JaffaCakes118_c7587a308e45444909cf83541f37ab2e1b1745b9fc329e308d0e5a6562440c69

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_c7587a308e45444909cf83541f37ab2e1b1745b9fc329e308d0e5a6562440c69
Size

421KB
MD5

1c974a0a7c3444f7a67c8f279d8ab760
SHA1

ca79bc2a2ff53b7206b0cbd439cb0d6df4f014fd
SHA256

c7587a308e45444909cf83541f37ab2e1b1745b9fc329e308d0e5a6562440c69
SHA512

a000b2e27a3afe7f4e853f54b9e4f6c302401bbd036a258e67c8ae3004879bad3ff9d060c3bf3351a081bb59b7c91afba7235761d65a7243416d7a0986338523
SSDEEP

6144:DNnPQx0qXqPyxs8LvfPPQOoXaaS48oOU/6kZFCIabeqm5w/a3RvNxZbWf0Yarcl4:D94BaP8fPPwk4jZHxqW5vZb+QUq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/maza54ter.exe

Files

JaffaCakes118_c7587a308e45444909cf83541f37ab2e1b1745b9fc329e308d0e5a6562440c69
.zip

Password: infected
maza54ter.exe
.exe windows:4 windows x86 arch:x86

7dae3610b92e1224c0550f535f27ee05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
IsBadReadPtr
IsBadCodePtr
IsBadWritePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
VirtualAlloc
GetProfileStringA
InterlockedExchange
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
RaiseException
TerminateProcess
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
CopyFileA
FormatMessageA
lstrlenW
GlobalSize
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetShortPathNameA
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetOEMCP
GetCPInfo
GetThreadLocale
GetProcessVersion
GetCurrentDirectoryA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
SizeofResource
GlobalFlags
SetLastError
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetProfileIntA
MulDiv
MultiByteToWideChar
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
lstrcpynA
GetFileAttributesA
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetTickCount
lstrlenA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalAddAtomA
CloseHandle
GetModuleFileNameA
GlobalDeleteAtom
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
lstrcmpA
LockResource
FindResourceA
LoadResource
ExitProcess
LoadLibraryW
GetProcAddress
GlobalUnlock
GlobalAlloc
GlobalLock
GlobalFree

user32

LockWindowUpdate
ReleaseCapture
IsClipboardFormatAvailable
InflateRect
InvalidateRect
PtInRect
FillRect
SetRect
GetDC
ReleaseDC
LoadCursorA
DestroyCursor
LoadIconA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetDCEx
GetWindow
SetWindowContextHelpId
RegisterClipboardFormatA
GetTabbedTextExtentA
SetFocus
ShowWindow
SetWindowPos
MoveWindow
SetWindowLongA
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
UpdateWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
EnableWindow
GetClientRect
FindWindowA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
MessageBoxA
SetCursor
ShowOwnedPopups
PostMessageA
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
InvertRect
WindowFromPoint
KillTimer
SetTimer
MapDialogRect
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SendMessageA
CharUpperA
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
PostThreadMessageA
DestroyIcon
LoadStringA
GetSysColorBrush
GetMenuStringA
InsertMenuA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetClassNameA
GetSystemMenu
DeleteMenu
AppendMenuA
SetParent
IsZoomed
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
DestroyMenu
GetDesktopWindow
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
wsprintfA
IsRectEmpty
SetCapture

gdi32

StretchDIBits
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
GetCharWidthA
CreateFontA
CreateFontIndirectA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
GetTextMetricsA
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
LPtoDP
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
GetMapMode
SetRectRgn
CombineRgn
CopyMetaFileA
BitBlt
SelectObject
GetTextExtentPoint32A
CreateRectRgnIndirect
DeleteDC
CreateDCA
SetAbortProc
StartDocA
StartPage
EndPage
EndDoc
AbortDoc
GetViewportOrgEx
CreatePen
DPtoLP
Rectangle
GetStockObject
PatBlt
GetDeviceCaps
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap
GetTextExtentPointA
CreateBitmap

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
CommDlgExtendedError
PrintDlgA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

GetFileSecurityA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegSetValueA
RegCreateKeyA
RegQueryValueA
SetFileSecurityA
RegDeleteValueA

shell32

ExtractIconA
DragFinish
DragQueryFileA
SHGetFileInfoA

comctl32

ord17
ImageList_Destroy

oledlg

ord8

ole32

OleDuplicateData
CreateStreamOnHGlobal
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRevokeClassObject
CoGetClassObject
CoRegisterMessageFilter
DoDragDrop
OleFlushClipboard
OleGetClipboard
ReleaseStgMedium
CoTaskMemFree
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantChangeType
SysAllocString
VariantCopy
SysStringLen

Sections

.text
Size: 252KB - Virtual size: 249KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 316KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

7dae3610b92e1224c0550f535f27ee05

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 252KB - Virtual size: 249KB

.rdata Size: 68KB - Virtual size: 64KB

.data Size: 12KB - Virtual size: 29KB

.rsrc Size: 316KB - Virtual size: 313KB

.text
Size: 252KB - Virtual size: 249KB

.rdata
Size: 68KB - Virtual size: 64KB

.data
Size: 12KB - Virtual size: 29KB

.rsrc
Size: 316KB - Virtual size: 313KB