876c1a69ce8548c45ab19ba88db5e5de_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

876c1a69ce8548c45ab19ba88db5e5de_JaffaCakes118
Size

332KB
MD5

876c1a69ce8548c45ab19ba88db5e5de
SHA1

ec9ef02408caa2f8a55231d639e47aca97e92645
SHA256

8796c958e875048e58fa857bbf8d5d07e7b38635e2bdc073dfd83fcbe4438703
SHA512

0af72c3a9878edbc2c81a3a5fd2ea00559104b3b9e5e5d16c62335fcdccf10fc3ef65fe4be4f5cac5e0381f150083e3cb9a83fb70797a3c46d6559b56089f6db
SSDEEP

6144:ldNQUIixJYpDrHO+5qci9XYxr6KEVuf8hGWzWgsHNLzIHAIzKiSQnC9q91PN:PNQvixWpD2XmtEVH4NLOzb2q91F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
876c1a69ce8548c45ab19ba88db5e5de_JaffaCakes118

Files

876c1a69ce8548c45ab19ba88db5e5de_JaffaCakes118
.exe windows:5 windows x86 arch:x86

574f8d7861c5f190e7fd74076290db04

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetTextExtentPointW
GetTextAlign
EqualRgn
MoveToEx
CombineRgn
TextOutA
CreateDCA
ExtCreateRegion
CreateCompatibleBitmap
GetTextMetricsW
GetRegionData
CreateBitmap
CreatePen
RealizePalette
CreateSolidBrush
Rectangle
StretchDIBits
IntersectClipRect
DeleteDC
SetBkColor
DeleteObject
StretchBlt
CreateFontW
GetDCOrgEx
GetTextExtentExPointI
CreatePolygonRgn
OffsetWindowOrgEx
SetTextAlign
CloseMetaFile
SetLayout
SetStretchBltMode
GetObjectW
SetDCPenColor
GetBkMode
CreateHalftonePalette
SelectObject
ExtTextOutW
SetPaletteEntries
LPtoDP
GetLayout
CreateDCW
GetStockObject
CloseEnhMetaFile
SetWindowOrgEx
RectVisible
CreateCompatibleDC
SetTextColor
GetTextExtentPoint32W
PatBlt
CreateRectRgnIndirect
CreateMetaFileW
GetTextCharset
SetViewportOrgEx
SaveDC
CreateRectRgn
RestoreDC
GetClipBox
GetGlyphIndicesW
GetDIBits
GetRgnBox
DeleteEnhMetaFile
GetDeviceCaps
GetTextExtentPoint32A
GetPaletteEntries
CreatePatternBrush
CreateEnhMetaFileA
OffsetRgn
GetBrushOrgEx
LineTo
BitBlt
SetMapMode
CreateFontIndirectA
SetWindowExtEx
CreatePalette
SelectPalette
CreateDIBSection
GetTextColor
GetObjectA
SetRectRgn
SetBkMode
GetBkColor
GetPixel
SetBrushOrgEx
CreateFontIndirectW
SetViewportExtEx
GetSystemPaletteEntries
CreateDIBPatternBrushPt
PlayEnhMetaFile
TextOutW

advapi32

RegEnumValueW
SetThreadToken
TraceMessage
OpenProcessToken
RegEnumKeyW
ConvertStringSidToSidW
SetTokenInformation
RegOpenCurrentUser
RegQueryValueW
RegSetValueExA
OpenThreadToken
RegSetValueExW
ConvertSidToStringSidW
CryptGetHashParam
CreateProcessAsUserW
CryptAcquireContextW
DuplicateTokenEx
RegQueryValueExW
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegEnumValueA
UnregisterTraceGuids
GetLengthSid
RegEnumKeyExW
GetUserNameW
CryptCreateHash
CryptDestroyHash
RegCreateKeyExA
ImpersonateSelf
RegDeleteValueA
CryptHashData
RegOpenKeyExW
GetTokenInformation
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryInfoKeyW
TraceEvent
GetTraceEnableLevel
RegDeleteKeyW
RegCreateKeyExW
IsTextUnicode
GetTraceLoggerHandle
GetTraceEnableFlags
RegQueryValueExA
RegCreateKeyA
RegisterTraceGuidsW
CryptReleaseContext
RegOpenKeyW

kernel32

CreateSemaphoreW
GetLocaleInfoW
ResumeThread
MoveFileW
WritePrivateProfileStringW
SetFilePointerEx
InterlockedExchange
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetLastError
SetLastError
GetCurrentThreadId
HeapAlloc
SetEnvironmentVariableW
DeleteFileW
DeleteTimerQueueTimer
GetFileAttributesA
RemoveDirectoryW
GetVersion
GetCurrentProcessId
CreateEventW
GetModuleHandleW
GetPrivateProfileStringA
WideCharToMultiByte
SearchPathW
GetExitCodeThread
InitializeCriticalSectionAndSpinCount
CreateFileA
Sleep
AddAtomW
UnlockFileEx
lstrcmpiW
FindResourceExW
SetEndOfFile
OpenMutexW
GetModuleFileNameW
CompareStringA
lstrlenA
WaitForMultipleObjects
FileTimeToLocalFileTime
CreateThread
GetCurrentDirectoryW
GetThreadContext
GetPrivateProfileSectionW
CopyFileW
EnumUILanguagesW
Process32NextW
CreateDirectoryW
OpenEventW
GetWindowsDirectoryW
TryEnterCriticalSection
HeapFree
SetProcessShutdownParameters
lstrlenW
WriteFile
ReleaseActCtx
GetSystemTimeAsFileTime
CreateEventA
DisableThreadLibraryCalls
SizeofResource
GlobalSize
GetCurrentThread
TerminateProcess
MulDiv
OpenProcess
GetFullPathNameW
FindNextFileW
TlsFree
GetProcessHeap
MapViewOfFile
LoadResource
LCMapStringW
GetTempPathW
DeactivateActCtx
EnterCriticalSection
LocalFree
GetUserDefaultUILanguage
CreateToolhelp32Snapshot
HeapDestroy
GetModuleHandleExW
QueryPerformanceFrequency
GetUserDefaultLCID
LocalReAlloc
ReplaceFileW
GetSystemDefaultLCID
GetSystemInfo
DebugBreak
ActivateActCtx
GlobalUnlock
GlobalLock
FreeLibrary
LeaveCriticalSection
DeleteAtom
CreateProcessW
FlushInstructionCache
InitializeCriticalSection
TerminateThread
FormatMessageW
FindAtomW
LocalFileTimeToFileTime
GetFileInformationByHandle
GetCurrentProcess
VirtualProtect
InterlockedIncrement
FreeLibraryAndExitThread
GetTimeFormatW
CreateFileMappingW
InterlockedCompareExchange
GetVersionExA
TlsGetValue
GetModuleHandleExA
GetLongPathNameW
SetProcessWorkingSetSize
UnmapViewOfFile
VirtualFree
lstrcmpiA
VirtualAlloc
GetThreadPriority
SuspendThread
CompareStringW
GetSystemDefaultUILanguage
GetCPInfo
ExpandEnvironmentStringsW
ReadFile
GetSystemWow64DirectoryW
HeapCreate
GetFileAttributesW
GlobalFlags
LoadLibraryW
ReleaseSemaphore
SetCurrentDirectoryA
GetProcAddress
ExitProcess
LoadLibraryA
QueryDosDeviceW
LocalSize
SetCurrentDirectoryW
lstrcmpW
GetModuleFileNameA
CreateActCtxW
GetTempFileNameW
UnhandledExceptionFilter
FileTimeToSystemTime
SetFileTime
GetLogicalDriveStringsW
GetACP
GetModuleHandleA
GlobalDeleteAtom
SetFilePointer
GetShortPathNameW
MultiByteToWideChar
GetVersionExW
GetPrivateProfileStringW
IsWow64Process
SetErrorMode
GetThreadLocale
ExpandEnvironmentStringsA
FindClose
GetFileSize
OpenMutexA
SetThreadContext
MoveFileExW
DeleteCriticalSection
LoadLibraryExW
GetEnvironmentVariableW
FindResourceW
GlobalAddAtomA
GetFileSizeEx
WritePrivateProfileSectionW
ReleaseMutex
SetFileAttributesW
VirtualQuery
GlobalAddAtomW
CompareFileTime
Process32FirstW
GetTickCount
GlobalReAlloc
HeapReAlloc
DuplicateHandle
CreateMutexA
GetPrivateProfileSectionNamesW
TlsSetValue
GetFileAttributesExW
InterlockedDecrement
SystemTimeToFileTime
LocalAlloc
GetNumberFormatW
OutputDebugStringA
SetEvent
QueueUserWorkItem
CreateTimerQueueTimer
GetSystemDirectoryW
GlobalFree
SetThreadExecutionState
CreateFileW
CreateDirectoryA
ResetEvent
SetThreadPriority
TlsAlloc
GetDateFormatW
LockFileEx
GetLocalTime
RaiseException
FindFirstFileW
LockResource
WaitForSingleObjectEx
IsDBCSLeadByte
CloseHandle
GetAtomNameW
GetSystemDirectoryA
lstrcmpA
GetSystemTime
WaitForSingleObject
GlobalAlloc
CreateMutexW
CreateFileMappingA

psapi

GetProcessImageFileNameW

ntdll

RtlUshortByteSwap
LdrGetDllHandle
NtAllocateVirtualMemory

user32

GetMenuItemInfoA
IsChild
SetRectEmpty
GetLastInputInfo
GetWindowLongW
CharNextW
EqualRect
InflateRect
WaitForInputIdle
ScreenToClient
DestroyIcon
RedrawWindow
DialogBoxParamA
IsCharAlphaNumericW
SendNotifyMessageW
SetWindowPos
SetPropW
SendMessageW
LoadAcceleratorsW
DdeCreateDataHandle
GetDoubleClickTime
GetAsyncKeyState
TrackPopupMenuEx
CharLowerW
LoadMenuW
ClientToScreen
GetDesktopWindow
MsgWaitForMultipleObjects
SetClipboardData
MessageBoxExW
SetWindowsHookExW
DialogBoxIndirectParamW
GetDlgCtrlID
VkKeyScanExW
DdeFreeDataHandle
FindWindowExW
CallNextHookEx
GetWindowTextW
SetMenuItemInfoW
GetMenuItemCount
SetDlgItemTextW
IsIconic
DispatchMessageW
SetScrollPos
ChildWindowFromPoint
PostQuitMessage
TrackPopupMenu
PostThreadMessageW
CopyImage
GetSysColor
EnumDesktopWindows
CreatePopupMenu
GetScrollInfo
RegisterClipboardFormatA
GetClientRect
SendMessageA
GetMenuState
GetProcessWindowStation
GetClipboardData
GetDlgItemTextW
DrawFrameControl
MapDialogRect
ChangeClipboardChain
PostMessageA
EndDeferWindowPos
TranslateAcceleratorW
DispatchMessageA
PtInRect
ShowWindow
SetWindowRgn
LoadCursorW
UpdateLayeredWindow
CharLowerBuffW
GetActiveWindow
CreateIconIndirect
BeginDeferWindowPos
DialogBoxParamW
GetMenuItemInfoW
GetDialogBaseUnits
IsWindowUnicode
CallWindowProcW
GetMessageW
CheckMenuItem
GetWindow
SetCursorPos
GetPropA
GetMenuStringW
TrackMouseEvent
LoadIconW
LoadCursorA
DrawTextExW
DestroyAcceleratorTable
wsprintfW
FillRect
AdjustWindowRect
GetWindowDC
DdeInitializeW
PeekMessageA
GetPropW
EnumThreadWindows
AllowSetForegroundWindow
DrawTextW
SetPropA
LockSetForegroundWindow
TranslateMessage
WaitMessage
GetAncestor
CopyRect
DrawEdge
DdeUninitialize
MapWindowPoints
AdjustWindowRectEx
ReleaseCapture
IsWindowVisible
SetDlgItemInt
AnimateWindow
GetWindowTextLengthW
ShowScrollBar
RegisterClassExW
GetShellWindow
OpenClipboard
IsHungAppWindow
EndPaint
DdeClientTransaction
GetMessageA
CreateDialogParamW
MessageBoxIndirectW
MoveWindow
DeleteMenu
GetMenuDefaultItem
GetKeyState
DdeNameService
AttachThreadInput
PostThreadMessageA
SetWindowPlacement
LoadStringW
RemovePropA
RegisterClassW
GetWindowRect
MessageBoxExA
GetParent
UnhookWindowsHookEx
IsDlgButtonChecked
DdeFreeStringHandle
IsMenu
UpdateWindow
SystemParametersInfoA
UnionRect
GetCursor
ShowOwnedPopups
GetSubMenu
NotifyWinEvent
SetCapture
SetWindowLongA
IsRectEmpty
MonitorFromWindow
GetIconInfo
CheckMenuRadioItem
SetClipboardViewer
DrawIconEx
SetCursor
GetClassWord
CharNextA
IntersectRect
InsertMenuW
DestroyMenu
SendMessageTimeoutA
CreateMenu
HideCaret
RemoveMenu
SetMenu
GetCapture
SystemParametersInfoW
MessageBeep
EndMenu
UnregisterClassW
GetSystemMenu
FindWindowW
ShowCaret
SendMessageTimeoutW
WinHelpW
SetRect
GetNextDlgTabItem
RegisterClipboardFormatW
MessageBoxIndirectA
SetFocus
LoadImageW
MsgWaitForMultipleObjectsEx
DefWindowProcW
DdeGetData
GetKeyboardLayout
GetClassInfoExW
GetWindowThreadProcessId
EnableWindow
SetWindowLongW
MonitorFromRect
GetClassNameW
GetSysColorBrush
SetActiveWindow
GetTopWindow
MonitorFromPoint
BeginPaint
GetWindowInfo
SetTimer
GetComboBoxInfo
DdeQueryStringW
GetMessagePos
SetMenuItemBitmaps
IsWindowEnabled
GetForegroundWindow
LoadStringA
ReleaseDC
GetKeyNameTextW
SendDlgItemMessageW
OffsetRect
GetWindowPlacement
GetMonitorInfoW
InvalidateRect
DialogBoxIndirectParamA
GetDlgItem
IsWindow
MapVirtualKeyW
RegisterWindowMessageA
CreateWindowExW
DeferWindowPos
EmptyClipboard
CopyIcon
GetWindowRgnBox
DdeCreateStringHandleW
GetLastActivePopup
MessageBoxW
EnumDisplaySettingsW
SetScrollInfo
DdeDisconnect
EnableMenuItem
LoadBitmapW
GetSystemMetrics
CheckDlgButton
PostMessageW
DefWindowProcA
CharUpperW
GetFocus
SetMenuDefaultItem
GetClassInfoW
EnumWindows
GetMenuItemID
RegisterWindowMessageW
CharPrevW
CheckRadioButton
GetCursorPos
SetForegroundWindow
CallMsgFilterW
CloseClipboard
EndDialog
GetMessageTime
EnumChildWindows
WindowFromPoint
SetWindowTextW
DestroyWindow
InsertMenuItemW
RemovePropW
GetWindowLongA
GetClassLongW
GetClipboardFormatNameW
KillTimer
SetParent
DdeConnect
IsDialogMessageW
AppendMenuW
PeekMessageW
FindWindowA
DrawFocusRect
CharPrevA
GetDC

uxtheme

SetWindowTheme
GetThemeFont
CloseThemeData
GetThemeMetric
GetThemeBackgroundExtent
GetThemePartSize
OpenThemeData
IsThemeActive
GetThemeMargins
GetThemeAppProperties
DrawThemeParentBackground
GetThemeBackgroundContentRect
DrawThemeBackground
IsAppThemed
GetThemeColor

shell32

SHGetFolderPathAndSubDirW
SHGetFolderPathW
SHGetDataFromIDListW
Shell_NotifyIconW
ShellExecuteW
SHGetPathFromIDListA
ShellExecuteA
SHCreateShellItem
SHPathPrepareForWriteW
SHFileOperationW
SHChangeNotify
ExtractIconW
SHAppBarMessage
SHGetDesktopFolder
SHGetFileInfoW
ExtractIconExW
SHBrowseForFolderW
SHGetSpecialFolderPathW
Shell_NotifyIconA
ExtractAssociatedIconExW
SHGetPathFromIDListW
ShellExecuteExW
SHGetSpecialFolderLocation
ShellAboutW
DragQueryFileW
SHGetFolderLocation
SHBindToParent
SHSetLocalizedName
SHGetInstanceExplorer

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

574f8d7861c5f190e7fd74076290db04

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

advapi32

kernel32

psapi

ntdll

user32

uxtheme

shell32

Sections

.text Size: 183KB - Virtual size: 183KB

.rdata Size: 88KB - Virtual size: 88KB

.rsrc Size: 21KB - Virtual size: 21KB

.data Size: 37KB - Virtual size: 1.4MB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 183KB - Virtual size: 183KB

.rdata
Size: 88KB - Virtual size: 88KB

.rsrc
Size: 21KB - Virtual size: 21KB

.data
Size: 37KB - Virtual size: 1.4MB

.tls
Size: 512B - Virtual size: 4KB