74b672652d53c1ee79a09b62c1948bb4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

74b672652d53c1ee79a09b62c1948bb4_JaffaCakes118
Size

332KB
MD5

74b672652d53c1ee79a09b62c1948bb4
SHA1

24ecf024be422e49bc52080adbe99ad4b1eb38cf
SHA256

bf227a3aba1ea952223670c1e57f05c488025fd608144eb6a5e120cd58d459bd
SHA512

567f7e3cfdd2b0166b902f16409f2a914ed17cf6d3c10ee4941f1235ecb239d0fee8ea7b29402f045c6302937df3c9b55699be810d94fa5db229c935c41127b0
SSDEEP

6144:eCZWE5YmDZGVjFZEVTpPltqrR9/809ZWQI27vrYBoGZvntaP/nkvY:eCZWzJ1K1vqrR9/89Q1rcWK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74b672652d53c1ee79a09b62c1948bb4_JaffaCakes118

Files

74b672652d53c1ee79a09b62c1948bb4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

785124e0ab5eb85bcbee143ff1765321

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetPixel
GetRegionData
GetBkColor
CreateHalftonePalette
SetTextAlign
CombineRgn
SetWindowOrgEx
RestoreDC
SetTextColor
GetTextExtentPoint32A
PlayEnhMetaFile
GetObjectW
LPtoDP
SetStretchBltMode
SelectObject
StretchBlt
GetGlyphIndicesW
CreateMetaFileW
CreateDIBPatternBrushPt
CreateCompatibleDC
DeleteDC
GetDeviceCaps
CreateEnhMetaFileA
GetTextAlign
MoveToEx
DeleteObject
CreateDCW
LineTo
DeleteEnhMetaFile
SetBkMode
CreateDIBSection
SetBrushOrgEx
SetViewportExtEx
CloseEnhMetaFile
CreatePalette
StretchDIBits
CloseMetaFile
CreateFontIndirectW
SetRectRgn
GetTextExtentExPointI
GetSystemPaletteEntries
GetTextMetricsW
GetLayout
RectVisible
Rectangle
CreatePolygonRgn
SetWindowExtEx
GetTextColor
SetPaletteEntries
GetBrushOrgEx
SetLayout
OffsetRgn
CreateCompatibleBitmap
GetClipBox
ExtCreateRegion
ExtTextOutW
CreatePatternBrush
CreateFontW
RealizePalette
IntersectClipRect
GetStockObject
CreateBitmap
GetTextExtentPointW
SetViewportOrgEx
GetPaletteEntries
TextOutW
SaveDC
SetBkColor
SetMapMode
GetRgnBox
PatBlt
GetDCOrgEx
CreateRectRgnIndirect
BitBlt
CreateFontIndirectA
GetTextExtentPoint32W
EqualRgn
SelectPalette
TextOutA
CreatePen
GetObjectA
SetDCPenColor
GetTextCharset
GetBkMode
GetDIBits
OffsetWindowOrgEx
CreateDCA
CreateRectRgn
CreateSolidBrush

kernel32

lstrcmpiA
GetLogicalDriveStringsW
FindNextFileW
GetSystemWow64DirectoryW
LoadLibraryW
GetFileAttributesW
CreateFileMappingA
SearchPathW
SetEnvironmentVariableW
SetErrorMode
GlobalAddAtomA
LockResource
OpenMutexW
GetLocalTime
GetSystemDefaultLCID
IsWow64Process
SizeofResource
QueryPerformanceCounter
EnterCriticalSection
InterlockedExchange
GetShortPathNameW
GetVersion
GetCurrentProcess
InitializeCriticalSection
MoveFileExW
RemoveDirectoryW
GetPrivateProfileStringW
GetThreadPriority
GetVersionExA
CompareFileTime
SetEvent
VirtualAlloc
GetLongPathNameW
GetPrivateProfileSectionW
GetAtomNameW
GetCurrentThread
SetFileTime
GetTempPathW
GetPrivateProfileStringA
GetUserDefaultUILanguage
GetCurrentDirectoryW
LocalSize
lstrcmpiW
CreateActCtxW
OpenEventW
DeleteCriticalSection
SetProcessWorkingSetSize
GetSystemDefaultUILanguage
FileTimeToSystemTime
AddAtomW
MulDiv
CreateDirectoryW
LocalFree
GetModuleFileNameA
SetThreadContext
FindClose
SetProcessShutdownParameters
GetProcAddress
ReleaseActCtx
GetSystemTimeAsFileTime
HeapDestroy
GetPrivateProfileSectionNamesW
HeapReAlloc
GetEnvironmentVariableW
DuplicateHandle
GetProcessHeap
GlobalSize
GlobalReAlloc
FindAtomW
GetACP
GlobalAddAtomW
LockFileEx
GetCurrentProcessId
GetExitCodeThread
ResetEvent
OutputDebugStringA
GlobalUnlock
CreateToolhelp32Snapshot
GetSystemInfo
GlobalLock
WritePrivateProfileSectionW
lstrcmpA
CreateThread
TlsAlloc
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsW
UnhandledExceptionFilter
WaitForMultipleObjects
EnumUILanguagesW
CloseHandle
LeaveCriticalSection
TerminateThread
TlsSetValue
SetThreadExecutionState
WaitForSingleObject
CreateFileMappingW
LocalAlloc
SetCurrentDirectoryA
GetThreadContext
GetCurrentThreadId
WriteFile
HeapFree
CreateMutexA
DeactivateActCtx
CreateEventW
MapViewOfFile
CreateDirectoryA
Process32NextW
GetModuleHandleW
Process32FirstW
ReplaceFileW
SetLastError
WideCharToMultiByte
ReadFile
CreateEventA
GetModuleHandleExW
GetFullPathNameW
LoadLibraryA
LCMapStringW
DeleteAtom
TryEnterCriticalSection
DeleteFileW
SetFilePointerEx
QueryPerformanceFrequency
HeapCreate
InterlockedCompareExchange
CreateProcessW
GetUserDefaultLCID
CreateFileW
GetTempFileNameW
InterlockedDecrement
LoadLibraryExW
SetFileAttributesW
SuspendThread
WritePrivateProfileStringW
FreeLibraryAndExitThread
ExitProcess
SystemTimeToFileTime
MultiByteToWideChar
GetLocaleInfoW
IsDBCSLeadByte
ActivateActCtx
TlsGetValue
MoveFileW
CreateMutexW
GlobalFlags
GetDateFormatW
RaiseException
CreateSemaphoreW
Sleep
GlobalAlloc
GetFileInformationByHandle
GetFileSizeEx
VirtualQuery
GetSystemDirectoryA
GetNumberFormatW
QueryDosDeviceW
GetFileAttributesExW
FindFirstFileW
FileTimeToLocalFileTime
SetThreadPriority
GlobalDeleteAtom
GetThreadLocale
CopyFileW
LocalReAlloc
OpenProcess
TerminateProcess
GetSystemDirectoryW
CompareStringA
QueueUserWorkItem
SetFilePointer
GetFileAttributesA
DebugBreak
WaitForSingleObjectEx
ReleaseSemaphore
DeleteTimerQueueTimer
FreeLibrary
LocalFileTimeToFileTime
InterlockedIncrement
GetLastError
GetWindowsDirectoryW
lstrlenA
GetTimeFormatW
SetEndOfFile
HeapAlloc
OpenMutexA
GetTickCount
GetVersionExW
lstrlenW
TlsFree
SetCurrentDirectoryW
FindResourceW
UnmapViewOfFile
GetModuleFileNameW
UnlockFileEx
CreateTimerQueueTimer
lstrcmpW
SetUnhandledExceptionFilter
GetSystemTime
ExpandEnvironmentStringsA
CreateFileA
VirtualFree
GetCPInfo
GetFileSize
LoadResource
DisableThreadLibraryCalls
GetModuleHandleA
FindResourceExW
FlushInstructionCache
GlobalFree
FormatMessageW
GetModuleHandleExA
VirtualProtect
CompareStringW
ReleaseMutex
ResumeThread

uxtheme

GetThemeMargins
OpenThemeData
GetThemeAppProperties
GetThemeBackgroundContentRect
GetThemePartSize
DrawThemeParentBackground
IsAppThemed
SetWindowTheme
DrawThemeBackground
GetThemeColor
GetThemeFont
GetThemeBackgroundExtent
CloseThemeData
IsThemeActive
GetThemeMetric

ntdll

NtAllocateVirtualMemory
RtlUshortByteSwap
LdrGetDllHandle

advapi32

RegisterTraceGuidsW
IsTextUnicode
CryptAcquireContextW
ConvertSidToStringSidW
ConvertStringSidToSidW
RegQueryValueExW
RegOpenKeyExA
RegCreateKeyExA
CryptHashData
SetTokenInformation
RegDeleteKeyW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegDeleteKeyA
CryptReleaseContext
TraceEvent
CreateProcessAsUserW
GetUserNameW
DuplicateTokenEx
RegEnumValueW
GetTraceEnableLevel
SetThreadToken
OpenProcessToken
CryptDestroyHash
OpenThreadToken
RegQueryInfoKeyW
TraceMessage
CryptCreateHash
RegOpenKeyExW
UnregisterTraceGuids
RegOpenCurrentUser
RegEnumKeyExW
RegCloseKey
RegCreateKeyA
RegDeleteValueW
RegQueryValueW
RegOpenKeyW
RegSetValueExW
RegQueryValueExA
GetTraceEnableFlags
ImpersonateSelf
GetLengthSid
GetTokenInformation
RegSetValueExA
RegCreateKeyExW
RegEnumKeyW
GetTraceLoggerHandle
RegEnumValueA
RegDeleteValueA
CryptGetHashParam

user32

PostThreadMessageW
DdeGetData
InflateRect
GetDlgCtrlID
PostMessageA
EnumWindows
GetSystemMetrics
EnumDisplaySettingsW
SetCapture
CharPrevW
SetParent
wsprintfW
SetClipboardData
IsChild
GetKeyState
LoadIconW
GetMenuStringW
SetScrollPos
MoveWindow
MsgWaitForMultipleObjectsEx
SetMenu
GetWindowTextLengthW
GetPropW
DialogBoxIndirectParamW
AppendMenuW
SetForegroundWindow
RegisterClassExW
LoadMenuW
SetMenuDefaultItem
GetClipboardData
GetWindowLongA
RemoveMenu
PeekMessageA
CopyImage
GetMenuState
AllowSetForegroundWindow
IsCharAlphaNumericW
GetTopWindow
SendMessageW
GetMessagePos
SystemParametersInfoA
IsDlgButtonChecked
ShowWindow
ClientToScreen
LoadCursorA
UnhookWindowsHookEx
GetMessageW
SetCursor
LoadAcceleratorsW
CheckDlgButton
GetLastActivePopup
CharNextW
GetCapture
GetForegroundWindow
GetNextDlgTabItem
GetClientRect
RegisterClipboardFormatW
WindowFromPoint
SetWindowRgn
TranslateMessage
CheckRadioButton
InvalidateRect
GetScrollInfo
AdjustWindowRect
UpdateWindow
CharNextA
GetMessageA
GetParent
GetSystemMenu
GetClassWord
SendDlgItemMessageW
DdeDisconnect
CharPrevA
CreateMenu
LoadCursorW
PostMessageW
MapVirtualKeyW
BeginPaint
GetKeyboardLayout
RegisterWindowMessageA
SetClipboardViewer
DrawTextW
EnumThreadWindows
DdeFreeDataHandle
SetScrollInfo
NotifyWinEvent
GetWindowDC
GetClassInfoExW
UpdateLayeredWindow
DestroyWindow
LoadBitmapW
GetActiveWindow
SetWindowTextW
GetClassLongW
BeginDeferWindowPos
TrackPopupMenu
EqualRect
GetKeyNameTextW
IntersectRect
DispatchMessageA
SetWindowsHookExW
DialogBoxParamA
AdjustWindowRectEx
IsWindowEnabled
DestroyAcceleratorTable
ReleaseDC
GetWindowInfo
DdeInitializeW
GetDesktopWindow
SetPropW
MonitorFromRect
EnumDesktopWindows
MessageBoxIndirectW
GetMessageTime
GetShellWindow
GetCursor
CreatePopupMenu
SetDlgItemTextW
SetRectEmpty
SendMessageTimeoutW
GetSysColor
LoadImageW
GetSysColorBrush
DestroyMenu
GetClassInfoW
FillRect
GetWindowRgnBox
RegisterClipboardFormatA
CharLowerW
DefWindowProcW
SetPropA
OffsetRect
FindWindowExW
CopyIcon
LockSetForegroundWindow
DdeClientTransaction
MonitorFromWindow
FindWindowW
ShowScrollBar
GetCursorPos
IsWindowVisible
GetMenuItemInfoW
MessageBeep
UnregisterClassW
MessageBoxW
GetMenuItemCount
MonitorFromPoint
ChangeClipboardChain
RemovePropA
GetClassNameW
DrawFocusRect
DialogBoxIndirectParamA
SetCursorPos
IsWindowUnicode
SetActiveWindow
SetWindowPlacement
WaitForInputIdle
EndDialog
SetMenuItemBitmaps
CheckMenuRadioItem
GetDialogBaseUnits
GetWindowLongW
LoadStringW
SendMessageA
MapWindowPoints
MessageBoxExW
ScreenToClient
GetAncestor
RegisterClassW
DrawFrameControl
InsertMenuItemW
SetWindowLongA
CloseClipboard
GetWindowThreadProcessId
RemovePropW
CallNextHookEx
PostQuitMessage
GetDlgItemTextW
IsHungAppWindow
GetComboBoxInfo
CreateIconIndirect
DeferWindowPos
SetWindowPos
GetProcessWindowStation
DrawEdge
GetSubMenu
GetDC
DrawIconEx
VkKeyScanExW
IsMenu
SetRect
PostThreadMessageA
IsIconic
DefWindowProcA
CallMsgFilterW
TranslateAcceleratorW
SetWindowLongW
SetDlgItemInt
GetWindowPlacement
DdeFreeStringHandle
DdeUninitialize
WaitMessage
GetAsyncKeyState
CreateWindowExW
RedrawWindow
DeleteMenu
DdeConnect
AttachThreadInput
DrawTextExW
CheckMenuItem
DdeNameService
ShowCaret
GetPropA
ShowOwnedPopups
EnumChildWindows
CallWindowProcW
OpenClipboard
DdeCreateStringHandleW
GetDlgItem
GetLastInputInfo
MessageBoxExA
MsgWaitForMultipleObjects
SendNotifyMessageW
SetMenuItemInfoW
LoadStringA
TrackPopupMenuEx
EnableMenuItem
ReleaseCapture
DispatchMessageW
GetWindowRect
EnableWindow
HideCaret
SendMessageTimeoutA
DdeCreateDataHandle
SetFocus
MessageBoxIndirectA
GetDoubleClickTime
SystemParametersInfoW
EndDeferWindowPos
IsRectEmpty
GetMenuItemID
MapDialogRect
GetWindowTextW
IsDialogMessageW
KillTimer
RegisterWindowMessageW
DdeQueryStringW
GetWindow
UnionRect
EmptyClipboard
GetMenuItemInfoA
ChildWindowFromPoint
DialogBoxParamW
AnimateWindow
CopyRect
GetIconInfo
CreateDialogParamW
IsWindow
PtInRect
GetFocus
FindWindowA
PeekMessageW
WinHelpW
SetTimer
CharUpperW
GetClipboardFormatNameW
EndPaint
InsertMenuW
TrackMouseEvent
GetMenuDefaultItem
DestroyIcon
CharLowerBuffW
EndMenu
GetMonitorInfoW

shell32

SHAppBarMessage
SHGetPathFromIDListW
SHGetDesktopFolder
Shell_NotifyIconA
SHGetFolderPathW
SHChangeNotify
SHSetLocalizedName
DragQueryFileW
SHGetDataFromIDListW
SHBrowseForFolderW
ShellExecuteA
ShellExecuteW
SHGetFileInfoW
SHGetFolderLocation
SHCreateShellItem
SHGetSpecialFolderPathW
SHGetFolderPathAndSubDirW
SHBindToParent
SHGetPathFromIDListA
ExtractIconW
SHFileOperationW
ShellAboutW
ExtractAssociatedIconExW
Shell_NotifyIconW
ShellExecuteExW
SHGetSpecialFolderLocation
ExtractIconExW
SHGetInstanceExplorer
SHPathPrepareForWriteW

psapi

GetProcessImageFileNameW

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

785124e0ab5eb85bcbee143ff1765321

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

kernel32

uxtheme

ntdll

advapi32

user32

shell32

psapi

Sections

.text Size: 183KB - Virtual size: 183KB

.rdata Size: 88KB - Virtual size: 88KB

.rsrc Size: 21KB - Virtual size: 21KB

.data Size: 37KB - Virtual size: 1.4MB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 183KB - Virtual size: 183KB

.rdata
Size: 88KB - Virtual size: 88KB

.rsrc
Size: 21KB - Virtual size: 21KB

.data
Size: 37KB - Virtual size: 1.4MB

.tls
Size: 512B - Virtual size: 4KB