3c0342a18671f7016d97f05ca499827a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3c0342a18671f7016d97f05ca499827a_JaffaCakes118
Size

332KB
MD5

3c0342a18671f7016d97f05ca499827a
SHA1

f19f2a9a233113a3da6a894c9c8edd490e72d037
SHA256

bed8d8beca8376e4a3a48cc3aeee903239779af2633a68cdf190fd68dabbbe43
SHA512

6234c81d3f83c768bd13010a5abc2009b1c929ab29040d38940aafd996d6447f25254da1a99a46d95a5f316f81a0fb15c74a12040d29afa7650c5405df5c9e34
SSDEEP

6144:aRx7xnTk+4pm+96alOIpMJlYz0ryVkCtAyjQhFzLJk3H00QKiMxYPqCBF:CF1TkCdIyTS0r0ZmF3m3Ul8OPz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c0342a18671f7016d97f05ca499827a_JaffaCakes118

Files

3c0342a18671f7016d97f05ca499827a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

825e32cdbe93ce4cad0fdc829f4d4b03

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

uxtheme

GetThemeMetric
IsAppThemed
GetThemeBackgroundExtent
GetThemeFont
SetWindowTheme
DrawThemeParentBackground
IsThemeActive
OpenThemeData
GetThemeMargins
CloseThemeData
DrawThemeBackground
GetThemeAppProperties
GetThemePartSize
GetThemeColor
GetThemeBackgroundContentRect

psapi

GetProcessImageFileNameW

user32

MsgWaitForMultipleObjects
CheckDlgButton
DrawIconEx
LoadMenuW
IntersectRect
SetMenuItemInfoW
GetMonitorInfoW
GetMenuItemInfoW
DeleteMenu
DestroyIcon
GetWindowTextW
MoveWindow
MapDialogRect
GetPropW
GetAsyncKeyState
SetForegroundWindow
TranslateMessage
GetClipboardData
CharPrevW
DdeClientTransaction
TranslateAcceleratorW
SetWindowPlacement
SetWindowsHookExW
CheckMenuItem
EnableMenuItem
ShowOwnedPopups
IsWindow
LockSetForegroundWindow
MapVirtualKeyW
LoadCursorA
CreateWindowExW
GetPropA
GetWindowRect
SendMessageA
DdeDisconnect
VkKeyScanExW
GetForegroundWindow
GetDlgItem
SetPropW
GetMenuState
AttachThreadInput
RegisterClipboardFormatW
EnumWindows
InsertMenuItemW
GetLastActivePopup
DispatchMessageW
GetMenuStringW
ShowCaret
PeekMessageW
SetMenuDefaultItem
SetClipboardViewer
ShowScrollBar
TrackPopupMenu
LoadStringA
WaitMessage
GetFocus
CheckMenuRadioItem
MonitorFromRect
GetCapture
GetComboBoxInfo
MessageBoxIndirectA
GetSystemMetrics
AdjustWindowRectEx
FindWindowW
MessageBeep
GetSystemMenu
DdeInitializeW
IsRectEmpty
CopyRect
DrawTextW
FindWindowA
CharNextW
IsDialogMessageW
CreateIconIndirect
GetWindowDC
PostMessageA
InflateRect
GetWindowPlacement
EmptyClipboard
WindowFromPoint
SetWindowTextW
GetClassLongW
AppendMenuW
AdjustWindowRect
wsprintfW
SetActiveWindow
SetDlgItemInt
LoadIconW
EqualRect
ChildWindowFromPoint
GetSysColor
FillRect
GetWindowThreadProcessId
IsDlgButtonChecked
GetWindowLongW
NotifyWinEvent
CloseClipboard
GetShellWindow
SetCursorPos
RegisterClassW
RemoveMenu
BeginPaint
GetWindow
OpenClipboard
GetIconInfo
RegisterClassExW
TrackPopupMenuEx
GetClassInfoExW
SetWindowPos
HideCaret
TrackMouseEvent
MessageBoxExW
DdeQueryStringW
RemovePropW
SetCapture
WaitForInputIdle
CharLowerW
SendMessageW
SetRectEmpty
DestroyWindow
GetWindowLongA
EnumDesktopWindows
GetParent
SetPropA
ReleaseDC
GetDlgItemTextW
PostThreadMessageW
CallMsgFilterW
SendMessageTimeoutW
CheckRadioButton
GetMessageA
GetWindowRgnBox
DdeNameService
UnregisterClassW
DrawTextExW
DefWindowProcW
MapWindowPoints
DdeConnect
InvalidateRect
SetMenuItemBitmaps
SetScrollInfo
GetKeyState
EndMenu
GetNextDlgTabItem
CharLowerBuffW
RemovePropA
DdeFreeStringHandle
WinHelpW
GetMessagePos
PeekMessageA
SendNotifyMessageW
CopyImage
MonitorFromWindow
ReleaseCapture
DeferWindowPos
LoadImageW
SetRect
GetLastInputInfo
DestroyMenu
SetCursor
EndDeferWindowPos
DialogBoxIndirectParamA
DdeGetData
DialogBoxParamA
PostQuitMessage
UnionRect
GetClipboardFormatNameW
IsCharAlphaNumericW
EnumDisplaySettingsW
GetClientRect
GetTopWindow
LoadCursorW
CharNextA
SetScrollPos
SendMessageTimeoutA
GetMenuDefaultItem
RegisterWindowMessageA
GetWindowInfo
SystemParametersInfoW
GetDoubleClickTime
IsMenu
SystemParametersInfoA
LoadBitmapW
CreateDialogParamW
DrawFrameControl
PostThreadMessageA
BeginDeferWindowPos
CreatePopupMenu
AllowSetForegroundWindow
GetWindowTextLengthW
DestroyAcceleratorTable
MessageBoxIndirectW
GetAncestor
GetCursor
SetWindowLongW
RegisterWindowMessageW
GetMessageW
IsWindowEnabled
LoadAcceleratorsW
IsIconic
GetMenuItemID
RegisterClipboardFormatA
DrawFocusRect
GetSysColorBrush
ShowWindow
DialogBoxIndirectParamW
ChangeClipboardChain
GetDlgCtrlID
SetFocus
DdeUninitialize
PtInRect
EndPaint
GetSubMenu
EndDialog
SetClipboardData
MessageBoxExA
GetActiveWindow
UpdateLayeredWindow
GetKeyboardLayout
IsHungAppWindow
GetKeyNameTextW
MsgWaitForMultipleObjectsEx
GetCursorPos
DialogBoxParamW
UnhookWindowsHookEx
GetMenuItemInfoA
GetDC
EnumThreadWindows
InsertMenuW
IsWindowVisible
PostMessageW
CharPrevA
SetTimer
DdeCreateStringHandleW
GetMessageTime
EnumChildWindows
DdeCreateDataHandle
UpdateWindow
AnimateWindow
ScreenToClient
IsChild
SetWindowLongA
GetMenuItemCount
GetClassInfoW
SetWindowRgn
CallNextHookEx
SetParent
DefWindowProcA
GetDialogBaseUnits
DrawEdge
IsWindowUnicode
GetDesktopWindow
CallWindowProcW
GetClassNameW
SendDlgItemMessageW
CopyIcon
OffsetRect
GetClassWord
DispatchMessageA
LoadStringW
RedrawWindow
KillTimer
ClientToScreen
FindWindowExW
DdeFreeDataHandle
CreateMenu
EnableWindow
GetProcessWindowStation
CharUpperW
SetMenu
MessageBoxW
SetDlgItemTextW
MonitorFromPoint
GetScrollInfo

advapi32

RegDeleteValueW
ImpersonateSelf
RegEnumValueA
RegCloseKey
RegOpenKeyW
GetTraceLoggerHandle
ConvertSidToStringSidW
RegCreateKeyA
RegEnumValueW
UnregisterTraceGuids
CryptAcquireContextW
OpenThreadToken
OpenProcessToken
CryptHashData
RegSetValueExW
GetUserNameW
CryptDestroyHash
RegQueryValueExW
RegOpenKeyExW
RegQueryInfoKeyW
CryptReleaseContext
RegisterTraceGuidsW
RegSetValueExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteKeyW
RegOpenCurrentUser
RegEnumKeyExW
TraceMessage
RegQueryValueW
RegCreateKeyExW
CreateProcessAsUserW
ConvertStringSidToSidW
IsTextUnicode
DuplicateTokenEx
RegCreateKeyExA
RegDeleteValueA
RegEnumKeyW
TraceEvent
GetTraceEnableFlags
CryptCreateHash
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetLengthSid
CryptGetHashParam
GetTokenInformation
SetTokenInformation
SetThreadToken
RegQueryValueExA
GetTraceEnableLevel

shell32

SHCreateShellItem
ShellExecuteExW
Shell_NotifyIconW
SHGetInstanceExplorer
Shell_NotifyIconA
SHChangeNotify
SHSetLocalizedName
SHPathPrepareForWriteW
DragQueryFileW
SHGetSpecialFolderLocation
ShellExecuteA
ExtractIconW
ShellAboutW
ShellExecuteW
SHGetFolderPathW
SHFileOperationW
SHGetSpecialFolderPathW
SHGetFolderPathAndSubDirW
SHBindToParent
SHGetFileInfoW
SHGetPathFromIDListA
ExtractIconExW
SHGetDesktopFolder
SHGetDataFromIDListW
SHGetFolderLocation
SHAppBarMessage
SHGetPathFromIDListW
ExtractAssociatedIconExW
SHBrowseForFolderW

kernel32

lstrcmpW
QueryPerformanceCounter
MoveFileW
GlobalFree
GetFileAttributesA
GlobalAlloc
SizeofResource
InitializeCriticalSection
GetPrivateProfileSectionNamesW
FlushInstructionCache
CreateFileW
SetFileAttributesW
FormatMessageW
VirtualFree
FileTimeToSystemTime
WaitForMultipleObjects
GetFileAttributesExW
DeleteAtom
SetThreadContext
SetThreadPriority
MulDiv
GlobalLock
Process32FirstW
FileTimeToLocalFileTime
ResetEvent
CloseHandle
GetFileInformationByHandle
GetNumberFormatW
MapViewOfFile
DuplicateHandle
SetLastError
Sleep
OpenProcess
GetSystemDirectoryA
GetLogicalDriveStringsW
UnmapViewOfFile
GlobalAddAtomW
LocalFree
CreateActCtxW
lstrcmpiW
ReleaseMutex
GetSystemTime
GlobalUnlock
GetVersionExW
FreeLibraryAndExitThread
IsWow64Process
GetFileSizeEx
MoveFileExW
GetProcAddress
TlsSetValue
LocalReAlloc
OpenEventW
FindResourceW
ExitProcess
GlobalReAlloc
SetProcessWorkingSetSize
SetEnvironmentVariableW
SetFileTime
TerminateThread
EnterCriticalSection
GetShortPathNameW
HeapDestroy
SetThreadExecutionState
OpenMutexW
WideCharToMultiByte
SetCurrentDirectoryA
GetTempFileNameW
GetTimeFormatW
CopyFileW
RemoveDirectoryW
FreeLibrary
lstrcmpA
LoadLibraryW
GetCurrentDirectoryW
ReleaseSemaphore
WritePrivateProfileStringW
SetFilePointer
GetLastError
WritePrivateProfileSectionW
TlsGetValue
LocalAlloc
GetCurrentProcess
CompareFileTime
CreateProcessW
CreateEventW
InterlockedCompareExchange
GetModuleHandleA
GetModuleHandleW
CreateToolhelp32Snapshot
OutputDebugStringA
GetUserDefaultLCID
FindFirstFileW
GetTempPathW
CreateSemaphoreW
AddAtomW
GetAtomNameW
GetLongPathNameW
GetPrivateProfileStringW
CreateFileA
GlobalAddAtomA
DebugBreak
LocalSize
WaitForSingleObjectEx
QueueUserWorkItem
WaitForSingleObject
LCMapStringW
GetModuleHandleExW
ExpandEnvironmentStringsA
SetEndOfFile
FindAtomW
SearchPathW
GetModuleFileNameA
GetEnvironmentVariableW
GetFileAttributesW
GetVersionExA
GetSystemDefaultUILanguage
SetUnhandledExceptionFilter
DeactivateActCtx
CompareStringW
LoadResource
InterlockedExchange
HeapCreate
CreateEventA
ExpandEnvironmentStringsW
QueryPerformanceFrequency
ResumeThread
LoadLibraryExW
GetWindowsDirectoryW
GetFileSize
lstrlenA
GetLocalTime
GetSystemTimeAsFileTime
IsDBCSLeadByte
CreateDirectoryW
GetThreadContext
GetACP
GetFullPathNameW
SetCurrentDirectoryW
GetCurrentProcessId
Process32NextW
GetProcessHeap
ReadFile
GetModuleHandleExA
FindClose
ReleaseActCtx
lstrlenW
TlsAlloc
MultiByteToWideChar
GlobalDeleteAtom
SetEvent
HeapAlloc
GetSystemInfo
CreateMutexW
LoadLibraryA
HeapFree
CreateMutexA
GetThreadLocale
UnlockFileEx
HeapReAlloc
CreateFileMappingA
GetCurrentThreadId
GetPrivateProfileSectionW
GetSystemDefaultLCID
DeleteCriticalSection
DeleteFileW
VirtualProtect
GlobalFlags
DisableThreadLibraryCalls
GlobalSize
SetProcessShutdownParameters
RaiseException
CreateTimerQueueTimer
LeaveCriticalSection
LockResource
CompareStringA
FindNextFileW
lstrcmpiA
GetThreadPriority
ReplaceFileW
GetCurrentThread
TlsFree
ActivateActCtx
GetCPInfo
GetSystemWow64DirectoryW
TerminateProcess
TryEnterCriticalSection
GetExitCodeThread
OpenMutexA
VirtualAlloc
InterlockedDecrement
SuspendThread
GetDateFormatW
GetLocaleInfoW
GetTickCount
InterlockedIncrement
QueryDosDeviceW
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
LockFileEx
CreateDirectoryA
GetModuleFileNameW
GetPrivateProfileStringA
UnhandledExceptionFilter
FindResourceExW
SetErrorMode
EnumUILanguagesW
DeleteTimerQueueTimer
WriteFile
GetVersion
GetUserDefaultUILanguage
GetSystemDirectoryW
SetFilePointerEx
CreateFileMappingW
SystemTimeToFileTime
CreateThread
VirtualQuery

gdi32

SetBkMode
GetBrushOrgEx
GetObjectA
RealizePalette
GetRegionData
CreateRectRgnIndirect
GetTextExtentExPointI
CreateCompatibleDC
StretchDIBits
SetWindowOrgEx
SetTextAlign
GetDeviceCaps
CreateFontW
IntersectClipRect
CreateFontIndirectW
CreateFontIndirectA
CreateBitmap
PatBlt
CloseMetaFile
SelectObject
CreateCompatibleBitmap
SetBrushOrgEx
OffsetWindowOrgEx
GetClipBox
ExtTextOutW
Rectangle
CreatePolygonRgn
GetBkMode
DeleteEnhMetaFile
GetStockObject
SetDCPenColor
CreateEnhMetaFileA
CreateDIBPatternBrushPt
GetTextMetricsW
SetViewportOrgEx
SetLayout
RestoreDC
GetTextExtentPoint32W
StretchBlt
CreateHalftonePalette
CreateMetaFileW
GetDCOrgEx
SetTextColor
SelectPalette
GetBkColor
LPtoDP
RectVisible
EqualRgn
CreatePalette
ExtCreateRegion
GetTextAlign
CreatePatternBrush
TextOutW
SetRectRgn
GetPaletteEntries
GetObjectW
SaveDC
SetMapMode
GetTextExtentPointW
CreateDCW
LineTo
GetDIBits
GetSystemPaletteEntries
DeleteObject
PlayEnhMetaFile
BitBlt
DeleteDC
CreateSolidBrush
CloseEnhMetaFile
CreateDIBSection
OffsetRgn
GetLayout
CreateRectRgn
TextOutA
CombineRgn
SetStretchBltMode
SetWindowExtEx
GetPixel
GetTextExtentPoint32A
SetPaletteEntries
CreatePen
GetGlyphIndicesW
GetTextCharset
MoveToEx
GetTextColor
SetBkColor
GetRgnBox
SetViewportExtEx
CreateDCA

ntdll

NtAllocateVirtualMemory
RtlUshortByteSwap
LdrGetDllHandle

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

825e32cdbe93ce4cad0fdc829f4d4b03

Headers

DLL Characteristics

File Characteristics

Imports

uxtheme

psapi

user32

advapi32

shell32

kernel32

gdi32

ntdll

Sections

.text Size: 183KB - Virtual size: 183KB

.rdata Size: 88KB - Virtual size: 88KB

.rsrc Size: 21KB - Virtual size: 21KB

.data Size: 37KB - Virtual size: 1.4MB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 183KB - Virtual size: 183KB

.rdata
Size: 88KB - Virtual size: 88KB

.rsrc
Size: 21KB - Virtual size: 21KB

.data
Size: 37KB - Virtual size: 1.4MB

.tls
Size: 512B - Virtual size: 4KB