38f8ff12d02bdf04b122a3d437d34c40_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

38f8ff12d02bdf04b122a3d437d34c40_JaffaCakes118
Size

2.2MB
MD5

38f8ff12d02bdf04b122a3d437d34c40
SHA1

6aafd577a0dc9b7db17a0262942b2d7b1b665b59
SHA256

111afda09320030bb801fc25bbda30c92cb89072b409b410c280959fdbdfbc8f
SHA512

646ba0940215a706d37b2cbdc36161213759baa1d6603182d79d1b94bfab391663b755879114df5ccf2722110bfb3964b3a0e0bfdd49dfbd581af6675a4cd609
SSDEEP

49152:U11IcSeG92JEf5HCGiL8FSUKaVDvVXfjGz+A/06QUsA8YDNagPOceMVfQcS:zcJ8HCB8FSUlVDvVXfjGzFsFmbDfPOcZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38f8ff12d02bdf04b122a3d437d34c40_JaffaCakes118

Files

38f8ff12d02bdf04b122a3d437d34c40_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6cb711a599ede1295b477b408e23cef8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Heavy\Point\Dress\minute\Appear\small\Morning\TradeFollow.pdb

Imports

kernel32

GetFileAttributesW
FileTimeToLocalFileTime
GetFileTime
GetTempFileNameW
GetTempPathW
GetNumberFormatW
GetTickCount
GetProfileIntW
SearchPathW
VirtualProtect
GetUserDefaultLCID
FindResourceExW
RtlUnwind
HeapFree
HeapAlloc
RaiseException
GetCommandLineW
HeapSetInformation
GetStartupInfoW
DecodePointer
EncodePointer
HeapReAlloc
ExitThread
CreateThread
HeapSize
HeapQueryInformation
ExitProcess
GetSystemTimeAsFileTime
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
LCMapStringW
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
SetEnvironmentVariableA
InterlockedCompareExchange
GetFileAttributesExW
lstrcpyW
GetUserDefaultUILanguage
GetLocaleInfoW
InterlockedExchange
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
GlobalFlags
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
InitializeCriticalSectionAndSpinCount
LoadLibraryW
lstrcmpW
FileTimeToSystemTime
lstrlenA
lstrcmpA
GlobalGetAtomNameW
CompareStringW
InterlockedIncrement
WaitForSingleObject
GetCurrentThreadId
ResumeThread
SetThreadPriority
CloseHandle
MultiByteToWideChar
GlobalSize
FormatMessageW
MulDiv
lstrlenW
WideCharToMultiByte
GetCurrentProcessId
FreeLibrary
FindResourceW
LoadResource
InterlockedDecrement
GetModuleFileNameW
ActivateActCtx
ReleaseActCtx
DeactivateActCtx
TlsFree
GlobalFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalAlloc
GlobalHandle
GlobalUnlock
GlobalReAlloc
GlobalLock
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalFree
LocalAlloc
GetLastError
SetLastError
GetSystemDirectoryW
GetCurrentDirectoryW
Sleep
LoadLibraryExW
GetProcAddress
VirtualAlloc
VirtualFree
ResetEvent
CopyFileW
CreateDirectoryW
CreateFileW
GetLocalTime
GetProcessHeap
LockResource
SizeofResource
GetDateFormatW
GetModuleHandleW
GetVersionExW
OpenProcess
GetSystemTime
GetWindowsDirectoryW
QueryPerformanceCounter
CreateMutexW
OpenMutexW
DeleteFileW
FindFirstChangeNotificationW
GetEnvironmentVariableW
GetShortPathNameW
PeekNamedPipe
DuplicateHandle
GetFileSizeEx
GetCurrentThread

user32

SetMenuDefaultItem
IsClipboardFormatAvailable
FrameRect
GetUpdateRect
OpenClipboard
CloseClipboard
EmptyClipboard
RegisterClipboardFormatW
CopyIcon
CharUpperBuffW
GetDoubleClickTime
IsCharLowerW
GetKeyNameTextW
MapVirtualKeyExW
SubtractRect
MapDialogRect
DrawIcon
DestroyCursor
GetWindowRgn
TabbedTextOutW
FillRect
DestroyMenu
GetMenuItemInfoW
InflateRect
CharUpperW
DestroyIcon
GetDesktopWindow
RealChildWindowFromPoint
ShowWindow
MoveWindow
CheckDlgButton
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
RedrawWindow
UpdateWindow
DefFrameProcW
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
CopyRect
PtInRect
GetWindow
SetMenuItemBitmaps
WaitMessage
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetWindowTextW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
GetWindowThreadProcessId
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
UnhookWindowsHookEx
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
CreateDialogIndirectParamW
PostThreadMessageW
CreateMenu
IsMenu
UpdateLayeredWindow
UnhookWinEvent
SetWindowsHookExW
SystemParametersInfoW
EndDialog
GetNextDlgGroupItem
LoadImageW
GetNextDlgTabItem
EnableScrollBar
HideCaret
InvertRect
GetMenuDefaultItem
LockWindowUpdate
BringWindowToTop
SetCursorPos
SetRect
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
CopyAcceleratorTableW
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
DrawStateW
MessageBeep
ReleaseCapture
SetCapture
GetSystemMenu
LoadMenuW
DrawTextW
GetAsyncKeyState
NotifyWinEvent
WindowFromPoint
CreatePopupMenu
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
OffsetRect
IsRectEmpty
KillTimer
SetTimer
DeleteMenu
ShowOwnedPopups
SetCursor
ClientToScreen
RegisterClassExW
GetWindowTextLengthW
SetForegroundWindow
CheckRadioButton
SendDlgItemMessageW
SendMessageW
SetClipboardData
GetIconInfo
SetWindowTextW
LoadBitmapW
IsDialogMessageW
UnionRect
MonitorFromPoint
TranslateMDISysAccel
DrawMenuBar
GetMenuCheckMarkDimensions
DefMDIChildProcW
IntersectRect
InvalidateRect
IsIconic
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
CopyImage
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
GrayStringW
GetClientRect
DrawTextExW
SetClassLongW

gdi32

ExtFloodFill
SetPaletteEntries
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
GetCharWidthW
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
ScaleWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
IntersectClipRect
ExcludeClipRect
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetTextExtentPoint32W
ExtTextOutW
BitBlt
SetPixelV
GetTextFaceW
CreateCompatibleDC
CreateFontIndirectW
DeleteObject
GetObjectW
CreateDCW
CopyMetaFileW
GetDeviceCaps
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutW
Escape
SelectObject
SetViewportOrgEx
SetViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
GetStockObject
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
CreateDIBitmap
CreateCompatibleBitmap
CreateRectRgnIndirect
GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
SetRectRgn
CombineRgn
PatBlt
DPtoLP
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
GetBkColor
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
GetRgnBox
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect

winspool.drv

OpenPrinterW
GetPrinterDataW
ClosePrinter
DocumentPropertiesW

comctl32

ImageList_SetBkColor
ImageList_SetIconSize
ImageList_GetImageCount
ImageList_Remove
ImageList_GetIconSize
ImageList_Destroy

ole32

DoDragDrop
CreateStreamOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoInitializeEx
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
OleUninitialize
OleSetContainedObject
OleInitialize
CoUninitialize
CoInitialize
CoCreateInstance
CLSIDFromString

shlwapi

PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathRemoveFileSpecW
PathRemoveArgsW
PathRemoveBlanksW
PathStripPathW
PathRemoveBackslashW
PathFindFileNameW

cryptui

CryptUIWizFreeDigitalSignContext
CryptUIWizImport
CryptUIWizExport
CryptUIDlgViewCertificateW
CryptUIWizDigitalSign
CryptUIDlgViewContext

oleacc

AccessibleObjectFromEvent
AccessibleObjectFromWindow
GetOleaccVersionInfo
LresultFromObject
CreateStdAccessibleObject

oleaut32

VariantInit
SysAllocString
SysFreeString
VarBstrFromDate
VariantChangeType
VariantClear
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen

comdlg32

GetFileTitleW

gdiplus

GdipFree
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipAlloc

shell32

SHBrowseForFolderW
SHAppBarMessage
DragQueryFileW
DragFinish
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetDesktopFolder
SHGetFileInfoW

advapi32

RegQueryValueExW
RegEnumKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey

winmm

PlaySoundW

msimg32

TransparentBlt
AlphaBlend

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 336KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 481KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6cb711a599ede1295b477b408e23cef8

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

winspool.drv

comctl32

ole32

shlwapi

cryptui

oleacc

oleaut32

comdlg32

gdiplus

shell32

advapi32

winmm

msimg32

imm32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 336KB - Virtual size: 336KB

.data Size: 86KB - Virtual size: 158KB

.rsrc Size: 481KB - Virtual size: 480KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 336KB - Virtual size: 336KB

.data
Size: 86KB - Virtual size: 158KB

.rsrc
Size: 481KB - Virtual size: 480KB