2df166b6c50931d7c77bfbc6a5a52066_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2df166b6c50931d7c77bfbc6a5a52066_JaffaCakes118
Size

849KB
MD5

2df166b6c50931d7c77bfbc6a5a52066
SHA1

3b1783b92560c7bd754dde9b5364d129757dfc5b
SHA256

22ead1d4230ea76d79c16f82bb4df00d96fe1e992f6c950011cd204f7eb4a142
SHA512

60f8d713235a39cff2dc39a9e3b27d8e092ec587b6871e082629778d0d30c964aa93f9775087d21550209a6aa8c5e29acebf103c9d5bd7dfd1b326bdeab21c08
SSDEEP

12288:MdSqSAuCgA+6zFN4rddEzcOhBSHOmEouJHgTf4dAtBGElREWyNdSaeTY3TCk5AlE:MdSqSAuj8MrahLoHT4daYEP2IVTa//n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2df166b6c50931d7c77bfbc6a5a52066_JaffaCakes118

Files

2df166b6c50931d7c77bfbc6a5a52066_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a03f8bfe62c0036fb3116f0ed6f5145e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
GetStartupInfoW
GetCPInfo
EnterCriticalSection
GetCurrentDirectoryW
VirtualFree
GetProcAddress
GlobalAlloc
SetLastError
GlobalFindAtomW
GetPrivateProfileStringW
SearchPathW
GetStringTypeW
LoadResource
UnlockFile
GetLastError
CreateFileW
HeapDestroy
DisconnectNamedPipe
FindResourceA
HeapQueryInformation
GetCurrentThreadId
CreateEventW
GetConsoleTitleA
GetConsoleOutputCP
UnhandledExceptionFilter
GetTempFileNameW
GetVersion
GetUserDefaultUILanguage
GetFileAttributesW
InterlockedExchange
FreeEnvironmentStringsW
DuplicateHandle
ExitProcess
GlobalHandle
HeapFree
GetProfileIntW
GlobalReAlloc
OpenEventW
FlushFileBuffers
LCMapStringW
GetCommandLineW
GetTickCount
CompareStringW
GlobalFlags
LocalFree
GetLocaleInfoW
GetOverlappedResult
PeekNamedPipe
LocalAlloc
CreateDirectoryW
GetFileAttributesExW
lstrcmpA
SetHandleCount
HeapAlloc
GlobalLock
ReadFile
FreeLibrary
GetWindowsDirectoryW
GetOEMCP
lstrcpyW
RaiseException
GetFileSizeEx
WaitForSingleObject
TerminateProcess
FindFirstFileW
FreeResource
SetThreadPriority
lstrcmpiW
lstrcmpW
InterlockedIncrement
InitializeCriticalSection
GetNumberFormatW
SetEnvironmentVariableA
GetTempPathW
GetVolumeInformationW
TlsSetValue
GlobalDeleteAtom
QueryPerformanceCounter
HeapSize
GetFileSize
CopyFileW
LocalReAlloc
SetEndOfFile
GlobalSize
TlsGetValue
Sleep
FileTimeToLocalFileTime
GetSystemInfo
VirtualProtect
IsValidLocale
ConnectNamedPipe
GlobalGetAtomNameW
IsProcessorFeaturePresent
FindResourceW
WaitForMultipleObjects
GetSystemDefaultUILanguage
LeaveCriticalSection
GlobalFree
ExitThread
GlobalUnlock
GetConsoleCP
lstrlenA
GetEnvironmentStringsW
GetFileInformationByHandle
GetModuleFileNameW
WideCharToMultiByte
FindFirstFileExW
TlsAlloc
GetACP
InterlockedCompareExchange
GetCurrentThread
GlobalAddAtomW
GetDriveTypeW
FindResourceExW
DeleteFileW
VirtualAlloc
GetCurrentProcess
SetCurrentDirectoryW
LoadLibraryW
GetCurrentProcessId
FileTimeToSystemTime
GetVersionExW
GetFileType
WritePrivateProfileStringW
CreateThread
FlushInstructionCache
SetEvent
GetPrivateProfileIntW
GetModuleHandleW
DeleteCriticalSection
InterlockedDecrement
GetFileTime
ResumeThread
CloseHandle
GetSystemDirectoryW
TlsFree
InitializeCriticalSectionAndSpinCount
IsValidCodePage
OpenMutexW
MultiByteToWideChar
FindClose
GetTimeZoneInformation
FormatMessageW
WriteFile
CreateMutexW
HeapSetInformation
ConvertDefaultLocale
HeapCreate
GetConsoleMode
SizeofResource
LockResource
MoveFileExW
DeleteAtom
VirtualQuery
SetUnhandledExceptionFilter
GetStdHandle
HeapReAlloc
MulDiv
GetSystemTimeAsFileTime
SetErrorMode
RtlUnwind
LockFile
LoadLibraryExW
GetProcessHeap
GetFullPathNameW
SetStdHandle
lstrlenW
WriteConsoleW
CreateNamedPipeW
SetFilePointer

user32

GetWindowLongW
PeekMessageW
ToUnicodeEx
MapWindowPoints
UnhookWindowsHookEx
IsChild
CreateWindowExW
TrackPopupMenu
GetParent
UnregisterClassA
GetSystemMenu
BeginPaint
ShowOwnedPopups
DestroyCursor
DrawTextExW
GetMenuDefaultItem
UnregisterClassW
GetPropW
CopyAcceleratorTableW
GetSysColorBrush
PostThreadMessageW
ExitWindowsEx
ClientToScreen
GetUpdateRect
SetActiveWindow
SetCursor
SetRectEmpty
FrameRect
GetDoubleClickTime
GetNextDlgTabItem
AdjustWindowRectEx
IsZoomed
InvertRect
DeleteMenu
CreateMenu
GetDlgItem
GetMessagePos
GetKeyboardState
GetIconInfo
TranslateAcceleratorW
RemoveMenu
IsWindowVisible
WinHelpW
EndDialog
GetSystemMetrics
GetClassNameW
SetForegroundWindow
SetScrollPos
GetDC
GetMenuCheckMarkDimensions
RealChildWindowFromPoint
DrawEdge
SetWindowTextA
MapDialogRect
IsCharLowerW
DrawFrameControl
MessageBeep
SetWindowRgn
HideCaret
SetWindowsHookExW
GetDialogBaseUnits
DefWindowProcW
CharUpperBuffW
FillRect
DestroyIcon
IsMenu
GetDlgCtrlID
RegisterHotKey
SetWindowTextW
UnionRect
SetMenuDefaultItem
CallWindowProcW
GetActiveWindow
CharUpperW
GrayStringW
LoadIconW
UnregisterHotKey
RegisterClipboardFormatW
PostQuitMessage
DeferWindowPos
SubtractRect
IsRectEmpty
InsertMenuW
EqualRect
GetFocus
SetRect
SystemParametersInfoW
GetMessageW
SetClipboardData
GetNextDlgGroupItem
ValidateRect
SendDlgItemMessageW
TabbedTextOutW
RegisterWindowMessageW
EndDeferWindowPos
SetLayeredWindowAttributes
ModifyMenuW
DialogBoxParamW
GetMenuItemID
UpdateLayeredWindow
ReleaseDC
RemovePropW
SetPropW
SendMessageTimeoutW
DrawIcon
GetClientRect
ReuseDDElParam
LoadAcceleratorsW
CheckDlgButton
MessageBoxW
MapVirtualKeyW
IsWindow
GetAsyncKeyState
IsDialogMessageW
EndPaint
GetForegroundWindow
GetMenuItemInfoW
SetFocus
GetMenuState
GetMenuItemCount
GetDlgItemTextW
GetKeyState
GetScrollPos
MonitorFromWindow
DrawIconEx
SetMenu
GetSubMenu
TranslateMDISysAccel
NotifyWinEvent
CopyIcon
EnableScrollBar
DestroyMenu
GetWindowRgn
SetParent
ShowScrollBar
BeginDeferWindowPos
EnableWindow
IntersectRect
SendMessageW
ScrollWindow
SetWindowLongW
UpdateWindow
AllowSetForegroundWindow
DestroyAcceleratorTable
DrawTextW
GetClassInfoW
SetCursorPos
DrawStateW
GetMessageTime
ShowWindow
SetWindowPlacement
WindowFromPoint
CreatePopupMenu
CheckMenuItem
EnumWindows
GetClassInfoExW
SetWindowPos
SetDlgItemTextW
SetScrollRange
MapVirtualKeyExW
OpenClipboard
CreateDialogIndirectParamW
EnableMenuItem
LoadBitmapW
CallNextHookEx
CreateAcceleratorTableW
DrawFocusRect
SetClassLongW
GetMonitorInfoW
GetWindowTextW
GetMenu
GetCursorPos
DispatchMessageW
LoadCursorW
GetWindowRect
InvalidateRect
RegisterClassW
GetCapture
IsIconic
PostMessageW
GetKeyboardLayout
ScreenToClient
EnumDisplayMonitors
InsertMenuItemW
IsWindowEnabled
GetSysColor
DrawMenuBar
LoadMenuW
InflateRect
SetScrollInfo
GetWindow
MonitorFromPoint
DefMDIChildProcW
DialogBoxIndirectParamW
SetTimer
MoveWindow
OffsetRect
ReleaseCapture
GetWindowPlacement
GetKeyNameTextW
DestroyWindow
SendDlgItemMessageA
LoadImageW
GetWindowDC
GetLastActivePopup
LockWindowUpdate
GetClassLongW
CopyRect
GetScrollInfo
GetTopWindow
WaitMessage
GetWindowTextLengthW
RedrawWindow
KillTimer
AppendMenuW
CopyImage
PtInRect
SetCapture
GetDesktopWindow
CloseClipboard
GetMenuStringW
DefFrameProcW
EmptyClipboard
GetWindowThreadProcessId
TranslateMessage
BringWindowToTop
UnpackDDElParam
IsClipboardFormatAvailable
SetMenuItemBitmaps
GetScrollRange

gdi32

GetRgnBox
GetTextExtentPoint32W
GetWindowExtEx
GetPixel
GetDeviceCaps
CreatePen
Polyline
SetRectRgn
GetBkColor
ExtTextOutW
PtVisible
OffsetViewportOrgEx
GetViewportOrgEx
CreateRectRgnIndirect
GetPaletteEntries
GetViewportExtEx
CreateCompatibleBitmap
EnumFontFamiliesW
GetTextFaceW
RoundRect
CreateDIBitmap
TextOutW
CreateHatchBrush
ScaleWindowExtEx
CreatePalette
IntersectClipRect
CreateRoundRectRgn
DPtoLP
SaveDC
StretchBlt
CreateFontW
CombineRgn
CreateFontIndirectW
LineTo
Escape
RectVisible
GetWindowOrgEx
LPtoDP
SetTextAlign
Polygon
Ellipse
GetBkMode
DeleteObject
GetTextCharsetInfo
SetDIBColorTable
RestoreDC
GetLayout
SetPixelV
SetWindowExtEx
SetBkColor
GetBoundsRect
StretchDIBits
GetStockObject
SetPixel
ExcludeClipRect
Rectangle
SetMapMode
SetROP2
ScaleViewportExtEx
SetWindowOrgEx
ExtFloodFill
SetBkMode
SelectPalette
EnumFontFamiliesExW
BitBlt
GetObjectType
CreateDCW
CreateBitmap
FillRgn
RealizePalette
CreatePatternBrush
PatBlt
SetPaletteEntries
SetViewportOrgEx
PtInRegion
CopyMetaFileW
SelectObject
SelectClipRgn
SetViewportExtEx
CreateSolidBrush
GetCharWidthW
SetLayout
DeleteDC
CreateCompatibleDC
OffsetWindowOrgEx
CreateRectRgn
CreateDIBSection
FrameRgn
CreateEllipticRgn
SetPolyFillMode
GetObjectW
MoveToEx
GetTextMetricsW
GetSystemPaletteEntries
CreatePolygonRgn
ExtSelectClipRgn
GetTextColor
GetBitmapBits
SetDIBits
GetClipBox
OffsetRgn
GetNearestPaletteIndex
SetTextColor

comdlg32

GetOpenFileNameW
GetFileTitleW
GetSaveFileNameW

advapi32

RegSetValueExW
RegQueryValueExW
RegCloseKey
GetSidLengthRequired
InitializeSecurityDescriptor
RegEnumValueW
LookupPrivilegeValueW
RegEnumKeyExW
CheckTokenMembership
RegOpenKeyExW
FreeSid
GetTokenInformation
RegCreateKeyExW
SetSecurityDescriptorDacl
AdjustTokenPrivileges
RegQueryValueW
OpenProcessToken
SetSecurityDescriptorSacl
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
AllocateAndInitializeSid

shell32

SHGetDiskFreeSpaceExW
DragQueryFileW
ShellExecuteExW
SHBrowseForFolderW
Shell_NotifyIconW
DuplicateIcon
SHChangeNotify
SHAppBarMessage
ShellExecuteW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFolderLocation
SHGetPathFromIDListW
DragFinish
SHGetSpecialFolderPathW
SHGetFolderPathW
SHGetFileInfoW

ole32

OleDuplicateData
CoCreateGuid
OleGetClipboard
CoTaskMemFree
ReleaseStgMedium
OleUninitialize
CoFreeUnusedLibraries
CoUninitialize
CLSIDFromString
CoRevokeClassObject
OleIsCurrentClipboard
OleInitialize
DoDragDrop
OleTranslateAccelerator
OleDestroyMenuDescriptor
CoLockObjectExternal
CoRegisterMessageFilter
RevokeDragDrop
CoInitializeEx
CoInitialize
CoCreateInstance
CoTaskMemAlloc
OleFlushClipboard
OleCreateMenuDescriptor
OleLockRunning
IsAccelerator
RegisterDragDrop
CreateStreamOnHGlobal

oleaut32

VariantClear
SysAllocString
SysAllocStringLen
VarBstrFromDate
VarBstrCmp
VarBstrCat
SysStringByteLen
VariantInit
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringByteLen
SysFreeString
SysStringLen
VariantChangeType

comctl32

_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathRemoveFileSpecW
PathIsUNCW

winmm

PlaySoundW

msimg32

AlphaBlend
TransparentBlt

mpr

WNetAddConnection3W

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

oledlg

OleUIBusyW

gdiplus

GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipCreateBitmapFromStream
GdipAlloc
GdiplusStartup
GdipDisposeImage
GdipSetInterpolationMode
GdipCreateFromHDC
GdipDrawImageI
GdipGetImageHeight
GdipGetImagePaletteSize
GdipDrawImageRectI
GdipGetImagePixelFormat
GdiplusShutdown
GdipDeleteGraphics
GdipBitmapLockBits
GdipFree
GdipCreateBitmapFromHBITMAP
GdipGetImageWidth
GdipBitmapUnlockBits
GdipGetImagePalette
GdipCloneImage

msvcrt

exit

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

esent

JetMove

Sections

.text
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gg
Size: - Virtual size: 5.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ss
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dd
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ff
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hh
Size: 270KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a03f8bfe62c0036fb3116f0ed6f5145e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

msimg32

mpr

imm32

oledlg

gdiplus

msvcrt

oleacc

esent

Sections

.text Size: 231KB - Virtual size: 230KB

.gg Size: - Virtual size: 5.2MB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 512B - Virtual size: 832B

.ss Size: 139KB - Virtual size: 138KB

.dd Size: 1KB - Virtual size: 1KB

.ff Size: 139KB - Virtual size: 138KB

.hh Size: 270KB - Virtual size: 270KB

.tls Size: 512B - Virtual size: 57B

.rsrc Size: 33KB - Virtual size: 32KB

.reloc Size: 16KB - Virtual size: 16KB

.text
Size: 231KB - Virtual size: 230KB

.gg
Size: - Virtual size: 5.2MB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 512B - Virtual size: 832B

.ss
Size: 139KB - Virtual size: 138KB

.dd
Size: 1KB - Virtual size: 1KB

.ff
Size: 139KB - Virtual size: 138KB

.hh
Size: 270KB - Virtual size: 270KB

.tls
Size: 512B - Virtual size: 57B

.rsrc
Size: 33KB - Virtual size: 32KB

.reloc
Size: 16KB - Virtual size: 16KB