01e43b2f2c07b355edb826a9727a0eee_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

01e43b2f2c07b355edb826a9727a0eee_JaffaCakes118
Size

3.4MB
MD5

01e43b2f2c07b355edb826a9727a0eee
SHA1

de9af85592f925dabd890f7ebc602861ab73d94d
SHA256

c06e2e80330686d1cb7736d52e30781cad47f1fadfd7fd7100d0b17cff7537ee
SHA512

9994e78addc3cb31c68f473f0378fd4263d866f12a74e226a9e0e48271d64792d0f7d10671c8abf5d3abc90ec31155dcf92303c57d4f43a5d3626e1be9fe3c81
SSDEEP

49152:2a1ISQus8/2Ge/5mMk1HvWpcnVcVyCDxl4KZKWCbquSVex1yrZO:h1ISQusLGKmMaHgcnbgxPKWCbMs1G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01e43b2f2c07b355edb826a9727a0eee_JaffaCakes118

Files

01e43b2f2c07b355edb826a9727a0eee_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09b86f55bfca6b8f68c5bb0dd5f6fe53

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

MOVIEMK.pdb

Imports

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
_ftol
realloc
malloc
free
wcscmp
_purecall
memmove
wcsstr
_wcsicmp
_snwprintf
wcsrchr
_wfullpath
iswspace
_wtoi
ceil
wcscat
wcsncpy
_wfopen
fclose
fgetc
fread
ftell
fseek
isprint
strncpy
tolower
_vsnwprintf
iswctype
_wtol
isdigit
wcsncmp
_strnicmp
vswprintf
iswdigit
wcsncat
_wcsnicmp
swprintf
wcscpy
wcslen
_endthreadex
calloc
_beginthreadex
srand
time
qsort
wcschr
_wcsrev
sprintf
wcspbrk
rand
_stricmp
ctime
swscanf
_c_exit
_exit
__CxxFrameHandler
_XcptFilter
_cexit
exit
_controlfp
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln

advapi32

RegEnumValueW
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegEnumKeyW
RegCloseKey

kernel32

FindClose
GetFileAttributesW
SetErrorMode
GlobalUnlock
GlobalLock
GlobalAlloc
FindFirstFileW
DeleteFileW
CopyFileW
lstrcpynA
lstrcpynW
GetLastError
GetFullPathNameW
GetDiskFreeSpaceExW
GetLocaleInfoW
GetNumberFormatW
CompareStringW
lstrcmpiW
FreeResource
GlobalFree
GlobalHandle
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
lstrcatW
GetModuleFileNameW
SetThreadPriority
FindNextFileW
GetProfileIntW
GetTempPathW
CloseHandle
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
WaitForSingleObject
GetLongPathNameW
lstrlenA
EnumResourceLanguagesW
GetTickCount
Sleep
CreateFileMappingA
CreateEventW
GetUserDefaultUILanguage
SetEvent
CreateDirectoryW
GetShortPathNameW
ReleaseMutex
CreateMutexW
GetCommandLineW
CreateFileW
MoveFileW
GetTempFileNameW
CompareFileTime
SleepEx
GetFileSize
GetDriveTypeW
WideCharToMultiByte
GetACP
SizeofResource
WriteFile
VirtualProtect
VirtualQuery
GetModuleHandleW
EnumUILanguagesW
LoadLibraryExW
ExpandEnvironmentStringsW
SetEnvironmentVariableW
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
GetStartupInfoA
GetCurrentProcessId
FindResourceW
LoadResource
LockResource
GetVersionExW
LoadLibraryW
GetProcAddress
FreeLibrary
InterlockedIncrement
lstrcmpW
lstrcpyW
MulDiv
SetLastError
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
FlushInstructionCache
FormatMessageW
LocalFree
InterlockedDecrement
lstrlenW
SetFilePointer
DebugBreak
LocalAlloc
GetVolumeInformationW
MapViewOfFileEx
CreateFileMappingW
GetPrivateProfileIntW
GetPrivateProfileStringW
SetEndOfFile
OutputDebugStringW
GetExitCodeThread
ResetEvent
GetVolumeNameForVolumeMountPointW
DeviceIoControl
WaitForMultipleObjects
PostQueuedCompletionStatus
ReadDirectoryChangesW
GetOverlappedResult
GetQueuedCompletionStatus
CreateIoCompletionPort
GetDiskFreeSpaceW
GetFileSizeEx
SetFilePointerEx
VirtualAlloc
VirtualFree
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
GetVersion
HeapDestroy
IsBadWritePtr
WinExec
GetTimeFormatW
GetDateFormatW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GlobalSize
GetFileAttributesExW
SetFileAttributesW
RemoveDirectoryW
ReadFile
SetThreadExecutionState
GetUserDefaultLCID
IsBadReadPtr
GetThreadLocale
CreateThread
QueryPerformanceCounter

gdi32

ExcludeClipRect
GetDIBits
GetObjectA
TextOutW
Polygon
CombineRgn
SetRectRgn
CreateRectRgnIndirect
GetClipBox
DPtoLP
GetLayout
CreateRectRgn
StretchBlt
SelectClipRgn
ExtTextOutW
Rectangle
SetViewportOrgEx
SetROP2
GetNearestColor
CreatePen
CreateDCW
GetCurrentObject
RestoreDC
LineTo
LPtoDP
SetWindowOrgEx
SetMapMode
SaveDC
MoveToEx
GetTextMetricsW
GetTextExtentPoint32W
CreateSolidBrush
GetStockObject
GetDeviceCaps
CreateDIBSection
CreateCompatibleBitmap
SetBrushOrgEx
CreateFontIndirectW
SetBkMode
CreateCompatibleDC
BitBlt
CreateBitmap
CreatePatternBrush
SelectObject
PatBlt
DeleteDC
DeleteObject
GetObjectW
SetBkColor
SetTextColor

user32

InvalidateRgn
GetDesktopWindow
RedrawWindow
CreateAcceleratorTableW
PostQuitMessage
LoadStringA
GetDlgItemInt
LoadIconW
DrawIcon
SetDlgItemInt
GetCursorPos
GetDlgCtrlID
DrawFocusRect
DispatchMessageW
TranslateMessage
GetMessageW
CreateDialogIndirectParamW
GetMenu
SetMenu
BringWindowToTop
GetWindowPlacement
GetTopWindow
TranslateAcceleratorW
GetMenuStringW
AppendMenuW
FindWindowW
EnableMenuItem
InsertMenuW
DeleteMenu
EndMenu
AdjustWindowRectEx
TrackPopupMenu
SetRect
PostThreadMessageW
IsIconic
SetProcessDefaultLayout
ScrollWindowEx
SetScrollPos
GetScrollInfo
SetScrollInfo
IsRectEmpty
GetAsyncKeyState
GetIconInfo
SetClassLongW
DrawTextExW
UnionRect
IntersectRect
IsDlgButtonChecked
CheckDlgButton
GetProcessDefaultLayout
LoadAcceleratorsW
GetMessageTime
TrackMouseEvent
ClipCursor
UpdateLayeredWindow
DestroyCursor
NotifyWinEvent
DragDetect
GetClassLongW
GetDC
UnregisterClassW
DestroyIcon
DialogBoxParamW
GetWindowTextLengthW
GetWindowTextW
SetForegroundWindow
SetWindowPlacement
ClientToScreen
PeekMessageW
DrawFrameControl
InflateRect
OffsetRect
FrameRect
DrawTextW
GetKeyState
CharNextW
CharLowerW
WindowFromPoint
MessageBeep
GetActiveWindow
GetWindowThreadProcessId
IsMenu
SetWindowsHookExW
UnhookWindowsHookEx
GetClassNameW
CallNextHookEx
GetSubMenu
GetLastActivePopup
MessageBoxW
ModifyMenuW
TrackPopupMenuEx
LoadBitmapW
MoveWindow
CreatePopupMenu
FindWindowExW
LoadMenuW
PostMessageW
DrawEdge
SetCapture
GetCapture
SetCursor
ReleaseDC
GetWindowDC
EndPaint
BeginPaint
GetMessagePos
ScreenToClient
PtInRect
ReleaseCapture
GetAncestor
SetMenuDefaultItem
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
SetMenuItemInfoW
GetSystemMetrics
CallWindowProcW
DefWindowProcW
SetActiveWindow
IsWindowVisible
IsChild
GetClassInfoExW
LoadCursorW
wsprintfW
RegisterClassExW
InvalidateRect
RegisterWindowMessageW
CreateDialogParamW
CopyRect
IsWindowEnabled
GetFocus
SetFocus
EnableWindow
GetNextDlgTabItem
KillTimer
SetTimer
UpdateWindow
SetWindowTextW
CreateWindowExW
DestroyMenu
RemoveMenu
SendMessageW
DestroyWindow
EndDialog
LoadImageW
SetWindowLongW
IsWindow
IsDialogMessageW
GetDlgItem
ShowWindow
GetSystemMenu
GetSysColor
GetSysColorBrush
FillRect
LoadStringW
GetWindow
GetWindowRect
SystemParametersInfoW
MapWindowPoints
SetWindowPos
GetParent
SetDlgItemTextW
GetClientRect
GetWindowLongW
GetWindowLongA
GetClassNameA
SendMessageA
IsWindowUnicode
DrawTextA
MapDialogRect
CopyImage
RegisterClipboardFormatW
GetMonitorInfoW
MonitorFromWindow
CharUpperW
CopyIcon
GetForegroundWindow
EqualRect
MsgWaitForMultipleObjects
DestroyAcceleratorTable
SetWindowRgn
CharUpperBuffW
SetRectEmpty
GetDoubleClickTime

comdlg32

GetOpenFileNameW
GetSaveFileNameW
ChooseColorW

shell32

SHParseDisplayName
DragQueryFileW
SHGetFolderPathW
ShellExecuteExW
SHGetMalloc
SHGetPathFromIDListW
SHGetSettings
ShellAboutW
ShellExecuteW
SHGetFileInfoW
SHGetDiskFreeSpaceExW
SHAddToRecentDocs
SHBrowseForFolderW
SHPathPrepareForWriteW
SHGetSpecialFolderPathW
CommandLineToArgvW
SHFileOperationW
SHCreateQueryCancelAutoPlayMoniker
SHGetDesktopFolder
SHGetFolderLocation
ord747
SHGetFolderPathAndSubDirW

ole32

RegisterDragDrop
GetRunningObjectTable
CreateStreamOnHGlobal
OleUninitialize
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
OleLockRunning
CLSIDFromProgID
CLSIDFromString
OleGetClipboard
ReleaseStgMedium
OleFlushClipboard
OleIsCurrentClipboard
CoUninitialize
CoInitialize
CoRevokeClassObject
CoRegisterClassObject
CoResumeClassObjects
StringFromGUID2
RevokeDragDrop
StgIsStorageFile
OleSaveToStream
WriteClassStm
OleLoadFromStream
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
PropVariantClear
StgCreatePropStg
StgOpenPropStg
FreePropVariantArray
CoCreateGuid
StgOpenStorage
StgCreateDocfile
OleSetClipboard
CoCreateInstance
CoFreeUnusedLibraries
DoDragDrop
OleInitialize

oleaut32

RegisterTypeLi
SysAllocString
SysAllocStringLen
VariantClear
VariantInit
SysAllocStringByteLen
OleCreatePropertyFrame
SafeArrayGetLBound
SafeArrayCopy
SysStringLen
VariantChangeTypeEx
VariantChangeType
SysStringByteLen
SafeArrayCreateVector
SafeArrayGetElement
SafeArrayPutElement
SafeArrayDestroy
VariantCopy
RevokeActiveObject
LoadRegTypeLi
LoadTypeLi
DispCallFunc
SysFreeString

comctl32

ord8
ImageList_Destroy
ImageList_AddMasked
ImageList_Add
ImageList_Create
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageCount
ImageList_Draw
ImageList_DrawIndirect
DestroyPropertySheetPage
PropertySheetW
CreatePropertySheetPageW
_TrackMouseEvent
ImageList_Remove
ImageList_GetIconSize
InitCommonControlsEx
ImageList_LoadImageW
CreateStatusWindowW

shlwapi

PathIsURLW
PathSkipRootW
PathCanonicalizeW
PathFindNextComponentW
UrlIsW
PathAddBackslashW
UrlGetPartW
SHAutoComplete
PathIsRelativeW
PathRemoveFileSpecW
StrRetToStrW
PathCompactPathExW
StrCmpLogicalW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW

winmm

mixerOpen
mixerClose
mixerGetLineControlsW
mixerSetControlDetails
mixerGetControlDetailsW
mixerGetDevCapsW
timeGetTime
waveOutGetNumDevs
mixerGetNumDevs
mixerGetID
waveOutClose
waveOutOpen
mixerGetLineInfoW

rpcrt4

UuidFromStringW
RpcStringFreeW
UuidToStringW
RpcStringFreeA
UuidCreate
UuidEqual
UuidToStringA

wmvcore

WMCreateProfileManager
WMCreateEditor
WMCreateReader

gdiplus

GdipGetImageGraphicsContext
GdipDrawImagePointRectI
GdipCreatePen1
GdipCreateBitmapFromResource
GdipFree
GdipDrawRectangleI
GdipDrawImageRectRect
GdipSaveImageToStream
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipDeletePen
GdipSetPropertyItem
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromScan0
GdipCreateBitmapFromGdiDib
GdipCreateHBITMAPFromBitmap
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipGraphicsClear
GdipGetImageThumbnail
GdipGetImageHorizontalResolution
GdipGetImageVerticalResolution
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipDrawImageRectRectI
GdipAlloc
GdipCloneImage
GdipGetFontCollectionFamilyCount
GdipNewInstalledFontCollection
GdipDeleteFontFamily
GdipDeleteFont
GdiplusShutdown
GdiplusStartup
GdipDeleteGraphics
GdipDisposeImage
GdipImageGetFrameCount
GdipCreateBitmapFromHBITMAP
GdipCloneFontFamily
GdipGetFontCollectionFamilyList
GdipGetFamilyName
GdipIsStyleAvailable
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipGetFamily
GdipSaveImageToFile
GdipSetSmoothingMode

secur32

GetUserNameExW

msimg32

AlphaBlend
GradientFill

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

uxtheme

GetThemeInt
DrawThemeBackground
OpenThemeData
CloseThemeData
IsAppThemed

avifil32

AVIFileOpenW

crypt32

CryptProtectData
CryptUnprotectData

wininet

FtpSetCurrentDirectoryW
HttpSendRequestW
InternetConnectW
FtpCreateDirectoryW
InternetAutodial
InternetAttemptConnect
InternetGoOnlineW
InternetCheckConnectionW
InternetOpenW
InternetGetLastResponseInfoW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestExW
HttpEndRequestW
InternetOpenUrlW
InternetReadFile
InternetCloseHandle
InternetGetConnectedState
InternetWriteFile

urlmon

CoGetClassObjectFromURL
CreateFormatEnumerator
CreateAsyncBindCtx

Exports

Exports

??0CtrlContainerFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAXPAVCompositeFrame@1@@Z
??0CtrlFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAXPAVCompositeFrame@1@@Z
??0FrameEqualizer@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@@Z
??0GroupBoxFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAX1PAVCompositeFrame@1@@Z
??0GroupBoxFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAXPAVCompositeFrame@1@@Z
??0HorizFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAVCompositeFrame@1@@Z
??0IMsoAutoLayoutDialog@DlgAutoLayout@@IAE@XZ
??0ListEditFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAX1PAVCompositeFrame@1@@Z
??0MsoWCtrlContainerFrame@@QAE@AAVIMsoWAutoLayoutDialog@@GPAVMsoWCompositeFrame@@@Z
??0MsoWCtrlFrame@@QAE@AAVIMsoWAutoLayoutDialog@@GPAVMsoWCompositeFrame@@@Z
??0MsoWFrameEqualizer@@QAE@AAVIMsoWAutoLayoutDialog@@@Z
??0MsoWGroupBoxFrame@@QAE@AAVIMsoWAutoLayoutDialog@@GGPAVMsoWCompositeFrame@@@Z
??0MsoWGroupBoxFrame@@QAE@AAVIMsoWAutoLayoutDialog@@GPAVMsoWCompositeFrame@@@Z
??0MsoWHorizFrame@@QAE@AAVIMsoWAutoLayoutDialog@@PAVMsoWCompositeFrame@@@Z
??0MsoWListEditFrame@@QAE@AAVIMsoWAutoLayoutDialog@@GGPAVMsoWCompositeFrame@@@Z
??0MsoWNumInputFrame@@QAE@AAVIMsoWAutoLayoutDialog@@GGPAVMsoWCompositeFrame@@@Z
??0MsoWOverlapFrame@@QAE@AAVIMsoWAutoLayoutDialog@@PAVMsoWCompositeFrame@@@Z
??0MsoWTabCtrlFrame@@QAE@AAVIMsoWAutoLayoutDialog@@GPAVMsoWCompositeFrame@@@Z
??0MsoWTableFrame@@QAE@AAVIMsoWAutoLayoutDialog@@HHPAVMsoWCompositeFrame@@@Z
??0MsoWVertFrame@@QAE@AAVIMsoWAutoLayoutDialog@@PAVMsoWCompositeFrame@@@Z
??0NumInputFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAX1PAVCompositeFrame@1@@Z
??0NumInputFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAXPAVCompositeFrame@1@@Z
??0OverlapFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAVCompositeFrame@1@@Z
??0TabCtrlFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAX1PAVCompositeFrame@1@@Z
??0TabCtrlFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAXPAVCompositeFrame@1@@Z
??0TableFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@HHPAVCompositeFrame@1@@Z
??0VertFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAVCompositeFrame@1@@Z
??1IMsoAutoLayoutDialog@DlgAutoLayout@@MAE@XZ
_MsoDALCheckBoxBMHeight@0
_MsoDALCheckBoxBMWidth@0
_MsoDALCheckBoxBMWidthPlusMargin@4
_MsoDALDestructFrames@4
_MsoDALEditStrHeightPix@4
_MsoDALFDlgIsValid@4
_MsoDALGroupBoxNoLabelTopAdjustPix@4
_MsoDALMarkDlgInvalid@4
_MsoDALSuspendFrameDestruction@4
_MsoDUToPix@12
_MsoDestroyIMsoWAutoLayoutDialog@4
_MsoFCreateIMsoWAutoLayoutDialog@12
_MsoPixToDU@12
_MsoWIsAutoLayoutEnabled@8
_MsoWTabCtrlIndexToHwnd@8

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

MovieMak
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 612KB - Virtual size: 613KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

09b86f55bfca6b8f68c5bb0dd5f6fe53

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

advapi32

kernel32

gdi32

user32

comdlg32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

rpcrt4

wmvcore

gdiplus

secur32

msimg32

version

uxtheme

avifil32

crypt32

wininet

urlmon

Exports

Exports

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.data Size: 15KB - Virtual size: 28KB

MovieMak Size: 512B - Virtual size: 4B

.rsrc Size: 612KB - Virtual size: 613KB

.text
Size: 2.8MB - Virtual size: 2.8MB

.data
Size: 15KB - Virtual size: 28KB

MovieMak
Size: 512B - Virtual size: 4B

.rsrc
Size: 612KB - Virtual size: 613KB