2c988586954aebb852e198a0284889c4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2c988586954aebb852e198a0284889c4_JaffaCakes118
Size

847KB
MD5

2c988586954aebb852e198a0284889c4
SHA1

03f567de46a6ee3e3bd817a6560a8a31fa2494ff
SHA256

009b644df206d6f04e707cb2aeab9e51dd9a7211d16dd2bf40c0572ffb07d390
SHA512

b51e306c3186fb90afce57fd12411864ff06f067b3b08e34ecbca3d896a4fb63c910d4e080e9c7f55611789e961175d9c9a2718ce2cc46c27de444199cbcbe39
SSDEEP

12288:jsNKFgukTwCWzyYtpMELMhcBv8MLxNmb6mqW11t3WNJmNclH5VN/no0esZGEtZwV:wMFgoC8yu2qBB0ONHmZvGN7dN1xZwof

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c988586954aebb852e198a0284889c4_JaffaCakes118

Files

2c988586954aebb852e198a0284889c4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cec52be0659354e08372e5186e089929

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
IsDebuggerPresent
CreateThread
GlobalFindAtomW
GetCPInfo
RaiseException
CopyFileW
InterlockedDecrement
WideCharToMultiByte
lstrcmpiW
FlushFileBuffers
LocalAlloc
IsValidCodePage
CloseHandle
GlobalDeleteAtom
CreateEventW
VirtualProtectEx
LocalFree
FreeEnvironmentStringsW
FormatMessageW
Sleep
LocalReAlloc
WaitForMultipleObjects
SetEnvironmentVariableA
CompareStringW
GlobalUnlock
LoadLibraryExW
GetStartupInfoW
GetOEMCP
CreateMutexW
SetUnhandledExceptionFilter
GetTempPathW
FindResourceExW
GetVersionExW
SetHandleCount
QueryPerformanceCounter
GetFileAttributesExW
FileTimeToLocalFileTime
TerminateThread
SetFilePointer
CreateFileW
HeapDestroy
GetUserDefaultUILanguage
SetLastError
EnterCriticalSection
HeapCreate
LoadLibraryW
SetStdHandle
GlobalAddAtomW
TlsGetValue
HeapFree
GetTimeZoneInformation
GetStdHandle
GetLocaleInfoW
lstrlenA
GetCurrentThreadId
IsProcessorFeaturePresent
MultiByteToWideChar
lstrcmpA
GetCurrentThread
GetFileSizeEx
GetTempFileNameW
FindClose
lstrlenW
UnhandledExceptionFilter
VirtualAlloc
TlsAlloc
GetCurrentDirectoryW
HeapAlloc
FindFirstFileW
GetNumberFormatW
GetSystemTimeAsFileTime
GetSystemDirectoryW
InitializeCriticalSection
LeaveCriticalSection
VirtualQuery
lstrcpyW
GetCommandLineW
TlsSetValue
MulDiv
GetACP
WaitForSingleObject
HeapSetInformation
GlobalAlloc
LCMapStringW
FindResourceW
SetEvent
GetVolumeInformationW
WriteConsoleW
GetConsoleMode
GlobalHandle
LockResource
SizeofResource
ReadFile
LoadResource
GlobalSize
FileTimeToSystemTime
GlobalFlags
GetEnvironmentStringsW
InterlockedExchange
DeleteCriticalSection
GetSystemInfo
FreeResource
GetCurrentProcess
ExitThread
HeapReAlloc
SetThreadPriority
FreeLibrary
GetFileType
DuplicateHandle
SetEndOfFile
HeapQueryInformation
lstrcmpW
GetFileAttributesW
TlsFree
InterlockedIncrement
GetFullPathNameW
UnlockFile
LockFile
CreateNamedPipeW
GetStringTypeW
GetConsoleCP
GetFileTime
GlobalFree
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCurrentProcessId
WriteFile
GetModuleHandleW
ResumeThread
GlobalGetAtomNameW
GetProcAddress
GlobalReAlloc
GetProcessHeap
HeapSize
GetFileSize
GetTickCount
GetModuleFileNameW
GetLastError

user32

SetParent
GetKeyboardState
MonitorFromPoint
GetKeyNameTextW
CheckDlgButton
DestroyAcceleratorTable
SetWindowPlacement
ReleaseDC
GetMenuItemCount
GetClassLongW
IsWindowEnabled
LoadAcceleratorsW
WinHelpW
GetMenuStringW
DeleteMenu
SendDlgItemMessageW
SetWindowTextW
TranslateMDISysAccel
GetActiveWindow
DialogBoxParamW
RegisterClipboardFormatW
BeginDeferWindowPos
GetUpdateRect
RedrawWindow
PeekMessageW
OpenClipboard
WaitMessage
CreateDialogIndirectParamW
SetScrollRange
IsChild
GetSysColorBrush
ScrollWindow
UnionRect
PostQuitMessage
SetCapture
GetMenuCheckMarkDimensions
HideCaret
UpdateWindow
GetWindowThreadProcessId
GrayStringW
GetAsyncKeyState
InsertMenuItemW
LoadIconW
LoadCursorW
InvertRect
GetWindowTextW
GetMonitorInfoW
MapWindowPoints
SetWindowRgn
DestroyCursor
RegisterClassW
SetPropW
DefFrameProcW
SetLayeredWindowAttributes
CopyRect
LockWindowUpdate
SetCursorPos
GetMenuItemID
ReleaseCapture
AppendMenuW
SetRect
SetForegroundWindow
DestroyIcon
InvalidateRect
DestroyWindow
GetMenu
SetWindowsHookExW
CharUpperBuffW
SetWindowLongW
GetSysColor
ValidateRect
SetRectEmpty
GetKeyboardLayout
ShowWindow
AdjustWindowRectEx
CreateAcceleratorTableW
CreatePopupMenu
GetDoubleClickTime
NotifyWinEvent
CloseClipboard
DispatchMessageW
CopyImage
RemovePropW
GetMessagePos
ShowScrollBar
SetClassLongW
ModifyMenuW
SetMenuDefaultItem
DrawMenuBar
SystemParametersInfoW
TranslateAcceleratorW
WindowFromPoint
GetSubMenu
GetScrollInfo
ReuseDDElParam
GetCursorPos
GetMenuDefaultItem
UnhookWindowsHookEx
SendDlgItemMessageA
GetCapture
SetScrollPos
PtInRect
GetClassNameW
PostMessageW
GetMessageW
MessageBoxW
GetMenuItemInfoW
EndDialog
RemoveMenu
GetLastActivePopup
ShowOwnedPopups
CallNextHookEx
IsWindowVisible
ToUnicodeEx
CopyIcon
EndDeferWindowPos
GetClassInfoW
GetDlgCtrlID
SetMenuItemBitmaps
IsRectEmpty
LoadBitmapW
EnableMenuItem
DrawFocusRect
GetSystemMenu
IsCharLowerW
IsMenu
TranslateMessage
ScreenToClient
TabbedTextOutW
FrameRect
GetForegroundWindow
GetWindowRgn
FillRect
IntersectRect
RealChildWindowFromPoint
UpdateLayeredWindow
GetScrollPos
GetWindowPlacement
DefWindowProcW
LoadMenuW
PostThreadMessageW
SetScrollInfo
DrawIconEx
BringWindowToTop
GetKeyState
DrawTextExW
MoveWindow
GetMessageTime
BeginPaint
CheckMenuItem
MapVirtualKeyW
DestroyMenu
EqualRect
EnumDisplayMonitors
GetMenuState
OffsetRect
SetFocus
SubtractRect
MapVirtualKeyExW
InsertMenuW
CreateWindowExW
GetDC
EnableWindow
CallWindowProcW
GetPropW
GetSystemMetrics
GetClassInfoExW
SetCursor
DeferWindowPos
RegisterWindowMessageW
SetActiveWindow
GetWindow
GetFocus
GetTopWindow
IsClipboardFormatAvailable
EnableScrollBar
GetClientRect
GetNextDlgTabItem
UnpackDDElParam
EmptyClipboard
KillTimer
GetScrollRange
MapDialogRect
MonitorFromWindow
DrawFrameControl
CopyAcceleratorTableW
CharUpperW
EndPaint
TrackPopupMenu
DefMDIChildProcW
IsWindow
GetNextDlgGroupItem
LoadImageW
GetIconInfo
SetMenu
DrawIcon
DrawEdge
GetWindowTextLengthW
ClientToScreen
GetDesktopWindow
IsIconic
GetWindowDC
CreateMenu
InflateRect
GetDlgItem
EnumWindows
SetClipboardData
GetWindowRect
DrawStateW
GetWindowLongW
DrawTextW
SetTimer
IsDialogMessageW
IsZoomed
SetWindowPos
MessageBeep
SendMessageW

gdi32

SetTextAlign
GetViewportExtEx
GetTextFaceW
GetBkColor
GetWindowOrgEx
SetPixel
CreateEllipticRgn
SetPixelV
CreateDIBitmap
DeleteDC
MoveToEx
PtInRegion
ExtTextOutW
CreateCompatibleDC
GetBitmapBits
CreatePatternBrush
GetViewportOrgEx
SetDIBColorTable
GetClipBox
CreateFontIndirectW
GetLayout
CombineRgn
FrameRgn
OffsetRgn
ScaleWindowExtEx
SaveDC
Polyline
GetTextCharsetInfo
RectVisible
CreatePen
CreateHatchBrush
OffsetViewportOrgEx
LPtoDP
GetTextColor
DeleteObject
IntersectClipRect
SetWindowExtEx
SetPolyFillMode
CreateCompatibleBitmap
GetPixel
OffsetWindowOrgEx
EnumFontFamiliesExW
GetSystemPaletteEntries
RestoreDC
SetROP2
SetBkMode
CreateRectRgnIndirect
GetRgnBox
SetViewportExtEx
CreatePalette
SetWindowOrgEx
SelectClipRgn
GetObjectType
StretchBlt
GetPaletteEntries
SetLayout
EnumFontFamiliesW
CopyMetaFileW
GetDeviceCaps
SetViewportOrgEx
SelectObject
SetPaletteEntries
FillRgn
LineTo
ScaleViewportExtEx
GetNearestPaletteIndex
SetTextColor
BitBlt
CreateRoundRectRgn
CreateRectRgn
Ellipse
GetTextExtentPoint32W
ExcludeClipRect
Escape
PatBlt
RealizePalette
CreateDCW
SetBkColor
ExtFloodFill
GetObjectW
SelectPalette
ExtSelectClipRgn
CreatePolygonRgn
CreateSolidBrush
GetTextMetricsW
GetBoundsRect
CreateDIBSection
SetMapMode
GetWindowExtEx
DPtoLP
TextOutW
SetRectRgn
Rectangle
Polygon
PtVisible
CreateBitmap

advapi32

RegQueryValueExW
SetSecurityDescriptorDacl
GetSecurityDescriptorSacl
RegDeleteKeyW
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenProcessToken
RegOpenKeyExW
RegDeleteValueW
GetTokenInformation
RegCreateKeyExW
OpenThreadToken
RegEnumKeyExW
SetSecurityDescriptorSacl
InitializeSecurityDescriptor
IsValidSid
RegSetValueExW
ConvertSidToStringSidW

shell32

DragQueryFileW
ShellExecuteExW
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetFileInfoW
SHGetFolderLocation
SHGetPathFromIDListW
SHGetDesktopFolder
DragFinish
ShellExecuteW
SHAppBarMessage

ole32

OleTranslateAccelerator
CoCreateInstance
CoInitialize
CoInitializeEx
IsAccelerator
RegisterDragDrop
DoDragDrop
OleLockRunning
ReleaseStgMedium
OleDestroyMenuDescriptor
CoTaskMemFree
CoTaskMemAlloc
OleGetClipboard
CreateStreamOnHGlobal
OleCreateMenuDescriptor
CLSIDFromString
CoUninitialize
OleDuplicateData
RevokeDragDrop
CoLockObjectExternal

oleaut32

VariantInit
VariantChangeType
SysStringByteLen
SysFreeString
VariantClear
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
SysStringLen
VarBstrFromDate
SysAllocStringByteLen
SysAllocString

comctl32

ImageList_GetIconSize

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
SHDeleteValueA
PathIsUNCW
SHGetThreadRef
SHDeleteEmptyKeyA
PathRemoveFileSpecW

gdiplus

GdipDisposeImage
GdipGetImagePalette
GdipCreateFromHDC
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipDrawImageI
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipCreateBitmapFromHBITMAP
GdipFree
GdipSetInterpolationMode
GdipBitmapLockBits
GdipGetImagePixelFormat
GdipDeleteGraphics
GdipGetImageWidth
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipAlloc
GdipGetImagePaletteSize
GdipGetImageGraphicsContext

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tew
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.klop
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rlew
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.koopl
Size: 512B - Virtual size: 403B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kupol
Size: 500KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cec52be0659354e08372e5186e089929

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

gdiplus

oleacc

Sections

.text Size: 9KB - Virtual size: 8KB

.tew Size: 8KB - Virtual size: 8KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 512B - Virtual size: 176KB

.klop Size: 303KB - Virtual size: 303KB

.rlew Size: 3KB - Virtual size: 3KB

.koopl Size: 512B - Virtual size: 403B

.kupol Size: 500KB - Virtual size: 500KB

.rsrc Size: 1024B - Virtual size: 712B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 8KB

.tew
Size: 8KB - Virtual size: 8KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 512B - Virtual size: 176KB

.klop
Size: 303KB - Virtual size: 303KB

.rlew
Size: 3KB - Virtual size: 3KB

.koopl
Size: 512B - Virtual size: 403B

.kupol
Size: 500KB - Virtual size: 500KB

.rsrc
Size: 1024B - Virtual size: 712B

.reloc
Size: 5KB - Virtual size: 4KB