JaffaCakes118_0ed686da7b48bd2325e120e1dfbfd5f7

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_0ed686da7b48bd2325e120e1dfbfd5f7
Size

287KB
MD5

0ed686da7b48bd2325e120e1dfbfd5f7
SHA1

a8a2b7d89ce4a08f707275277617b2e01c862169
SHA256

56382ad3425687b441b788a03bd9b6ebb5822d6b225c3c6450b7935b0957f37a
SHA512

78a11ccdd5f63975729e9bd9547224b06cc51095c855347a20c6706efeb1c7f0d2a028eeeb77c27076fb91c82d48f9ae2c101b8f2d025f97940351cd862d7758
SSDEEP

6144:/twxm2tOHRMdTBUnUBK2MflHHiezy85dEJkMsOD:kAHRBU6HHiemwEJb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_0ed686da7b48bd2325e120e1dfbfd5f7

Files

JaffaCakes118_0ed686da7b48bd2325e120e1dfbfd5f7
.exe windows:4 windows x86 arch:x86

b3f3781dff9137e502d8d7dff04790ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
CreateFileMappingA
GetFileType
InterlockedPushEntrySList
GlobalUnlock
SetFilePointer
FlushFileBuffers
MulDiv
GetACP
HeapDestroy
GetFileSize
IsDebuggerPresent
GlobalAlloc
FindNextFileW
LoadResource
lstrlenW
FindResourceW
SwitchToThread
CreateFileW
CloseHandle
FlushInstructionCache
MapViewOfFile
LocalFree
ExpandEnvironmentStringsW
FindFirstFileW
FindResourceExW
VirtualAlloc
SetUnhandledExceptionFilter
SizeofResource
DeleteCriticalSection
WideCharToMultiByte
RaiseException
GetFileAttributesExW
TlsAlloc
GetModuleHandleW
LeaveCriticalSection
InterlockedPopEntrySList
DeleteFileW
IsValidCodePage
GetProcessHeap
FormatMessageW
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
LockResource
UnhandledExceptionFilter
HeapSize
UnmapViewOfFile
GlobalLock
GetCurrentThreadId
TlsGetValue
ReadFile
IsProcessorFeaturePresent
HeapAlloc
FindClose
WriteFile
EnterCriticalSection
CreateDirectoryW
lstrcmpiW
SetEndOfFile
TlsFree
SetLastError
FreeLibrary
lstrcmpW
TlsSetValue
HeapReAlloc
GetFullPathNameW
CreateFileA
HeapFree
VirtualFree
QueryPerformanceCounter

shell32

SHGetFolderPathW

gdi32

CreateFontIndirectW
GetDeviceCaps
BitBlt
DeleteDC
GetStockObject
LineTo
CreatePen
CreateSolidBrush
GetObjectW
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
MoveToEx
CreateDCA
CreateDIBSection
CreateFontIndirectExA
CreateMetaFileW
CreateICA
UpdateICMRegKeyA
CreatePalette
CreateColorSpaceA
TranslateCharsetInfo

crypt32

PFXImportCertStore
CryptMemFree
PFXExportCertStoreEx
CertCreateSelfSignCertificate
CertOpenStore
CryptAcquireCertificatePrivateKey
CertAddCertificateContextToStore
CertFreeCertificateContext
CryptMemAlloc
CertStrToNameW
CertEnumCertificatesInStore
CertCloseStore

ole32

CoGetClassObject
CoCreateFreeThreadedMarshaler
CoCreateGuid
OleUninitialize
StringFromGUID2
CreateStreamOnHGlobal
OleInitialize
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
OleLockRunning
CLSIDFromString
CLSIDFromProgID

wininet

InternetCanonicalizeUrlW
InternetCrackUrlW

comctl32

ImageList_Destroy
ImageList_LoadImageW

user32

SetCursorPos
MonitorFromWindow
SendDlgItemMessageW
IntersectRect
ScreenToClient
GetWindow
CreateAcceleratorTableW
MoveWindow
IsWindow
GetWindowRect
ClientToScreen
IsDlgButtonChecked
SetCursor
SendMessageW
SetWindowPos
ShowWindow
GetDlgItem
CreateWindowExW
GetWindowTextLengthW
GetActiveWindow
UnhookWindowsHookEx
DialogBoxIndirectParamW
IsChild
CallWindowProcW
SetTimer
CharNextW
EnableWindow
PtInRect
GetDlgItemTextW
RegisterWindowMessageW
ReleaseDC
GetClassInfoExW
RegisterClassExW
DestroyWindow
GetClientRect
SetFocus
GetFocus
UpdateWindow
LoadCursorW
wsprintfW
SetWindowLongW
IsWindowEnabled
RedrawWindow
SendMessageA
DrawTextExW
GetSysColor
GetWindowInfo
CheckDlgButton
InvalidateRect
GetCursorPos
GetDesktopWindow
SetDlgItemTextW
GetClassNameW
EndPaint
CallNextHookEx
MessageBoxW
EndDialog
DefWindowProcW
KillTimer
MapWindowPoints
DestroyAcceleratorTable
SetWindowTextW
SetWindowsHookExW
DialogBoxParamW
GetMonitorInfoW
GetSystemMetrics
LoadStringW
InvalidateRgn
GetParent
SetCapture
FillRect
GetDC
ReleaseCapture
GetDlgCtrlID
PostMessageW
UnregisterClassA
GetWindowLongW
GetWindowTextW
BeginPaint

advapi32

RegDeleteKeyW
CryptGenKey
CryptExportKey
RegEnumKeyW
RegOpenKeyExW
CryptAcquireContextW
CryptGetProvParam
RegSetValueExW
RegQueryValueExW
CryptEnumProvidersW
CryptGetUserKey
CryptReleaseContext
RegQueryInfoKeyW
RegDeleteValueW
RegCreateKeyExW
RegEnumKeyExW
RegCloseKey
CryptDestroyKey

secur32

GetUserNameExW

oleaut32

OleCreateFontIndirect
SysAllocString
VariantChangeType
SafeArrayGetElement
SysFreeString
VariantInit
UnRegisterTypeLi
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayDestroy
SafeArrayLock
VarUI4FromStr
VariantClear
CreateErrorInfo
RegisterTypeLi
VarBstrCat
SysAllocStringLen
DispCallFunc
GetErrorInfo
SetErrorInfo
SafeArrayGetVartype
LoadTypeLi
SysStringByteLen
SafeArrayGetDim
SysAllocStringByteLen
LoadRegTypeLi
SysStringLen
SafeArrayUnlock

mprdim

ServiceMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 254KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3f3781dff9137e502d8d7dff04790ad

Headers

File Characteristics

Imports

kernel32

shell32

gdi32

crypt32

ole32

wininet

comctl32

user32

advapi32

secur32

oleaut32

mprdim

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 254KB - Virtual size: 1.2MB

.rsrc Size: 8KB - Virtual size: 21KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 254KB - Virtual size: 1.2MB

.rsrc
Size: 8KB - Virtual size: 21KB