69e2d06b8fed14a9f1597de42d714130_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

69e2d06b8fed14a9f1597de42d714130_JaffaCakes118
Size

358KB
MD5

69e2d06b8fed14a9f1597de42d714130
SHA1

2caa1da23fb3cef3bbb8c0cdc36f60ddeb6bca43
SHA256

1223a61250c78f07b97bd47d05603061de96e76d7ea8dac03b3e742051e90800
SHA512

8bc3190aede2399cfac8e786bfa0e96495dcd5af886f295d7865d0d734d7c7360f77ef5480cfba162c3fc484301cb95b758c95ed0b29619a6f5b8dddef02b38b
SSDEEP

6144:jpZCZ8VKGP6F+M/3w9sDMc8T4YscODRRWudz8ZjfvNElW/cK:dZqG4opsEODHrolT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69e2d06b8fed14a9f1597de42d714130_JaffaCakes118

Files

69e2d06b8fed14a9f1597de42d714130_JaffaCakes118
.exe windows:4 windows x86 arch:x86

564b0d7f72444ebfce0f82c62e583a4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmGenerateMessage
ImmEnumRegisterWordW
ImmDestroySoftKeyboard
ImmDestroyContext
ImmCreateIMCC

kernel32

InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByte
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockResource
MoveFileExW
MoveFileW
MulDiv
MultiByteToWideChar
OpenFile
OpenMutexA
OpenThread
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
RemoveDirectoryA
RemoveDirectoryW
ResumeThread
RtlMoveMemory
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetFileTime
SetHandleInformation
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrlenA
lstrlenW
GetDriveTypeW
GetEnvironmentVariableW
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesW
GetFileSize
GetFileTime
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProfileIntA
CloseHandle
CompareFileTime
GetShortPathNameW
GetStdHandle
GetStringTypeExA
CompareStringA
CompareStringW
CopyFileW
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileW
CreateMutexA
CreateMutexW
CreateProcessW
CreateThread
CreateTimerQueueTimer
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeleteTimerQueueTimer
DeviceIoControl
DuplicateHandle
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FindResourceA
FlushFileBuffers
FlushInstructionCache
FormatMessageA
FormatMessageW
FreeLibrary
FreeLibraryAndExitThread
FreeResource
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
InitializeCriticalSection
HeapReAlloc
HeapFree
HeapAlloc
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalLock
GlobalFree
GlobalAlloc
GetVersionExA
GetVersion
GetUserDefaultUILanguage
GetUserDefaultLCID
GetTimeFormatW
GetTickCount
GetTempPathW
GetTempPathA
GetTempFileNameW
GetTempFileNameA
GetSystemWindowsDirectoryA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDirectoryW
GetSystemDirectoryA
GetDateFormatW

ole32

DoDragDrop
GetHGlobalFromStream
HWND_UserFree
HWND_UserMarshal
HWND_UserSize
HWND_UserUnmarshal
OleInitialize
OleLoadFromStream
OleRegEnumVerbs
OleRegGetMiscStatus
OleRegGetUserType
OleRun
CreateStreamOnHGlobal
OleSetClipboard
OleUninitialize
PropVariantClear
PropVariantCopy
ReadClassStm
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
StringFromCLSID
StringFromGUID2
WriteClassStm
CreateOleAdviseHolder
CreateDataAdviseHolder
CoWaitForMultipleHandles
CoUnmarshalInterface
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
OleSaveToStream
CoSetProxyBlanket
CoRevokeClassObject
CoResumeClassObjects
CoReleaseServerProcess
CoReleaseMarshalData
CoRegisterClassObject
CoMarshalInterface
CoMarshalInterThreadInterfaceInStream
CoLockObjectExternal
CoInitializeEx
CoInitialize
CoGetMalloc
CoGetInterfaceAndReleaseStream
CoGetClassObject
CoFreeUnusedLibraries
CoCreateInstance
CoCreateGuid
CoAllowSetForegroundWindow
CoAddRefServerProcess
CLSIDFromString
CoTaskMemAlloc

ws2_32

WSALookupServiceEnd
WSAEnumNameSpaceProvidersA
WSADuplicateSocketA
WSACloseEvent
WSACancelAsyncRequest
WSAAsyncGetProtoByNumber
WSAAsyncGetProtoByName
ntohs

advapi32

AllocateAndInitializeSid
CloseServiceHandle
CreateProcessWithLogonW
EnumServicesStatusA
EqualSid
FreeSid
GetTraceEnableLevel
GetTraceLoggerHandle
ImpersonateLoggedOnUser
OpenProcessToken
OpenSCManagerA
OpenThreadToken
RegCloseKey
RegCreateKeyExA
RegCreateKeyExW
RegDeleteKeyA
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyA
RegEnumKeyExA
RegEnumKeyExW
RegEnumValueW
RegOpenKeyA
RegOpenKeyExA
GetTokenInformation
RegOpenKeyExW
RegQueryInfoKeyA
RegQueryInfoKeyW
RegQueryValueA
RegQueryValueExA
RegQueryValueExW
RegSetValueExA
RegSetValueExW
RegisterTraceGuidsA
RevertToSelf
TraceEvent
UnregisterTraceGuids
GetTraceEnableFlags

dsound

ord10

gdi32

CreateSolidBrush
EnumFontFamiliesExA
CreatePen
CreateMetaFileA
CreateFontIndirectW
DeleteDC
CreateFontA
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CloseMetaFile
BitBlt
CreateFontIndirectA
DeleteMetaFile
ExtTextOutA
ExtTextOutW
GetClipBox
GetDeviceCaps
GetObjectA
GetObjectW
DeleteObject
GetTextExtentPointA
GetTextExtentPointW
GetTextMetricsA
LPtoDP
LineTo
MoveToEx
Polygon
Polyline
Rectangle
RestoreDC
SaveDC
SelectObject
SetBkColor
SetBkMode
SetMapMode
SetTextColor
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StretchBlt
TextOutW
GetTextExtentPoint32W
Ellipse
CreateRectRgnIndirect
PatBlt

user32

EnableMenuItem
EnableWindow
EndDialog
EndPaint
EnumThreadWindows
EnumWindows
EqualRect
FillRect
FindWindowExA
FindWindowExW
GetCapture
GetClassInfoA
GetClassInfoExA
GetClassInfoExW
GetClassInfoW
GetClassNameA
GetClassNameW
GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItemInt
GetDlgItemTextW
GetDoubleClickTime
GetFocus
GetGUIThreadInfo
GetKeyState
GetKeyboardLayoutList
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
GetMenuState
GetMenuStringW
GetMessagePos
GetMessageW
GetMonitorInfoA
GetNextDlgGroupItem
GetNextDlgTabItem
GetParent
GetPropA
GetPropW
GetScrollBarInfo
GetSysColorBrush
GetWindowDC
GetWindowLongA
GetWindowLongW
EmptyClipboard
GetWindowRect
GetWindowTextA
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
InflateRect
InsertMenuItemW
InsertMenuW
IntersectRect
InvalidateRect
IsDialogMessageW
IsDlgButtonChecked
IsIconic
IsMenu
IsWindow
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
IsZoomed
KillTimer
LoadAcceleratorsA
LoadAcceleratorsW
LoadImageA
LoadImageW
LoadKeyboardLayoutA
LoadMenuA
LoadMenuW
LoadStringA
LoadStringW
MapWindowPoints
MessageBeep
DispatchMessageW
MessageBoxW
ModifyMenuW
MonitorFromPoint
MoveWindow
OffsetRect
OpenClipboard
PeekMessageA
PostMessageW
PostThreadMessageA
PtInRect
RegisterClassA
RegisterClassW
RegisterWindowMessageA
ReleaseDC
RemoveMenu
RemovePropW
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageA
SendMessageCallbackW
SendMessageTimeoutA
SetCapture
SetClipboardData
SetCursor
SetDlgItemInt
SetForegroundWindow
SetMenu
SetMenuDefaultItem
SetMenuItemInfoA
SetParent
SetPropA
SetPropW
SetRect
SetRectEmpty
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextA
SetWindowTextW
SetWindowsHookExA
ShowWindow
SystemParametersInfoA
TrackMouseEvent
TranslateAcceleratorA
TranslateAcceleratorW
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassA
UpdateWindow
ValidateRect
WindowFromPoint
DrawTextW
DrawTextExW
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DialogBoxParamW
DialogBoxParamA
DialogBoxIndirectParamA
DestroyWindow
DestroyMenu
DestroyIcon
DefWindowProcW
DefWindowProcA
CreateWindowExA
CreatePopupMenu
CreateDialogParamW
CopyRect
CloseClipboard
ClientToScreen
CheckMenuRadioItem
CheckMenuItem
CheckDlgButton
CharUpperW
CharUpperA
CharPrevA
CharNextW
CharNextExA
CharNextA
CharLowerW
CallWindowProcA
BeginPaint
BeginDeferWindowPos
AppendMenuW
AppendMenuA
AdjustWindowRect
GetWindowPlacement
MessageBoxA

msvfw32

ICLocate

shlwapi

ord16
UrlUnescapeW
UrlUnescapeA
UrlCreateFromPathW
UrlApplySchemeW
StrTrimA
StrToIntW
StrToIntExW
StrToIntExA
StrToIntA
StrStrW
StrStrIW
StrStrIA
StrStrA
StrRChrW
StrRChrIW
StrFormatByteSizeW
StrDupW
StrDupA
StrCmpW
StrCmpNW
StrCmpNIW
StrCmpNIA
StrCmpIW
StrChrA
StrCSpnW
StrCSpnA
SHStrDupW
SHSetValueW
SHSetValueA
SHRegSetUSValueA
SHRegGetBoolUSValueA
SHQueryValueExW
SHQueryValueExA
SHQueryInfoKeyW
SHGetValueW
SHGetValueA
SHEnumKeyExW
SHDeleteValueW
SHCopyKeyA
SHAutoComplete
PathUnquoteSpacesW
PathUnquoteSpacesA
PathUnExpandEnvStringsW
PathStripPathW
PathRenameExtensionW
PathRemoveFileSpecW
PathRemoveFileSpecA
PathRemoveExtensionW
PathRemoveBackslashW
PathRemoveArgsA
PathRelativePathToW
PathIsURLW
PathIsRootW
PathIsRelativeW
PathIsFileSpecW
PathIsDirectoryW
PathIsDirectoryEmptyW
PathIsContentTypeW
PathIsContentTypeA
PathGetArgsA
PathFindFileNameW
PathFindFileNameA
PathFindExtensionW
PathFileExistsW
PathFileExistsA
PathCompactPathExW
PathCombineW
PathCanonicalizeW
PathAppendW
SHDeleteValueA
PathAppendA
PathAddExtensionW
PathAddBackslashW
HashData
SHDeleteKeyA
SHDeleteKeyW
SHCreateShellPalette

comctl32

ImageList_GetIconSize

rpcrt4

CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_QueryInterface
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
IUnknown_Release_Proxy
NdrCStdStubBuffer_Release
NdrClientCall2
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrOleAllocate
NdrOleFree

Sections

.text
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 238KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

564b0d7f72444ebfce0f82c62e583a4d

Headers

File Characteristics

Imports

imm32

kernel32

ole32

ws2_32

advapi32

dsound

gdi32

user32

msvfw32

shlwapi

comctl32

rpcrt4

Sections

.text Size: 55KB - Virtual size: 56KB

.rdata Size: 238KB - Virtual size: 240KB

.data Size: 18KB - Virtual size: 19KB

.idata Size: 15KB - Virtual size: 15KB

.rsrc Size: 30KB - Virtual size: 31KB

.text
Size: 55KB - Virtual size: 56KB

.rdata
Size: 238KB - Virtual size: 240KB

.data
Size: 18KB - Virtual size: 19KB

.idata
Size: 15KB - Virtual size: 15KB

.rsrc
Size: 30KB - Virtual size: 31KB