872db8cc9a7154e81929e9913cc7b125_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

872db8cc9a7154e81929e9913cc7b125_JaffaCakes118
Size

847KB
MD5

872db8cc9a7154e81929e9913cc7b125
SHA1

dfe8b42e10c1448889f0cd3b7bc2fc6d59655cd7
SHA256

ca0015c650fa13510017fc35096f72d8487022d1e048ed03901f3473f04b0443
SHA512

a1ae2960725d38abf57761ffe91a31a74d8350eca35a9c2e7a80810f04c4e1c075570a7d46ba5da1ae44461f049258f18d3f1a5a6bbcb92bed363585777c7861
SSDEEP

24576:TtZ/demQhHZO7hW/N8yA5A/XZXdY/qVfF3h65lTs0R2Z:p/PQhMUiA/JX68VywZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
872db8cc9a7154e81929e9913cc7b125_JaffaCakes118

Files

872db8cc9a7154e81929e9913cc7b125_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0d02db791f9f4ba8651ac8a51d7a1332

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
IsDebuggerPresent
CreateThread
GlobalFindAtomW
GetCPInfo
RaiseException
CopyFileW
InterlockedDecrement
WideCharToMultiByte
lstrcmpiW
VirtualProtectEx
LocalAlloc
IsValidCodePage
CloseHandle
GlobalDeleteAtom
CreateEventW
FlushFileBuffers
CreateFileW
SetFilePointer
LocalFree
FreeEnvironmentStringsW
FormatMessageW
Sleep
LocalReAlloc
WaitForMultipleObjects
SetEnvironmentVariableA
CompareStringW
LoadLibraryExW
GetStartupInfoW
GetOEMCP
CreateMutexW
SetUnhandledExceptionFilter
GetTempPathW
FindResourceExW
GetVersionExW
SetHandleCount
QueryPerformanceCounter
GetFileAttributesExW
FileTimeToLocalFileTime
TerminateThread
HeapDestroy
GetUserDefaultUILanguage
SetLastError
EnterCriticalSection
HeapCreate
LoadLibraryW
SetStdHandle
GlobalAddAtomW
TlsGetValue
HeapFree
GetTimeZoneInformation
GetStdHandle
GetLocaleInfoW
lstrlenA
GetCurrentThreadId
IsProcessorFeaturePresent
MultiByteToWideChar
lstrcmpA
GetCurrentThread
GetFileSizeEx
GetTempFileNameW
FindClose
lstrlenW
UnhandledExceptionFilter
VirtualAlloc
TlsAlloc
GetCurrentDirectoryW
HeapAlloc
FindFirstFileW
GetNumberFormatW
GetSystemTimeAsFileTime
GetSystemDirectoryW
InitializeCriticalSection
LeaveCriticalSection
VirtualQuery
lstrcpyW
GetCommandLineW
TlsSetValue
MulDiv
GetACP
WaitForSingleObject
HeapSetInformation
GlobalAlloc
LCMapStringW
FindResourceW
SetEvent
GetVolumeInformationW
WriteConsoleW
GetConsoleMode
GlobalHandle
LockResource
SizeofResource
ReadFile
LoadResource
GlobalSize
FileTimeToSystemTime
GlobalFlags
GetEnvironmentStringsW
InterlockedExchange
DeleteCriticalSection
GetSystemInfo
FreeResource
GetCurrentProcess
ExitThread
HeapReAlloc
SetThreadPriority
FreeLibrary
GetFileType
DuplicateHandle
SetEndOfFile
HeapQueryInformation
lstrcmpW
GetFileAttributesW
TlsFree
InterlockedIncrement
GetFullPathNameW
UnlockFile
LockFile
CreateNamedPipeW
GetStringTypeW
GetConsoleCP
GetFileTime
GlobalFree
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCurrentProcessId
WriteFile
GetModuleHandleW
ResumeThread
GlobalGetAtomNameW
GetProcAddress
GlobalReAlloc
GetProcessHeap
HeapSize
GetFileSize
GlobalUnlock
GetTickCount
GetModuleFileNameW
GetLastError

user32

GetSubMenu
SetParent
GetKeyboardState
MonitorFromPoint
GetKeyNameTextW
CheckDlgButton
DestroyAcceleratorTable
SetWindowPlacement
ReleaseDC
GetMenuItemCount
GetClassLongW
IsWindowEnabled
LoadAcceleratorsW
WinHelpW
GetMenuStringW
DeleteMenu
SendDlgItemMessageW
SetWindowTextW
TranslateMDISysAccel
GetActiveWindow
DialogBoxParamW
RegisterClipboardFormatW
BeginDeferWindowPos
GetUpdateRect
RedrawWindow
PeekMessageW
OpenClipboard
WaitMessage
CreateDialogIndirectParamW
SetScrollRange
IsChild
GetSysColorBrush
ScrollWindow
UnionRect
PostQuitMessage
SetCapture
GetMenuCheckMarkDimensions
HideCaret
UpdateWindow
GetWindowThreadProcessId
GrayStringW
GetAsyncKeyState
InsertMenuItemW
LoadIconW
LoadCursorW
InvertRect
GetWindowTextW
GetMonitorInfoW
MapWindowPoints
TranslateAcceleratorW
WindowFromPoint
SendMessageW
GetScrollInfo
ReuseDDElParam
GetCursorPos
GetMenuDefaultItem
UnhookWindowsHookEx
SendDlgItemMessageA
GetCapture
SetScrollPos
PtInRect
GetClassNameW
PostMessageW
GetMessageW
MessageBoxW
GetMenuItemInfoW
EndDialog
RemoveMenu
GetLastActivePopup
ShowOwnedPopups
CallNextHookEx
IsWindowVisible
ToUnicodeEx
CopyIcon
EndDeferWindowPos
GetClassInfoW
GetDlgCtrlID
SetMenuItemBitmaps
IsRectEmpty
LoadBitmapW
EnableMenuItem
DrawFocusRect
GetSystemMenu
IsCharLowerW
ShowWindow
TranslateMessage
DestroyCursor
TabbedTextOutW
FrameRect
GetForegroundWindow
GetWindowRgn
FillRect
IntersectRect
EndPaint
UpdateLayeredWindow
GetScrollPos
GetWindowPlacement
DefWindowProcW
LoadMenuW
PostThreadMessageW
SetScrollInfo
DrawIconEx
BringWindowToTop
GetKeyState
DrawTextExW
MoveWindow
GetMessageTime
BeginPaint
CheckMenuItem
MapVirtualKeyW
DestroyMenu
EqualRect
EnumDisplayMonitors
GetMenuState
OffsetRect
SetFocus
SubtractRect
MapVirtualKeyExW
InsertMenuW
CreateWindowExW
GetDC
EnableWindow
CallWindowProcW
GetPropW
GetSystemMetrics
GetClassInfoExW
SetCursor
DeferWindowPos
RegisterWindowMessageW
SetActiveWindow
GetWindow
GetFocus
GetTopWindow
IsClipboardFormatAvailable
EnableScrollBar
GetClientRect
GetNextDlgTabItem
UnpackDDElParam
EmptyClipboard
KillTimer
GetScrollRange
MapDialogRect
MonitorFromWindow
DrawFrameControl
CopyAcceleratorTableW
CharUpperW
IsWindow
GetNextDlgGroupItem
LoadImageW
GetIconInfo
SetMenu
DrawIcon
DrawEdge
GetWindowTextLengthW
ClientToScreen
GetDesktopWindow
IsIconic
GetWindowDC
CreateMenu
InflateRect
GetDlgItem
EnumWindows
SetClipboardData
GetWindowRect
DrawStateW
GetWindowLongW
DrawTextW
SetTimer
IsDialogMessageW
RegisterClassW
SetPropW
DefFrameProcW
SetLayeredWindowAttributes
CopyRect
LockWindowUpdate
SetCursorPos
GetMenuItemID
ReleaseCapture
AppendMenuW
SetRect
SetForegroundWindow
AdjustWindowRectEx
CreateAcceleratorTableW
CreatePopupMenu
GetDoubleClickTime
DestroyIcon
InvalidateRect
DestroyWindow
DefMDIChildProcW
RealChildWindowFromPoint
SetWindowRgn
IsZoomed
SetWindowPos
GetMenu
SetWindowsHookExW
CharUpperBuffW
SetWindowLongW
GetSysColor
ValidateRect
SetRectEmpty
ScreenToClient
GetKeyboardLayout
NotifyWinEvent
CloseClipboard
DispatchMessageW
CopyImage
RemovePropW
GetMessagePos
ShowScrollBar
SetClassLongW
ModifyMenuW
SetMenuDefaultItem
DrawMenuBar
IsMenu
SystemParametersInfoW
MessageBeep
TrackPopupMenu

gdi32

CreateRoundRectRgn
BitBlt
SetTextColor
GetNearestPaletteIndex
ScaleViewportExtEx
LineTo
FillRgn
SetPaletteEntries
SelectObject
SetViewportOrgEx
GetDeviceCaps
CopyMetaFileW
EnumFontFamiliesW
SetLayout
GetPaletteEntries
StretchBlt
GetObjectType
CreateBitmap
Polygon
SelectClipRgn
SetWindowOrgEx
CreatePalette
SetViewportExtEx
GetRgnBox
CreateRectRgnIndirect
SetBkMode
SetROP2
RestoreDC
GetSystemPaletteEntries
EnumFontFamiliesExW
OffsetWindowOrgEx
GetPixel
CreateCompatibleBitmap
SetPolyFillMode
SetWindowExtEx
CreateRectRgn
DeleteObject
GetTextColor
LPtoDP
OffsetViewportOrgEx
CreateHatchBrush
SetTextAlign
GetViewportExtEx
GetTextFaceW
GetBkColor
GetWindowOrgEx
SetPixel
CreateEllipticRgn
SetPixelV
CreateDIBitmap
DeleteDC
MoveToEx
PtInRegion
ExtTextOutW
CreateCompatibleDC
GetBitmapBits
CreatePatternBrush
GetViewportOrgEx
SetDIBColorTable
GetClipBox
CreateFontIndirectW
GetLayout
CombineRgn
FrameRgn
OffsetRgn
ScaleWindowExtEx
SaveDC
Polyline
GetTextCharsetInfo
RectVisible
CreatePen
Ellipse
GetTextExtentPoint32W
ExcludeClipRect
Escape
PatBlt
RealizePalette
CreateDCW
SetBkColor
ExtFloodFill
GetObjectW
SelectPalette
ExtSelectClipRgn
CreatePolygonRgn
CreateSolidBrush
GetTextMetricsW
GetBoundsRect
CreateDIBSection
SetMapMode
GetWindowExtEx
DPtoLP
TextOutW
SetRectRgn
Rectangle
IntersectClipRect
PtVisible

advapi32

RegDeleteValueW
GetSecurityDescriptorSacl
RegDeleteKeyW
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenProcessToken
RegOpenKeyExW
ConvertSidToStringSidW
GetTokenInformation
RegCreateKeyExW
OpenThreadToken
RegEnumKeyExW
SetSecurityDescriptorSacl
InitializeSecurityDescriptor
RegQueryValueExW
RegSetValueExW
IsValidSid
SetSecurityDescriptorDacl

shell32

SHGetFileInfoW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetDesktopFolder
ShellExecuteExW
SHGetFolderLocation
SHGetSpecialFolderLocation
DragQueryFileW
DragFinish
ShellExecuteW
SHAppBarMessage

ole32

OleTranslateAccelerator
CoCreateInstance
CoInitialize
CoInitializeEx
IsAccelerator
RegisterDragDrop
DoDragDrop
OleLockRunning
ReleaseStgMedium
OleDestroyMenuDescriptor
CoTaskMemFree
CoTaskMemAlloc
OleGetClipboard
CreateStreamOnHGlobal
OleCreateMenuDescriptor
CLSIDFromString
CoUninitialize
OleDuplicateData
RevokeDragDrop
CoLockObjectExternal

oleaut32

VariantChangeType
SysStringByteLen
SysFreeString
VariantInit
SysAllocStringByteLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
VariantClear
SysStringLen
SysAllocString
VarBstrFromDate

comctl32

ImageList_GetIconSize

shlwapi

SHDeleteEmptyKeyA
PathIsUNCW
SHDeleteValueA
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
PathStripToRootW

gdiplus

GdipDisposeImage
GdipGetImagePalette
GdipCreateFromHDC
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipDrawImageI
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipCreateBitmapFromHBITMAP
GdipFree
GdipSetInterpolationMode
GdipBitmapLockBits
GdipGetImagePixelFormat
GdipDeleteGraphics
GdipGetImageWidth
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipAlloc
GdipGetImagePaletteSize
GdipGetImageGraphicsContext

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tew
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.klop
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rlew
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.koopl
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kupol
Size: 500KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d02db791f9f4ba8651ac8a51d7a1332

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

gdiplus

oleacc

Sections

.text Size: 9KB - Virtual size: 8KB

.tew Size: 8KB - Virtual size: 8KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 512B - Virtual size: 175KB

.klop Size: 303KB - Virtual size: 303KB

.rlew Size: 3KB - Virtual size: 3KB

.koopl Size: 1024B - Virtual size: 528B

.kupol Size: 500KB - Virtual size: 500KB

.rsrc Size: 1024B - Virtual size: 712B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 8KB

.tew
Size: 8KB - Virtual size: 8KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 512B - Virtual size: 175KB

.klop
Size: 303KB - Virtual size: 303KB

.rlew
Size: 3KB - Virtual size: 3KB

.koopl
Size: 1024B - Virtual size: 528B

.kupol
Size: 500KB - Virtual size: 500KB

.rsrc
Size: 1024B - Virtual size: 712B

.reloc
Size: 5KB - Virtual size: 4KB