f88e0a3b003e70fc3bc9fd60acea25c2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f88e0a3b003e70fc3bc9fd60acea25c2_JaffaCakes118
Size

84KB
MD5

f88e0a3b003e70fc3bc9fd60acea25c2
SHA1

da7b29ad07fec89b839bbf5168c05c038d8e2691
SHA256

570f7b63267f6c534d35cafaacc7520b84affb2ec148354fe37c5ee3c66a2024
SHA512

f315926b906479de614956f29cfe197688ce6cb5d44256a2514b854cb0bc345e535cd8d933ceb49f93b124a4510fdd6639d180de16bb44c93c2b0e0b216ccda5
SSDEEP

1536:TruwviQkklh9LHBjwX4kCfggvzEi2IakruLw9/mPjKQdL:UzkBHBkXDC/aFw9Uz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f88e0a3b003e70fc3bc9fd60acea25c2_JaffaCakes118

Files

f88e0a3b003e70fc3bc9fd60acea25c2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5e09b364732e0291871b8cd3b0cb94f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeMountPointA
FindFirstVolumeMountPointW
FlushFileBuffers
FlushInstructionCache
GetACP
GetAtomNameA
GetComputerNameA
GetComputerNameExW
GetConsoleAliasW
GetConsoleCursorInfo
GetConsoleFontSize
GetConsoleScreenBufferInfo
GetCurrencyFormatW
GetDriveTypeW
GetEnvironmentStrings
GetFileAttributesExW
GetFullPathNameA
GetLastError
GetLocalTime
GetLogicalDrives
GetModuleFileNameW
GetNumberOfConsoleInputEvents
GetPrivateProfileSectionNamesA
GetProcessPriorityBoost
GetStartupInfoA
GetStringTypeExA
GetTimeZoneInformation
GetUserDefaultLCID
GetVolumeNameForVolumeMountPointA
GlobalFree
GlobalMemoryStatus
GlobalUnlock
Heap32ListNext
Heap32Next
HeapAlloc
InterlockedExchangeAdd
InterlockedIncrement
IsBadReadPtr
EnumSystemCodePagesA
IsValidCodePage
IsValidLanguageGroup
LocalFileTimeToFileTime
MoveFileWithProgressA
MoveFileWithProgressW
MulDiv
OpenSemaphoreW
QueryDosDeviceA
RaiseException
ReadConsoleA
ReadConsoleOutputW
ResetEvent
RtlFillMemory
RtlMoveMemory
SetCalendarInfoA
SetConsoleCP
SetConsoleScreenBufferSize
SetConsoleTitleW
SetLocaleInfoW
SetProcessWorkingSetSize
SetThreadContext
SetThreadLocale
SetTimeZoneInformation
SleepEx
UpdateResourceW
WaitForMultipleObjects
WaitForMultipleObjectsEx
WaitNamedPipeA
WriteConsoleA
WriteConsoleOutputAttribute
WriteConsoleOutputCharacterW
WriteFileGather
WriteProfileSectionW
_hread
lstrcmp
lstrcpyA
EnumLanguageGroupLocalesA
EnumDateFormatsA
EnumCalendarInfoA
EnterCriticalSection
DosDateTimeToFileTime
DisableThreadLibraryCalls
DeleteVolumeMountPointA
DeleteCriticalSection
DefineDosDeviceA
CreateFileW
DebugActiveProcess
CreateNamedPipeA
CreateHardLinkW
CreateHardLinkA
CreateConsoleScreenBuffer
ClearCommError
ClearCommBreak
VirtualAlloc
GetWindowsDirectoryW
lstrlenW
lstrcpyW
IsBadStringPtrW

user32

TrackPopupMenuEx
TranslateAccelerator
UnionRect
UnloadKeyboardLayout
WaitMessage
WindowFromDC
WindowFromPoint
wvsprintfW
ToUnicodeEx
AnimateWindow
AppendMenuA
AttachThreadInput
ChangeDisplaySettingsExW
CharNextExA
CharPrevW
CharToOemW
CharUpperW
CheckDlgButton
ClipCursor
CopyRect
DdeAddData
DdeDisconnect
DdeEnableCallback
DdeUninitialize
DlgDirSelectExW
EmptyClipboard
EnableScrollBar
EnableWindow
EndDeferWindowPos
EnumClipboardFormats
EnumDesktopsA
FindWindowExW
GetClassInfoExA
GetClassLongA
GetClipboardOwner
GetCursorInfo
GetDlgItemTextW
GetGuiResources
GetInputState
GetKeyNameTextW
GetKeyState
GetKeyboardType
GetMenuItemInfoA
GetMenuState
GetMessagePos
GetParent
GetScrollInfo
GetScrollRange
GetSystemMetrics
GetTabbedTextExtentA
GetWindowContextHelpId
GrayStringA
IMPGetIMEW
IMPQueryIMEA
InsertMenuItemW
InsertMenuW
InvalidateRgn
IsCharLowerA
IsClipboardFormatAvailable
IsDialogMessageW
IsRectEmpty
LoadCursorA
LoadImageA
LoadKeyboardLayoutW
LoadMenuIndirectA
LookupIconIdFromDirectoryEx
MapWindowPoints
MessageBoxIndirectA
MessageBoxW
MonitorFromRect
NotifyWinEvent
OemToCharA
OpenClipboard
RealChildWindowFromPoint
ReleaseCapture
RemovePropA
ReplyMessage
ScrollWindow
SendDlgItemMessageW
SendIMEMessageExA
SendMessageA
SendNotifyMessageA
SetCaretPos
SetClassLongW
ToAsciiEx
SetWindowTextA
SetSysColors
SetRect
SetMessageExtraInfo
SetMenuDefaultItem
SetMenu
SetKeyboardState
SetForegroundWindow
SetCursor

comdlg32

ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
GetFileTitleA
GetFileTitleW
GetOpenFileNameA
GetOpenFileNameW
ChooseColorW
GetSaveFileNameW
PageSetupDlgA
PageSetupDlgW
PrintDlgA
PrintDlgExA
PrintDlgExW
ReplaceTextA
ReplaceTextW
GetSaveFileNameA
ChooseColorA

advapi32

RegOpenKeyExA

shell32

ExtractAssociatedIconW
ExtractAssociatedIconExW
ExtractAssociatedIconA
DragQueryFileW
DragFinish
DragAcceptFiles
DoEnvironmentSubstA
CheckEscapesW
ExtractIconA
WOWShellExecute
Shell_NotifyIconW
Shell_NotifyIconA
ShellExecuteExW
ShellAboutA
SHQueryRecycleBinW
SHQueryRecycleBinA
SHLoadNonloadedIconOverlayIdentifiers
SHIsFileAvailableOffline
SHInvokePrinterCommandA
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
SHGetSettings
SHGetPathFromIDList
SHGetMalloc
SHGetInstanceExplorer
SHGetIconOverlayIndexW
SHGetIconOverlayIndexA
SHGetFolderPathW
SHGetFolderPathA
SHGetFolderLocation
SHGetFileInfoA
SHGetFileInfo
SHGetDiskFreeSpaceExW
SHGetDiskFreeSpaceExA
SHGetDiskFreeSpaceA
SHGetDataFromIDListW
SHFreeNameMappings
SHFormatDrive
SHFileOperationW
SHFileOperationA
SHFileOperation
SHEmptyRecycleBinA
SHCreateProcessAsUserW
SHCreateDirectoryExW
SHChangeNotify
SHBrowseForFolderA
SHBindToParent
SHAppBarMessage
SHAddToRecentDocs
FindExecutableW
FindExecutableA
ExtractIconExW
ExtractIconEx

ole32

WdtpInterfacePointer_UserFree
UtConvertDvtd32toDvtd16
UpdateDCOMSettings
StringFromIID
StringFromGUID2
StringFromCLSID
StgSetTimes
StgPropertyLengthAsVariant
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateStorageEx
SetConvertStg
STGMEDIUM_UserSize
SNB_UserSize
ReleaseStgMedium
RegisterDragDrop
ReadOleStg
ProgIDFromCLSID
OleUninitialize
OleRegEnumVerbs
OleRegEnumFormatEtc
OleQueryLinkFromData
OleMetafilePictFromIconAndLabel
OleInitialize
OleCreateLinkFromDataEx
OleCreateLinkEx
OleCreateLink
OleCreateFromFileEx
OleCreateFromDataEx
OleCreateFromData
MkParseDisplayName
IsEqualGUID
HkOleRegisterObject
HWND_UserSize
HWND_UserFree
HPALETTE_UserFree
HMENU_UserFree
HICON_UserSize
HGLOBAL_UserMarshal
HBRUSH_UserSize
HBITMAP_UserMarshal
HACCEL_UserFree
GetHGlobalFromStream
GetHGlobalFromILockBytes
GetClassFile
DoDragDrop
DllGetClassObjectWOW
CreateStreamOnHGlobal
CreateOleAdviseHolder
CreateILockBytesOnHGlobal
CreateGenericComposite
CreateDataAdviseHolder
CreateAntiMoniker
CoWaitForMultipleHandles
CoUnmarshalHresult
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoSuspendClassObjects
CoSetProxyBlanket
CoRevokeMallocSpy
CoRevokeClassObject
CoRevertToSelf
CoResumeClassObjects
CoReleaseMarshalData
CoRegisterMallocSpy
CoMarshalHresult
CoLoadLibrary
CoIsOle1Class
CoIsHandlerConnected
CoInstall
CoGetObjectContext
CoGetClassVersion
CoGetCallContext
CoFreeAllLibraries
CoDosDateTimeToFileTime
CoDisconnectObject
CoDisableCallCancellation
CoCopyProxy
CoAddRefServerProcess
CLSIDFromString
CLSIDFromProgID
CLIPFORMAT_UserFree
BindMoniker

oleaut32

VarI2FromBool
VarI1FromUI4
VarI1FromUI2
VarI1FromI4
VarI1FromDec
VarI1FromCy
VarFix
VarDecFromUI2
VarDecFromStr
VarDecFromCy
VarDecFromBool
VarDecFix
VarDateFromUI4
VarDateFromUI2
VarDateFromR4
VarDateFromI2
VarDateFromDisp
VarDateFromDec
VarCySu
VarCyRound
VarCyFromUI2
VarCyFromStr
VarCyFromR4
VarCyFromI4
VarCyFromDisp
VarCyFromDec
VarCyFromDate
VarCyFromBool
VarCyFix
VarCmp
VarBstrFromUI4
VarBstrFromUI2
VarBstrFromUI1
VarBstrFromI1
VarBoolFromUI1
VarBoolFromI4
VarBoolFromDec
VarBoolFromDate
VarAnd
VARIANT_UserSize
VARIANT_UserMarshal
SysStringLen
SysAllocStringByteLen
SafeArrayUnlock
SafeArrayGetIID
SafeArrayGetElemsize
SafeArrayDestroy
SafeArrayCreateVectorEx
SafeArrayCreateVector
SafeArrayCreateEx
SafeArrayCopyData
OleLoadPictureFileEx
OleLoadPictureFile
OleCreatePropertyFrameIndirect
OleCreatePropertyFrame
OleCreateFontIndirect
LoadTypeLibEx
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_Unmarshal
LPSAFEARRAY_Size
DispInvoke
DispCallFunc
ClearCustData
VariantTimeToSystemTime
VariantCopy
VarUI4FromR4
VarUI2FromI4
VarUI2FromDisp
VarUI2FromDate
VarUI2FromCy
VarUI1FromStr
VarUI1FromCy
VarI2FromDisp
VarI2FromR4
VarI2FromR8
VarI4FromUI4
VarIdiv
VarR4FromI1
VarR4FromI4
VarR8FromCy
VarR8FromDate
VarR8FromDec
VarR8Round
VarUI1FromDisp

shlwapi

StrChrIW
StrCmpNIA
StrCmpNIW
StrRChrA
StrRChrIA
StrRStrIA
StrRStrIW
StrStrIW
StrStrW
StrChrA

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e09b364732e0291871b8cd3b0cb94f5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 73KB - Virtual size: 73KB

.data Size: 512B - Virtual size: 188B

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 73KB - Virtual size: 73KB

.data
Size: 512B - Virtual size: 188B

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 2KB - Virtual size: 2KB