5d0e0e07ea136480148ed20b418d7990_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5d0e0e07ea136480148ed20b418d7990_JaffaCakes118
Size

1.3MB
MD5

5d0e0e07ea136480148ed20b418d7990
SHA1

eafb99253dca799cd57d96839c844f826c49b324
SHA256

8f4fdaee063d35649a572104b9e3eb65a16062f64ab18d59600aabdd48c8ae7b
SHA512

85d3349386906b432d0228b2c0c615a5c9a92ee1d11fb747e892fe7ca10bb93affdeffe9848e94ffe84164cb49a6e997e1b8fa5080e0529100970ccad4348292
SSDEEP

24576:5bD9k/tMA/5OP7ErV/pzPVMDMQ/Z8JeHdHdHfFfHdHdHdHfFfHdHdHdHfFfHdHdj:9DeFxHz0gJdS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d0e0e07ea136480148ed20b418d7990_JaffaCakes118

Files

5d0e0e07ea136480148ed20b418d7990_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1ff39698b70c70a09605988d799144f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
lstrlenA
lstrcmpiW
lstrcatW
WriteFile
WriteConsoleOutputCharacterW
WideCharToMultiByte
WaitForSingleObject
VirtualFreeEx
Sleep
SetTimerQueueTimer
SetLastError
SetFileAttributesW
GetModuleHandleA
SetEvent
ResumeThread
ResetEvent
ReadFile
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringA
OpenFileMappingW
OpenEventW
MoveFileW
LocalFree
LocalFlags
LocalAlloc
LoadLibraryW
IsValidCodePage
InterlockedExchange
Heap32Next
Heap32ListFirst
GetWindowsDirectoryW
GetUserDefaultLCID
GetTickCount
GetTempPathW
GetTempFileNameW
GetSystemTime
GetSystemInfo
GetSystemDirectoryW
GetSystemDefaultUILanguage
GetStringTypeExA
GetStartupInfoW
GetProfileSectionA
GetPrivateProfileStringW
GetPrivateProfileSectionW
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFileTime
GetFileSize
GetFileInformationByHandle
GetFileAttributesW
GetFileAttributesExW
GetFileAttributesA
GetExitCodeThread
GetDriveTypeW
GetDateFormatW
GetCurrentProcessId
GetCurrentProcess
GetCommProperties
FreeLibrary
FormatMessageW
FindNextVolumeMountPointW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExpandEnvironmentStringsW
ExitProcess
EnumResourceTypesW
DuplicateHandle
DeleteFileW
DeleteFileA
DebugBreak
CreateProcessW
CreateFileW
CreateFileA
CreateEventW
CreateDirectoryW
CopyFileW
CloseHandle
BuildCommDCBW
LoadLibraryA
GetProcAddress

user32

wsprintfW
WinHelpW
VkKeyScanExA
VkKeyScanA
ValidateRect
UserHandleGrantAccess
UpdateWindow
TranslateMessage
TrackPopupMenu
ShowWindow
SetWindowWord
SetWindowTextW
SetWindowPos
SetWindowLongW
SetScrollPos
SetScrollInfo
SetPropW
SetMenuItemInfoW
SetForegroundWindow
SetFocus
SetDlgItemTextW
SetDlgItemInt
SetCursor
SetClassLongW
SetActiveWindow
SendNotifyMessageW
SendMessageW
SendDlgItemMessageW
ReleaseDC
RegisterWindowMessageW
RegisterClassExW
PostMessageW
PeekMessageW
OemKeyScan
MoveWindow
MessageBoxW
MenuItemFromPoint
LockWorkStation
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadCursorA
IsWindowUnicode
IsWindow
IsDlgButtonChecked
IsDialogMessageW
IsClipboardFormatAvailable
InvertRect
InvalidateRect
InflateRect
GetWindowTextW
GetWindowTextLengthW
GetWindowTextLengthA
GetWindowRect
GetWindowModuleFileNameW
GetWindowLongW
GetWindow
GetTopWindow
GetTitleBarInfo
GetSysColor
GetSubMenu
GetShellWindow
GetScrollPos
GetPropW
GetParent
GetMenu
GetFocus
GetDlgItemTextW
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetClipboardOwner
GetClientRect
GetClassLongW
GetClassInfoExW
GetAsyncKeyState
GetAltTabInfoA
GetAltTabInfo
FindWindowW
FillRect
EnumDisplaySettingsExA
EndPaint
EndDialog
EnableWindow
EnableScrollBar
DrawTextW
DrawFocusRect
DispatchMessageW
DialogBoxParamW
DestroyWindow
DestroyMenu
DefWindowProcW
DdeCmpStringHandles
CreateWindowExW
CreatePopupMenu
CreateDialogParamW
CopyRect
ChildWindowFromPointEx
ChildWindowFromPoint
CheckMenuItem
CheckDlgButton
CallWindowProcW
CallWindowProcA
BlockInput
BeginPaint
AppendMenuW
LoadCursorFromFileW
LoadCursorFromFileA
GetForegroundWindow
CharNextA
GetSystemMetrics
CharLowerA
GetQueueStatus
IsIconic
CountClipboardFormats
IsCharAlphaNumericW
GetMenuItemCount
GetInputState
IsWindowVisible
EndMenu
IsCharUpperA
GetMessageExtraInfo
GetKeyboardLayout
KillTimer

gdi32

SetAbortProc
SetBkMode
SetBoundsRect
SetColorAdjustment
SetDCPenColor
SetDIBitsToDevice
SetLayout
SelectObject
SetTextColor
StartDocW
StartPage
StretchDIBits
TextOutW
UnloadNetworkFonts
bMakePathNameW
RemoveFontResourceTracking
ResizePalette
Rectangle
PtVisible
PtInRegion
PolylineTo
NamedEscape
MoveToEx
LineTo
GetTextMetricsW
GetBrushOrgEx
GetTextFaceW
GetTextFaceAliasW
GetTextExtentPointW
GetRgnBox
GetFontLanguageInfo
GetETM
GetDeviceCaps
GetDIBColorTable
GetDCOrgEx
GetDCBrushColor
GetCharWidthInfo
SetMagicColors
BeginPath
GdiGetCharDimensions
GdiDescribePixelFormat
GdiConvertToDevmodeW
FONTOBJ_pxoGetXform
FONTOBJ_pvTrueTypeFontFile
EnumEnhMetaFile
EngGetDriverName
EngFreeModule
EngDeleteSurface
EngDeletePalette
EndPage
EndDoc
DeleteDC
CreatePen
CreateICA
CreateFontW
CombineRgn
AbortDoc
GetPixelFormat
GetStockObject
SaveDC
AbortPath
GetTextCharacterExtra
GetTextAlign
GetBkColor
CreateSolidBrush
DeleteObject
EndPath
CloseMetaFile
GdiGetBatchLimit
GetCharWidth32W

comdlg32

GetOpenFileNameW

advapi32

RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegFlushKey
RegEnumKeyExW
RegCreateKeyW
RegCloseKey
OpenEventLogW
LsaQueryInformationPolicy
LsaOpenPolicy
LsaFreeMemory
LsaClose
IsValidSid
GetSidSubAuthorityCount
GetSidSubAuthority
GetSidIdentifierAuthority
CloseEventLog
BackupEventLogW
RegOpenKeyW
RegQueryValueExW
RegSetValueExW

shell32

SHEmptyRecycleBinW
Shell_NotifyIcon
ShellExecuteEx
ShellExecuteA
ShellAboutW
SHQueryRecycleBinW
SHIsFileAvailableOffline
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHGetIconOverlayIndexA
SHGetDiskFreeSpaceExW
SHGetDiskFreeSpaceA
SHGetDataFromIDListA
SHFileOperation
SHGetFolderLocation
SHCreateDirectoryExW
SHChangeNotify
SHBrowseForFolderW
FindExecutableW
ExtractIconExW
ExtractIconExA
ExtractIconEx
CheckEscapesW

ole32

CoInitialize
CoInitializeSecurity
CoTaskMemFree
CoUninitialize
CoCreateInstance

shlwapi

StrRStrIW
StrRStrIA
StrCmpNW
StrCmpNA
StrChrA

msvcrt

_waccess
wcsstr
wcsrchr
wcsncpy
wcsncmp
wcsncat
_CxxThrowException
_EH_prolog
_XcptFilter
__CxxFrameHandler
__dllonexit
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
_adjust_fdiv
_beginthread
_chdrive
_close
_controlfp
_errno
_except_handler3
_exit
_findclose
_ftol
_getdrive
_initterm
_itow
_lseek
_ltow
_makepath
_memccpy
_onexit
_open
_pctype
_read
_sleep
_splitpath
_tempnam
_wchdir
_wcmdln
_wcsdup
_wcsicmp
_wcsnicmp
_wcsrev
_wcsupr
_wfindfirst
_wfindnext
_wgetenv
_wmakepath
_wopen
_write
_wsplitpath
_wtoi
_wtoi64
calloc
exit
free
isdigit
isspace
malloc
realloc
remove
sprintf
swprintf
toupper
vswprintf
wcscat
wcschr
wcscmp
wcscpy
wcslen

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 623KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ff39698b70c70a09605988d799144f3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

shlwapi

msvcrt

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 153KB - Virtual size: 152KB

.data Size: 1024B - Virtual size: 960B

.rsrc Size: 40KB - Virtual size: 623KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 153KB - Virtual size: 152KB

.data
Size: 1024B - Virtual size: 960B

.rsrc
Size: 40KB - Virtual size: 623KB