09bd08c93fdfd7ab195f61d8ccba1685_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

09bd08c93fdfd7ab195f61d8ccba1685_JaffaCakes118
Size

332KB
MD5

09bd08c93fdfd7ab195f61d8ccba1685
SHA1

235999a8d1181c0d2131531962aa6a47d556a3c8
SHA256

b4ef25eeed4ccbf49e3fb24bc32c4ce12758aaaf9c88017eee3c9cf44f338f82
SHA512

d1dee9edb262d3607d619b94200ffc613d3543e22939b6b90098694483eab4723c16157de3aac1c748d3525b8a0336ea2e551bb9efea7a5b42b733edb131437a
SSDEEP

6144:VIx3ylY9ymSv0mtV/Lb7jvb/29ZMJTHHyFyg585ffxXSyfYoNeCCPj9knb7dEZhf:VIBt9vSv0cTTacn+yC8nb7CE/8RJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09bd08c93fdfd7ab195f61d8ccba1685_JaffaCakes118

Files

09bd08c93fdfd7ab195f61d8ccba1685_JaffaCakes118
.exe windows:5 windows x86 arch:x86

130393eba8d0225ca400fe70e7c42d78

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadImageW
GetCursor
GetMenuItemCount
AllowSetForegroundWindow
SendMessageA
GetKeyboardLayout
IsRectEmpty
BeginDeferWindowPos
SetRect
GetAsyncKeyState
SendMessageW
ReleaseCapture
GetSysColorBrush
SetWindowPos
RemoveMenu
BeginPaint
PeekMessageA
CharUpperW
UnregisterClassW
PeekMessageW
CharLowerBuffW
OffsetRect
AdjustWindowRectEx
GetMenuItemInfoW
RegisterClassW
GetLastActivePopup
SendMessageTimeoutA
EqualRect
UpdateLayeredWindow
GetClassNameW
EndDialog
GetWindowRgnBox
DdeCreateStringHandleW
GetDialogBaseUnits
UpdateWindow
CloseClipboard
DeferWindowPos
CreateIconIndirect
GetDlgItemTextW
GetMessageTime
DdeQueryStringW
GetSubMenu
LoadStringA
EnableWindow
TrackMouseEvent
IsWindowVisible
GetNextDlgTabItem
GetKeyNameTextW
MessageBoxExW
EmptyClipboard
PostMessageW
SetTimer
SetWindowLongA
EnumChildWindows
MonitorFromRect
GetSystemMetrics
FindWindowA
IsDialogMessageW
ChildWindowFromPoint
GetWindowLongW
DialogBoxIndirectParamW
SendDlgItemMessageW
SetActiveWindow
ShowCaret
EndMenu
CreateDialogParamW
GetAncestor
TranslateMessage
SetRectEmpty
LockSetForegroundWindow
IsWindowEnabled
CheckMenuRadioItem
GetPropW
DdeConnect
DdeFreeStringHandle
DdeGetData
MoveWindow
GetShellWindow
SetClipboardViewer
AdjustWindowRect
InsertMenuItemW
OpenClipboard
CopyIcon
IsIconic
GetClientRect
CallWindowProcW
GetClipboardFormatNameW
CopyRect
SetCursor
MonitorFromWindow
DefWindowProcA
ClientToScreen
GetWindowPlacement
MapDialogRect
SetParent
DestroyMenu
NotifyWinEvent
GetIconInfo
GetClassWord
SetMenuDefaultItem
DdeUninitialize
DdeClientTransaction
GetMenuItemInfoA
UnionRect
GetMessageA
GetPropA
GetCursorPos
RegisterWindowMessageA
DeleteMenu
GetMenuStringW
IsMenu
MsgWaitForMultipleObjects
InsertMenuW
MessageBoxW
GetCapture
GetKeyState
PostMessageA
SetPropA
EnableMenuItem
GetScrollInfo
CharNextW
SetCursorPos
DialogBoxIndirectParamA
MapWindowPoints
DrawFocusRect
FindWindowW
SendMessageTimeoutW
WinHelpW
SetWindowsHookExW
TrackPopupMenuEx
LoadMenuW
GetWindow
SetWindowLongW
GetDC
GetProcessWindowStation
GetClipboardData
LoadAcceleratorsW
PostThreadMessageW
CreatePopupMenu
DefWindowProcW
DrawTextW
RegisterClipboardFormatA
DialogBoxParamA
IsWindowUnicode
IntersectRect
CheckDlgButton
CallNextHookEx
GetWindowDC
DestroyIcon
SetMenu
SystemParametersInfoW
CharPrevW
ScreenToClient
GetWindowTextW
IsHungAppWindow
DdeDisconnect
GetSysColor
KillTimer
GetLastInputInfo
RegisterWindowMessageW
LoadCursorA
SetForegroundWindow
GetDesktopWindow
DestroyAcceleratorTable
GetDlgCtrlID
ReleaseDC
EnumDisplaySettingsW
CheckMenuItem
DrawEdge
SetScrollInfo
GetWindowTextLengthW
GetMenuState
GetWindowThreadProcessId
InvalidateRect
CallMsgFilterW
HideCaret
SetDlgItemTextW
EnumDesktopWindows
GetMessagePos
DialogBoxParamW
CreateWindowExW
RedrawWindow
DispatchMessageA
PostQuitMessage
LoadCursorW
GetMonitorInfoW
RegisterClipboardFormatW
wsprintfW
EnumThreadWindows
AppendMenuW
FillRect
GetActiveWindow
EnumWindows
DdeCreateDataHandle
EndPaint
DrawIconEx
IsDlgButtonChecked
MonitorFromPoint
DrawTextExW
SetFocus
AttachThreadInput
ShowScrollBar
CreateMenu
MessageBoxExA
GetMenuDefaultItem
GetWindowLongA
TranslateAcceleratorW
MapVirtualKeyW
MsgWaitForMultipleObjectsEx
LoadBitmapW
SetCapture
GetFocus
SystemParametersInfoA
ShowWindow
IsChild
MessageBoxIndirectW
TrackPopupMenu
IsCharAlphaNumericW
ShowOwnedPopups
GetParent
MessageBeep
CharLowerW
GetDoubleClickTime
DrawFrameControl
RemovePropA
IsWindow
SetWindowTextW
PtInRect
UnhookWindowsHookEx
LoadStringW
ChangeClipboardChain
WindowFromPoint
EndDeferWindowPos
GetClassInfoExW
GetSystemMenu
PostThreadMessageA
SetWindowRgn
FindWindowExW
SetWindowPlacement
MessageBoxIndirectA
GetClassLongW
DispatchMessageW
LoadIconW
SetClipboardData
WaitMessage
DestroyWindow
GetTopWindow
RegisterClassExW
CheckRadioButton
SetMenuItemInfoW
SetDlgItemInt
GetMessageW
VkKeyScanExW
GetClassInfoW
GetComboBoxInfo
DdeFreeDataHandle
WaitForInputIdle
AnimateWindow
RemovePropW
GetWindowInfo
InflateRect
GetDlgItem
CharNextA
SendNotifyMessageW
DdeNameService
GetWindowRect
DdeInitializeW
SetPropW
SetMenuItemBitmaps
CharPrevA
SetScrollPos
CopyImage
GetForegroundWindow
GetMenuItemID

shell32

ShellExecuteExW
SHGetSpecialFolderLocation
ExtractAssociatedIconExW
SHGetFileInfoW
SHAppBarMessage
ShellAboutW
SHGetDataFromIDListW
SHBrowseForFolderW
Shell_NotifyIconA
SHGetPathFromIDListW
SHBindToParent
ShellExecuteA
SHFileOperationW
SHCreateShellItem
SHGetDesktopFolder
ShellExecuteW
Shell_NotifyIconW
ExtractIconW
ExtractIconExW
SHGetFolderLocation
SHSetLocalizedName
SHPathPrepareForWriteW
SHGetPathFromIDListA
SHGetFolderPathAndSubDirW
SHChangeNotify
SHGetInstanceExplorer
SHGetFolderPathW
SHGetSpecialFolderPathW
DragQueryFileW

uxtheme

GetThemeBackgroundExtent
GetThemeBackgroundContentRect
IsThemeActive
SetWindowTheme
GetThemeFont
IsAppThemed
DrawThemeParentBackground
DrawThemeBackground
CloseThemeData
GetThemeMetric
GetThemeColor
OpenThemeData
GetThemeMargins
GetThemeAppProperties
GetThemePartSize

ntdll

RtlUshortByteSwap
LdrGetDllHandle
NtAllocateVirtualMemory

kernel32

VirtualProtect
VirtualQuery
InterlockedCompareExchange
FileTimeToSystemTime
VirtualAlloc
GetFileSizeEx
CreateEventW
CreateFileMappingA
CompareStringW
GetCurrentProcess
GetShortPathNameW
GetModuleHandleExW
GetProcessHeap
WaitForSingleObjectEx
DeleteCriticalSection
LCMapStringW
DisableThreadLibraryCalls
CreateDirectoryA
GlobalDeleteAtom
GlobalAlloc
lstrlenA
WritePrivateProfileSectionW
lstrcmpiA
SearchPathW
GetLocaleInfoW
LockFileEx
LocalReAlloc
QueryPerformanceCounter
GetFileAttributesW
GetSystemDefaultLCID
QueueUserWorkItem
ActivateActCtx
CreateThread
SetLastError
GetNumberFormatW
LoadResource
Process32NextW
ResetEvent
CloseHandle
GetTempFileNameW
GetDateFormatW
OpenProcess
DeactivateActCtx
WaitForSingleObject
SetFilePointer
CreateFileA
FlushInstructionCache
LocalAlloc
GetThreadContext
VirtualFree
GetCurrentDirectoryW
GetPrivateProfileStringA
GetLongPathNameW
GetModuleHandleExA
GetModuleHandleA
GetFileAttributesA
FindNextFileW
FindFirstFileW
SetProcessWorkingSetSize
IsDBCSLeadByte
GetSystemDirectoryA
WritePrivateProfileStringW
GetVersionExW
lstrlenW
TryEnterCriticalSection
HeapCreate
OpenMutexA
SetEndOfFile
GetSystemDirectoryW
SuspendThread
ExpandEnvironmentStringsA
SetEnvironmentVariableW
GetSystemTimeAsFileTime
SetEvent
CreateSemaphoreW
MoveFileW
IsWow64Process
FileTimeToLocalFileTime
lstrcmpiW
GetPrivateProfileStringW
GlobalSize
QueryDosDeviceW
ResumeThread
GetFullPathNameW
HeapAlloc
HeapFree
SetFileAttributesW
GlobalFlags
LocalFileTimeToFileTime
GetTimeFormatW
GetLastError
RaiseException
GetPrivateProfileSectionW
GetACP
GlobalFree
WriteFile
GetLocalTime
SetThreadContext
GlobalAddAtomA
AddAtomW
ExitProcess
GetModuleHandleW
GetProcAddress
GetSystemDefaultUILanguage
SetThreadPriority
ReleaseMutex
MulDiv
SetErrorMode
GetTempPathW
CreateProcessW
GlobalReAlloc
CreateEventA
FindAtomW
SystemTimeToFileTime
LocalFree
ReadFile
TerminateProcess
CompareFileTime
GetFileSize
CreateTimerQueueTimer
CreateActCtxW
TlsAlloc
InterlockedDecrement
lstrcmpA
OutputDebugStringA
GetCPInfo
GetWindowsDirectoryW
Process32FirstW
LoadLibraryW
ExpandEnvironmentStringsW
GetThreadPriority
QueryPerformanceFrequency
LoadLibraryExW
CreateDirectoryW
HeapDestroy
InitializeCriticalSectionAndSpinCount
GetFileAttributesExW
ReleaseActCtx
ReleaseSemaphore
EnumUILanguagesW
FreeLibraryAndExitThread
GetUserDefaultLCID
UnmapViewOfFile
HeapReAlloc
OpenMutexW
InterlockedIncrement
FreeLibrary
CreateMutexA
SetProcessShutdownParameters
TlsFree
SetThreadExecutionState
SetFilePointerEx
TlsSetValue
FindClose
CreateToolhelp32Snapshot
GetModuleFileNameA
FindResourceW
SetUnhandledExceptionFilter
GetFileInformationByHandle
LeaveCriticalSection
OpenEventW
WideCharToMultiByte
CompareStringA
MultiByteToWideChar
ReplaceFileW
CreateFileW
DeleteFileW
GlobalUnlock
CreateFileMappingW
GetVersionExA
GetEnvironmentVariableW
InterlockedExchange
GetCurrentThread
GetSystemWow64DirectoryW
GetSystemInfo
GetSystemTime
GlobalLock
UnhandledExceptionFilter
MoveFileExW
FindResourceExW
GetAtomNameW
WaitForMultipleObjects
InitializeCriticalSection
SizeofResource
RemoveDirectoryW
CopyFileW
GetModuleFileNameW
UnlockFileEx
DuplicateHandle
DebugBreak
GetUserDefaultUILanguage
LockResource
GetCurrentProcessId
LoadLibraryA
GetLogicalDriveStringsW
TerminateThread
GetExitCodeThread
SetCurrentDirectoryA
CreateMutexW
GetThreadLocale
GetTickCount
FormatMessageW
TlsGetValue
lstrcmpW
SetCurrentDirectoryW
EnterCriticalSection
GetVersion
GetPrivateProfileSectionNamesW
GetCurrentThreadId
LocalSize
GlobalAddAtomW
DeleteAtom
DeleteTimerQueueTimer
SetFileTime
MapViewOfFile
Sleep

advapi32

RegSetValueExA
TraceMessage
OpenThreadToken
GetUserNameW
RegCreateKeyExA
TraceEvent
RegDeleteValueA
CryptAcquireContextW
RegSetValueExW
RegQueryValueExW
GetTraceEnableFlags
ConvertStringSecurityDescriptorToSecurityDescriptorW
UnregisterTraceGuids
GetLengthSid
DuplicateTokenEx
CryptCreateHash
GetTraceLoggerHandle
GetTraceEnableLevel
IsTextUnicode
RegCloseKey
GetTokenInformation
RegDeleteKeyW
RegEnumKeyW
CryptGetHashParam
CryptHashData
RegCreateKeyA
RegCreateKeyExW
ImpersonateSelf
OpenProcessToken
RegOpenKeyExW
ConvertSidToStringSidW
RegEnumValueW
RegOpenKeyExA
RegDeleteKeyA
SetThreadToken
CryptDestroyHash
CryptReleaseContext
RegQueryInfoKeyW
RegDeleteValueW
RegQueryValueW
RegOpenCurrentUser
RegisterTraceGuidsW
RegQueryValueExA
RegEnumKeyExW
SetTokenInformation
CreateProcessAsUserW
RegEnumValueA
ConvertStringSidToSidW
RegOpenKeyW

gdi32

CreateDIBSection
CreatePatternBrush
RestoreDC
SetPaletteEntries
SetRectRgn
DeleteEnhMetaFile
CreateRectRgnIndirect
SetDCPenColor
CloseEnhMetaFile
SelectPalette
CreateCompatibleDC
SetStretchBltMode
LineTo
SaveDC
TextOutW
CreateCompatibleBitmap
CreateBitmap
CreateHalftonePalette
RectVisible
GetClipBox
SetMapMode
CreateDIBPatternBrushPt
GetTextMetricsW
GetTextCharset
SetBkMode
GetTextColor
CreateFontW
GetObjectA
RealizePalette
SetViewportExtEx
PlayEnhMetaFile
CloseMetaFile
GetLayout
SetWindowOrgEx
CreatePalette
EqualRgn
CreateEnhMetaFileA
DeleteObject
GetTextExtentPoint32W
SetWindowExtEx
GetTextExtentExPointI
CreateRectRgn
CreatePolygonRgn
OffsetRgn
GetRegionData
TextOutA
CreateDCA
DeleteDC
OffsetWindowOrgEx
GetBkColor
StretchBlt
GetTextAlign
CreateMetaFileW
BitBlt
PatBlt
SetTextAlign
GetGlyphIndicesW
GetSystemPaletteEntries
GetPixel
CreatePen
SetTextColor
ExtCreateRegion
SelectObject
GetTextExtentPointW
GetStockObject
CreateSolidBrush
GetDIBits
CreateDCW
MoveToEx
Rectangle
SetBkColor
GetRgnBox
GetBrushOrgEx
IntersectClipRect
ExtTextOutW
CreateFontIndirectW
GetObjectW
GetDCOrgEx
CreateFontIndirectA
SetBrushOrgEx
StretchDIBits
GetBkMode
SetViewportOrgEx
CombineRgn
GetDeviceCaps
LPtoDP
GetPaletteEntries
SetLayout
GetTextExtentPoint32A

psapi

GetProcessImageFileNameW

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

130393eba8d0225ca400fe70e7c42d78

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

uxtheme

ntdll

kernel32

advapi32

gdi32

psapi

Sections

.text Size: 183KB - Virtual size: 183KB

.rdata Size: 88KB - Virtual size: 88KB

.rsrc Size: 21KB - Virtual size: 21KB

.data Size: 37KB - Virtual size: 1.4MB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 183KB - Virtual size: 183KB

.rdata
Size: 88KB - Virtual size: 88KB

.rsrc
Size: 21KB - Virtual size: 21KB

.data
Size: 37KB - Virtual size: 1.4MB

.tls
Size: 512B - Virtual size: 4KB