aa17324e8950122d3c65acbfab167fd0_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

aa17324e8950122d3c65acbfab167fd0_JaffaCakes118
Size

1.2MB
MD5

aa17324e8950122d3c65acbfab167fd0
SHA1

bccd8baf36c85b4aedc247bde3507838124fabc9
SHA256

0e816833fbbb7b8625c0b3b53ad13344776182f4da76e51dde391ecc37ace157
SHA512

9013f4f24488f2e1136d61ddce9cad658cdd2b8cacab8f0e07fed74d5d72b4a159c5dd6dfe40762f5c372321dd34c5d55799c70231ca9839428a1f42eaf754cd
SSDEEP

24576:PsHuhfpaWcg8VsyjhkL873or8yAt5rEzFa9llaizagL0Re9L9a7WB/l:kOxsWcxTUriezcTMimgXa7WB/l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Ware.exe

Files

aa17324e8950122d3c65acbfab167fd0_JaffaCakes118
.zip
Ware.exe
.exe windows:5 windows x86 arch:x86

a29ef445ad077de20b9a6f581454299b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
QueueUserAPC
OpenThread
VirtualFreeEx
GetExitCodeThread
WaitForSingleObject
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
SuspendThread
TerminateProcess
ResumeThread
CreateProcessW
LoadLibraryW
DeleteFileW
GetCurrentDirectoryW
ProcessIdToSessionId
GetCurrentProcessId
GetTickCount
LoadLibraryA
ReadFile
SizeofResource
LockResource
LoadResource
FindResourceW
lstrcatW
lstrcpyW
lstrlenW
QueryDosDeviceW
IsBadWritePtr
GetNativeSystemInfo
GetCurrentProcess
MultiByteToWideChar
WideCharToMultiByte
IsBadReadPtr
GetVolumeInformationW
GetLastError
GetVolumeNameForVolumeMountPointW
VirtualFree
OpenProcess
GetFileSize
GetModuleHandleW
GetProcAddress
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
WriteFile
ExitProcess
FreeResource
GetACP
MulDiv
InterlockedIncrement
InterlockedDecrement
SetFilePointer
GetFileType
DuplicateHandle
SystemTimeToFileTime
DosDateTimeToFileTime
CreateDirectoryW
SetFileTime
GlobalUnlock
GlobalLock
GlobalAlloc
HeapAlloc
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
HeapReAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapCreate
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringA
LCMapStringW
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapSize
GetModuleHandleA
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetDriveTypeW
GetLogicalDriveStringsW
GetLocalTime
Sleep
DeviceIoControl
CloseHandle
CreateFileW
GetModuleFileNameW

user32

SetPropW
PostMessageW
RegisterClassW
LoadCursorW
RegisterClassExW
GetClassInfoExW
CreateWindowExW
GetKeyState
UnionRect
InvalidateRect
SetTimer
KillTimer
SetCapture
ReleaseCapture
ScreenToClient
PtInRect
GetDC
CharNextW
ReleaseDC
DestroyWindow
GetFocus
MapWindowPoints
IntersectRect
GetUpdateRect
IsRectEmpty
EndPaint
BeginPaint
GetActiveWindow
GetPropW
MoveWindow
IsZoomed
SetWindowRgn
OffsetRect
SetCursor
wvsprintfW
GetWindowTextW
GetWindowTextLengthW
GetCaretPos
GetCaretBlinkTime
FillRect
InvalidateRgn
GetGUIThreadInfo
CreateAcceleratorTableW
DrawTextW
CharPrevW
SetRect
CreateCaret
HideCaret
ShowCaret
SetCaretPos
GetSysColor
GetMessageW
SetFocus
TranslateMessage
DispatchMessageW
ShowWindow
IsWindow
SetWindowLongW
DefWindowProcW
CallWindowProcW
GetWindowLongW
GetSystemMetrics
LoadImageW
SendMessageW
GetWindowRgn
wsprintfW
GetWindowRect
GetParent
ClientToScreen
PostQuitMessage
DestroyMenu
TrackPopupMenu
SetForegroundWindow
GetCursorPos
GetSubMenu
AppendMenuW
InsertMenuW
CreatePopupMenu
CreateMenu
SetWindowTextW
GetClientRect
IsWindowVisible
MessageBoxW
SetWindowPos
IsIconic
MonitorFromWindow
GetMonitorInfoW
GetWindow
EnableWindow

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegQueryValueExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenSCManagerW
OpenServiceW
DeleteService
CloseServiceHandle
RegCloseKey
RegEnumKeyExW
CreateServiceW
StartServiceW
RegOpenKeyExW

ole32

CreateStreamOnHGlobal
OleLockRunning
CLSIDFromProgID
CoInitialize
CoCreateInstance
CoUninitialize
StringFromCLSID
CoTaskMemFree
CLSIDFromString

comctl32

_TrackMouseEvent
ord17

iphlpapi

GetAdaptersAddresses
GetAdaptersInfo

psapi

GetProcessImageFileNameW

imm32

ImmSetCompositionWindow
ImmSetCompositionFontW
ImmReleaseContext
ImmGetContext

gdi32

CreateRectRgn
PtInRegion
GetTextMetricsW
CreateCompatibleBitmap
SaveDC
BitBlt
RestoreDC
Rectangle
SetWindowOrgEx
DeleteDC
CreatePen
GetStockObject
GetObjectW
CreateFontIndirectW
DeleteObject
SelectObject
CreateCompatibleDC
CreateDIBSection
CreateRoundRectRgn
CreateSolidBrush
CreatePatternBrush
SetTextColor
SetBkMode
GetDeviceCaps
SelectClipRgn
ExtSelectClipRgn
CreateRectRgnIndirect
GetClipBox
CombineRgn
StretchBlt
SetStretchBltMode
ExtTextOutW
SetBkColor
LineTo
GetObjectA
GdiFlush
TextOutW
GetCharABCWidthsW
GetTextExtentPoint32W
RoundRect
CreatePenIndirect
MoveToEx

oleaut32

VariantInit
VariantClear
SysFreeString
SysAllocString

gdiplus

GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipGetImageHeight
GdipGetImageWidth
GdipLoadImageFromStreamICM
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdiplusShutdown
GdipFree
GdipAlloc
GdipDeleteBrush
GdipCreateStringFormat
GdipDeleteStringFormat
GdipDeleteGraphics
GdipDeleteFontFamily
GdipDeleteFont
GdipDisposeImage
GdipCreateBitmapFromScan0
GdiplusStartup
GdipCreateLineBrushI
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreateFromHDC
GdipGetImageGraphicsContext
GdipSetCompositingQuality
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipGraphicsClear
GdipDrawString
GdipDrawImage
GdipDrawImageRectI
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipGetFamily
GdipCloneBrush
GdipCloneImage
GdipLoadImageFromStream

Sections

.text
Size: 436KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a29ef445ad077de20b9a6f581454299b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

ole32

comctl32

iphlpapi

psapi

imm32

gdi32

oleaut32

gdiplus

Sections

.text Size: 436KB - Virtual size: 436KB

.rdata Size: 96KB - Virtual size: 95KB

.data Size: 18KB - Virtual size: 38KB

.rsrc Size: 1.0MB - Virtual size: 1.0MB

.reloc Size: 34KB - Virtual size: 33KB

.text
Size: 436KB - Virtual size: 436KB

.rdata
Size: 96KB - Virtual size: 95KB

.data
Size: 18KB - Virtual size: 38KB

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

.reloc
Size: 34KB - Virtual size: 33KB