94f844898d0b01f5cc74c3d488b1e5f4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

94f844898d0b01f5cc74c3d488b1e5f4_JaffaCakes118
Size

3.3MB
MD5

94f844898d0b01f5cc74c3d488b1e5f4
SHA1

c80023efba3d8b684fffd23b211913f543e16805
SHA256

dededb2c64321e6b126611288c1f09973cd59e23e59263d41e7652daf3284839
SHA512

02c13fea42ab39b90579c78cc82cef7e12f498a7bdb08b8730c2eafa84e9e3e04ac885884896a3db7b093d429fa527e2e59d865a6156ddddeda4626f6cd5b21d
SSDEEP

49152:Mu5vf9rwNyp/TqeEvvCwlF7c3afchVlJszb++5z7ayhUvJ99wbzOji:DVsk/TqeEvvX7cj5JobncvJ9vji

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94f844898d0b01f5cc74c3d488b1e5f4_JaffaCakes118

Files

94f844898d0b01f5cc74c3d488b1e5f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa32de4f2e64fe8a01e171b915ad49ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Enable_DevNode
CM_Disable_DevNode
CM_Get_Device_ID_ExW
CM_Locate_DevNodeW
CM_Get_DevNode_Registry_PropertyW
CM_Get_Parent
SetupDiGetDeviceInfoListDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
CM_Get_Child
CM_Get_Sibling
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyA

hid

HidD_FreePreparsedData
HidP_GetCaps
HidD_GetPreparsedData
HidD_SetNumInputBuffers
HidD_GetNumInputBuffers
HidD_GetHidGuid
HidD_GetManufacturerString
HidD_GetSerialNumberString
HidD_GetProductString
HidD_GetAttributes
HidP_GetSpecificValueCaps

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

winmm

mciSendCommandW

kernel32

WritePrivateProfileStringW
GetPrivateProfileStringW
MoveFileW
GetStringTypeExW
ReadFile
SetFilePointer
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetFullPathNameW
GetShortPathNameW
GlobalGetAtomNameW
SetErrorMode
LocalFileTimeToFileTime
SetFileTime
GetFileAttributesW
GetFileTime
LocalUnlock
LocalLock
GetTempFileNameW
GetStartupInfoW
RtlUnwind
ExitProcess
TerminateProcess
HeapReAlloc
SuspendThread
GetSystemTimeAsFileTime
IsBadReadPtr
HeapFree
GetModuleFileNameA
DeleteFileA
GetCPInfo
GetConsoleCP
ReadConsoleInputA
ReadConsoleInputW
SetConsoleMode
GetConsoleMode
ExitThread
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
FatalAppExitA
SetUnhandledExceptionFilter
IsBadWritePtr
LCMapStringA
LCMapStringW
DebugBreak
SetConsoleCtrlHandler
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
PeekConsoleInputA
GetNumberOfConsoleInputEvents
CreateFileA
GetConsoleOutputCP
WriteConsoleW
GetOEMCP
IsBadCodePtr
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProcessHeap
SetStdHandle
WriteConsoleA
GetDriveTypeA
GetCurrentDirectoryA
GetFullPathNameA
ResumeThread
SetThreadPriority
lstrcmpA
lstrcmpiA
GetModuleFileNameW
ConvertDefaultLocale
GetVersion
InterlockedDecrement
FindFirstFileW
GetPrivateProfileIntW
FileTimeToSystemTime
FindNextFileW
FindClose
SetLastError
MulDiv
GlobalSize
FormatMessageW
lstrcpynW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrlenA
GetModuleHandleA
LoadLibraryA
lstrcatW
lstrcmpW
GetVersionExA
GlobalLock
GlobalUnlock
VirtualProtect
GetLocaleInfoW
EnumResourceLanguagesW
EnumSystemLocalesW
GetUserDefaultLangID
GetSystemDefaultLangID
ExpandEnvironmentStringsW
SetEvent
GetLogicalDriveStringsW
ReadFileEx
SleepEx
CreateEventW
ResetEvent
GetVolumeNameForVolumeMountPointW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetWindowsDirectoryW
ReleaseMutex
WaitForSingleObject
CreateMutexW
GlobalAlloc
GlobalFree
FreeResource
FreeLibrary
WideCharToMultiByte
LoadLibraryW
FindResourceExW
lstrlenW
FreeConsole
AllocConsole
GetDriveTypeW
CreateThread
FlushFileBuffers
TryEnterCriticalSection
GetSystemDirectoryW
EnterCriticalSection
LeaveCriticalSection
GetLongPathNameW
GetStdHandle
DeleteCriticalSection
InitializeCriticalSection
RaiseException
InterlockedExchangeAdd
GetCurrentProcessId
GetCurrentThreadId
WriteFile
GetVolumeInformationW
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
lstrcpyW
CreateFileW
DeviceIoControl
CloseHandle
SetFileAttributesW
SetVolumeLabelW
Sleep
OutputDebugStringW
GetCurrentThread
GetLastError
GetCurrentProcess
LocalAlloc
LocalFree
CopyFileW
DeleteFileW
RemoveDirectoryW
CreateDirectoryW
GetModuleHandleW
GetProcAddress
GetDiskFreeSpaceW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
SystemTimeToFileTime
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
GlobalFlags
FileTimeToLocalFileTime
lstrcmpiW
HeapAlloc

user32

CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorW
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
SetRect
IsRectEmpty
CharNextW
CharUpperW
DestroyIcon
DeleteMenu
WaitMessage
GetWindowThreadProcessId
ReleaseCapture
WindowFromPoint
SetCapture
LoadCursorW
GetSysColorBrush
GetDialogBaseUnits
MapVirtualKeyW
GetKeyNameTextW
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
SetWindowContextHelpId
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
GetCursorPos
ValidateRect
ShowOwnedPopups
SetCursor
wsprintfW
GetMenuStringW
AppendMenuW
InsertMenuW
RemoveMenu
SetMenuItemBitmaps
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
ScrollWindowEx
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
WinHelpW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
InsertMenuItemW
SendDlgItemMessageA
IsChild
GetWindowTextLengthW
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconW
MapWindowPoints
ScrollWindow
MessageBoxW
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
IsWindowVisible
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoW
SetWindowPlacement
GetDlgCtrlID
CallWindowProcW
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
CopyRect
PtInRect
GetWindow
GetDesktopWindow
GetSystemMetrics
GetNextDlgTabItem
EndDialog
MapDialogRect
SetWindowPos
GetCapture
GetActiveWindow
SetActiveWindow
GetAsyncKeyState
GetFocus
SetFocus
IsWindowEnabled
SetWindowLongW
RegisterDeviceNotificationW
GetWindowLongW
UnregisterDeviceNotification
LoadAcceleratorsW
LoadMenuW
ReuseDDElParam
UnpackDDElParam
SetParent
LockWindowUpdate
PostQuitMessage
PeekMessageW
CreateDialogIndirectParamW
ShowWindow
GetWindowTextW
GetDlgItem
LoadStringW
BroadcastSystemMessageW
RegisterWindowMessageW
SendNotifyMessageW
IsWindow
UnregisterClassW
InvalidateRect
UpdateWindow
GetClientRect
GetDCEx
PostThreadMessageW
UnionRect
GetTabbedTextExtentW
IsClipboardFormatAvailable
SendDlgItemMessageW
RegisterClipboardFormatW
GetWindowRect
GetSysColor
GetSystemMenu
ModifyMenuW
GetMessageW
TranslateMessage
DispatchMessageW
FindWindowW
SetForegroundWindow
SetTimer
RegisterClassW
CreateWindowExW
DefWindowProcW
DestroyWindow
KillTimer
PostMessageW
LoadImageW
SendMessageW
EnableWindow
GetParent
ScreenToClient
UnregisterClassA

gdi32

GetCharWidthW
StretchDIBits
CreateFontW
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
PolyDraw
ArcTo
CreateCompatibleBitmap
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
GetRgnBox
GetTextColor
TextOutW
GetBkColor
DPtoLP
GetMapMode
CombineRgn
SetRectRgn
EnumFontFamiliesExW
GetTextMetricsW
PatBlt
CreateRectRgnIndirect
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
OffsetClipRgn
IntersectClipRect
CreatePen
ExcludeClipRect
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateDCW
CopyMetaFileW
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
CreateCompatibleDC
CreatePatternBrush
GetDCOrgEx
GetTextExtentPoint32W
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
PolyBezierTo
GetStockObject
GetObjectW
CreateFontIndirectW
GetDeviceCaps
GetCurrentPositionEx
CreateICW
RectVisible
PtVisible
StartDocW
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
DeleteObject
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
PolylineTo

comdlg32

PageSetupDlgW
FindTextW
ReplaceTextW
GetOpenFileNameW
CommDlgExtendedError
PrintDlgW
GetFileTitleW
GetSaveFileNameW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter
GetJobW

advapi32

CryptReleaseContext
RevertToSelf
AccessCheck
IsValidSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
InitializeSecurityDescriptor
AllocateAndInitializeSid
OpenProcessToken
OpenThreadToken
GetFileSecurityW
SetFileSecurityW
RegCreateKeyW
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
RegSetValueW
CryptGenRandom
CryptAcquireContextA
FreeSid
RegDeleteValueW
RegSetValueExW
RegDeleteKeyW
RegCreateKeyExW
RegEnumValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
ImpersonateSelf

shell32

SHChangeNotify
ExtractIconW
SHGetFileInfoW
DragFinish
DragQueryFileW
SHFileOperationW

comctl32

PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageW
ord17
ord13
ImageList_Read
ImageList_Write
ord14
ImageList_Destroy
ImageList_Create
ImageList_LoadImageW
ImageList_Merge
ImageList_Draw
ImageList_GetImageInfo

shlwapi

PathFindExtensionW
PathRemoveExtensionW
PathFindFileNameW
PathStripToRootW
PathFileExistsW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoTreatAsClass
StringFromCLSID
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
CreateBindCtx
OleUninitialize
CLSIDFromProgID
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
OleRun
CreateILockBytesOnHGlobal
CLSIDFromString
CoDisconnectObject
CoCreateInstance
StringFromGUID2
CoGetClassObject
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
CoRevokeClassObject
OleInitialize
CoRegisterClassObject
ReadFmtUserTypeStg
StgCreateDocfileOnILockBytes
CoFreeUnusedLibraries
ReadClassStg
StgOpenStorageOnILockBytes

oleaut32

VarDecFromStr
VarBstrFromDec
SysReAllocStringLen
VarDateFromStr
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SysFreeString
VariantInit
VariantChangeType
VariantClear
VarCyFromStr
VarBstrFromCy
LoadTypeLi
OleCreateFontIndirect
VarBstrFromDate
SysAllocStringLen

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 488KB - Virtual size: 485KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 4KB - Virtual size: 793B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 460KB - Virtual size: 457KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aa32de4f2e64fe8a01e171b915ad49ba

Headers

File Characteristics

Imports

setupapi

hid

version

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 488KB - Virtual size: 485KB

.data Size: 56KB - Virtual size: 80KB

.idata Size: 24KB - Virtual size: 20KB

.didat Size: 4KB - Virtual size: 793B

.rsrc Size: 460KB - Virtual size: 457KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 488KB - Virtual size: 485KB

.data
Size: 56KB - Virtual size: 80KB

.idata
Size: 24KB - Virtual size: 20KB

.didat
Size: 4KB - Virtual size: 793B

.rsrc
Size: 460KB - Virtual size: 457KB