4f9dbed0c196736850754a608ca45fa9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

4f9dbed0c196736850754a608ca45fa9_JaffaCakes118
Size

237KB
MD5

4f9dbed0c196736850754a608ca45fa9
SHA1

8abd87beec30bf4890e3d3833763be1f9de2383b
SHA256

f7c3379558086abbfc0d443b445c6f16ba65915027f12027d7e0a2a3385c4a61
SHA512

15cb565bb88428cff0f4dbf2b0169af6ad55bb41b9fdd02fc3d7c4741de29167149e07b683419192a1b88b261e0f4ad11d2ae6b7e5fede54befc1634b166ef61
SSDEEP

3072:eCz47U4Mhzjqdka/ainvKrF8KAwAbGlRkiURzCwV/Vm1PBkVcTG0DuL0hz10r:eUKMJjqO7ovqaGl8zCwrm1PIcTggpQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f9dbed0c196736850754a608ca45fa9_JaffaCakes118

Files

4f9dbed0c196736850754a608ca45fa9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6ddb8ab46844a81ea23bec8256863731

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchange
InterlockedIncrement
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseActCtx
ResumeThread
RtlUnwind
SearchPathW
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
InterlockedDecrement
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
WritePrivateProfileStringW
lstrcmpA
lstrcmpW
lstrcmpiW
lstrcpyW
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
HeapSize
HeapSetInformation
HeapReAlloc
HeapQueryInformation
HeapFree
HeapCreate
HeapAlloc
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalGetAtomNameW
GlobalFree
GlobalFlags
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetWindowsDirectoryW
GetVolumeInformationW
GetVersionExW
GetUserDefaultUILanguage
GetTimeZoneInformation
GetTempPathW
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemInfo
GetSystemDefaultUILanguage
GetStringTypeW
GetStdHandle
GetStartupInfoW
GetProfileIntW
GetTickCount
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileIntW
GetOEMCP
GetNumberFormatW
GetModuleFileNameW
GetLocaleInfoW
GetFullPathNameW
GetFileType
GetFileTime
GetFileSizeEx
GetFileSize
GetFileAttributesExW
GetEnvironmentStringsW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
GetCurrentDirectoryW
GetConsoleMode
GetConsoleCP
GetCommandLineW
GetCPInfo
GetACP
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FormatMessageW
FlushFileBuffers
FindResourceW
FindResourceExW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitThread
ExitProcess
EnterCriticalSection
EncodePointer
DuplicateHandle
DeleteFileW
DeleteCriticalSection
DecodePointer
DeactivateActCtx
CreateThread
CreateSemaphoreW
CreateProcessW
CreateFileW
CreateActCtxW
CopyFileW
ConvertDefaultLocale
CompareStringW
CompareStringA
CloseHandle
ActivateActCtx
CreateFileA
VirtualAlloc
GetModuleHandleW
GetLastError
GetFileAttributesW
GetCurrentProcessId
lstrlenA
lstrlenW
GetFileAttributesA
GetDriveTypeW
GetDriveTypeA
SetFilePointer

user32

WinHelpW
UnhookWindowsHookEx
TranslateMDISysAccel
TrackPopupMenu
TabbedTextOutW
SubtractRect
ShowWindow
ShowScrollBar
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetScrollRange
SetScrollPos
SetScrollInfo
SetPropW
SetMenuDefaultItem
SetMenu
SetForegroundWindow
SetFocus
SetActiveWindow
SendMessageW
SendDlgItemMessageW
SendDlgItemMessageA
ScrollWindow
ScreenToClient
RemovePropW
ReleaseDC
RegisterWindowMessageW
RegisterClassW
PtInRect
PeekMessageW
MoveWindow
MonitorFromWindow
ModifyMenuW
MessageBoxW
MapWindowPoints
IsWindowEnabled
IsDialogMessageW
IsClipboardFormatAvailable
IsChild
GrayStringW
GetWindowTextW
GetWindowTextLengthW
GetWindowRgn
GetWindowPlacement
GetWindowLongW
GetWindow
GetUpdateRect
GetTopWindow
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetMonitorInfoW
GetMessageTime
GetMessagePos
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgCtrlID
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
FrameRect
FillRect
EqualRect
EndDeferWindowPos
DrawTextW
DrawTextExW
DrawMenuBar
DrawIcon
DispatchMessageW
DestroyCursor
DeferWindowPos
DefWindowProcW
CreateWindowExW
CopyRect
CopyIcon
ClientToScreen
CheckDlgButton
CharUpperBuffW
CallWindowProcW
CallNextHookEx
BeginDeferWindowPos
AdjustWindowRectEx
LoadIconW
LoadIconA
GetKeyState
DestroyWindow
DestroyIcon
GetSysColor
IsWindow
GetDlgItem

gdi32

BitBlt
CombineRgn
CopyMetaFileW
CreateBitmap
CreateCompatibleBitmap
CreateDCW
CreateDIBSection
CreateDIBitmap
CreateEllipticRgn
CreateFontIndirectW
CreateHatchBrush
CreatePalette
CreatePatternBrush
CreatePen
CreatePolygonRgn
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
DPtoLP
DeleteDC
DeleteObject
Ellipse
EnumFontFamiliesExW
EnumFontFamiliesW
Escape
ExcludeClipRect
ExtFloodFill
ExtSelectClipRgn
ExtTextOutW
FillRgn
FrameRgn
GetBkColor
GetBoundsRect
GetClipBox
GetDeviceCaps
GetLayout
GetNearestPaletteIndex
GetObjectType
GetObjectW
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
SetBkMode
GetTextColor
GetTextExtentPoint32W
GetTextFaceW
GetTextMetricsW
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
IntersectClipRect
LPtoDP
LineTo
MoveToEx
OffsetRgn
OffsetViewportOrgEx
OffsetWindowOrgEx
PatBlt
Polygon
Polyline
PtInRegion
PtVisible
RealizePalette
RectVisible
Rectangle
RestoreDC
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
SelectClipRgn
SelectPalette
SetBkColor
SetDIBColorTable
SetLayout
SetMapMode
SetPaletteEntries
SetPixel
SetPixelV
SetPolyFillMode
SetROP2
SetRectRgn
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StretchBlt
TextOutW
CreateCompatibleDC
SetTextAlign
SelectObject
GetTextCharsetInfo
SetTextColor

advapi32

RegQueryValueExW
RegOpenKeyA

ole32

CoInitialize
CoInitializeEx
CoLockObjectExternal
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateStreamOnHGlobal
DoDragDrop
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleDuplicateData
OleGetClipboard
OleLockRunning
OleTranslateAccelerator
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
CoCreateGuid
CoCreateInstance

comctl32

ImageList_GetIconSize

Sections

.text
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ddb8ab46844a81ea23bec8256863731

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

comctl32

Sections

.text Size: 208KB - Virtual size: 208KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 3KB - Virtual size: 3KB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: 208KB - Virtual size: 208KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 11KB - Virtual size: 11KB