f003deec6c902366eefe5c68b58999a5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f003deec6c902366eefe5c68b58999a5_JaffaCakes118
Size

548KB
MD5

f003deec6c902366eefe5c68b58999a5
SHA1

9245aeb81fcc65747c7f6f8ea26506cf3c0679d4
SHA256

cbcc86ae1432d3ed841e43c91e845c7773f19c413db1b5d103c2226b3eef1636
SHA512

65c904eaca445becfc6e2e15076f8fe5715a0d33b5329395d55521287db6d4cf4a7fc4daa97548b95452259b5b85d40ce86888f92fd4430f95df58506dba281e
SSDEEP

12288:irMMnMMMMMtKPNnET7FXRTHCMit0SDbNAsxA:WMMnMMMMMtbh1iuSDbas

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f003deec6c902366eefe5c68b58999a5_JaffaCakes118

Files

f003deec6c902366eefe5c68b58999a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

52ba8af4802032ba79ce05431817afab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindow
GetMenuState
SetThreadDesktop
DrawFrameControl
SetLastErrorEx
CheckMenuItem
GetShellWindow
ReleaseDC
GetUpdateRgn
GetCapture
PtInRect
TranslateMessage
GetWindowRgn
ReleaseCapture
GetMessageTime
SetParent
GetWindowTextLengthW
GetNextDlgTabItem
GetSubMenu
GetDesktopWindow
SetRect
IsWindow
CopyImage
DialogBoxIndirectParamW
GetMenu
GetSysColorBrush
SetRectEmpty
GetScrollInfo
GetMessageW
GetThreadDesktop
SetActiveWindow
CreateCaret
OffsetRect
MapVirtualKeyW
CloseDesktop
CreateWindowExW
GetScrollRange
GetWindowRect
GetWindowLongW
HideCaret
GetSysColor
SetPropW
GetMenuItemCount
GetDlgItem
SetCursor
GetCaretBlinkTime
InflateRect
SubtractRect
GetActiveWindow
CopyRect
DrawTextExW
DrawIcon
DrawEdge
DestroyCaret
CreateWindowExA
IsIconic
DestroyWindow
GetKeyNameTextW
ShowWindow
ShowScrollBar
DrawIconEx
PostQuitMessage
PostMessageW
ChildWindowFromPoint
FillRect
GetPropW
GetProcessWindowStation
GetWindowTextW
IsWindowVisible
EnableWindow
GetKeyboardLayout
SendMessageW
CharLowerW
SetWindowLongW
AdjustWindowRect
SendDlgItemMessageW
GetKeyState
CallWindowProcW
SetWindowTextA
CreateDialogIndirectParamW
SetWindowTextW
EnumWindows
KillTimer
EqualRect
LockWindowUpdate
GetClassNameW
InvalidateRgn
GetWindowPlacement
GetIconInfo
SystemParametersInfoA
GetClientRect
SetMenu
DrawTextW
EnumDesktopsW
CharPrevW
SetScrollPos
GetDC
AppendMenuW
RedrawWindow
CreatePopupMenu
GetParent
GrayStringW
UpdateWindow
UnionRect
GetMenuItemID
RegisterWindowMessageW
RemovePropW
DeferWindowPos
SetCursorPos
EnumChildWindows
SendNotifyMessageW
BeginDeferWindowPos
SetWindowPos
GetSystemMenu
LoadImageW
SystemParametersInfoW
RegisterClassW
LoadIconW
EndDialog
GetMenuItemInfoW
GetCursorPos
SetTimer
OpenDesktopW
GetForegroundWindow
MapDialogRect
GetAsyncKeyState
GetFocus
GetWindowLongA
SetDlgItemTextW
SetForegroundWindow
InvertRect
CopyIcon
MoveWindow
SetScrollInfo
GetWindowDC
SetWindowRgn
GetUpdateRect
WindowFromPoint
IsDialogMessageW
LoadStringW
IsZoomed
MessageBeep
AdjustWindowRectEx
DefWindowProcW
GetSystemMetrics
SetFocus
MapWindowPoints
WinHelpW
GetDlgCtrlID
CallMsgFilterW
InvalidateRect
LoadCursorW
GetDoubleClickTime
DestroyCursor
EndDeferWindowPos
DestroyIcon
BeginPaint
FrameRect
PeekMessageW
GetKeyboardState
IsWindowEnabled
DispatchMessageW
GetDCEx
EnableScrollBar
ClientToScreen
GetWindowThreadProcessId
WaitMessage
GetMessagePos
GetCursor
DestroyMenu
CreateIconIndirect
ValidateRect
UnregisterClassW
IsChild
TrackPopupMenu
ShowCaret
CreateDialogIndirectParamA
DrawFocusRect
ScrollWindowEx
SetKeyboardState
SetCapture
ScreenToClient
SetScrollRange
SetCaretPos
EndPaint
IntersectRect
IsRectEmpty
GetScrollPos

gdi32

Ellipse
GetTextExtentPointA
CreateHalftonePalette
RestoreDC
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
ExtSelectClipRgn
TranslateCharsetInfo
CreateRectRgnIndirect
GetViewportExtEx
UnrealizeObject
StretchBlt
GetTextColor
MoveToEx
GetDCOrgEx
DeleteDC
GetCharWidthA
TextOutW
CreateDIBSection
GetClipBox
Rectangle
FillRgn
CreatePatternBrush
GetTextExtentPoint32W
Polyline
CreatePolygonRgn
LineTo
SetPixelV
GetNearestColor
SelectPalette
PatBlt
GetPaletteEntries
SetPixel
SetBrushOrgEx
CreateFontW
GetBitmapBits
CreateBitmapIndirect
Arc
CreateRectRgn
GetTextMetricsW
SetTextAlign
StretchDIBits
GetWindowExtEx
CreateFontIndirectW
GetCurrentObject
FrameRgn
CreateBitmap
GetStockObject
CombineRgn
GetBkColor
OffsetWindowOrgEx
GetObjectW
ExcludeClipRect
SelectClipRgn
MaskBlt
SetWindowOrgEx
GetClipRgn
CreatePen
ExtTextOutA
SetBkMode
DeleteObject
GetDeviceCaps
EnumFontFamiliesExW
ExtTextOutW
GetCharWidthW
CreatePalette
RectVisible
BitBlt
SaveDC
OffsetRgn
SetDIBColorTable
RealizePalette
IntersectClipRect
GetTextAlign
GetTextExtentPointW
GetTextCharsetInfo
GetPixel
GetDIBColorTable
SetBkColor
GetDIBits
SetTextColor
CreateSolidBrush
CreateRoundRectRgn
SetDIBits

advapi32

OpenProcessToken
CheckTokenMembership
RegCreateKeyW
RegCloseKey
RegOpenKeyExA
RegOpenKeyExW
RegCreateKeyExW
AllocateAndInitializeSid
RegSetValueExW
RegOpenCurrentUser
FreeSid
RegQueryValueExW
RegQueryValueExA
RegQueryValueW

ntdll

RtlAddAuditAccessAce

atl

AtlModuleRegisterClassObjects

ddraw

DirectDrawCreate

kernel32

GetVersionExA
HeapCreate
LCMapStringW
WaitForSingleObject
GetFileType
GetModuleHandleW
DisableThreadLibraryCalls
SetEvent
GetLocalTime
GetCommandLineA
GetTickCount
LockResource
GetCurrentThreadId
GetUserDefaultLCID
CreateFileMappingW
GetProcessHeap
EnumResourceLanguagesW
FreeEnvironmentStringsA
QueryPerformanceCounter
GetCPInfo
GetStringTypeA
LocalReAlloc
LeaveCriticalSection
GetModuleHandleA
GetDateFormatW
CompareStringA
GetOEMCP
lstrcmpiW
lstrcpynW
GetCurrentProcess
GlobalFree
SizeofResource
LoadResource
GetModuleFileNameW
VirtualProtect
VirtualFree
GetStdHandle
LocalAlloc
lstrlenA
GetSystemInfo
GlobalAlloc
MulDiv
lstrcmpA
GetSystemDefaultLCID
WriteFile
LocalFree
GetSystemTimeAsFileTime
SetLastError
GetLocaleInfoA
GetCurrentProcessId
HeapAlloc
GetThreadLocale
TerminateProcess
InterlockedIncrement
GetProcAddress
GetFileSize
HeapFree
GetWindowsDirectoryW
GetUserDefaultLangID
lstrcmpW
GlobalUnlock
CreateEventW
GlobalReAlloc
InterlockedDecrement
GetACP
TlsAlloc
EnterCriticalSection
lstrlenW
GetNumberFormatW
HeapDestroy
IsBadReadPtr
EnumCalendarInfoW
GetTimeFormatW
SetStdHandle
GlobalAddAtomW
GlobalHandle
LCMapStringA
WideCharToMultiByte
TlsFree
SetUnhandledExceptionFilter
lstrcmpiA
FindResourceExW
CreateFileW
FlushFileBuffers
InitializeCriticalSection
GetLocaleInfoW
ExitProcess
GetStartupInfoA
SetHandleCount
LoadLibraryA
LocalSize
DeleteCriticalSection
CloseHandle
FindResourceExA
GetStringTypeExW
VirtualAlloc
IsBadWritePtr
FindResourceW
FreeEnvironmentStringsW
HeapReAlloc
TlsSetValue
SetFilePointer
VirtualQuery
GetLastError
InterlockedExchange
UnmapViewOfFile
CreateThread
CompareStringW
MultiByteToWideChar
GetStringTypeW
Sleep
MapViewOfFile
GetModuleFileNameA
GetEnvironmentStrings
FreeResource
InterlockedCompareExchange
LoadLibraryW
UnhandledExceptionFilter
FreeLibrary
GetEnvironmentStringsW
TlsGetValue

Sections

.text
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512KB - Virtual size: 508KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52ba8af4802032ba79ce05431817afab

Headers

File Characteristics

Imports

user32

gdi32

advapi32

ntdll

atl

ddraw

kernel32

Sections

.text Size: 4KB - Virtual size: 928B

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 2.0MB

.idata Size: 12KB - Virtual size: 10KB

.rsrc Size: 512KB - Virtual size: 508KB

.text
Size: 4KB - Virtual size: 928B

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 2.0MB

.idata
Size: 12KB - Virtual size: 10KB

.rsrc
Size: 512KB - Virtual size: 508KB