9771cc93dd1b743b64b564ab144f4faf_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

9771cc93dd1b743b64b564ab144f4faf_JaffaCakes118
Size

32KB
MD5

9771cc93dd1b743b64b564ab144f4faf
SHA1

cd98e7843b0011a3d9347d5868e33b6128c691aa
SHA256

4b1eb4693bd30562dc9c1c3102221559f2fae07cdbbe9e6cdcfe7bfc6643c6e8
SHA512

1a4f995c5c12bd2f8cca7d6eaf68c86aeef0b5c77b263c14f47c73b186950bca4a5bf18aa6e8d395f49c533d0a0da7001336b4bc9207989cc4a954207883342c
SSDEEP

768:muqjOtcJpRHXLEo32MYbQvwtcuv/DQOG4aCT4AL3VsPf9k:kjOQR3LH6kvwFvbQpDCT4AZsdk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9771cc93dd1b743b64b564ab144f4faf_JaffaCakes118

Files

9771cc93dd1b743b64b564ab144f4faf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e27008e86258439bbf824e5035cfac0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtTerminateProcess
RtlAdjustPrivilege
NtQuerySemaphore
RtlAddAccessAllowedObjectAce

kernel32

VirtualAlloc

ddraw

DirectDrawCreate

uxtheme

GetThemeBackgroundExtent
IsAppThemed
GetThemeColor
DrawThemeParentBackground
SetWindowTheme
GetThemeAppProperties
GetThemeMargins
IsThemeActive
GetThemeMetric
GetThemePartSize
DrawThemeBackground
GetThemeBackgroundContentRect
CloseThemeData
GetThemeFont
OpenThemeData

psapi

GetProcessImageFileNameW

advapi32

RegDeleteKeyW
CryptAcquireContextW
RegEnumValueW
GetTokenInformation
OpenThreadToken
RegEnumKeyW
RegCloseKey
RegSetValueExA
RegCreateKeyExW
RegQueryValueExW
CreateProcessAsUserW
RegDeleteValueA
RegOpenCurrentUser
CryptGetHashParam
TraceMessage
ConvertStringSidToSidW
RegQueryValueExA
ConvertSidToStringSidW
TraceEvent
RegCreateKeyExA
GetTraceEnableFlags
IsTextUnicode
RegDeleteValueW
RegisterTraceGuidsW
RegCreateKeyA
RegSetValueExW
CryptHashData
RegOpenKeyW
GetUserNameW
SetThreadToken
RegEnumValueA
ImpersonateSelf
CryptDestroyHash
RegDeleteKeyA
GetLengthSid
CryptCreateHash
RegQueryInfoKeyW
SetTokenInformation
GetTraceLoggerHandle
RegQueryValueW
RegOpenKeyExA
OpenProcessToken
RegEnumKeyExW
CryptReleaseContext
UnregisterTraceGuids
DuplicateTokenEx
RegOpenKeyExW
GetTraceEnableLevel
ConvertStringSecurityDescriptorToSecurityDescriptorW

msvcrt

wctomb
memset
realloc
_XcptFilter
strstr
bsearch
wcsrchr
_onexit
_read
__pioinfo
__badioinfo
isalnum
ceil
__mb_cur_max
strrchr
_unlock
_wtoi
_errno
memmove
_wcslwr
isleadbyte
_wtof
_wcsdup
_isnan
calloc
ungetc
isxdigit
isdigit
_itow
malloc
_amsg_exit
wcstok
_lock
wcsncmp
_vsnwprintf
wcschr
iswalnum
wcstombs
_wcsnicmp
__dllonexit
free
wcscspn
_adjust_fdiv
wcstol
qsort
localeconv
_CIsqrt
_initterm
mbtowc
iswctype
wcsstr
_wcsicmp
memcpy
_vsnprintf
wcstoul
_fileno
strchr
iswalpha

rtutils

RouterLogEventExA
LogErrorW
TraceDumpExA
RouterGetErrorStringW
RouterLogEventStringA
RouterLogRegisterA

shell32

SHCreateShellItem
ExtractIconW
Shell_NotifyIconA
SHGetPathFromIDListW
Shell_NotifyIconW
SHBindToParent
SHGetInstanceExplorer
SHGetSpecialFolderPathW
DragQueryFileW
SHGetSpecialFolderLocation
SHGetFolderPathW
SHFileOperationW
ShellExecuteA
SHChangeNotify
SHGetDesktopFolder
SHGetFolderPathAndSubDirW
SHGetPathFromIDListA
SHAppBarMessage
ExtractIconExW
ExtractAssociatedIconExW
ShellExecuteW
SHPathPrepareForWriteW
SHGetFileInfoW
SHBrowseForFolderW
SHGetFolderLocation
SHSetLocalizedName
ShellExecuteExW
SHGetDataFromIDListW
ShellAboutW

user32

SetClipboardViewer
RemovePropA
DdeFreeDataHandle
DdeFreeStringHandle
MonitorFromWindow
DdeCreateDataHandle
ReleaseDC
CallWindowProcW
GetMonitorInfoW
PostThreadMessageW
EnableMenuItem
SetWindowLongW
ShowOwnedPopups
GetFocus
EnumThreadWindows
RegisterClipboardFormatA
UpdateWindow
GetSubMenu
LoadStringW
EndDialog
SetWindowPos
GetProcessWindowStation
WaitForInputIdle
GetWindowThreadProcessId
InsertMenuItemW
SetActiveWindow
DefWindowProcW
GetCursorPos
EnableWindow
DrawFrameControl
GetKeyNameTextW
EmptyClipboard
DeferWindowPos
EnumDisplaySettingsW
CharPrevW
VkKeyScanExW
DdeGetData
SetScrollInfo
PeekMessageW
SetWindowTextW
GetForegroundWindow
GetActiveWindow
GetSysColorBrush
EnumChildWindows
BeginPaint
FindWindowW
GetMessageW
GetCursor
MapWindowPoints
CreateWindowExW
DrawTextExW
DrawFocusRect
LoadCursorW
SendMessageW
DdeDisconnect
MessageBoxExW
UnhookWindowsHookEx
GetWindowDC
MsgWaitForMultipleObjects
GetPropW
GetWindowRgnBox
SetMenu
RegisterWindowMessageW
DdeUninitialize
GetShellWindow
CheckDlgButton
SetWindowRgn
ShowScrollBar
SetForegroundWindow
GetDlgItemTextW
GetMenuDefaultItem
MapVirtualKeyW
GetWindowLongA
IsChild
GetSysColor
GetMenuItemInfoA
TrackPopupMenuEx
FillRect
WindowFromPoint
PostThreadMessageA
AppendMenuW
DialogBoxIndirectParamA
CharLowerBuffW
DrawTextW
CopyRect
GetKeyState
CharNextW
SendMessageTimeoutA
MessageBoxW
GetDialogBaseUnits
MonitorFromPoint
TranslateMessage
DefWindowProcA
EndPaint
OffsetRect
CharPrevA
IsWindowVisible
GetAncestor
GetTopWindow
CreateMenu
CharNextA
ReleaseCapture
InvalidateRect
MessageBoxIndirectA
PtInRect
GetLastInputInfo
AdjustWindowRectEx
GetClassInfoW
DdeCreateStringHandleW
LoadBitmapW
SendMessageA
SetFocus
IsWindowUnicode
GetMenuState
GetClassNameW
LoadCursorA
GetScrollInfo
GetMenuItemCount
GetDlgItem
GetDlgCtrlID
RemoveMenu
FindWindowA
IsCharAlphaNumericW
DdeInitializeW
CopyImage
GetComboBoxInfo
LoadImageW
GetWindowRect
DeleteMenu
CheckRadioButton
HideCaret
ChangeClipboardChain
SendDlgItemMessageW
GetClientRect
MonitorFromRect
ChildWindowFromPoint
TrackMouseEvent
DispatchMessageA
GetCapture
ClientToScreen
SetRectEmpty
PostQuitMessage
AllowSetForegroundWindow
MsgWaitForMultipleObjectsEx
CreateDialogParamW
DdeQueryStringW
wsprintfW
CheckMenuItem
DestroyAcceleratorTable
GetNextDlgTabItem
SendNotifyMessageW
GetAsyncKeyState
InsertMenuW
DrawEdge
GetClassInfoExW
CharUpperW
GetMessageA
UnionRect
RegisterClassW
SetParent
CharLowerW
GetPropA
EnumDesktopWindows
MoveWindow
DialogBoxIndirectParamW
OpenClipboard
PeekMessageA
DialogBoxParamW
GetDesktopWindow
SetMenuItemBitmaps
SetCapture
GetMenuItemID
EndMenu
CreatePopupMenu
KillTimer
GetWindow
CallNextHookEx
DispatchMessageW
SetWindowsHookExW
IsHungAppWindow
DdeConnect
IntersectRect
FindWindowExW
MessageBoxExA
BeginDeferWindowPos
RegisterWindowMessageA
CallMsgFilterW
DestroyWindow
CreateIconIndirect
GetClipboardData
GetMessagePos
SetTimer
SetRect
GetWindowPlacement
RemovePropW
LockSetForegroundWindow
SetCursorPos
CopyIcon
SetWindowLongA
GetWindowTextW
LoadIconW
PostMessageW
SystemParametersInfoW
SetPropA
UnregisterClassW
CheckMenuRadioItem
RedrawWindow
GetClassLongW
SendMessageTimeoutW
DdeNameService
EndDeferWindowPos
GetIconInfo
GetMessageTime
SetCursor
DestroyIcon
WaitMessage
GetMenuStringW
UpdateLayeredWindow
GetParent
CloseClipboard
EnumWindows
MessageBeep
TrackPopupMenu
AttachThreadInput
SetDlgItemInt
DialogBoxParamA
GetClipboardFormatNameW
EqualRect
WinHelpW
LoadStringA
MessageBoxIndirectW
IsWindowEnabled
MapDialogRect
LoadAcceleratorsW
InflateRect
IsRectEmpty
AnimateWindow
SetClipboardData
LoadMenuW
GetWindowTextLengthW
GetClassWord
SystemParametersInfoA
GetDoubleClickTime
ShowWindow
SetDlgItemTextW
IsDlgButtonChecked
SetWindowPlacement
SetScrollPos
ShowCaret
GetMenuItemInfoW
IsWindow
DestroyMenu
IsMenu
GetWindowInfo
GetLastActivePopup
DrawIconEx
SetMenuItemInfoW
IsIconic
IsDialogMessageW
NotifyWinEvent
DdeClientTransaction
GetDC
SetPropW
RegisterClassExW
GetSystemMetrics
RegisterClipboardFormatW
GetKeyboardLayout
ScreenToClient
AdjustWindowRect
GetSystemMenu
PostMessageA
GetWindowLongW
TranslateAcceleratorW
SetMenuDefaultItem

Sections

.text
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e27008e86258439bbf824e5035cfac0

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

kernel32

ddraw

uxtheme

psapi

advapi32

msvcrt

rtutils

shell32

user32

Sections

.text Size: 1024B - Virtual size: 1004B

.rsrc Size: 4KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 80KB

.idata Size: 11KB - Virtual size: 11KB

.rdata Size: 12KB - Virtual size: 11KB

.text
Size: 1024B - Virtual size: 1004B

.rsrc
Size: 4KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 80KB

.idata
Size: 11KB - Virtual size: 11KB

.rdata
Size: 12KB - Virtual size: 11KB