41b3df21f7bb7c5a2bac15dc08442dcf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

41b3df21f7bb7c5a2bac15dc08442dcf_JaffaCakes118
Size

574KB
MD5

41b3df21f7bb7c5a2bac15dc08442dcf
SHA1

7f185aea001c7e28a8912281ca0341134e9a52ba
SHA256

f7fe9cbe03b82ec14f357a0452779ed468c0404387c8a1bb5b0f9244e8ebea48
SHA512

06860fa9973816e7e8345922d139702823d3ab05882877d664645946436db78de5a1c7daf27307411d6b92bca3311553eeaca855f9a0680edf9db04a31b29443
SSDEEP

12288:uLKJHd9GC7b8sdZHKddzDn1XBG0t3bSW89+80auVJnX3:mKJHdZYisTWi80auVJn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41b3df21f7bb7c5a2bac15dc08442dcf_JaffaCakes118

Files

41b3df21f7bb7c5a2bac15dc08442dcf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

747930d7e5261777faf6e2e5efed079f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
ResumeThread
GlobalDeleteAtom
LoadLibraryExW
UnhandledExceptionFilter
SetEndOfFile
Sleep
FreeEnvironmentStringsW
lstrcmpiW
GetFileAttributesExW
MulDiv
WriteFile
LockResource
FindResourceW
GetFullPathNameW
GetSystemDefaultLangID
FreeLibrary
GetTempPathW
CreateEventW
GlobalFlags
SetEnvironmentVariableA
LocalAlloc
GetModuleHandleW
CreateMutexW
GetCurrentThreadId
RaiseException
WideCharToMultiByte
HeapFree
GetCurrentProcess
GetConsoleCP
CreateNamedPipeW
GetSystemDirectoryW
GetCurrentDirectoryW
HeapReAlloc
TlsAlloc
FreeResource
GlobalAlloc
LeaveCriticalSection
GetEnvironmentStringsW
MultiByteToWideChar
TerminateThread
GetStartupInfoW
FindResourceExW
GlobalFindAtomW
GetSystemInfo
GetLastError
CopyFileW
GetFileAttributesW
GetOEMCP
CreateThread
GetACP
SetThreadPriority
TlsGetValue
lstrcmpW
SearchPathW
lstrlenW
GlobalHandle
InterlockedCompareExchange
HeapAlloc
GlobalUnlock
GetProfileIntW
GetVolumeInformationW
VirtualAlloc
IsValidCodePage
CompareStringW
GetFileTime
UnlockFile
lstrcmpA
CloseHandle
IsDebuggerPresent
FindFirstFileW
SizeofResource
LoadLibraryW
FileTimeToLocalFileTime
GetStringTypeW
GetModuleFileNameW
TlsSetValue
GlobalReAlloc
FindClose
GetConsoleMode
GetSystemTimeAsFileTime
DuplicateHandle
SetUnhandledExceptionFilter
InitializeCriticalSection
LocalReAlloc
GetNumberFormatW
GetFileType
HeapQueryInformation
GetProcessHeap
GetTempFileNameW
FileTimeToSystemTime
lstrlenA
QueryPerformanceCounter
RtlUnwind
WaitForMultipleObjects
InterlockedIncrement
TlsFree
GetUserDefaultUILanguage
VirtualProtectEx
ReadFile
HeapDestroy
WriteConsoleW
GlobalFree
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
CreateFileW
GlobalLock
ExitThread
SetHandleCount
GlobalAddAtomW
InterlockedExchange
GlobalSize
WaitForSingleObject
EnterCriticalSection
GetVersionExW
GetCurrentThread
LocalFree
GetStdHandle
GetLocaleInfoW
GetCommandLineW
GetFileSizeEx
HeapSetInformation
LCMapStringW
SetLastError
DeleteCriticalSection
SetEvent
HeapCreate
GetProcAddress
GetTickCount
LoadResource
LockFile
GetTimeZoneInformation
GlobalGetAtomNameW
lstrcpyW
VirtualQuery
GetFileSize
FormatMessageW
SetFilePointer
OpenEventW
SetStdHandle
InterlockedDecrement
IsProcessorFeaturePresent
HeapSize

user32

CreatePopupMenu
GetSysColorBrush
GetDlgCtrlID
IsRectEmpty
InsertMenuItemW
GetMessageTime
MoveWindow
WinHelpW
RemoveMenu
GetLastActivePopup
RegisterWindowMessageW
SubtractRect
SetWindowLongW
GetDlgItem
SetWindowRgn
OpenClipboard
SetLayeredWindowAttributes
SendDlgItemMessageW
DrawFocusRect
DrawMenuBar
GetClassInfoExW
IsWindow
CopyImage
ReuseDDElParam
GetClassInfoW
AdjustWindowRectEx
CallNextHookEx
LoadImageW
IsDialogMessageW
GetSysColor
SetFocus
DestroyCursor
ReleaseCapture
SendMessageW
GetKeyboardState
GetWindow
SetScrollRange
MessageBoxW
TabbedTextOutW
DestroyIcon
InflateRect
ScreenToClient
GetMonitorInfoW
DrawStateW
IsCharLowerW
SetClipboardData
SetCapture
GetWindowThreadProcessId
SetWindowPos
CreateMenu
ShowScrollBar
CheckDlgButton
DrawTextExW
GetMessageW
CharUpperBuffW
GetMenuItemCount
GetScrollPos
PostQuitMessage
ReleaseDC
DialogBoxParamW
KillTimer
GetClassLongW
GetPropW
RegisterClipboardFormatW
ValidateRect
GetClassNameW
EndDialog
MapWindowPoints
WindowFromPoint
SetWindowsHookExW
DeleteMenu
UpdateWindow
SetRect
SetMenu
DrawIcon
DrawTextW
EqualRect
RedrawWindow
SendDlgItemMessageA
GetMenuStringW
ToUnicodeEx
UnpackDDElParam
CharUpperW
UpdateLayeredWindow
DefFrameProcW
CallWindowProcW
PostMessageW
GetWindowRgn
EnumDisplayMonitors
GetMessagePos
DeferWindowPos
MonitorFromPoint
DrawFrameControl
GetSubMenu
BringWindowToTop
GetWindowRect
LoadMenuW
CheckMenuItem
RealChildWindowFromPoint
DefWindowProcW
ClientToScreen
CloseClipboard
DrawEdge
FrameRect
EmptyClipboard
GetMenuCheckMarkDimensions
IntersectRect
SetMenuItemBitmaps
GetMenuItemInfoW
ShowWindow
SetMenuDefaultItem
PtInRect
MonitorFromWindow
GetMenuItemID
GetTopWindow
CreateAcceleratorTableW
HideCaret
DestroyAcceleratorTable
IsWindowVisible
TranslateMDISysAccel
GetWindowTextW
IsClipboardFormatAvailable
GetUpdateRect
FillRect
EnableScrollBar
GetKeyState
MessageBeep
EndDeferWindowPos
GetDesktopWindow
DispatchMessageW
SetForegroundWindow
InvertRect
GetWindowLongW
EnableMenuItem
GetCapture
RemovePropW
IsMenu
CreateWindowExW
MapVirtualKeyW
GetMenuDefaultItem
DestroyMenu
GetSystemMenu
GetActiveWindow
SetWindowTextW
GetKeyboardLayout
GetScrollRange
GetDoubleClickTime
TrackPopupMenu
GetMenu
MapDialogRect
TranslateMessage
BeginPaint
LockWindowUpdate
GetKeyNameTextW
DestroyWindow
BeginDeferWindowPos
IsIconic
CopyRect
EndPaint
GetWindowPlacement
TranslateAcceleratorW
SetCursorPos
MapVirtualKeyExW
EnableWindow
LoadIconW
SetWindowPlacement
SystemParametersInfoW
SetClassLongW
ShowOwnedPopups
InvalidateRect
SetRectEmpty
SetScrollInfo
SetPropW
RegisterClassW
GetNextDlgGroupItem
OffsetRect
InsertMenuW
ScrollWindow
SetScrollPos
SetTimer
GetScrollInfo
UnionRect
CopyAcceleratorTableW
LoadBitmapW
LoadAcceleratorsW
CreateDialogIndirectParamW
WaitMessage
DrawIconEx
GetFocus
DefMDIChildProcW
GetDC
AppendMenuW
GetAsyncKeyState
IsChild
LoadCursorW
SetActiveWindow
GetWindowTextLengthW
ModifyMenuW
IsZoomed
GetCursorPos
NotifyWinEvent
GetForegroundWindow
GetWindowDC
SetCursor
GetSystemMetrics
UnhookWindowsHookEx
SetParent
CopyIcon
IsWindowEnabled
PeekMessageW
GrayStringW
GetNextDlgTabItem
GetMenuState
GetClientRect
GetIconInfo
EnumWindows
PostThreadMessageW

gdi32

GetObjectW
GetBitmapBits
PatBlt
ExtFloodFill
CombineRgn
CreateDCW
SetTextColor
CreateSolidBrush
LPtoDP
SetBkMode
GetBoundsRect
PtInRegion
SetDIBColorTable
GetViewportOrgEx
CreateRoundRectRgn
TextOutW
CreatePen
SetPixelV
CreateRectRgnIndirect
PtVisible
CreatePalette
CreateEllipticRgn
EnumFontFamiliesW
GetSystemPaletteEntries
StretchBlt
SelectClipRgn
GetBkColor
Rectangle
EnumFontFamiliesExW
DPtoLP
GetPixel
SetWindowExtEx
SetRectRgn
MoveToEx
SetWindowOrgEx
IntersectClipRect
CreateHatchBrush
ScaleViewportExtEx
GetObjectType
OffsetWindowOrgEx
GetNearestPaletteIndex
RectVisible
CreateCompatibleBitmap
RestoreDC
SetPaletteEntries
OffsetRgn
GetTextCharsetInfo
GetDeviceCaps
CreatePatternBrush
SetMapMode
GetLayout
GetTextColor
GetWindowExtEx
ScaleWindowExtEx
CreatePolygonRgn
SetViewportOrgEx
BitBlt
FillRgn
OffsetViewportOrgEx
CreateBitmap
Polygon
GetClipBox
CreateDIBitmap
CreateRectRgn
Ellipse
SetPixel
ExtTextOutW
RealizePalette
ExtSelectClipRgn
DeleteObject
SaveDC
Escape
SetViewportExtEx
LineTo
GetRgnBox
SelectObject
FrameRgn
CreateCompatibleDC
GetTextExtentPoint32W
CreateDIBSection
DeleteDC
Polyline
SelectPalette
GetTextFaceW
SetLayout
GetViewportExtEx
SetROP2
SetTextAlign
SetBkColor
GetPaletteEntries
CreateFontIndirectW
CopyMetaFileW
ExcludeClipRect
SetPolyFillMode
GetTextMetricsW
GetWindowOrgEx

advapi32

IsValidSid
ConvertSidToStringSidW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
RegCreateKeyExW
GetTokenInformation
SetSecurityDescriptorDacl
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW
RegDeleteValueW
OpenProcessToken
RegDeleteKeyW
OpenThreadToken
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegOpenKeyExW
InitializeSecurityDescriptor

shell32

ShellExecuteExW
SHAppBarMessage
DragFinish
SHBrowseForFolderW
SHGetDesktopFolder
SHGetFileInfoW
ShellExecuteW
DragQueryFileW
SHGetSpecialFolderLocation
SHGetFolderLocation
SHGetPathFromIDListW

ole32

CLSIDFromString
OleCreateMenuDescriptor
CoCreateInstance
OleGetClipboard
RevokeDragDrop
IsAccelerator
ReleaseStgMedium
CoInitialize
RegisterDragDrop
CoUninitialize
CoTaskMemAlloc
DoDragDrop
CoTaskMemFree
OleDestroyMenuDescriptor
OleDuplicateData
CoInitializeEx
OleTranslateAccelerator
CreateStreamOnHGlobal
CoLockObjectExternal
OleLockRunning

oleaut32

SysStringLen
VariantChangeType
VariantTimeToSystemTime
VariantInit
SysAllocStringLen
VariantClear
SysAllocString
SysStringByteLen
SysAllocStringByteLen
SystemTimeToVariantTime
VarBstrFromDate
SysFreeString

comctl32

ImageList_GetIconSize

shlwapi

SHDeleteEmptyKeyA
PathFindExtensionW
PathIsUNCW
PathStripToRootW
PathFindFileNameW
SHDeleteValueA
PathRemoveFileSpecW
SHGetThreadRef

winmm

PlaySoundW

msimg32

TransparentBlt
AlphaBlend

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

gdiplus

GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePaletteSize
GdipBitmapLockBits
GdipCreateFromHDC
GdipCreateBitmapFromScan0
GdipDeleteGraphics
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCloneImage
GdipGetImagePalette
GdipDisposeImage
GdipBitmapUnlockBits
GdipAlloc
GdipGetImagePixelFormat
GdipFree
GdipDrawImageI
GdiplusStartup
GdiplusShutdown
GdipGetImageGraphicsContext
GdipCreateBitmapFromStream
GdipCreateBitmapFromHBITMAP

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.klop
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rlew
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tew
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.koopl
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kupol
Size: 493KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

747930d7e5261777faf6e2e5efed079f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

msimg32

imm32

gdiplus

oleacc

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 155KB

.klop Size: 312KB - Virtual size: 312KB

.rlew Size: 8KB - Virtual size: 8KB

.tew Size: 512B - Virtual size: 159B

.koopl Size: 12KB - Virtual size: 11KB

.kupol Size: 493KB - Virtual size: 492KB

.rsrc Size: 1024B - Virtual size: 712B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 155KB

.klop
Size: 312KB - Virtual size: 312KB

.rlew
Size: 8KB - Virtual size: 8KB

.tew
Size: 512B - Virtual size: 159B

.koopl
Size: 12KB - Virtual size: 11KB

.kupol
Size: 493KB - Virtual size: 492KB

.rsrc
Size: 1024B - Virtual size: 712B

.reloc
Size: 5KB - Virtual size: 4KB