7e168fbeeecde4adcce77ea873184ebd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7e168fbeeecde4adcce77ea873184ebd_JaffaCakes118
Size

487KB
MD5

7e168fbeeecde4adcce77ea873184ebd
SHA1

0f1312da7f5d34d2613200a687e2d372462ea07d
SHA256

44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071
SHA512

9046aec3e23cb1c551cabddae0375437d766b34d0c9c6bfdd4c73f0975c5ed3b1d3c9a7e6df0340bbd98788586da9d1eb98a87b0f11eca164048a29fd308cf67
SSDEEP

12288:LioHeyh4JzRoLoC1PuUEvmJ1TNF/JZJc/c3:FHMRocyWUEvm7XL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e168fbeeecde4adcce77ea873184ebd_JaffaCakes118

Files

7e168fbeeecde4adcce77ea873184ebd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7f3d9c9bc7c4eeaefdfbc64f0f719bd6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
Sleep
WriteConsoleW
WriteFile
WritePrivateProfileStringW
WriteProcessMemory
lstrcmpW
lstrcpyW
lstrcpynW
lstrlenA
LoadLibraryA
SizeofResource
SetUnhandledExceptionFilter
SetStdHandle
SetLastError
SetHandleCount
SetFilePointer
SetEvent
SetErrorMode
SetEnvironmentVariableW
SetEnvironmentVariableA
SetEndOfFile
SetCurrentDirectoryW
SetConsoleCursorPosition
RtlUnwind
ReadProcessMemory
ReadFile
ReadConsoleOutputCharacterA
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
ProcessIdToSessionId
OutputDebugStringW
OpenProcess
MultiByteToWideChar
MulDiv
MoveFileW
LockResource
LocalFree
LocalAlloc
LoadResource
LoadLibraryW
LeaveCriticalSection
LCMapStringW
IsValidLocale
IsValidCodePage
IsProcessorFeaturePresent
IsDebuggerPresent
IsBadWritePtr
IsBadStringPtrA
IsBadReadPtr
InterlockedIncrement
InterlockedExchangeAdd
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
HeapSize
HeapSetInformation
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalSize
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalAlloc
GetWindowsDirectoryW
GetVolumeInformationW
GetVersionExW
GetVersionExA
GetUserDefaultLCID
GetTimeZoneInformation
GetTimeFormatW
GetTickCount
GetTempPathW
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDirectoryW
GetStringTypeW
GetStdHandle
GetStartupInfoW
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetPrivateProfileStringW
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileAttributesW
GetExitCodeProcess
GetEnvironmentVariableW
GetEnvironmentStringsW
GetDriveTypeW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
CloseHandle
GetConsoleScreenBufferInfo
GetConsoleMode
GetConsoleCP
GetCommandLineW
GetCPInfo
GetACP
FreeLibrary
FreeEnvironmentStringsW
FreeConsole
FormatMessageW
FlushInstructionCache
FlushFileBuffers
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FillConsoleOutputCharacterW
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsW
ExitProcess
EnumSystemLocalesA
EnterCriticalSection
EncodePointer
DeleteFileW
DeleteCriticalSection
DecodePointer
DebugBreak
CreateThread
CreateMutexW
CreateFileW
CopyFileW
CompareStringW
WriteConsoleA

user32

SetCapture
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoW
SetParent
SetPropW
SetRect
SetScrollInfo
SetTimer
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowCursor
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateAcceleratorW
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassW
UnregisterHotKey
UpdateWindow
ValidateRect
ValidateRgn
VkKeyScanW
WindowFromPoint
keybd_event
wsprintfW
GetLastActivePopup
ShowCaret
IsCharLowerW
IsCharUpperW
IsCharLowerA
GetMenuContextHelpId
IsWindowUnicode
IsCharAlphaNumericA
GetTopWindow
GetThreadDesktop
IsCharAlphaA
IsCharAlphaNumericW
OpenIcon
IsMenu
GetListBoxInfo
GetKeyboardType
IsCharAlphaW
OemKeyScan
LoadCursorA
PaintDesktop
GetKeyboardLayout
IsGUIThread
GetQueueStatus
GetMenu
WindowFromDC
GetWindowTextLengthA
VkKeyScanA
IsCharUpperA
LoadIconA
ReleaseDC
ReleaseCapture
RegisterHotKey
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageW
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MoveWindow
ModifyMenuW
MessageBoxW
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
SendMessageW
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageW
IsClipboardFormatAvailable
InvalidateRect
InsertMenuItemW
InflateRect
HideCaret
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetWindow
GetUpdateRgn
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetParent
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemInfoW
GetMenuItemCount
GetKeyState
GetIconInfo
GetFocus
GetDoubleClickTime
GetDlgItem
GetDialogBaseUnits
GetDesktopWindow
GetDC
GetCursorPos
GetCursor
GetClipboardFormatNameW
GetClientRect
GetClassNameW
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FlashWindow
FindWindowExW
FillRect
EnumDisplaySettingsW
EndPaint
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextW
DrawStateW
DrawMenuBar
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyAcceleratorTable
DeferWindowPos
DefWindowProcW
DdeUninitialize
DdeQueryStringW
DdePostAdvise
DdeNameService
DdeInitializeW
DdeGetLastError
DdeGetData
DdeFreeStringHandle
DdeFreeDataHandle
DdeDisconnect
DdeCreateStringHandleW
DdeCreateDataHandle
DdeConnect
DdeClientTransaction
CreateWindowExW
CreatePopupMenu
CreateMenu
CreateIconIndirect
ScrollWindow
ScreenToClient
RemovePropW
IsWindowVisible
RemoveMenu
AdjustWindowRectEx
AppendMenuW
BeginDeferWindowPos
BeginPaint
BringWindowToTop
CallNextHookEx
CallWindowProcW
ChangeDisplaySettingsW
CheckMenuItem
CheckMenuRadioItem
ChildWindowFromPoint
ChildWindowFromPointEx
ClientToScreen
CopyRect
CreateAcceleratorTableW
CreateDialogIndirectParamW
CreateDialogParamW
InsertMenuW

gdi32

ExtSelectClipRgn
ExtTextOutW
GdiFlush
GetBkColor
GetCharABCWidthsW
GetClipBox
GetCurrentObject
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetEnhMetaFileHeader
GetEnhMetaFileW
GetNearestPaletteIndex
GetObjectType
GetObjectW
GetOutlineTextMetricsW
GetPaletteEntries
GetPixel
GetRegionData
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextExtentExPointW
GetTextExtentPoint32W
GetTextMetricsW
GetViewportOrgEx
IntersectClipRect
LineTo
MaskBlt
MoveToEx
OffsetRgn
Pie
PlayEnhMetaFile
PolyBezier
PolyPolygon
ExtFloodFill
Polyline
PtInRegion
RealizePalette
RectInRegion
Rectangle
ResizePalette
RestoreDC
RoundRect
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetBkColor
SetBkMode
SetBrushOrgEx
SetMapMode
SetPixel
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StartDocW
StartPage
StretchBlt
StretchDIBits
AddFontResourceA
AbortPath
AddFontResourceW
ExtCreateRegion
ExtCreatePen
ExcludeClipRect
EqualRgn
EnumFontFamiliesExW
EndPage
EndDoc
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePen
CreatePatternBrush
CreatePalette
CreateICW
CreateHatchBrush
CreateHalftonePalette
CreateFontIndirectW
CreateEnhMetaFileW
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CombineRgn
CloseEnhMetaFile
BitBlt
Polygon
Arc

advapi32

GetUserNameW
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegEnumValueW
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW
RegSetValueExW
RevertToSelf
ImpersonateLoggedOnUser

shell32

SHGetSpecialFolderPathW
ShellExecuteExW
ShellExecuteW
ord680

ole32

RevokeDragDrop
ReleaseStgMedium
RegisterDragDrop
OleUninitialize
OleSetClipboard
OleIsCurrentClipboard
OleInitialize
OleGetClipboard
OleFlushClipboard
CoUninitialize
CoTaskMemAlloc
CoSetProxyBlanket
CoLockObjectExternal
CoInitializeEx
CoCreateInstance

comctl32

ImageList_Create
ImageList_Add
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_Draw
ImageList_EndDrag
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetDragCursorImage
ImageList_BeginDrag
_TrackMouseEvent

Sections

.text
Size: 245KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f3d9c9bc7c4eeaefdfbc64f0f719bd6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

comctl32

Sections

.text Size: 245KB - Virtual size: 245KB

.rdata Size: 173KB - Virtual size: 173KB

.data Size: 41KB - Virtual size: 41KB

.rsrc Size: 26KB - Virtual size: 25KB

.text
Size: 245KB - Virtual size: 245KB

.rdata
Size: 173KB - Virtual size: 173KB

.data
Size: 41KB - Virtual size: 41KB

.rsrc
Size: 26KB - Virtual size: 25KB