsin

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

65f7e88485efc62e71905d78bff7c401

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

comctl32

shlwapi

version

mpr

oledlg

gdiplus

msvcrt

Sections

.text Size: 60KB - Virtual size: 60KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 39KB - Virtual size: 43KB

.rsrc Size: 135KB - Virtual size: 135KB

.reloc Size: 13KB - Virtual size: 12KB

.text
Size: 60KB - Virtual size: 60KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 39KB - Virtual size: 43KB

.rsrc
Size: 135KB - Virtual size: 135KB

.reloc
Size: 13KB - Virtual size: 12KB