4b4ed44051258f787d48287ea74465da_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4b4ed44051258f787d48287ea74465da_JaffaCakes118
Size

867KB
MD5

4b4ed44051258f787d48287ea74465da
SHA1

12c5e38325e22f21e6bdf098cc9ae62043046e9c
SHA256

f770c7733dc852326abb593a378a5fb6510e1dfff5d63f4a46713fe622a35524
SHA512

b138c0f463cf821b822b63982a849a4a0861fee5cc35dc043c2d620cb50ba5df4af635079c0960574cd9f81e7799a9b976ad469ac238b8ef2a42252d3f9ab37d
SSDEEP

24576:pkaTASqiEq2OoGqsWdACNdbyo1qpqoTaQa9FKY:pkkASqTqElY7YFKY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b4ed44051258f787d48287ea74465da_JaffaCakes118

Files

4b4ed44051258f787d48287ea74465da_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2cdae5556225383ba13aaefd1e772fb9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
ResumeThread
GlobalDeleteAtom
LoadLibraryExW
UnhandledExceptionFilter
SetEndOfFile
Sleep
FreeEnvironmentStringsW
lstrcmpiW
GetFileAttributesExW
WriteFile
HeapSize
LockResource
FindResourceW
GetFullPathNameW
FreeLibrary
GetTempPathW
GetFileAttributesW
CreateEventW
SetEnvironmentVariableA
LocalAlloc
GetModuleHandleW
CreateMutexW
GetCurrentThreadId
RaiseException
WideCharToMultiByte
GetCurrentProcess
HeapFree
GetConsoleCP
CreateNamedPipeW
GetSystemDirectoryW
GetCurrentDirectoryW
HeapReAlloc
TlsAlloc
FreeResource
GlobalAlloc
LeaveCriticalSection
GetEnvironmentStringsW
MultiByteToWideChar
TerminateThread
GetStartupInfoW
FindResourceExW
CreateThread
GlobalFindAtomW
GetSystemInfo
GetLastError
CopyFileW
GlobalFlags
GetOEMCP
GetACP
SetThreadPriority
TlsGetValue
lstrcmpW
SearchPathW
lstrlenW
GlobalHandle
InterlockedCompareExchange
HeapAlloc
GlobalUnlock
GetProfileIntW
GetVolumeInformationW
VirtualAlloc
IsValidCodePage
CompareStringW
GetFileTime
UnlockFile
lstrcmpA
CloseHandle
IsDebuggerPresent
FindFirstFileW
SizeofResource
LoadLibraryW
FileTimeToLocalFileTime
GetStringTypeW
GetModuleFileNameW
TlsSetValue
GlobalReAlloc
FindClose
GetConsoleMode
GetSystemTimeAsFileTime
DuplicateHandle
SetUnhandledExceptionFilter
InitializeCriticalSection
LocalReAlloc
GetNumberFormatW
GetFileType
HeapQueryInformation
GetProcessHeap
GetTempFileNameW
FileTimeToSystemTime
lstrlenA
QueryPerformanceCounter
RtlUnwind
WaitForMultipleObjects
InterlockedIncrement
TlsFree
GetUserDefaultUILanguage
VirtualProtectEx
ReadFile
HeapDestroy
WriteConsoleW
GlobalFree
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
CreateFileW
GlobalLock
ExitThread
SetHandleCount
GlobalAddAtomW
InterlockedExchange
GlobalSize
WaitForSingleObject
EnterCriticalSection
GetVersionExW
GetCurrentThread
LocalFree
GetStdHandle
GetLocaleInfoW
GetCommandLineW
GetFileSizeEx
HeapSetInformation
LCMapStringW
SetLastError
DeleteCriticalSection
SetEvent
HeapCreate
GetProcAddress
GetTickCount
LoadResource
LockFile
GetTimeZoneInformation
GlobalGetAtomNameW
lstrcpyW
VirtualQuery
GetFileSize
FormatMessageW
SetFilePointer
OpenEventW
SetStdHandle
InterlockedDecrement
IsProcessorFeaturePresent
MulDiv

user32

GetSysColorBrush
GetDlgCtrlID
IsRectEmpty
InsertMenuItemW
GetMessageTime
MoveWindow
WinHelpW
RemoveMenu
GetLastActivePopup
RegisterWindowMessageW
SubtractRect
SetWindowLongW
GetDlgItem
SetWindowRgn
OpenClipboard
SetLayeredWindowAttributes
SendDlgItemMessageW
DrawFocusRect
DrawMenuBar
GetClassInfoExW
IsWindow
CopyImage
ReuseDDElParam
GetClassInfoW
AdjustWindowRectEx
CallNextHookEx
LoadImageW
IsDialogMessageW
GetSysColor
SetFocus
DestroyCursor
ReleaseCapture
SendMessageW
GetKeyboardState
GetWindow
SetScrollRange
MessageBoxW
TabbedTextOutW
DestroyIcon
InflateRect
CopyAcceleratorTableW
ScreenToClient
GetMonitorInfoW
DrawStateW
IsCharLowerW
SetClipboardData
SetCapture
GetWindowThreadProcessId
SetWindowPos
CreateMenu
ShowScrollBar
CheckDlgButton
DrawTextExW
GetMessageW
CharUpperBuffW
GetMenuItemCount
GetScrollPos
PostQuitMessage
ReleaseDC
DialogBoxParamW
KillTimer
GetClassLongW
GetPropW
RegisterClipboardFormatW
ValidateRect
GetClassNameW
EndDialog
MapWindowPoints
WindowFromPoint
SetWindowsHookExW
DeleteMenu
UpdateWindow
SetRect
SetMenu
DrawIcon
DrawTextW
EqualRect
RedrawWindow
SendDlgItemMessageA
GetMenuStringW
ToUnicodeEx
UnpackDDElParam
CharUpperW
UpdateLayeredWindow
DefFrameProcW
CallWindowProcW
PostMessageW
GetWindowRgn
CreatePopupMenu
UnionRect
PostThreadMessageW
MonitorFromPoint
DrawFrameControl
GetSubMenu
BringWindowToTop
GetWindowRect
LoadMenuW
CheckMenuItem
RealChildWindowFromPoint
DefWindowProcW
ClientToScreen
CloseClipboard
DrawEdge
FrameRect
EmptyClipboard
GetMenuCheckMarkDimensions
IntersectRect
SetMenuItemBitmaps
GetMenuItemInfoW
ShowWindow
SetMenuDefaultItem
PtInRect
MonitorFromWindow
GetMenuItemID
GetTopWindow
CreateAcceleratorTableW
HideCaret
DestroyAcceleratorTable
IsWindowVisible
TranslateMDISysAccel
GetWindowTextW
IsClipboardFormatAvailable
GetUpdateRect
FillRect
EnableScrollBar
GetKeyState
MessageBeep
EndDeferWindowPos
GetDesktopWindow
DispatchMessageW
SetForegroundWindow
InvertRect
GetWindowLongW
EnableMenuItem
GetCapture
RemovePropW
IsMenu
CreateWindowExW
MapVirtualKeyW
GetMenuDefaultItem
DestroyMenu
GetSystemMenu
GetActiveWindow
SetWindowTextW
GetKeyboardLayout
GetScrollRange
GetDoubleClickTime
TrackPopupMenu
GetMenu
MapDialogRect
TranslateMessage
BeginPaint
LockWindowUpdate
GetKeyNameTextW
DestroyWindow
BeginDeferWindowPos
IsIconic
CopyRect
EndPaint
GetWindowPlacement
TranslateAcceleratorW
SetCursorPos
MapVirtualKeyExW
EnableWindow
LoadIconW
SetWindowPlacement
SystemParametersInfoW
SetClassLongW
ShowOwnedPopups
InvalidateRect
SetRectEmpty
SetScrollInfo
SetPropW
RegisterClassW
GetNextDlgGroupItem
OffsetRect
InsertMenuW
ScrollWindow
SetScrollPos
GetMessagePos
EnumDisplayMonitors
GetScrollInfo
SetTimer
LoadBitmapW
LoadAcceleratorsW
CreateDialogIndirectParamW
WaitMessage
DrawIconEx
GetFocus
DefMDIChildProcW
GetDC
AppendMenuW
GetAsyncKeyState
IsChild
LoadCursorW
SetActiveWindow
GetWindowTextLengthW
ModifyMenuW
IsZoomed
GetCursorPos
NotifyWinEvent
GetForegroundWindow
GetWindowDC
SetCursor
GetSystemMetrics
UnhookWindowsHookEx
SetParent
CopyIcon
IsWindowEnabled
PeekMessageW
GrayStringW
GetNextDlgTabItem
GetMenuState
GetClientRect
GetIconInfo
EnumWindows
DeferWindowPos

gdi32

GetBitmapBits
PatBlt
ExtFloodFill
CombineRgn
CreateDCW
SetTextColor
CreateSolidBrush
LPtoDP
SetBkMode
GetBoundsRect
PtInRegion
SetDIBColorTable
GetViewportOrgEx
CreateRoundRectRgn
TextOutW
CreatePen
SetPixelV
CreateRectRgnIndirect
PtVisible
CreatePalette
CreateEllipticRgn
EnumFontFamiliesW
GetSystemPaletteEntries
StretchBlt
SelectClipRgn
GetBkColor
GetObjectW
Rectangle
EnumFontFamiliesExW
DPtoLP
GetPixel
SetWindowExtEx
SetRectRgn
MoveToEx
SetWindowOrgEx
IntersectClipRect
CreateHatchBrush
ScaleViewportExtEx
GetObjectType
OffsetWindowOrgEx
GetNearestPaletteIndex
RectVisible
CreateCompatibleBitmap
RestoreDC
SetPaletteEntries
OffsetRgn
GetWindowOrgEx
GetDeviceCaps
CreatePatternBrush
GetTextCharsetInfo
GetLayout
GetTextColor
GetWindowExtEx
ScaleWindowExtEx
CreatePolygonRgn
SetViewportOrgEx
BitBlt
FillRgn
OffsetViewportOrgEx
CreateBitmap
Polygon
GetClipBox
CreateDIBitmap
CreateRectRgn
Ellipse
SetPixel
ExtTextOutW
RealizePalette
ExtSelectClipRgn
DeleteObject
SaveDC
Escape
SetViewportExtEx
LineTo
GetRgnBox
SelectObject
FrameRgn
CreateCompatibleDC
GetTextExtentPoint32W
CreateDIBSection
DeleteDC
Polyline
SelectPalette
GetTextFaceW
SetLayout
SetMapMode
SetTextAlign
GetViewportExtEx
SetBkColor
GetPaletteEntries
CreateFontIndirectW
CopyMetaFileW
ExcludeClipRect
SetPolyFillMode
GetTextMetricsW
SetROP2

advapi32

IsValidSid
ConvertSidToStringSidW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
RegCreateKeyExW
GetTokenInformation
SetSecurityDescriptorDacl
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW
RegDeleteValueW
OpenProcessToken
RegDeleteKeyW
OpenThreadToken
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegOpenKeyExW
InitializeSecurityDescriptor

shell32

DragQueryFileW
ShellExecuteExW
DragFinish
SHBrowseForFolderW
SHGetDesktopFolder
ShellExecuteW
SHGetFileInfoW
SHGetSpecialFolderLocation
SHGetFolderLocation
SHGetPathFromIDListW
SHAppBarMessage

ole32

CLSIDFromString
OleCreateMenuDescriptor
CoCreateInstance
OleGetClipboard
RevokeDragDrop
IsAccelerator
ReleaseStgMedium
CoInitialize
RegisterDragDrop
CoUninitialize
CoTaskMemAlloc
DoDragDrop
CoTaskMemFree
OleDestroyMenuDescriptor
OleDuplicateData
CoInitializeEx
OleTranslateAccelerator
CreateStreamOnHGlobal
CoLockObjectExternal
OleLockRunning

oleaut32

VariantChangeType
SysAllocStringByteLen
SysStringLen
SysAllocStringLen
VariantClear
VariantInit
VariantTimeToSystemTime
SysAllocString
SystemTimeToVariantTime
SysStringByteLen
SysFreeString
VarBstrFromDate

comctl32

ImageList_GetIconSize

shlwapi

SHDeleteValueW
PathFindExtensionW
PathIsUNCW
PathStripToRootW
PathFindFileNameW
SHDeleteValueA
PathRemoveFileSpecW
SHGetThreadRef
ord345

winmm

PlaySoundW

msimg32

TransparentBlt
AlphaBlend

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

gdiplus

GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePaletteSize
GdipBitmapLockBits
GdipCreateFromHDC
GdipCreateBitmapFromScan0
GdipDeleteGraphics
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCloneImage
GdipGetImagePalette
GdipDisposeImage
GdipBitmapUnlockBits
GdipAlloc
GdipGetImagePixelFormat
GdipFree
GdipDrawImageI
GdiplusStartup
GdiplusShutdown
GdipGetImageGraphicsContext
GdipCreateBitmapFromStream
GdipCreateBitmapFromHBITMAP

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.klop
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rlew
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.koopl
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kupol
Size: 500KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2cdae5556225383ba13aaefd1e772fb9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

msimg32

imm32

gdiplus

oleacc

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 186KB

.klop Size: 303KB - Virtual size: 303KB

.rlew Size: 8KB - Virtual size: 8KB

.koopl Size: 12KB - Virtual size: 11KB

.kupol Size: 500KB - Virtual size: 500KB

.rsrc Size: 1024B - Virtual size: 712B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 186KB

.klop
Size: 303KB - Virtual size: 303KB

.rlew
Size: 8KB - Virtual size: 8KB

.koopl
Size: 12KB - Virtual size: 11KB

.kupol
Size: 500KB - Virtual size: 500KB

.rsrc
Size: 1024B - Virtual size: 712B

.reloc
Size: 5KB - Virtual size: 4KB