27c98d3a7c016505d632c45ba93046c2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

27c98d3a7c016505d632c45ba93046c2_JaffaCakes118
Size

620KB
MD5

27c98d3a7c016505d632c45ba93046c2
SHA1

6e759e305ffaa5c122caf1ef7786ccc62d3ec6f9
SHA256

16881dc03325e7b6345a2a2c0d7e2f56601499dc467d7a39e348d2e6997887e2
SHA512

6f6728ac772bd7329fbd44daf0f4f6d66eaed7cd9be43a289c150cdd44a8462a166f237cd8c9b38f2fa9aa7248b38c79e655f371d05736082954eb7a65fd9a5d
SSDEEP

6144:xz5cRc/OOMUr7Mc52kWwy8Ynz3sHqxENHgbgUoyOTP1voe4FhQOu+YUBUJpD16:8RcG9Usc4VwWEAElx5voe4LJrBoi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27c98d3a7c016505d632c45ba93046c2_JaffaCakes118

Files

27c98d3a7c016505d632c45ba93046c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bfef65b069d6eab3693cf12ee826d04c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
GlobalFree
GetVersionExW
SizeofResource
LockResource
LoadResource
SetCurrentDirectoryW
CreateMutexW
FindResourceW
WritePrivateProfileSectionW
GetPrivateProfileStringW
WritePrivateProfileStringA
WritePrivateProfileStringW
WaitForSingleObject
ReleaseMutex
CreateEventW
ResetEvent
GetUserDefaultUILanguage
CompareStringW
CompareStringA
SetEndOfFile
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
SetFilePointer
CreateFileA
FlushFileBuffers
SetStdHandle
InitializeCriticalSection
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
DeleteFileW
FreeEnvironmentStringsA
GetConsoleMode
EnumResourceNamesW
ReadFile
GlobalReAlloc
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
GetStdHandle
WriteFile
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
HeapSize
Sleep
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoW
GetProcessHeap
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
LoadLibraryA
InterlockedExchange
LoadLibraryW
FreeLibrary
GetTempPathW
SetEnvironmentVariableA
CopyFileW
OpenProcess
GetProcAddress
GetLongPathNameW
ExpandEnvironmentStringsW
FindFirstFileW
FindNextFileW
GlobalAlloc
GlobalLock
GlobalUnlock
InterlockedIncrement
GetModuleFileNameA
MulDiv
TerminateThread
GetFileAttributesW
GetStartupInfoA
LoadLibraryExW
GetTempFileNameW
GetSystemTime
GetLastError
LocalFree
GetConsoleCP
LocalAlloc
FindClose
GetModuleFileNameW
CloseHandle
GetTickCount
GetEnvironmentStrings
CreateThread

user32

TranslateAcceleratorW
TranslateMessage
DispatchMessageW
IsZoomed
GetWindowPlacement
IsIconic
SendMessageW
SetPropW
GetPropW
ShowWindow
SetForegroundWindow
GetForegroundWindow
ShowOwnedPopups
PostMessageW
SetTimer
MoveWindow
MapWindowPoints
GetWindowRect
PtInRect
GetWindowLongW
GetAncestor
EnumChildWindows
UpdateLayeredWindow
SetActiveWindow
SetWindowPos
KillTimer
GetCursorPos
CreatePopupMenu
EnableWindow
GetDlgItem
SetRect
GetClassNameW
GetClientRect
GetWindowTextW
SetWindowTextW
SetWindowPlacement
WindowFromPoint
GetAsyncKeyState
DialogBoxParamW
RedrawWindow
BringWindowToTop
GetTopWindow
MessageBoxW
RegisterHotKey
UnregisterHotKey
EndDialog
DefWindowProcW
IsWindow
GetWindowThreadProcessId
TrackPopupMenu
CheckMenuItem
EnableMenuItem
AppendMenuW
ReleaseCapture
SetCapture
SetWindowLongW
UnhookWindowsHookEx
DestroyWindow
RegisterShellHookWindow
SetWindowsHookExW
PostQuitMessage
RegisterClipboardFormatW
CreateWindowExW
RegisterWindowMessageW
GetDC
ReleaseDC
GetWindowRgn
GetDesktopWindow
GetIconInfo
LookupIconIdFromDirectoryEx
DestroyIcon
CreateIconFromResourceEx
RemovePropW
SystemParametersInfoW
EnumWindows
GetWindow
GetParent
SendDlgItemMessageW
IsWindowVisible
DestroyMenu
GetMessageW
LoadAcceleratorsW
LoadImageW
GetSystemMetrics
EnumDisplayMonitors
FindWindowW
LoadIconW
LoadCursorW
RegisterClassExW

gdi32

CreateRectRgn
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateDIBSection
DeleteDC
SelectObject
DeleteObject
GetObjectW

comdlg32

GetSaveFileNameW
ChooseColorW
ChooseFontW
GetOpenFileNameW
CommDlgExtendedError

advapi32

RegOpenKeyExW
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegDeleteValueW
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW

shell32

ord162
ShellExecuteW
SHFileOperationW
DragFinish
ShellExecuteExW
SHBrowseForFolderW
ord4
SHGetPathFromIDListW
ord2
SHGetSpecialFolderLocation
SHBindToParent
ord155
SHGetDataFromIDListW
SHGetMalloc
SHGetSpecialFolderPathW
ord25
SHGetFileInfoW

ole32

OleInitialize
OleUninitialize
CreateStreamOnHGlobal
RegisterDragDrop
CoLockObjectExternal
ReleaseStgMedium
CoCreateInstance

comctl32

ImageList_Create
ImageList_Add

gdiplus

GdipDrawImageI
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipImageRotateFlip
GdipMeasureString
GdipFillPath
GdipDrawPath
GdipSetSmoothingMode
GdipGetInterpolationMode
GdipTransformPath
GdipAddPathString
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipCreateSolidFill
GdipTranslateMatrix
GdipSetMatrixElements
GdipCreateMatrix
GdipBitmapGetPixel
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipDeletePath
GdipCreatePath
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeletePen
GdipCreatePen1
GdipDeleteMatrix
GdipCloneBitmapAreaI
GdipSetImageAttributesColorMatrix
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePixelFormat
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipCloneImage
GdipCloneBrush
GdipDrawImageRectRectI
GdipDrawImageRectI
GdipFillRectangleI
GdipSetInterpolationMode
GdipSetCompositingQuality
GdipSetCompositingMode
GdipReleaseDC
GdipGetDC
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipCreateTextureIAI
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipSetTextureWrapMode
GdipScaleTextureTransform
GdipTranslateTextureTransform
GdipDeleteBrush
GdipAlloc
GdipFree
GdipCreateBitmapFromHICON

shlwapi

PathRemoveFileSpecW
PathRemoveFileSpecA
PathIsDirectoryW
PathSearchAndQualifyW
PathFileExistsW
StrRetToBufW

psapi

EnumProcesses
GetModuleBaseNameW
GetModuleFileNameExW

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW

Exports

Exports

DockletBrowseForImage
DockletDefaultConfigDialog
DockletDoAttentionAnimation
DockletGetLabel
DockletGetRect
DockletGetRelativeFolder
DockletGetRootFolder
DockletIsVisible
DockletLoadGDIPlusImage
DockletLockMouseEffect
DockletQueryDockAlign
DockletQueryDockEdge
DockletSetDockAlign
DockletSetDockEdge
DockletSetImage
DockletSetImageFile
DockletSetImageOverlay
DockletSetLabel
WritePrivateProfileInt

Sections

.text
Size: 400KB - Virtual size: 397KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bfef65b069d6eab3693cf12ee826d04c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

comctl32

gdiplus

shlwapi

psapi

setupapi

Exports

Exports

Sections

.text Size: 400KB - Virtual size: 397KB

.rdata Size: 56KB - Virtual size: 53KB

.data Size: 12KB - Virtual size: 32KB

.rsrc Size: 148KB - Virtual size: 148KB

.text
Size: 400KB - Virtual size: 397KB

.rdata
Size: 56KB - Virtual size: 53KB

.data
Size: 12KB - Virtual size: 32KB

.rsrc
Size: 148KB - Virtual size: 148KB