21089c8256a9b456d469de5e741711e4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

21089c8256a9b456d469de5e741711e4_JaffaCakes118
Size

254KB
MD5

21089c8256a9b456d469de5e741711e4
SHA1

9d0cd16a82b83a689aca64f4cc27d0e72ff98b81
SHA256

7b901e7d4dc09753ce6b14b20887eceee045acee0625dea458dfafbea105dae6
SHA512

8c5601f074f41726927d2bb185a309392db3ba6326d997ad3246240671a31cdd33911a601b0aa83270dcb2571b509dd222de6a6555cde0b8b16aff7354cb1ed1
SSDEEP

6144:sS9BWPE8aYrQl9LD3fWXWSRyfmX0aP2I8wYRjgzy0:hmE8aYrGPMWSR+mX0aPl8te

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21089c8256a9b456d469de5e741711e4_JaffaCakes118

Files

21089c8256a9b456d469de5e741711e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11c8edef0b26ad46b6e9f0ed2b8d217d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
VirtualAlloc
IsValidCodePage
GetOEMCP
GetACP
IsDebuggerPresent
CompareStringA
WideCharToMultiByte
lstrcmpW
GetModuleHandleW
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
SetLastError
UnhandledExceptionFilter
SetErrorMode
lstrlenW
Beep
GetFileSize
WriteFile
ExpandEnvironmentStringsA
GetComputerNameW
OpenProcess
CreateProcessW
GetWindowsDirectoryW
LoadLibraryExW
GetProcessHeap
HeapAlloc
CreateFileW
CloseHandle
HeapFree
FreeLibrary
FindResourceW
LoadResource
LockResource
GetSystemTimeAsFileTime
VirtualFree
GetFileType
SetHandleCount
GetCommandLineW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
HeapSize
HeapReAlloc
RaiseException
RtlUnwind
lstrlenA
SetEndOfFile
FlushFileBuffers
SetFilePointer
ReadFile
FreeResource
GlobalFindAtomW
GlobalFlags
GetModuleHandleA
WritePrivateProfileStringW
SizeofResource
CompareStringW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalAddAtomW
CreateEventW
GlobalDeleteAtom
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA

user32

GetWindowTextLengthW
GetForegroundWindow
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
SetFocus
SetScrollInfo
DefWindowProcW
WinHelpW
CopyRect
GetMenu
GetSubMenu
GetMenuItemCount
SetWindowLongW
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
ReleaseCapture
GetCapture
WindowFromPoint
SetCapture
GetDesktopWindow
GetWindow
GetDlgCtrlID
SendDlgItemMessageA
SendDlgItemMessageW
LoadIconW
RegisterWindowMessageW
IsWindow
RemovePropW
GetPropW
SetPropW
GetClassLongW
GetScrollInfo
GetMenuItemID
AppendMenuW
DrawEdge
FrameRect
CopyIcon
GetDoubleClickTime
ClipCursor
InvertRect
GetIconInfo
DrawStateW
DrawIconEx
CheckDlgButton
CallWindowProcW
GetMenuState
UnhookWindowsHookEx
PostQuitMessage
PostMessageW
CheckMenuItem
IsDlgButtonChecked
IsDialogMessageW
MoveWindow
ShowWindow
DestroyIcon
InflateRect
DestroyMenu
SystemParametersInfoW
SetRectEmpty
CreatePopupMenu
InvalidateRect
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
IsRectEmpty
GetSystemMenu
SetRect
SetTimer
KillTimer
MessageBeep
EnableMenuItem
ModifyMenuW
SendMessageW
GetParent
GetFocus
LoadBitmapW
GetWindowRect
GetClassNameW
PtInRect
GetWindowTextW
SetWindowTextW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
UnregisterClassW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetWindowThreadProcessId
LoadStringW
LoadImageW
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions

gdi32

CreateBitmap
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetTextColor
SetMapMode
GetClipBox
LineTo
MoveToEx
DeleteObject
GetObjectW
BitBlt
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreatePatternBrush
CreateCompatibleDC
GetStockObject
SelectPalette
CreatePen
CreateSolidBrush
CreateFontIndirectW
GetTextExtentPoint32W
PatBlt
CreateCompatibleBitmap
GetTextMetricsW
GetBkColor
SetViewportOrgEx
GetDeviceCaps
RoundRect
SetPixel
RealizePalette
GetDIBColorTable
CreatePalette
CreateHalftonePalette
GetCurrentObject

advapi32

GetUserNameW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExA
LookupAccountSidW
GetTokenInformation
CreateProcessAsUserW
SetSecurityInfo
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityDescriptorDacl
GetSecurityInfo
RegQueryValueExA

shell32

ShellExecuteW

shlwapi

PathFindFileNameW
PathFindExtensionW

oleaut32

VariantInit
VariantChangeType
VariantClear

winmm

sndPlaySoundW

comctl32

_TrackMouseEvent

query

FsCiShutdown
LoadIFilter
CIBuildQueryNode
CITextToSelectTree
InitializeCIISAPIPerformanceData

serwvdrv

wodMessage

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.NGL
Size: 512B - Virtual size: 474B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yry
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.V
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RgX
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.c
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.s
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 212KB - Virtual size: 370KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.M
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11c8edef0b26ad46b6e9f0ed2b8d217d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

oleaut32

winmm

comctl32

query

serwvdrv

Sections

.text Size: 19KB - Virtual size: 18KB

.NGL Size: 512B - Virtual size: 474B

.yry Size: 2KB - Virtual size: 2KB

.V Size: 1024B - Virtual size: 1KB

.RgX Size: 1KB - Virtual size: 1KB

.rdata Size: 8KB - Virtual size: 8KB

.c Size: 1KB - Virtual size: 1KB

.s Size: 1024B - Virtual size: 1KB

.data Size: 212KB - Virtual size: 370KB

.M Size: 2KB - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 19KB - Virtual size: 18KB

.NGL
Size: 512B - Virtual size: 474B

.yry
Size: 2KB - Virtual size: 2KB

.V
Size: 1024B - Virtual size: 1KB

.RgX
Size: 1KB - Virtual size: 1KB

.rdata
Size: 8KB - Virtual size: 8KB

.c
Size: 1KB - Virtual size: 1KB

.s
Size: 1024B - Virtual size: 1KB

.data
Size: 212KB - Virtual size: 370KB

.M
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 3KB