1714ce037547e23841516e993e3e994d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1714ce037547e23841516e993e3e994d_JaffaCakes118
Size

370KB
MD5

1714ce037547e23841516e993e3e994d
SHA1

e16c80933397f23965a3e4fb8049714c24dee154
SHA256

ec3eac2168a2bf8502151627d62d53ca72a78e92d4f8507f6815c887df7cbd9b
SHA512

301308af24091dd15574928b2ac69c5f03a1c3ace48e8536c4bad9acc45de8010df2f99a6954bd48bc1596151343c7188add788bd724e7dfd7569a5677acd5b4
SSDEEP

6144:/bnSs+OjSAHXcKuLmsbUWsBGk6EhEDCQZT/tbsIfRh6u/B1e:/bSsXSis/MrEDPtoqRhj1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1714ce037547e23841516e993e3e994d_JaffaCakes118

Files

1714ce037547e23841516e993e3e994d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

40657cc25c1db288efec2231cab6ddfa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

WriteClassStm
StringFromGUID2
StringFromCLSID
RevokeDragDrop
ReleaseStgMedium
RegisterDragDrop
ReadClassStm
PropVariantCopy
PropVariantClear
OleUninitialize
OleSetClipboard
OleSaveToStream
OleRun
OleRegGetUserType
OleRegGetMiscStatus
OleRegEnumVerbs
OleLoadFromStream
OleInitialize
HWND_UserUnmarshal
HWND_UserSize
HWND_UserMarshal
HWND_UserFree
GetHGlobalFromStream
DoDragDrop
CreateStreamOnHGlobal
CreateOleAdviseHolder
CreateDataAdviseHolder
CoWaitForMultipleHandles
CoUnmarshalInterface
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoSetProxyBlanket
CoRevokeClassObject
CoResumeClassObjects
CoReleaseServerProcess
CoReleaseMarshalData
CoRegisterClassObject
CoMarshalInterface
CoMarshalInterThreadInterfaceInStream
CoLockObjectExternal
CoInitializeEx
CoInitialize
CoGetMalloc
CoGetInterfaceAndReleaseStream
CoGetClassObject
CoFreeUnusedLibraries
CoCreateInstance
CoCreateGuid
CoAllowSetForegroundWindow
CoAddRefServerProcess
CLSIDFromString

odbc32

ord160

kernel32

FreeResource
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDriveTypeW
GetEnvironmentVariableW
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesW
GetFileSize
GetFileTime
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProfileIntA
GetShortPathNameW
GetStdHandle
GetStringTypeExA
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
FreeLibraryAndExitThread
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryA
GetTempFileNameA
GetTempFileNameW
GetTempPathA
GetTempPathW
GetTickCount
GetTimeFormatW
GetUserDefaultLCID
GetUserDefaultUILanguage
GetVersion
GetVersionExA
GlobalAlloc
GlobalFree
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByte
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockResource
MoveFileExW
MoveFileW
MulDiv
MultiByteToWideChar
OpenFile
OpenMutexA
OpenThread
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
RemoveDirectoryA
RemoveDirectoryW
ResumeThread
RtlMoveMemory
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetFileTime
SetHandleInformation
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrlenA
lstrlenW
FreeLibrary
FormatMessageW
FormatMessageA
FlushInstructionCache
FlushFileBuffers
FindResourceA
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
ExitProcess
EnterCriticalSection
DuplicateHandle
DeviceIoControl
DeleteTimerQueueTimer
DeleteFileW
DeleteFileA
DeleteCriticalSection
CreateTimerQueueTimer
CreateThread
CreateProcessW
CreateMutexW
CreateMutexA
CreateFileW
CreateEventW
CreateEventA
CreateDirectoryW
CopyFileW
CompareStringW
CompareStringA
CompareFileTime
CloseHandle
GetSystemTime

shlwapi

StrDupW
StrFormatByteSizeW
StrRChrIW
StrRChrW
StrStrA
StrStrIA
StrStrIW
StrStrW
StrToIntA
StrToIntExA
StrToIntExW
StrToIntW
StrTrimA
UrlApplySchemeW
UrlCreateFromPathW
UrlUnescapeA
UrlUnescapeW
StrCmpNW
StrCmpNIW
SHCreateShellPalette
SHCopyKeyA
SHAutoComplete
PathUnquoteSpacesW
PathUnquoteSpacesA
PathUnExpandEnvStringsW
StrCmpNIA
PathRenameExtensionW
PathRemoveFileSpecW
PathRemoveFileSpecA
StrCmpIW
PathRemoveExtensionW
PathRemoveBackslashW
PathRemoveArgsA
PathRelativePathToW
StrDupA
PathIsRootW
PathIsRelativeW
PathIsFileSpecW
PathIsDirectoryW
PathIsDirectoryEmptyW
PathIsContentTypeW
PathIsContentTypeA
PathGetArgsA
PathFindFileNameW
PathFindFileNameA
PathFindExtensionW
PathFileExistsW
PathFileExistsA
PathCompactPathExW
PathCombineW
PathCanonicalizeW
PathAppendW
PathAppendA
PathAddExtensionW
PathAddBackslashW
HashData
StrChrA
StrCSpnW
StrCSpnA
SHStrDupW
SHSetValueW
SHSetValueA
SHRegSetUSValueA
SHRegGetBoolUSValueA
SHQueryValueExW
SHQueryValueExA
SHQueryInfoKeyW
SHGetValueW
SHGetValueA
SHEnumKeyExW
PathIsURLW
StrCmpW
SHDeleteValueW
SHDeleteValueA
SHDeleteKeyW
SHDeleteKeyA
PathStripPathW
ord16

olepro32

ord250

imm32

ImmEnumRegisterWordW
ImmDestroySoftKeyboard
ImmDestroyContext
ImmGenerateMessage
ImmCreateIMCC

gdi32

CreateDIBSection
TextOutW
StretchBlt
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetTextColor
SetMapMode
SetBkMode
SetBkColor
SelectObject
SaveDC
RestoreDC
Rectangle
Polyline
Polygon
MoveToEx
LineTo
LPtoDP
GetTextMetricsA
GetTextExtentPointW
BitBlt
CloseMetaFile
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontA
CreateFontIndirectA
CreateFontIndirectW
CreateMetaFileA
CreatePen
CreateRectRgnIndirect
CreateSolidBrush
DeleteDC
DeleteMetaFile
DeleteObject
Ellipse
EnumFontFamiliesExA
ExtTextOutA
ExtTextOutW
GetClipBox
GetDeviceCaps
GetObjectA
GetObjectW
GetTextExtentPoint32W
GetTextExtentPointA
PatBlt

rpcrt4

CStdStubBuffer_AddRef
NdrOleFree
NdrOleAllocate
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrClientCall2
CStdStubBuffer_Connect
IUnknown_Release_Proxy
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_Invoke
CStdStubBuffer_DebugServerRelease
NdrCStdStubBuffer_Release
CStdStubBuffer_Disconnect

advapi32

RegEnumKeyA
CloseServiceHandle
CreateProcessWithLogonW
UnregisterTraceGuids
TraceEvent
RevertToSelf
RegisterTraceGuidsA
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegQueryValueA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyExA
RegOpenKeyA
RegEnumValueW
RegEnumKeyExW
RegEnumKeyExA
AllocateAndInitializeSid
RegDeleteValueW
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW
RegCreateKeyExA
RegCloseKey
OpenThreadToken
OpenSCManagerA
OpenProcessToken
ImpersonateLoggedOnUser
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
GetTokenInformation
FreeSid
EqualSid
EnumServicesStatusA

shdocvw

DllGetClassObject

user32

EnumChildWindows
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageA
SendMessageCallbackW
SetActiveWindow
SetCapture
SetClipboardData
SetCursor
SetDlgItemInt
SetDlgItemTextA
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenu
SetMenuDefaultItem
SetMenuItemInfoA
SetMenuItemInfoW
SetParent
SetPropA
SetPropW
SetRect
SetRectEmpty
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextA
SetWindowTextW
SetWindowsHookExA
ShowWindow
SystemParametersInfoA
TrackMouseEvent
TrackPopupMenuEx
TranslateAcceleratorA
TranslateAcceleratorW
UnhookWindowsHookEx
UnionRect
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
WindowFromPoint
RemovePropW
RemovePropA
ReleaseDC
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassW
RegisterClassExW
RegisterClassExA
ActivateKeyboardLayout
AdjustWindowRectEx
AppendMenuA
CallNextHookEx
CallWindowProcA
CallWindowProcW
CharLowerA
CharLowerW
CharNextA
CharNextExA
CharNextW
CharPrevA
CharPrevW
CharUpperA
CharUpperW
CheckMenuItem
CheckMenuRadioItem
CheckRadioButton
ClientToScreen
CloseClipboard
CreateDialogParamW
CreatePopupMenu
CreateWindowExA
CreateWindowExW
DefWindowProcW
DeferWindowPos
DeleteMenu
DestroyIcon
DestroyMenu
DialogBoxIndirectParamA
DialogBoxParamA
DialogBoxParamW
DispatchMessageA
DispatchMessageW
DrawFocusRect
DrawFrameControl
DrawIconEx
DrawTextA
DrawTextExW
EmptyClipboard
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndDialog
EndPaint
ScreenToClient
EnumThreadWindows
EnumWindows
EqualRect
FillRect
FindWindowExA
FindWindowExW
GetActiveWindow
GetCapture
GetClassInfoExA
GetClassInfoExW
GetClassInfoW
GetClassNameA
GetClassNameW
GetDC
GetDlgItem
GetDlgItemInt
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetKeyState
GetKeyboardLayoutList
GetKeyboardLayoutNameA
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
GetMenuState
GetMenuStringW
GetMessagePos
GetMonitorInfoA
GetNextDlgGroupItem
GetNextDlgTabItem
GetParent
GetPropA
GetPropW
GetScrollBarInfo
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMetrics
GetWindow
GetWindowDC
GetWindowInfo
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
GetWindowTextLengthW
GetWindowTextW
InflateRect
InsertMenuItemA
InsertMenuItemW
InsertMenuW
IntersectRect
InvalidateRect
IsCharAlphaNumericW
IsDialogMessageA
IsDialogMessageW
IsDlgButtonChecked
IsIconic
IsMenu
IsWindow
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
KillTimer
LoadAcceleratorsA
LoadAcceleratorsW
LoadCursorA
LoadIconA
LoadImageA
LoadImageW
LoadMenuA
LoadMenuW
LoadStringW
MapWindowPoints
MessageBoxW
ModifyMenuW
MonitorFromPoint
OffsetRect
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageA
PostMessageW
PostThreadMessageA
PtInRect
RedrawWindow
RegisterClassA

ws2_32

ntohs
WSAStringToAddressA
WSAEnumNameSpaceProvidersA
WSADuplicateSocketA
WSACloseEvent
WSACancelAsyncRequest
WSAAsyncGetProtoByNumber
WSAAsyncGetProtoByName

Sections

.text
Size: 64KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 244KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40657cc25c1db288efec2231cab6ddfa

Headers

File Characteristics

Imports

ole32

odbc32

kernel32

shlwapi

olepro32

imm32

gdi32

rpcrt4

advapi32

shdocvw

user32

ws2_32

Sections

.text Size: 64KB - Virtual size: 68KB

.rdata Size: 244KB - Virtual size: 248KB

.data Size: 18KB - Virtual size: 19KB

.idata Size: 15KB - Virtual size: 15KB

.rsrc Size: 27KB - Virtual size: 27KB

.text
Size: 64KB - Virtual size: 68KB

.rdata
Size: 244KB - Virtual size: 248KB

.data
Size: 18KB - Virtual size: 19KB

.idata
Size: 15KB - Virtual size: 15KB

.rsrc
Size: 27KB - Virtual size: 27KB