JaffaCakes118_dbda6df0bcc95da4682cf9c527f9a3b0d5d6e809ed61cefe11ff05d4c2d79247

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_dbda6df0bcc95da4682cf9c527f9a3b0d5d6e809ed61cefe11ff05d4c2d79247
Size

598KB
MD5

d4a1164c7575a433ab0a9807eff9ed8b
SHA1

b9d23fdb909ad5d35a1af3512318a36aed0b09bc
SHA256

dbda6df0bcc95da4682cf9c527f9a3b0d5d6e809ed61cefe11ff05d4c2d79247
SHA512

619fcb8a418bbe0829b43a800ae843dee2fcfeac412dbd7ab8873a54dc508883031de4a82188b6f44bd07f577b9488b15bcbbd36575f529e98aee8abbe3bbc81
SSDEEP

12288:oNukikH+WlJ9be7QNrTMvJpkz7LD352wJDrJFuDE:Ho+Wlbbe4ABSzfD3EwJDrJFuI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_dbda6df0bcc95da4682cf9c527f9a3b0d5d6e809ed61cefe11ff05d4c2d79247

Files

JaffaCakes118_dbda6df0bcc95da4682cf9c527f9a3b0d5d6e809ed61cefe11ff05d4c2d79247
.exe windows:4 windows x86 arch:x86

486f1bede03460504495a27fe1bbd979

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetTimeZoneInformation
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
RaiseException
VirtualAlloc
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetLocaleInfoA
GetLocaleInfoW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
InterlockedExchange
ExitProcess
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
GetFileSize
GetFileAttributesA
SetErrorMode
GlobalGetAtomNameA
GlobalAddAtomA
GetVersionExA
SizeofResource
GetModuleFileNameA
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
LoadLibraryA
GetProcAddress
FreeLibrary
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetProcessVersion
lstrcpyA
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
SetLastError
lstrcpynA
GetVersion
lstrcatA
GlobalFree
LockResource
FindResourceA
LoadResource
GlobalUnlock
MulDiv
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetLastError
FormatMessageA
CreatePipe
CreateProcessA
PeekNamedPipe
ReadFile
WaitForSingleObject
Sleep
TerminateProcess
CloseHandle
VirtualFree

user32

LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
IntersectRect
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
ScreenToClient
SetScrollInfo
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
DefWindowProcA
CreateWindowExA
SetPropA
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindowRect
RegisterWindowMessageA
MapDialogRect
GetWindow
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GrayStringA
DrawTextA
TabbedTextOutA
TranslateAcceleratorA
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GetMenuCheckMarkDimensions
LoadBitmapA
FindWindowA
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
MessageBoxA
SetCursor
ShowOwnedPopups
PostQuitMessage
PostMessageA
GetParent
SetFocus
IsWindowEnabled
ShowWindow
SetWindowPos
MoveWindow
SetWindowLongA
GetDlgCtrlID
PeekMessageA
SendMessageA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
GetWindowLongA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
LoadAcceleratorsA
SetRectEmpty
EndPaint
InvalidateRect
UnhookWindowsHookEx
EnableMenuItem
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
IsWindowUnicode
LoadIconA
EnableWindow
SetRect
CopyAcceleratorTableA
CharNextA
OffsetRect
GetNextDlgGroupItem
MessageBeep
CharUpperA
GetSysColorBrush
PtInRect
GetClassNameA
ClientToScreen
WindowFromPoint
GetDesktopWindow
ReleaseCapture
LoadCursorA
DestroyMenu
LoadStringA
UpdateWindow
SystemParametersInfoA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
GetMenuState
EndDeferWindowPos
ScrollWindow

gdi32

GetClipBox
IntersectClipRect
DeleteObject
ScaleWindowExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA
GetTextExtentPointA
GetTextColor
GetBkColor
DPtoLP
LPtoDP
PatBlt
GetMapMode
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkMode
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetDeviceCaps
GetViewportExtEx
CreateDIBitmap
BitBlt
CreateCompatibleDC
CreateFontA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey

shell32

DragQueryFileA
DragFinish

comctl32

ord17
ImageList_Destroy

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CoGetClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleUninitialize

oleaut32

VariantClear
SysAllocStringLen
SysFreeString
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
OleCreateFontIndirect

Sections

.text
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 353KB - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

486f1bede03460504495a27fe1bbd979

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

Sections

.text Size: 178KB - Virtual size: 178KB

.rdata Size: 37KB - Virtual size: 36KB

.data Size: 19KB - Virtual size: 36KB

.idata Size: 9KB - Virtual size: 8KB

.rsrc Size: 353KB - Virtual size: 353KB

.text
Size: 178KB - Virtual size: 178KB

.rdata
Size: 37KB - Virtual size: 36KB

.data
Size: 19KB - Virtual size: 36KB

.idata
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 353KB - Virtual size: 353KB