0b10e8db6fd206ec77d9fbe4cb6a317d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0b10e8db6fd206ec77d9fbe4cb6a317d_JaffaCakes118
Size

422KB
MD5

0b10e8db6fd206ec77d9fbe4cb6a317d
SHA1

884a870926fb412b19b0b07325687a86b0bc488c
SHA256

2f7938a698c33f34295b3da8c3356139e026a8b64ea648d64659f83bdb6351ef
SHA512

4630de5faaefda9603335ab2210899fbd17a6b79952e0dc04e83d060d133f0dd38f4d4d4b0d40ad691c98978a44b9d4c23f1635c2750f2e353c37bae5bc45f52
SSDEEP

6144:xE1PNSR5AEystAOgvYw0czRJENp1hxJpKpXHaDqgpMXgNZxj/:2PNSR5QstwPFJENp1/bKpXLpe3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b10e8db6fd206ec77d9fbe4cb6a317d_JaffaCakes118

Files

0b10e8db6fd206ec77d9fbe4cb6a317d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bd2a8f9ba380f160b10d2209983a6ae7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExW
CreateWindowExA
WindowFromPoint
WaitMessage
VkKeyScanW
UpdateWindow
UnregisterClassW
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoA
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowsHookExA
SetWindowTextW
SetWindowTextA
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropA
SetParent
SetMenuItemInfoW
SetMenuItemInfoA
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClipboardData
SetClassLongA
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassW
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PostMessageA
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MessageBoxW
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyW
MapVirtualKeyA
LoadStringA
LoadKeyboardLayoutA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsChild
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
GetWindowThreadProcessId
GetWindowTextLengthW
GetWindowTextW
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
GetMessagePos
GetMenuStringW
GetMenuStringA
GetMenuState
GetMenuItemInfoW
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameW
GetClassNameA
GetClassLongA
GetClassInfoW
GetClassInfoA
GetCapture
GetActiveWindow
FrameRect
FindWindowA
FillRect
ExitWindowsEx
EqualRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefWindowProcA
DefMDIChildProcW
DefMDIChildProcA
DefFrameProcW
DefFrameProcA
CreatePopupMenu
CreateMenu
CreateMDIWindowW
CreateIcon
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CharUpperBuffW
CharPrevW
CharNextW
CharLowerBuffW
CallWindowProcW
CallWindowProcA
CallNextHookEx
BringWindowToTop
BeginPaint
AttachThreadInput
CharPrevA
CharNextA
CharLowerBuffA
CharLowerA
CharUpperBuffA
CharToOemA
AdjustWindowRectEx
ActivateKeyboardLayout
GetKeyboardType
RegisterClassExA
GetMessageA
CopyRect
GetDlgItem
FindWindowExA
wvsprintfA
CharToOemBuffA
OemToCharBuffA

comdlg32

GetFileTitleW

shell32

SHGetSpecialFolderPathW
SHGetPathFromIDListA
SHGetMalloc
SHGetDesktopFolder
SHBrowseForFolderA
ShellExecuteW
ShellExecuteA
SHGetFolderPathW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetFileInfoW
SHGetPathFromIDListW
SHChangeNotify

oledlg

OleUIBusyW

ole32

CoTaskMemFree
CoTaskMemAlloc
ProgIDFromCLSID
StringFromCLSID
CoCreateInstance
CoUninitialize
CoInitializeEx
CoCreateGuid
StringFromGUID2
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleIsCurrentClipboard
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleFlushClipboard
CoRegisterMessageFilter
CoInitialize

advapi32

GetTokenInformation
GetSidIdentifierAuthority
GetSecurityDescriptorOwner
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegDeleteKeyW
CheckTokenMembership
RegOpenKeyW
RegEnumKeyW
RegQueryValueW
LookupPrivilegeValueW
DecryptFileW
AdjustTokenPrivileges
AllocateAndInitializeSid
EqualSid
FreeSid
LookupPrivilegeValueA
OpenProcessToken
OpenThreadToken
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegFlushKey
RegOpenKeyExA
GetUserNameW
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
GetUserNameA

wininet

InternetReadFile
InternetOpenUrlW
InternetOpenW
InternetCloseHandle

gdi32

CreateRectRgn
CreatePen
CreatePatternBrush
CreateDCA
CreateDCW
Chord
EnumFontFamiliesA
GetObjectW
SetMapMode
GetViewportExtEx
GetWindowExtEx
PtVisible
TextOutW
Arc
EnumFontFamiliesW
Escape
OffsetViewportOrgEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
ScaleViewportExtEx
DPtoLP
GetTextColor
GetBkColor
GetMapMode
CreateRectRgnIndirect
CreateFontIndirectW
BitBlt
CopyEnhMetaFileA
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateDIBitmap
CreateFontIndirectA
CreateHalftonePalette
CreatePalette
CreatePenIndirect
CreateSolidBrush
DeleteDC
DeleteEnhMetaFile
DeleteObject
GetTextMetricsW
CreateFontW
CreateBitmapIndirect
UpdateColors
TranslateCharsetInfo
TextOutA
SetTextAlign
SetRectRgn
SetPolyFillMode
SetPaletteEntries
SelectClipRgn
ResizePalette
RectInRegion
Polygon
Pie
OffsetClipRgn
GetTextFaceW
GetTextFaceA
GetTextCharset
GetNearestColor
GetFontData
GetCharWidthW
GetCharWidthA
GetBkMode
CombineRgn
UnrealizeObject
StretchDIBits
StretchBlt
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
PlayEnhMetaFile
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsA
GetTextExtentPointA
GetTextExtentPoint32W
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectA
GetNearestPaletteIndex
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
ExtTextOutW
ExtTextOutA
ExcludeClipRect
ExtCreatePen

comctl32

_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
ord17

version

VerQueryValueW
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoA

kernel32

GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
ExitProcess
SizeofResource
LCMapStringW
LockResource
LoadResource
FindResourceW
Sleep
GetLastError
GetModuleFileNameW
CloseHandle
WaitForSingleObject
CreateThread
SetCurrentDirectoryW
GetSystemDefaultLangID
GetUserDefaultLCID
GetCurrentThreadId
ReleaseMutex
CreateMutexW
FindResourceExW
SetFilePointerEx
ReadFile
WriteFile
EndUpdateResourceW
UpdateResourceW
BeginUpdateResourceW
CreateFileW
FreeLibrary
LoadLibraryW
SetEndOfFile
MultiByteToWideChar
GetFileAttributesW
SetFileAttributesW
DeleteFileW
CopyFileW
GetFullPathNameW
GetDiskFreeSpaceExW
GetCurrentDirectoryW
GetTempPathW
GetWindowsDirectoryW
CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapSize
LoadLibraryA
LCMapStringA
RaiseException
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetSystemDirectoryW
RemoveDirectoryW
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
GetSystemDefaultLCID
GetLocaleInfoW
GetPrivateProfileStringW
WritePrivateProfileStringW
LoadLibraryExW
GetProcAddress
GetVersionExW
GetCurrentProcess
GetModuleHandleA
SetEvent
CreateEventW
WideCharToMultiByte
GetDriveTypeW
GetExitCodeThread
SetLastError
MulDiv
lstrlenW
LocalFree
FormatMessageW
GlobalUnlock
GlobalLock
GlobalAlloc
GetSystemTimeAsFileTime
HeapReAlloc
HeapAlloc
GetTimeFormatA
GetDateFormatA
InterlockedIncrement
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
InterlockedDecrement
GetCommandLineA
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStdHandle
GetTimeZoneInformation

Sections

.coat
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cbbl
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 371KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd2a8f9ba380f160b10d2209983a6ae7

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

oledlg

ole32

advapi32

wininet

gdi32

comctl32

version

kernel32

Sections

.coat Size: 4KB - Virtual size: 4KB

.cbbl Size: 138KB - Virtual size: 138KB

.rdata Size: 57KB - Virtual size: 57KB

.data Size: 36KB - Virtual size: 371KB

.rsrc Size: 184KB - Virtual size: 183KB

.coat
Size: 4KB - Virtual size: 4KB

.cbbl
Size: 138KB - Virtual size: 138KB

.rdata
Size: 57KB - Virtual size: 57KB

.data
Size: 36KB - Virtual size: 371KB

.rsrc
Size: 184KB - Virtual size: 183KB