General

Malware Config

Signatures

Files

• 696869f33a53d9bce7d99b783c81b013_JaffaCakes118

  .exe windows:5 windows x86 arch:x86

  f708653500fb816f18e55040aa6b9137

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  gdiplus

  GdipDeleteFont

  GdipDrawImageRectRectI

  GdipCloneBrush

  GdipDeletePen

  GdipFree

  GdipDeleteGraphics

  GdiplusStartup

  GdiplusShutdown

  GdipCloneImage

  GdipDisposeImage

  GdipCreateBitmapFromStream

  GdipDeleteBrush

  GdipDrawRectangleI

  GdipDeleteStringFormat

  GdipCreatePen1

  GdipCreateStringFormat

  GdipDrawLineI

  GdipFillRectangleI

  GdipCreateFromHDC

  GdipCreateFontFamilyFromName

  GdipDrawString

  GdipGetGenericFontFamilySansSerif

  GdipCreateFont

  GdipAlloc

  GdipCreateSolidFill

  GdipDeleteFontFamily

  GdipSetStringFormatAlign

  wininet

  HttpSendRequestA

  InternetOpenUrlW

  InternetReadFile

  HttpQueryInfoW

  InternetOpenA

  InternetOpenUrlA

  InternetConnectA

  InternetCloseHandle

  HttpOpenRequestA

  shlwapi

  PathRemoveFileSpecW

  PathQuoteSpacesW

  kernel32

  LocalFree

  InitializeCriticalSection

  InterlockedCompareExchange

  IsValidLocale

  EnumSystemLocalesA

  GetLocaleInfoA

  GetUserDefaultLCID

  FlushFileBuffers

  WriteConsoleW

  SetStdHandle

  HeapReAlloc

  InterlockedExchange

  LoadLibraryW

  HeapSize

  IsValidCodePage

  GetOEMCP

  GetACP

  GetConsoleMode

  GetConsoleCP

  EnterCriticalSection

  LeaveCriticalSection

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetTickCount

  DeleteCriticalSection

  GetCurrentThreadId

  SetLastError

  TlsFree

  GetModuleFileNameW

  WideCharToMultiByte

  WriteFile

  Sleep

  CreateFileW

  GetLastError

  CloseHandle

  GetTempFileNameW

  SetFilePointer

  CreateProcessW

  WaitForSingleObject

  ReadFile

  DeleteFileW

  CreateThread

  SetEvent

  GetModuleHandleW

  ResetEvent

  CreateEventW

  LoadResource

  GlobalLock

  GlobalAlloc

  SizeofResource

  GlobalUnlock

  GlobalFree

  LockResource

  QueryPerformanceCounter

  QueryPerformanceFrequency

  GetWindowsDirectoryW

  GetVolumeInformationW

  InterlockedDecrement

  GetVersionExW

  FindNextFileA

  FindFirstFileA

  FindNextFileW

  FindFirstFileW

  MoveFileExA

  MoveFileExW

  GetSystemWow64DirectoryA

  MultiByteToWideChar

  LCMapStringW

  TlsSetValue

  TlsGetValue

  TlsAlloc

  InterlockedIncrement

  HeapCreate

  IsProcessorFeaturePresent

  GetCurrentProcess

  TerminateProcess

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  RaiseException

  RtlUnwind

  DeleteFileA

  GetStartupInfoW

  HeapSetInformation

  GetCommandLineA

  GetCPInfo

  HeapAlloc

  EncodePointer

  DecodePointer

  HeapFree

  GetStringTypeW

  GetModuleFileNameA

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetProcAddress

  GetStdHandle

  GetLocaleInfoW

  ExitProcess

  GetDateFormatA

  GetTimeFormatA

  CompareStringW

  GetTimeZoneInformation

  FindResourceW

  SetEnvironmentVariableA

  SetHandleCount

  InitializeCriticalSectionAndSpinCount

  GetFileType

  user32

  GetWindowRect

  PostQuitMessage

  SetCapture

  PostMessageW

  LoadCursorW

  BeginPaint

  EndPaint

  RegisterClassExW

  LoadIconW

  ScreenToClient

  ReleaseDC

  SetWindowPos

  GetCursorPos

  ShowWindow

  CreateWindowExW

  ReleaseCapture

  GetSystemMetrics

  UpdateWindow

  DefWindowProcW

  SetTimer

  InvalidateRect

  DestroyWindow

  DispatchMessageW

  TranslateMessage

  GetMessageW

  GetDC

  MoveWindow

  gdi32

  SelectObject

  CreateCompatibleDC

  CreateCompatibleBitmap

  CreateSolidBrush

  BitBlt

  advapi32

  RegCreateKeyExA

  RegSetValueExA

  RegCloseKey

  shell32

  ShellExecuteW

  ole32

  CoUninitialize

  CoInitializeEx

  CreateStreamOnHGlobal

  CoSetProxyBlanket

  CoInitializeSecurity

  CoCreateInstance

  oleaut32

  VariantClear

  SysAllocString

  SysFreeString

  Sections

  .text

  Size: 234KB - Virtual size: 234KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 42KB - Virtual size: 42KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 10KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 244KB - Virtual size: 244KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 17KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ