JaffaCakes118_691a78555e22dd81ad737f46efb31f40

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_691a78555e22dd81ad737f46efb31f40
Size

220KB
MD5

691a78555e22dd81ad737f46efb31f40
SHA1

d1a35126d344dec98453e8d796a694e955522b3f
SHA256

9758b047a14ee058b5a3bae9a936702b6987b704aeb998b1d64f08d13dc2ea21
SHA512

0d84177b82211c078ae62a5eea187e30af998f708e8851edbf2bcb74ec32c783f0ca938452f08ab94699bc9e6c649250eeb5ef317b357a12d8b6697538366011
SSDEEP

3072:2Jb/4MXwl+7I3xzesJekwYHT0H0tvocArU/GfyGEUIZGCH:2d4hF3xzesJTkPfyY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_691a78555e22dd81ad737f46efb31f40

Files

JaffaCakes118_691a78555e22dd81ad737f46efb31f40
.exe windows:4 windows x86 arch:x86

c66ebb0b650a1982fea61c45e0baabba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetOEMCP
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
GetProcessVersion
GetCPInfo
HeapAlloc
HeapFree
RaiseException
TerminateProcess
GetStartupInfoA
HeapReAlloc
GetACP
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WritePrivateProfileStringA
LocalReAlloc
HeapSize
GetModuleFileNameA
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
DuplicateHandle
GetLastError
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetUserDefaultLangID
GlobalLock
GlobalUnlock
GetProfileStringA
TlsGetValue
TlsFree
TlsSetValue
GlobalReAlloc
LocalAlloc
GlobalHandle
TlsAlloc
GlobalFlags
SetErrorMode
GetFileAttributesA
GetFileTime
GetFileSize
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GlobalFree
InitializeCriticalSection
SizeofResource
FreeLibrary
LocalFree
LockResource
FindResourceA
LoadResource
GlobalGetAtomNameA
GetVersion
lstrcatA
GlobalAddAtomA
GlobalFindAtomA
GlobalAlloc
HeapDestroy
GetCurrentThread
GetCommandLineA
GlobalDeleteAtom
lstrcmpA
GetModuleHandleA
GetCurrentThreadId
MulDiv
HeapCreate
SetLastError
lstrcmpiA
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
LoadLibraryA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
VirtualFree
VirtualAlloc
SetHandleCount
GetStdHandle
GetFileType

user32

GetTopWindow
AdjustWindowRectEx
SetFocus
IsWindow
SetActiveWindow
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
CreateDialogIndirectParamA
EndDialog
IsDialogMessageA
SetWindowTextA
ShowWindow
LoadStringA
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
DestroyMenu
InvalidateRect
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
PostQuitMessage
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
ClientToScreen
ScreenToClient
CharUpperA
wsprintfA
DrawStateA
CopyRect
GetParent
KillTimer
SetTimer
GetWindowRect
PostMessageA
RedrawWindow
GetDC
IsIconic
DrawIcon
GetSystemMetrics
GetSysColor
SendMessageA
GetClientRect
SetWindowRgn
LoadIconA
EnableWindow
MessageBoxA
DefWindowProcA
GetCapture
DestroyWindow
CheckMenuItem
SetMenuItemBitmaps
OffsetRect
ExcludeUpdateRgn
ShowCaret
IsWindowUnicode
CharNextA
InflateRect
DefDlgProcA
DrawFocusRect
HideCaret
UnregisterClassA

gdi32

CreatePen
RoundRect
SelectObject
GetTextExtentPoint32A
GetCurrentObject
CreateRectRgn
DeleteDC
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
GetClipBox
ScaleWindowExtEx
IntersectClipRect
CreateRoundRectRgn
LineTo
DeleteObject
ExtSelectClipRgn
GetDeviceCaps
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
GetObjectA
CreateBitmap
BitBlt
GetTextExtentPointA
CreateCompatibleDC
CreateDIBitmap
GetStockObject
PatBlt
MoveToEx
CreateSolidBrush

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA

comctl32

ord17

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�I9��u�
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c66ebb0b650a1982fea61c45e0baabba

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

Sections

.text Size: 104KB - Virtual size: 102KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 32KB - Virtual size: 49KB

.rsrc Size: 36KB - Virtual size: 33KB

�I9��u� Size: 20KB - Virtual size: 20KB

.text
Size: 104KB - Virtual size: 102KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 32KB - Virtual size: 49KB

.rsrc
Size: 36KB - Virtual size: 33KB

�I9��u�
Size: 20KB - Virtual size: 20KB