General

Malware Config

Signatures

Files

• faa05ed9270e1e5647e1d3c8d3582c1c_JaffaCakes118

  .exe windows:5 windows x86 arch:x86

  90b3fc7fb5be3d85472250e5a692dea0

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetModuleFileNameW

  CreateMutexW

  GetExitCodeThread

  LockResource

  GetProcAddress

  QueryPerformanceCounter

  GetVersionExW

  MulDiv

  GetCurrentProcessId

  HeapAlloc

  TerminateProcess

  Sleep

  WaitForMultipleObjects

  FindResourceExW

  WaitForSingleObject

  SystemTimeToFileTime

  SetCurrentDirectoryW

  GetCurrentThreadId

  HeapCreate

  GetBinaryTypeW

  GetTickCount

  LoadResource

  HeapFree

  CreateEventW

  FileTimeToSystemTime

  GetUserDefaultLCID

  OpenEventW

  FindResourceA

  GetStartupInfoW

  InitializeCriticalSection

  lstrlenW

  CreateThread

  lstrcmpiW

  SetLastError

  CloseHandle

  DelayLoadFailureHook

  EnterCriticalSection

  CreateIoCompletionPort

  GetSystemDirectoryW

  HeapReAlloc

  GetCurrentProcess

  InitializeCriticalSectionAndSpinCount

  WideCharToMultiByte

  VirtualAlloc

  lstrlenA

  HeapDestroy

  CompareStringW

  OutputDebugStringA

  GetModuleHandleW

  GetUserDefaultUILanguage

  LeaveCriticalSection

  HeapSize

  ProcessIdToSessionId

  GetCurrentThread

  GetQueuedCompletionStatus

  FlushInstructionCache

  GetSystemInfo

  LoadLibraryExA

  FindResourceW

  FreeLibrary

  VirtualFree

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  ResumeThread

  RaiseException

  ExitProcess

  GetSystemTimeAsFileTime

  LoadLibraryW

  TerminateThread

  HeapSetInformation

  LocalFree

  LoadLibraryA

  LocalAlloc

  LoadLibraryExW

  PostQueuedCompletionStatus

  OpenProcess

  GetProcessHeap

  FormatMessageW

  ReleaseMutex

  ExpandEnvironmentStringsW

  MultiByteToWideChar

  GetSystemTime

  GetLastError

  ResetEvent

  GetSystemWindowsDirectoryW

  GetVersionExA

  SizeofResource

  SetEvent

  DeleteCriticalSection

  user32

  IsWindowEnabled

  GetFocus

  LoadMenuW

  MoveWindow

  TranslateAcceleratorW

  LoadCursorW

  CheckDlgButton

  UnregisterClassA

  LoadStringW

  LoadAcceleratorsW

  KillTimer

  SetWindowLongW

  GetMenu

  DefWindowProcW

  CreateWindowExW

  SetWindowTextW

  GetWindowLongW

  IsDlgButtonChecked

  IsWindowVisible

  GetClassNameW

  DestroyIcon

  SetCursor

  EnumChildWindows

  TranslateMessage

  TrackPopupMenuEx

  ShowWindow

  GetDC

  AdjustWindowRectEx

  CharNextW

  EnableWindow

  ReleaseDC

  GetProcessDefaultLayout

  RegisterClassExW

  DestroyMenu

  SetWindowPos

  GetSystemMetrics

  GetSysColor

  DestroyWindow

  SendMessageW

  InvalidateRect

  GetMonitorInfoW

  IsIconic

  LockWindowUpdate

  PostMessageW

  IsZoomed

  PostQuitMessage

  GetClassInfoExW

  GetKeyState

  GetWindowPlacement

  GetSysColorBrush

  ClientToScreen

  SetFocus

  CharLowerBuffW

  CheckMenuRadioItem

  GetDlgItem

  GetSubMenu

  GetClientRect

  GetWindowThreadProcessId

  GetMessageW

  CallWindowProcW

  SystemParametersInfoW

  MonitorFromRect

  SetTimer

  DeleteMenu

  GetWindowRect

  TrackMouseEvent

  DispatchMessageW

  EnableMenuItem

  GetShellWindow

  MonitorFromPoint

  IsWindow

  BringWindowToTop

  GetParent

  SetActiveWindow

  gdi32

  GetDeviceCaps

  AbortDoc

  GetTextExtentPointA

  StartDocA

  GetStockObject

  StartPage

  DeleteDC

  EndPage

  SetMapMode

  TextOutA

  SelectObject

  EndDoc

  SetBkColor

  StretchBlt

  DeleteObject

  ExtTextOutA

  CreateFontA

  CreateCompatibleDC

  CreateSolidBrush

  SetBkMode

  GetTextMetricsA

  SetTextColor

  CreateFontIndirectA

  SetAbortProc

  CreateCompatibleBitmap

  GetObjectA

  GetTextExtentPoint32A

  advapi32

  OpenProcessToken

  RegOpenKeyA

  AdjustTokenPrivileges

  StartServiceA

  LookupPrivilegeValueA

  DeleteService

  InitializeSecurityDescriptor

  RegDeleteValueA

  RegDeleteKeyA

  OpenServiceA

  RegQueryValueExA

  RegSetValueExA

  SetSecurityDescriptorDacl

  RegCreateKeyA

  CloseServiceHandle

  RegCloseKey

  CreateServiceA

  QueryServiceStatus

  OpenSCManagerA

  ControlService

  RegOpenKeyExA

  shell32

  ShellExecuteExA

  SHBrowseForFolderA

  SHGetMalloc

  Shell_NotifyIconA

  ShellExecuteA

  SHGetSpecialFolderLocation

  ole32

  CoResumeClassObjects

  CoRevertToSelf

  CoInitializeSecurity

  CoUninitialize

  OleGetClipboard

  CoRegisterClassObject

  CoRevokeClassObject

  CoImpersonateClient

  PropVariantClear

  OleUninitialize

  CoInitialize

  CreateStreamOnHGlobal

  CoTaskMemFree

  CoTaskMemAlloc

  CoCreateInstance

  OleInitialize

  CoTaskMemRealloc

  StringFromCLSID

  CoGetClassObject

  oleaut32

  SysAllocString

  SafeArrayLock

  SafeArrayGetLBound

  SafeArrayGetUBound

  VariantClear

  VariantCopyInd

  SysStringLen

  SysAllocStringByteLen

  SafeArrayDestroy

  VariantInit

  GetErrorInfo

  SafeArrayUnlock

  VarUI4FromStr

  VarBstrCmp

  SysFreeString

  VariantCopy

  SysAllocStringLen

  SafeArrayCreate

  LoadRegTypeLi

  VarBstrCat

  SafeArrayRedim

  LoadTypeLi

  SysStringByteLen

  DispCallFunc

  comctl32

  ImageList_Add

  shlwapi

  SHStrDupW

  UrlUnescapeW

  ColorHLSToRGB

  UrlEscapeW

  rpcrt4

  UuidToStringA

  UuidCreateNil

  UuidCreate

  UuidFromStringA

  UuidIsNil

  RpcStringFreeA

  wldap32

  ord134

  gdiplus

  GdiplusStartup

  msvcrt

  malloc

  Sections

  .text

  Size: 84KB - Virtual size: 83KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 52KB - Virtual size: 52KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 30KB - Virtual size: 373KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ