5f35c808fc602ae0b2ee2bf52b57947e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5f35c808fc602ae0b2ee2bf52b57947e_JaffaCakes118
Size

332KB
MD5

5f35c808fc602ae0b2ee2bf52b57947e
SHA1

0f4ebaa7ba5d7bd53e717a9f70a1bb7f4e6da48b
SHA256

46acac94640e06e2a622c8dd640f89dd6a4d48fd849704ae256fa9e733b531d4
SHA512

3a4d030c880268e81992bbe5b966b21ee2c72d058c729293c764510b0c70ce0bd9ce1da272448019951be9dd4bd29c23cd1ac3eca840579032f5f7e6ff3d4238
SSDEEP

6144:jO6U03Xwvgz+ztOs5BiPrhsKiNQC62tFUfFNCG5zkFawAcCqcV7G+:3UMXIg8OsCFDkej5SaiYB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f35c808fc602ae0b2ee2bf52b57947e_JaffaCakes118

Files

5f35c808fc602ae0b2ee2bf52b57947e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cab218754784cc11b0f842234fd494e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryInfoKeyW
RegEnumValueA
GetTraceEnableLevel
RegCreateKeyExW
ImpersonateSelf
RegCreateKeyExA
GetUserNameW
RegQueryValueExA
TraceEvent
RegSetValueExW
RegCloseKey
OpenThreadToken
RegDeleteValueW
RegOpenKeyW
CreateProcessAsUserW
ConvertStringSidToSidW
RegOpenKeyExW
CryptGetHashParam
UnregisterTraceGuids
CryptAcquireContextW
RegQueryValueExW
RegSetValueExA
TraceMessage
RegDeleteKeyW
GetTraceEnableFlags
DuplicateTokenEx
ConvertSidToStringSidW
IsTextUnicode
RegEnumValueW
RegOpenCurrentUser
RegisterTraceGuidsW
CryptHashData
RegOpenKeyExA
RegQueryValueW
GetTraceLoggerHandle
CryptDestroyHash
CryptReleaseContext
RegDeleteValueA
SetThreadToken
RegDeleteKeyA
OpenProcessToken
RegCreateKeyA
GetTokenInformation
CryptCreateHash
GetLengthSid
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegEnumKeyExW
RegEnumKeyW
SetTokenInformation

gdi32

SetPaletteEntries
CreateFontIndirectW
GetDIBits
CreateCompatibleDC
CreateFontW
GetDCOrgEx
TextOutA
DeleteDC
GetTextExtentPointW
GetTextCharset
PlayEnhMetaFile
GetTextExtentExPointI
GetStockObject
GetPaletteEntries
SetTextColor
SetWindowOrgEx
SetDCPenColor
CreateCompatibleBitmap
SetLayout
GetSystemPaletteEntries
CreateEnhMetaFileA
CreateFontIndirectA
GetObjectW
SelectPalette
StretchBlt
ExtTextOutW
GetTextMetricsW
DeleteEnhMetaFile
MoveToEx
PatBlt
CreateMetaFileW
SaveDC
GetRgnBox
GetTextExtentPoint32W
SetWindowExtEx
SelectObject
CreateBitmap
GetBkMode
DeleteObject
GetGlyphIndicesW
CreatePatternBrush
ExtCreateRegion
SetTextAlign
CreateDIBPatternBrushPt
SetBrushOrgEx
BitBlt
CreateSolidBrush
GetDeviceCaps
SetBkColor
GetTextAlign
SetViewportOrgEx
LPtoDP
CreateDCA
RealizePalette
IntersectClipRect
CreatePalette
OffsetWindowOrgEx
CreateRectRgn
GetTextColor
TextOutW
RestoreDC
Rectangle
RectVisible
CreateRectRgnIndirect
EqualRgn
GetClipBox
GetTextExtentPoint32A
GetPixel
SetViewportExtEx
GetBrushOrgEx
CreatePolygonRgn
StretchDIBits
OffsetRgn
CreateDCW
CreatePen
CreateHalftonePalette
SetStretchBltMode
LineTo
SetMapMode
GetObjectA
SetRectRgn
GetLayout
CloseEnhMetaFile
GetRegionData
CloseMetaFile
GetBkColor
SetBkMode
CreateDIBSection
CombineRgn

user32

DdeUninitialize
FindWindowExW
MonitorFromPoint
ChildWindowFromPoint
MsgWaitForMultipleObjects
GetMessageW
RegisterClassExW
CharPrevA
IsHungAppWindow
SetPropA
WaitForInputIdle
CopyIcon
DdeNameService
IntersectRect
GetMonitorInfoW
GetParent
EnumDisplaySettingsW
CheckDlgButton
RemovePropA
RegisterClipboardFormatA
SendMessageTimeoutW
RegisterClassW
MessageBoxExW
MsgWaitForMultipleObjectsEx
FindWindowW
GetWindow
SetCapture
ReleaseDC
SetRect
GetAncestor
SetTimer
GetNextDlgTabItem
GetWindowLongA
RemoveMenu
UpdateLayeredWindow
TranslateMessage
DialogBoxIndirectParamA
GetKeyNameTextW
PeekMessageA
SetWindowTextW
DispatchMessageA
TrackPopupMenuEx
RedrawWindow
DeleteMenu
CheckMenuRadioItem
GetWindowRgnBox
CharUpperW
CreateIconIndirect
SetDlgItemTextW
LoadStringW
SetParent
IsChild
GetDesktopWindow
CopyImage
UpdateWindow
GetScrollInfo
HideCaret
DestroyMenu
MapDialogRect
LoadCursorA
BeginPaint
DdeGetData
CheckRadioButton
MapWindowPoints
MessageBoxW
DefWindowProcW
GetDialogBaseUnits
IsMenu
SetActiveWindow
CallWindowProcW
GetActiveWindow
CharLowerBuffW
CopyRect
PeekMessageW
IsWindow
GetSystemMetrics
MoveWindow
UnionRect
GetSubMenu
GetWindowDC
ReleaseCapture
PtInRect
PostMessageA
TrackMouseEvent
SetPropW
GetMessageA
SetWindowsHookExW
DdeConnect
LoadBitmapW
LoadAcceleratorsW
GetCursor
SetWindowLongA
CreateDialogParamW
GetSysColorBrush
SetCursor
MessageBoxExA
SetFocus
AnimateWindow
GetMessageTime
SetCursorPos
DestroyIcon
ChangeClipboardChain
GetClassWord
AdjustWindowRect
GetMenuItemInfoW
EnableWindow
SetScrollPos
SetDlgItemInt
RegisterWindowMessageA
SendNotifyMessageW
WinHelpW
GetSystemMenu
UnhookWindowsHookEx
DrawEdge
GetPropW
SetWindowPlacement
UnregisterClassW
GetWindowTextLengthW
GetForegroundWindow
GetComboBoxInfo
CloseClipboard
SendMessageTimeoutA
DdeQueryStringW
AdjustWindowRectEx
MonitorFromRect
ShowWindow
CreateMenu
LoadCursorW
MessageBoxIndirectA
GetProcessWindowStation
SetMenuDefaultItem
GetMenuItemID
OpenClipboard
DrawIconEx
GetMenuItemInfoA
IsWindowEnabled
PostMessageW
GetDlgItemTextW
AttachThreadInput
GetMessagePos
GetCapture
GetWindowThreadProcessId
GetWindowTextW
GetClassInfoW
SystemParametersInfoW
IsCharAlphaNumericW
SystemParametersInfoA
SetClipboardData
GetKeyboardLayout
SendDlgItemMessageW
GetClassInfoExW
GetWindowLongW
CreatePopupMenu
RegisterClipboardFormatW
LoadStringA
SetWindowPos
EndDialog
CharLowerW
DialogBoxParamA
EndDeferWindowPos
IsIconic
NotifyWinEvent
LoadImageW
TrackPopupMenu
AppendMenuW
SetScrollInfo
DdeInitializeW
RemovePropW
InsertMenuItemW
EnableMenuItem
EnumThreadWindows
DestroyAcceleratorTable
CharPrevW
GetClientRect
GetCursorPos
MessageBoxIndirectW
GetWindowRect
PostThreadMessageW
DrawTextW
LoadMenuW
GetDlgCtrlID
LockSetForegroundWindow
GetMenuState
SetMenu
DdeCreateDataHandle
DdeDisconnect
GetMenuStringW
GetSysColor
FillRect
DialogBoxParamW
GetWindowInfo
IsRectEmpty
CallMsgFilterW
ScreenToClient
GetFocus
PostThreadMessageA
PostQuitMessage
SetMenuItemInfoW
DdeCreateStringHandleW
IsWindowUnicode
DdeFreeStringHandle
InsertMenuW
MonitorFromWindow
EndPaint
GetMenuItemCount
DispatchMessageW
GetClipboardData
EqualRect
EnumChildWindows
GetTopWindow
GetWindowPlacement
GetClipboardFormatNameW
RegisterWindowMessageW
GetDC
CallNextHookEx
KillTimer
GetPropA
DrawTextExW
GetIconInfo
InflateRect
TranslateAcceleratorW
DialogBoxIndirectParamW
DestroyWindow
DdeFreeDataHandle
WaitMessage
ShowCaret
EndMenu
IsWindowVisible
LoadIconW
SetWindowRgn
CharNextA
GetClassLongW
GetAsyncKeyState
GetLastInputInfo
SetClipboardViewer
DeferWindowPos
EnumWindows
VkKeyScanExW
GetMenuDefaultItem
CharNextW
MapVirtualKeyW
OffsetRect
SetMenuItemBitmaps
GetLastActivePopup
GetDlgItem
SetWindowLongW
GetKeyState
GetClassNameW
DefWindowProcA
DdeClientTransaction
EmptyClipboard
ShowScrollBar
wsprintfW
SendMessageA
SendMessageW
MessageBeep
GetDoubleClickTime
WindowFromPoint
IsDlgButtonChecked
CreateWindowExW
EnumDesktopWindows
SetRectEmpty
FindWindowA
DrawFocusRect
GetShellWindow
ClientToScreen
SetForegroundWindow
InvalidateRect
CheckMenuItem
ShowOwnedPopups
IsDialogMessageW
BeginDeferWindowPos
DrawFrameControl
AllowSetForegroundWindow

uxtheme

GetThemeBackgroundContentRect
IsThemeActive
CloseThemeData
DrawThemeBackground
OpenThemeData
DrawThemeParentBackground
GetThemeMetric
GetThemePartSize
GetThemeAppProperties
GetThemeMargins
GetThemeColor
GetThemeFont
SetWindowTheme
IsAppThemed
GetThemeBackgroundExtent

ntdll

LdrGetDllHandle
NtAllocateVirtualMemory
RtlUshortByteSwap

psapi

GetProcessImageFileNameW

kernel32

GetModuleFileNameA
GetLastError
GetPrivateProfileSectionNamesW
lstrcmpiW
HeapFree
CreateEventW
GetTempFileNameW
GetFileAttributesA
GetCurrentThreadId
SetEnvironmentVariableW
HeapAlloc
GlobalAddAtomW
GetVersion
GetShortPathNameW
CreateEventA
FreeLibrary
lstrcmpA
LeaveCriticalSection
SetLastError
CreateMutexA
CopyFileW
GetExitCodeThread
UnhandledExceptionFilter
SetProcessWorkingSetSize
GetThreadPriority
SetFilePointerEx
GetModuleHandleA
TryEnterCriticalSection
QueryPerformanceFrequency
VirtualAlloc
GetWindowsDirectoryW
lstrlenW
GetACP
MapViewOfFile
FindAtomW
LocalAlloc
GetModuleFileNameW
GlobalDeleteAtom
SetFileAttributesW
SetThreadPriority
GetProcAddress
ReleaseSemaphore
CloseHandle
GetProcessHeap
GetFileAttributesW
QueryPerformanceCounter
GetSystemDefaultLCID
WaitForSingleObject
SetUnhandledExceptionFilter
VirtualFree
FileTimeToSystemTime
SetThreadContext
GetSystemWow64DirectoryW
InitializeCriticalSection
DeleteCriticalSection
WritePrivateProfileStringW
GlobalSize
VirtualQuery
DebugBreak
lstrcmpW
OutputDebugStringA
CreateTimerQueueTimer
TerminateThread
TlsSetValue
FreeLibraryAndExitThread
GetCurrentProcessId
Process32NextW
DeleteAtom
CreateFileW
GetPrivateProfileStringW
CreateFileMappingA
GetCurrentThread
LoadLibraryW
MoveFileW
AddAtomW
WritePrivateProfileSectionW
CreateMutexW
LocalSize
DisableThreadLibraryCalls
GetLocalTime
LoadLibraryA
ReleaseActCtx
GetThreadLocale
InterlockedDecrement
LocalFileTimeToFileTime
GetAtomNameW
GetFileSize
InterlockedCompareExchange
FormatMessageW
LCMapStringW
SetEndOfFile
VirtualProtect
lstrlenA
GetUserDefaultLCID
GetCurrentDirectoryW
CreateDirectoryA
SetCurrentDirectoryW
MoveFileExW
SetEvent
SetProcessShutdownParameters
SuspendThread
GetSystemDefaultUILanguage
HeapCreate
WaitForSingleObjectEx
DeleteTimerQueueTimer
GetSystemDirectoryA
FindClose
CreateDirectoryW
CreateToolhelp32Snapshot
GetPrivateProfileStringA
SetFilePointer
GetNumberFormatW
CreateThread
DeactivateActCtx
GetSystemDirectoryW
ResetEvent
ResumeThread
GetTimeFormatW
CreateSemaphoreW
Sleep
LockFileEx
LoadLibraryExW
LocalFree
ExitProcess
OpenMutexA
GetCurrentProcess
GetLongPathNameW
ActivateActCtx
FileTimeToLocalFileTime
HeapReAlloc
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByte
LocalReAlloc
FindResourceExW
GetPrivateProfileSectionW
OpenEventW
GetVersionExA
UnlockFileEx
SetThreadExecutionState
GetFullPathNameW
WriteFile
IsWow64Process
FindNextFileW
CreateFileMappingW
GetLocaleInfoW
GetFileSizeEx
TlsGetValue
ReleaseMutex
QueueUserWorkItem
MulDiv
GetEnvironmentVariableW
OpenMutexW
QueryDosDeviceW
GetCPInfo
GetSystemTime
GetSystemInfo
LoadResource
FindResourceW
CreateProcessW
GetTempPathW
GlobalLock
RemoveDirectoryW
GetModuleHandleExA
TlsAlloc
TlsFree
DeleteFileW
WideCharToMultiByte
GetModuleHandleExW
DuplicateHandle
GlobalUnlock
GetFileInformationByHandle
GetModuleHandleW
TerminateProcess
SetErrorMode
GetFileAttributesExW
UnmapViewOfFile
CreateFileA
GetSystemTimeAsFileTime
OpenProcess
lstrcmpiA
EnterCriticalSection
FindFirstFileW
LockResource
GetTickCount
GetThreadContext
SizeofResource
InterlockedExchange
ExpandEnvironmentStringsW
EnumUILanguagesW
FlushInstructionCache
GlobalFree
GetLogicalDriveStringsW
ReplaceFileW
CompareStringW
Process32FirstW
SearchPathW
SetFileTime
GlobalAlloc
GetUserDefaultUILanguage
CompareFileTime
GlobalReAlloc
GlobalFlags
SetCurrentDirectoryA
GlobalAddAtomA
SystemTimeToFileTime
HeapDestroy
RaiseException
ExpandEnvironmentStringsA
ReadFile
GetDateFormatW
InterlockedIncrement
WaitForMultipleObjects
CompareStringA
CreateActCtxW
MultiByteToWideChar
GetVersionExW

shell32

SHGetFolderPathAndSubDirW
ShellExecuteA
SHBindToParent
SHSetLocalizedName
SHAppBarMessage
SHGetSpecialFolderLocation
SHCreateShellItem
SHGetFolderLocation
ShellExecuteW
SHGetPathFromIDListW
Shell_NotifyIconW
ExtractAssociatedIconExW
SHGetPathFromIDListA
SHGetFileInfoW
SHPathPrepareForWriteW
SHFileOperationW
ShellAboutW
SHGetDesktopFolder
DragQueryFileW
Shell_NotifyIconA
SHGetDataFromIDListW
SHBrowseForFolderW
SHGetFolderPathW
SHGetInstanceExplorer
SHGetSpecialFolderPathW
ShellExecuteExW
SHChangeNotify
ExtractIconW
ExtractIconExW

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cab218754784cc11b0f842234fd494e7

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

gdi32

user32

uxtheme

ntdll

psapi

kernel32

shell32

Sections

.text Size: 183KB - Virtual size: 183KB

.rdata Size: 88KB - Virtual size: 88KB

.rsrc Size: 21KB - Virtual size: 21KB

.data Size: 37KB - Virtual size: 1.4MB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 183KB - Virtual size: 183KB

.rdata
Size: 88KB - Virtual size: 88KB

.rsrc
Size: 21KB - Virtual size: 21KB

.data
Size: 37KB - Virtual size: 1.4MB

.tls
Size: 512B - Virtual size: 4KB