96c4534023a0e80a686e84ad926dc01f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

96c4534023a0e80a686e84ad926dc01f_JaffaCakes118
Size

332KB
MD5

96c4534023a0e80a686e84ad926dc01f
SHA1

3da7d781138620de902bb975e7c75aac0fc8010b
SHA256

19e87fd2fad6b8c894087a52d868bf1a888b7697af25ca69582c8097b2b4eb49
SHA512

ddaf414d2fe1230f88f76d105d3c3aa008780f6ec896b1359a693db8d566ff502f955aa9b66a6291f36b996300a2fc527bd71fe0b317b796e9cc68ad4847f185
SSDEEP

6144:Lr7CO+RZjhgA03Mj0INoAowmrtmRagameqZ4E84u3mJiPyy9y2wath2n:L3COyj0u6Ao5aCZE84YZZGath2n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96c4534023a0e80a686e84ad926dc01f_JaffaCakes118

Files

96c4534023a0e80a686e84ad926dc01f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

78dce7a7a37f1b4b69d349e559f3c3f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

OpenProcessToken
RegEnumValueW
SetTokenInformation
RegDeleteKeyA
CryptDestroyHash
RegSetValueExW
DuplicateTokenEx
GetTraceEnableFlags
RegQueryValueW
RegDeleteValueA
CryptHashData
RegCloseKey
RegQueryValueExW
RegOpenCurrentUser
CreateProcessAsUserW
RegDeleteKeyW
RegCreateKeyExA
RegEnumValueA
RegOpenKeyW
RegOpenKeyExA
RegEnumKeyExW
GetTraceEnableLevel
RegQueryInfoKeyW
IsTextUnicode
GetUserNameW
ConvertStringSidToSidW
RegCreateKeyExW
CryptReleaseContext
CryptAcquireContextW
OpenThreadToken
RegEnumKeyW
GetTraceLoggerHandle
RegOpenKeyExW
CryptCreateHash
RegSetValueExA
RegDeleteValueW
RegisterTraceGuidsW
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
UnregisterTraceGuids
CryptGetHashParam
GetLengthSid
SetThreadToken
TraceMessage
ConvertSidToStringSidW
RegCreateKeyA
RegQueryValueExA
ImpersonateSelf
TraceEvent

user32

VkKeyScanExW
wsprintfW
RegisterClipboardFormatW
LoadStringA
IsWindowUnicode
GetActiveWindow
CallWindowProcW
GetCapture
GetKeyboardLayout
AnimateWindow
DialogBoxIndirectParamA
CharLowerW
DestroyAcceleratorTable
SetPropW
LockSetForegroundWindow
GetIconInfo
DestroyIcon
CharNextA
IntersectRect
GetShellWindow
DdeCreateDataHandle
SetForegroundWindow
EndMenu
SetWindowTextW
SetWindowsHookExW
GetWindowTextW
MsgWaitForMultipleObjects
PostMessageA
EnableWindow
GetMenuStringW
RedrawWindow
GetWindowInfo
DefWindowProcW
GetMessageW
ShowWindow
GetMessageTime
DdeUninitialize
GetClassWord
DdeFreeStringHandle
MapVirtualKeyW
SendNotifyMessageW
GetNextDlgTabItem
PeekMessageW
GetDialogBaseUnits
WinHelpW
PeekMessageA
TrackMouseEvent
PostMessageW
IsDlgButtonChecked
GetWindowDC
GetDC
GetPropA
CheckDlgButton
WindowFromPoint
GetProcessWindowStation
GetMenuItemCount
LoadAcceleratorsW
DrawTextExW
GetDlgItemTextW
PtInRect
EnumChildWindows
DdeConnect
GetForegroundWindow
AdjustWindowRectEx
LoadMenuW
MsgWaitForMultipleObjectsEx
EnumThreadWindows
DestroyWindow
GetMenuDefaultItem
IsHungAppWindow
IsDialogMessageW
MessageBoxExW
CheckRadioButton
DdeNameService
CheckMenuRadioItem
MoveWindow
CreateWindowExW
SetTimer
DeleteMenu
GetAncestor
SetWindowPos
AdjustWindowRect
SetWindowPlacement
SystemParametersInfoA
MessageBoxW
SendMessageTimeoutW
LoadCursorA
GetLastInputInfo
GetMonitorInfoW
PostQuitMessage
CreateIconIndirect
IsWindowVisible
ReleaseDC
LoadImageW
ClientToScreen
GetMessagePos
UpdateLayeredWindow
SetWindowLongW
CreateMenu
GetClientRect
UpdateWindow
ReleaseCapture
ShowCaret
DdeFreeDataHandle
DestroyMenu
DdeInitializeW
MapDialogRect
GetWindowThreadProcessId
SetScrollInfo
SetDlgItemInt
IsRectEmpty
GetWindowTextLengthW
SetCapture
PostThreadMessageW
UnhookWindowsHookEx
SetFocus
SetMenu
CallMsgFilterW
GetDlgItem
IsIconic
RemoveMenu
GetParent
GetClassNameW
DefWindowProcA
FindWindowW
GetMenuState
DrawFocusRect
GetSysColor
DispatchMessageW
SetScrollPos
SetCursorPos
CreatePopupMenu
CharLowerBuffW
SetClipboardViewer
BeginPaint
MessageBeep
SetDlgItemTextW
FindWindowExW
GetWindowRect
RemovePropA
AttachThreadInput
SendDlgItemMessageW
InvalidateRect
IsWindow
SetMenuItemInfoW
GetDlgCtrlID
EnumDesktopWindows
ShowScrollBar
SetMenuItemBitmaps
SetParent
DdeCreateStringHandleW
SetRect
GetClipboardFormatNameW
IsWindowEnabled
IsMenu
GetWindowRgnBox
MessageBoxIndirectW
SystemParametersInfoW
MonitorFromWindow
SetPropA
GetSystemMenu
CheckMenuItem
WaitForInputIdle
GetMessageA
ChildWindowFromPoint
IsCharAlphaNumericW
CharPrevW
IsChild
CharPrevA
CopyRect
DispatchMessageA
ShowOwnedPopups
FindWindowA
FillRect
EnumDisplaySettingsW
SetClipboardData
GetClipboardData
GetAsyncKeyState
CloseClipboard
EnableMenuItem
RegisterClipboardFormatA
GetMenuItemInfoW
LoadIconW
RemovePropW
RegisterWindowMessageA
MapWindowPoints
LoadBitmapW
DdeQueryStringW
GetCursor
UnionRect
MessageBoxExA
DrawTextW
SetCursor
GetKeyNameTextW
DrawIconEx
LoadCursorW
EndPaint
SetActiveWindow
GetCursorPos
CopyIcon
GetFocus
GetPropW
SendMessageW
MonitorFromRect
RegisterClassExW
GetSubMenu
GetScrollInfo
MonitorFromPoint
GetKeyState
RegisterWindowMessageW
DdeClientTransaction
LoadStringW
WaitMessage
GetClassInfoW
EndDeferWindowPos
GetWindowPlacement
CopyImage
NotifyWinEvent
GetWindowLongW
GetMenuItemID
ScreenToClient
RegisterClassW
GetMenuItemInfoA
DialogBoxParamA
GetSysColorBrush
GetLastActivePopup
EqualRect
GetWindowLongA
GetClassLongW
EndDialog
DdeGetData
AppendMenuW
DeferWindowPos
GetSystemMetrics
SetWindowLongA
InflateRect
AllowSetForegroundWindow
DrawEdge
KillTimer
TranslateAcceleratorW
CallNextHookEx
DialogBoxIndirectParamW
DialogBoxParamW
EmptyClipboard
SendMessageTimeoutA
CharNextW
GetDoubleClickTime
MessageBoxIndirectA
GetWindow
ChangeClipboardChain
SetWindowRgn
TranslateMessage
HideCaret
DrawFrameControl
GetComboBoxInfo
CreateDialogParamW
GetDesktopWindow
SetRectEmpty
EnumWindows
CharUpperW
PostThreadMessageA
InsertMenuW
DdeDisconnect
InsertMenuItemW
GetClassInfoExW
OffsetRect
SetMenuDefaultItem
UnregisterClassW
SendMessageA
GetTopWindow
BeginDeferWindowPos
TrackPopupMenu
TrackPopupMenuEx
OpenClipboard

shell32

SHGetFileInfoW
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHBrowseForFolderW
SHPathPrepareForWriteW
SHGetFolderPathW
ShellAboutW
SHGetFolderLocation
Shell_NotifyIconA
SHChangeNotify
ExtractIconW
SHGetDataFromIDListW
SHSetLocalizedName
SHGetInstanceExplorer
ShellExecuteA
SHGetFolderPathAndSubDirW
DragQueryFileW
SHCreateShellItem
SHGetDesktopFolder
ShellExecuteExW
Shell_NotifyIconW
ExtractAssociatedIconExW
SHFileOperationW
SHBindToParent
SHAppBarMessage
SHGetSpecialFolderPathW
ExtractIconExW
SHGetPathFromIDListW
ShellExecuteW

gdi32

MoveToEx
GetTextExtentPoint32W
CreateSolidBrush
DeleteObject
SetStretchBltMode
ExtCreateRegion
SetWindowExtEx
IntersectClipRect
GetPixel
CombineRgn
Rectangle
SetBkMode
DeleteDC
SetLayout
CreatePalette
TextOutA
GetTextCharset
GetTextAlign
SetBkColor
GetLayout
SetWindowOrgEx
CreateDCA
SetViewportOrgEx
TextOutW
CreateFontW
StretchDIBits
CreateDIBPatternBrushPt
SaveDC
SetBrushOrgEx
GetDIBits
GetTextExtentPointW
SelectPalette
CreateCompatibleDC
GetClipBox
RectVisible
CreateFontIndirectW
GetTextMetricsW
LPtoDP
GetBkColor
BitBlt
SetPaletteEntries
SetTextAlign
GetRgnBox
CreateDIBSection
SetViewportExtEx
GetTextColor
GetObjectW
OffsetRgn
LineTo
GetTextExtentExPointI
CreatePatternBrush
ExtTextOutW
CreateMetaFileW
GetBkMode
GetObjectA
SetDCPenColor
CreatePolygonRgn
GetDCOrgEx
EqualRgn
SetMapMode
StretchBlt
PatBlt
GetRegionData
GetTextExtentPoint32A
CreateRectRgn
SetRectRgn
SetTextColor
CreateFontIndirectA
OffsetWindowOrgEx
CreateBitmap
CreateDCW
RealizePalette
CreateHalftonePalette
CreateRectRgnIndirect
CreateCompatibleBitmap
SelectObject
GetDeviceCaps
GetBrushOrgEx
CloseMetaFile
RestoreDC
PlayEnhMetaFile
GetGlyphIndicesW
GetSystemPaletteEntries
CloseEnhMetaFile
GetPaletteEntries
GetStockObject
CreatePen
CreateEnhMetaFileA
DeleteEnhMetaFile

kernel32

ReleaseActCtx
WaitForSingleObject
CreateFileMappingW
CompareStringW
DebugBreak
GetFileAttributesA
GetSystemTime
FindResourceW
GetNumberFormatW
InterlockedIncrement
OpenProcess
TlsSetValue
SizeofResource
FileTimeToSystemTime
GetFileAttributesW
HeapReAlloc
CreateSemaphoreW
SetFileTime
GetModuleFileNameW
CreateFileA
GlobalUnlock
CreateDirectoryA
VirtualProtect
GlobalFlags
GlobalAlloc
LoadLibraryA
InterlockedCompareExchange
GetLocalTime
Process32FirstW
GetVersionExA
GlobalAddAtomW
CreateEventW
GlobalDeleteAtom
HeapAlloc
TlsAlloc
GetThreadPriority
ExpandEnvironmentStringsW
TlsGetValue
SetThreadContext
CreateTimerQueueTimer
DeleteCriticalSection
WaitForSingleObjectEx
OpenMutexA
WritePrivateProfileSectionW
GetTickCount
LoadLibraryExW
GetModuleFileNameA
DeleteTimerQueueTimer
ActivateActCtx
VirtualFree
lstrcmpA
SuspendThread
GetTimeFormatW
GetFileSize
UnmapViewOfFile
FindClose
CreateMutexA
SetLastError
GetCurrentThreadId
FileTimeToLocalFileTime
CreateFileMappingA
GetSystemInfo
GetSystemDefaultLCID
GetTempFileNameW
SetFileAttributesW
TerminateProcess
GetModuleHandleExA
EnterCriticalSection
GetProcessHeap
TlsFree
SetFilePointer
GetCurrentDirectoryW
GetModuleHandleA
SetUnhandledExceptionFilter
CopyFileW
UnlockFileEx
CreateActCtxW
OpenMutexW
GetUserDefaultLCID
GetSystemWow64DirectoryW
ResetEvent
LockFileEx
SetThreadExecutionState
AddAtomW
GetCurrentThread
SetProcessShutdownParameters
VirtualAlloc
GetFileInformationByHandle
WaitForMultipleObjects
LoadResource
LocalFileTimeToFileTime
RaiseException
GetFileAttributesExW
GetSystemDefaultUILanguage
IsDBCSLeadByte
CreateDirectoryW
GetCurrentProcessId
SetThreadPriority
SetFilePointerEx
DeactivateActCtx
FlushInstructionCache
GetDateFormatW
GetPrivateProfileSectionNamesW
CreateThread
ExitProcess
GetLocaleInfoW
FindNextFileW
GetShortPathNameW
HeapFree
GlobalAddAtomA
GetSystemDirectoryA
QueryPerformanceCounter
GlobalReAlloc
GetExitCodeThread
GetProcAddress
TryEnterCriticalSection
SetEvent
WritePrivateProfileStringW
ReadFile
GetThreadContext
CompareStringA
HeapCreate
GlobalFree
InitializeCriticalSectionAndSpinCount
HeapDestroy
lstrlenA
LoadLibraryW
SetCurrentDirectoryW
FindResourceExW
GetFullPathNameW
lstrcmpiA
ResumeThread
MulDiv
UnhandledExceptionFilter
GetPrivateProfileSectionW
lstrcmpiW
LeaveCriticalSection
LCMapStringW
GetACP
SystemTimeToFileTime
WriteFile
InterlockedExchange
ExpandEnvironmentStringsA
DeleteAtom
GetVersion
FindAtomW
lstrcmpW
FreeLibraryAndExitThread
GetVersionExW
ReleaseMutex
GetAtomNameW
ReleaseSemaphore
RemoveDirectoryW
GetFileSizeEx
CompareFileTime
CreateProcessW
SetCurrentDirectoryA
GetLogicalDriveStringsW
IsWow64Process
GetLastError
GetSystemTimeAsFileTime
VirtualQuery
FormatMessageW
InitializeCriticalSection
GetPrivateProfileStringW
CreateMutexW
ReplaceFileW
GetSystemDirectoryW
Sleep
lstrlenW
SetProcessWorkingSetSize
DisableThreadLibraryCalls
WideCharToMultiByte
LocalReAlloc
GetModuleHandleExW
FindFirstFileW
GetWindowsDirectoryW
QueryDosDeviceW
QueueUserWorkItem
LocalSize
GetPrivateProfileStringA
InterlockedDecrement
SetEnvironmentVariableW
GetCurrentProcess
GetModuleHandleW
OpenEventW
CreateToolhelp32Snapshot
GetTempPathW
GlobalLock
MoveFileExW
TerminateThread
GetEnvironmentVariableW
GetLongPathNameW
QueryPerformanceFrequency
CloseHandle
SetEndOfFile
CreateEventA
GetUserDefaultUILanguage
LocalAlloc
SetErrorMode
GlobalSize
FreeLibrary
MapViewOfFile
LocalFree
DuplicateHandle
CreateFileW
GetCPInfo
GetThreadLocale
LockResource
EnumUILanguagesW
DeleteFileW
MultiByteToWideChar
SearchPathW
MoveFileW
Process32NextW
OutputDebugStringA

psapi

GetProcessImageFileNameW

uxtheme

CloseThemeData
IsThemeActive
IsAppThemed
GetThemeBackgroundContentRect
GetThemeAppProperties
DrawThemeParentBackground
GetThemePartSize
GetThemeColor
GetThemeMetric
GetThemeFont
GetThemeMargins
GetThemeBackgroundExtent
OpenThemeData
DrawThemeBackground
SetWindowTheme

ntdll

LdrGetDllHandle
NtAllocateVirtualMemory
RtlUshortByteSwap

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

78dce7a7a37f1b4b69d349e559f3c3f4

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

user32

shell32

gdi32

kernel32

psapi

uxtheme

ntdll

Sections

.text Size: 183KB - Virtual size: 183KB

.rdata Size: 88KB - Virtual size: 88KB

.rsrc Size: 21KB - Virtual size: 21KB

.data Size: 37KB - Virtual size: 1.4MB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 183KB - Virtual size: 183KB

.rdata
Size: 88KB - Virtual size: 88KB

.rsrc
Size: 21KB - Virtual size: 21KB

.data
Size: 37KB - Virtual size: 1.4MB

.tls
Size: 512B - Virtual size: 4KB