0adfc348a91d02969d6c296fdfbb903f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0adfc348a91d02969d6c296fdfbb903f_JaffaCakes118
Size

332KB
MD5

0adfc348a91d02969d6c296fdfbb903f
SHA1

71804be69e6cf7395a58065fd537b88eed4b324b
SHA256

032312f9ac891cb57b33dc52c1e675aa40753c4459205af2d83bc29db9ce5df2
SHA512

365da61092a659dca117a82b3653d9f19c33946c48069bbe26942cb91097055f8757dbef2f101e23cb775bd50505e8f4e6dade4dd9550b64e6a6bf230d7829d6
SSDEEP

6144:WUc6apjMQU9ixWEVu+y/ih2xgEFoG+h7WJntFeyIKFjg3cwz5x2XEE:WH6DQU9fiExgR7etwyUcICU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0adfc348a91d02969d6c296fdfbb903f_JaffaCakes118

Files

0adfc348a91d02969d6c296fdfbb903f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

613e66ab74656805a0e281939f2b32a0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindowEnabled
PostMessageW
SetCursorPos
RemovePropA
SetParent
ShowCaret
MapWindowPoints
SetWindowsHookExW
GetDoubleClickTime
CharPrevA
VkKeyScanExW
GetPropW
GetMenuItemInfoW
GetMenuStringW
MoveWindow
TrackPopupMenu
DdeCreateDataHandle
GetKeyState
WinHelpW
DrawIconEx
GetWindowLongW
GetMenuState
EnableMenuItem
SetMenuItemInfoW
AllowSetForegroundWindow
GetCapture
EnumThreadWindows
DdeClientTransaction
GetMessageW
CharNextW
CheckRadioButton
MessageBoxExA
MapVirtualKeyW
SetWindowLongA
UnionRect
InflateRect
PeekMessageA
CreateMenu
GetSystemMetrics
CreateDialogParamW
SetWindowRgn
MsgWaitForMultipleObjects
WaitForInputIdle
CheckMenuItem
SetTimer
InvalidateRect
GetSubMenu
SetWindowLongW
IsDlgButtonChecked
GetSysColorBrush
SetRectEmpty
MapDialogRect
GetPropA
IsWindow
GetShellWindow
SetCursor
ReleaseDC
CreatePopupMenu
GetClientRect
CharLowerW
CharLowerBuffW
SystemParametersInfoA
SetWindowPlacement
GetWindowDC
WindowFromPoint
MessageBoxIndirectW
GetFocus
CharUpperW
GetKeyNameTextW
SetForegroundWindow
PostQuitMessage
EnableWindow
WaitMessage
TranslateMessage
ReleaseCapture
IsCharAlphaNumericW
GetSysColor
CopyImage
GetProcessWindowStation
DrawEdge
EndDeferWindowPos
GetMenuItemCount
GetWindowLongA
IsMenu
ChildWindowFromPoint
GetMessageA
CallWindowProcW
GetDC
EndPaint
AppendMenuW
GetIconInfo
SendMessageTimeoutA
DestroyAcceleratorTable
GetClassLongW
SetCapture
GetWindowTextLengthW
ShowWindow
CheckMenuRadioItem
UpdateLayeredWindow
SetScrollInfo
DestroyMenu
GetLastInputInfo
InsertMenuItemW
KillTimer
IsHungAppWindow
LoadAcceleratorsW
ClientToScreen
MsgWaitForMultipleObjectsEx
DestroyWindow
CreateIconIndirect
RemovePropW
DeleteMenu
SetScrollPos
EnumDisplaySettingsW
RegisterClassW
DrawFocusRect
GetDlgItem
GetTopWindow
GetCursor
LoadBitmapW
FindWindowW
EnumChildWindows
MessageBoxW
IsDialogMessageW
ChangeClipboardChain
RedrawWindow
ShowOwnedPopups
DdeFreeDataHandle
BeginPaint
SetMenuDefaultItem
GetMessageTime
SendDlgItemMessageW
SetClipboardViewer
GetMenuItemID
LoadMenuW
CharPrevW
SetClipboardData
SendMessageA
GetCursorPos
PeekMessageW
GetScrollInfo
AdjustWindowRectEx
SetPropW
CallMsgFilterW
LoadStringW
LoadCursorW
GetLastActivePopup
SetDlgItemInt
GetNextDlgTabItem
GetClassInfoExW
LoadImageW
RegisterClipboardFormatW
wsprintfW
EmptyClipboard
DdeGetData
GetActiveWindow
GetClipboardData
DispatchMessageW
GetKeyboardLayout
EndMenu
SetActiveWindow
IsChild
DdeQueryStringW
DestroyIcon
DefWindowProcA
SetDlgItemTextW
GetDlgCtrlID
DialogBoxParamA
ScreenToClient
GetComboBoxInfo
DialogBoxIndirectParamA
GetWindowTextW
GetParent
TrackPopupMenuEx
DrawFrameControl
GetDesktopWindow
GetAncestor
GetClassWord
GetMenuItemInfoA
CloseClipboard
IsWindowVisible
RegisterWindowMessageA
PostThreadMessageA
AnimateWindow
LoadIconW
FindWindowExW
DispatchMessageA
HideCaret
RegisterWindowMessageW
DrawTextExW
EnumDesktopWindows
FillRect
IsIconic
SetWindowPos
DialogBoxParamW
RegisterClassExW
SystemParametersInfoW
DeferWindowPos
MessageBoxExW
LoadStringA
GetDlgItemTextW
OpenClipboard
DdeCreateStringHandleW
GetClassInfoW
MonitorFromPoint
CopyIcon
IsRectEmpty
SendNotifyMessageW
IntersectRect
MonitorFromWindow
SendMessageW
GetDialogBaseUnits
SetRect
SetWindowTextW
ShowScrollBar
SetMenuItemBitmaps
RegisterClipboardFormatA
GetForegroundWindow
SetPropA
CreateWindowExW
GetMenuDefaultItem
GetWindow
CallNextHookEx
UpdateWindow
GetSystemMenu
IsWindowUnicode
PostThreadMessageW
UnregisterClassW
AttachThreadInput
DdeDisconnect
DrawTextW
MonitorFromRect
UnhookWindowsHookEx
FindWindowA
TrackMouseEvent
SetMenu
MessageBeep
PtInRect
RemoveMenu
NotifyWinEvent
CopyRect
GetWindowInfo
DdeConnect
GetAsyncKeyState
GetWindowRect
BeginDeferWindowPos
LockSetForegroundWindow
DdeUninitialize
CheckDlgButton
EqualRect
SendMessageTimeoutW
LoadCursorA
EndDialog
DdeNameService
GetMonitorInfoW
CharNextA
DialogBoxIndirectParamW
DefWindowProcW
SetFocus
TranslateAcceleratorW
GetMessagePos
GetClassNameW
DdeInitializeW
EnumWindows
InsertMenuW
GetWindowRgnBox
GetWindowPlacement
AdjustWindowRect
GetClipboardFormatNameW
GetWindowThreadProcessId
MessageBoxIndirectA
DdeFreeStringHandle
PostMessageA
OffsetRect

shell32

SHGetSpecialFolderPathW
SHGetPathFromIDListA
SHFileOperationW
SHGetInstanceExplorer
Shell_NotifyIconA
SHCreateShellItem
ShellExecuteExW
SHGetFileInfoW
SHSetLocalizedName
SHGetFolderPathAndSubDirW
SHAppBarMessage
SHGetPathFromIDListW
SHBrowseForFolderW
ExtractIconExW
SHGetDesktopFolder
SHBindToParent
ExtractIconW
ExtractAssociatedIconExW
SHGetFolderPathW
SHGetSpecialFolderLocation
ShellAboutW
SHPathPrepareForWriteW
SHGetDataFromIDListW
DragQueryFileW
SHGetFolderLocation
ShellExecuteA
Shell_NotifyIconW
SHChangeNotify
ShellExecuteW

gdi32

SetLayout
DeleteDC
ExtTextOutW
GetBrushOrgEx
CreateSolidBrush
StretchDIBits
CreatePalette
GetDIBits
MoveToEx
RealizePalette
GetTextColor
OffsetWindowOrgEx
CreatePolygonRgn
TextOutW
DeleteObject
GetDeviceCaps
SetTextAlign
SelectObject
CloseEnhMetaFile
GetRgnBox
GetBkColor
SetBkMode
IntersectClipRect
SetRectRgn
GetLayout
PlayEnhMetaFile
Rectangle
SetViewportExtEx
CreateDIBSection
CreateFontW
SetTextColor
RectVisible
CreateCompatibleDC
EqualRgn
GetGlyphIndicesW
CreateFontIndirectA
CreatePatternBrush
GetTextExtentPoint32W
CombineRgn
SetWindowOrgEx
PatBlt
CreateHalftonePalette
CreateDCW
GetObjectW
SetWindowExtEx
SetViewportOrgEx
GetStockObject
SetDCPenColor
CreateFontIndirectW
SetPaletteEntries
CreateCompatibleBitmap
GetTextExtentPointW
CloseMetaFile
DeleteEnhMetaFile
CreateDCA
GetTextExtentExPointI
GetObjectA
CreateRectRgnIndirect
GetDCOrgEx
OffsetRgn
GetSystemPaletteEntries
BitBlt
CreateMetaFileW
CreateRectRgn
TextOutA
CreateEnhMetaFileA
RestoreDC
SetBkColor
GetRegionData
GetTextExtentPoint32A
LineTo
GetPixel
SaveDC
LPtoDP
CreatePen
StretchBlt
SelectPalette
SetMapMode
SetBrushOrgEx
CreateDIBPatternBrushPt
GetTextCharset
GetClipBox
SetStretchBltMode
ExtCreateRegion
GetTextAlign
GetPaletteEntries
CreateBitmap
GetTextMetricsW
GetBkMode

uxtheme

GetThemeBackgroundContentRect
DrawThemeBackground
GetThemeMargins
GetThemeColor
IsAppThemed
GetThemeBackgroundExtent
GetThemeFont
GetThemeMetric
IsThemeActive
OpenThemeData
GetThemeAppProperties
DrawThemeParentBackground
SetWindowTheme
CloseThemeData
GetThemePartSize

psapi

GetProcessImageFileNameW

advapi32

OpenProcessToken
OpenThreadToken
RegSetValueExW
GetTraceLoggerHandle
CryptHashData
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueW
RegOpenKeyExA
RegOpenKeyW
RegEnumValueW
RegOpenKeyExW
DuplicateTokenEx
RegEnumValueA
RegQueryValueExA
RegQueryValueExW
RegDeleteValueA
CryptGetHashParam
CryptReleaseContext
GetLengthSid
RegSetValueExA
RegDeleteValueW
CryptCreateHash
RegEnumKeyW
CreateProcessAsUserW
TraceMessage
RegEnumKeyExW
GetTraceEnableFlags
SetTokenInformation
RegCreateKeyExW
CryptAcquireContextW
ConvertSidToStringSidW
GetUserNameW
ImpersonateSelf
SetThreadToken
GetTokenInformation
GetTraceEnableLevel
RegisterTraceGuidsW
RegQueryInfoKeyW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegOpenCurrentUser
ConvertStringSidToSidW
UnregisterTraceGuids
RegCreateKeyA
CryptDestroyHash
RegDeleteKeyW
TraceEvent
IsTextUnicode
RegCloseKey

kernel32

GetUserDefaultLCID
CreateFileMappingW
LCMapStringW
GetSystemWow64DirectoryW
GetModuleHandleExA
MultiByteToWideChar
LocalFileTimeToFileTime
CreateMutexA
CreateEventA
TryEnterCriticalSection
WideCharToMultiByte
LocalAlloc
CreateProcessW
QueryPerformanceFrequency
TlsGetValue
DeactivateActCtx
GetModuleFileNameW
GlobalAlloc
GetFullPathNameW
CloseHandle
DeleteFileW
CompareStringA
CreateActCtxW
CreateDirectoryW
GetPrivateProfileStringA
GetVersionExW
GetShortPathNameW
ExitProcess
WritePrivateProfileSectionW
LoadResource
lstrcmpA
CopyFileW
SetFilePointerEx
ExpandEnvironmentStringsW
GlobalLock
SuspendThread
GetUserDefaultUILanguage
CreateFileMappingA
SetEvent
ReleaseActCtx
SetFilePointer
SetEnvironmentVariableW
Process32FirstW
SetCurrentDirectoryA
ResumeThread
GetExitCodeThread
CreateThread
CreateToolhelp32Snapshot
GetFileSizeEx
GetModuleFileNameA
SetFileTime
EnumUILanguagesW
LockResource
DeleteAtom
VirtualQuery
FreeLibraryAndExitThread
DeleteTimerQueueTimer
HeapCreate
IsDBCSLeadByte
GlobalDeleteAtom
FindFirstFileW
GlobalAddAtomA
FindResourceExW
SetProcessWorkingSetSize
GetACP
SetCurrentDirectoryW
InterlockedIncrement
GetFileAttributesW
GlobalUnlock
RaiseException
GlobalFlags
lstrlenW
OpenMutexW
InterlockedExchange
SetErrorMode
SetUnhandledExceptionFilter
HeapDestroy
GetCurrentProcess
GetCurrentThreadId
CompareStringW
FreeLibrary
WaitForSingleObjectEx
LocalFree
GetNumberFormatW
LocalReAlloc
GetLocaleInfoW
GetPrivateProfileStringW
GetSystemDirectoryA
OutputDebugStringA
FlushInstructionCache
MoveFileW
GetCPInfo
GetSystemTime
MulDiv
QueryPerformanceCounter
GetProcessHeap
GetThreadContext
CreateEventW
GetSystemDefaultLCID
GetPrivateProfileSectionW
InterlockedCompareExchange
lstrcmpW
GetTempPathW
ActivateActCtx
ReleaseMutex
GlobalAddAtomW
WriteFile
UnmapViewOfFile
VirtualProtect
GetSystemDirectoryW
TlsSetValue
AddAtomW
GetThreadLocale
FindResourceW
LockFileEx
lstrlenA
GetLogicalDriveStringsW
lstrcmpiA
CompareFileTime
CreateMutexW
GetSystemTimeAsFileTime
GetAtomNameW
GetLastError
SetProcessShutdownParameters
OpenEventW
GetVersion
FileTimeToSystemTime
SetThreadContext
GetThreadPriority
RemoveDirectoryW
GetSystemInfo
WaitForMultipleObjects
GetModuleHandleW
GetPrivateProfileSectionNamesW
GetTempFileNameW
WaitForSingleObject
FindClose
Process32NextW
WritePrivateProfileStringW
GetModuleHandleA
SetThreadExecutionState
SetThreadPriority
HeapAlloc
SetEndOfFile
GetVersionExA
FindAtomW
FileTimeToLocalFileTime
LoadLibraryA
GetFileInformationByHandle
GetLocalTime
CreateFileW
ResetEvent
IsWow64Process
SizeofResource
GetTimeFormatW
ReplaceFileW
TlsAlloc
ExpandEnvironmentStringsA
InitializeCriticalSection
TlsFree
MoveFileExW
GetSystemDefaultUILanguage
GlobalReAlloc
LocalSize
GetDateFormatW
TerminateProcess
QueueUserWorkItem
OpenProcess
GetFileAttributesA
QueryDosDeviceW
DisableThreadLibraryCalls
HeapReAlloc
VirtualFree
CreateSemaphoreW
FormatMessageW
DuplicateHandle
GetLongPathNameW
Sleep
DebugBreak
LeaveCriticalSection
GetEnvironmentVariableW
SetFileAttributesW
InterlockedDecrement
GetFileSize
LoadLibraryExW
GlobalFree
HeapFree
ReleaseSemaphore
SearchPathW
GetTickCount
UnhandledExceptionFilter
MapViewOfFile
VirtualAlloc
UnlockFileEx
CreateDirectoryA
GetCurrentDirectoryW
OpenMutexA
CreateFileA
GetCurrentProcessId
GetWindowsDirectoryW
GetModuleHandleExW
TerminateThread
GetFileAttributesExW
ReadFile
GetProcAddress
lstrcmpiW
FindNextFileW
GlobalSize
SetLastError
LoadLibraryW
EnterCriticalSection
CreateTimerQueueTimer
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCurrentThread
SystemTimeToFileTime

ntdll

LdrGetDllHandle
NtAllocateVirtualMemory
RtlUshortByteSwap

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

613e66ab74656805a0e281939f2b32a0

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

gdi32

uxtheme

psapi

advapi32

kernel32

ntdll

Sections

.text Size: 183KB - Virtual size: 183KB

.rdata Size: 88KB - Virtual size: 88KB

.rsrc Size: 21KB - Virtual size: 21KB

.data Size: 37KB - Virtual size: 1.4MB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 183KB - Virtual size: 183KB

.rdata
Size: 88KB - Virtual size: 88KB

.rsrc
Size: 21KB - Virtual size: 21KB

.data
Size: 37KB - Virtual size: 1.4MB

.tls
Size: 512B - Virtual size: 4KB