a04d41df441b498b712760b1efb8b4b6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a04d41df441b498b712760b1efb8b4b6_JaffaCakes118
Size

4.6MB
MD5

a04d41df441b498b712760b1efb8b4b6
SHA1

589d2947d58a68671fbf2d9b987b6463ed5e27ac
SHA256

217c73b2a01963463e07c81908233c83cd18e3282251517491e3e44136e9055f
SHA512

7a97eda4f5b2b786bdd9341f03973ef912868351694d987a434ecf3211d73ff9c7be073b468573b1a56461bb73a9e4ae56946bad1d3ad7ae1976ef96fa10f6a9
SSDEEP

98304:QSoSpDPtUV1C2UmWHKxzEPY9IuAKXAr3JyygenhmjwqdX6m7:QvcHFmRxpIuenhmjU6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a04d41df441b498b712760b1efb8b4b6_JaffaCakes118

Files

a04d41df441b498b712760b1efb8b4b6_JaffaCakes118
.exe windows:6 windows x86 arch:x86

f1022bae1a28f4b17d9a4b56017c2409

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

__WSAFDIsSet
WSACleanup
WSAStartup
connect
recv
ntohl
htonl
WSAIoctl
listen
bind
inet_ntoa
getaddrinfo
freeaddrinfo
socket
send
getsockopt
select
gethostbyname
setsockopt
closesocket
ntohs
WSAGetLastError
recvfrom
sendto
ioctlsocket
inet_addr
htons
accept

winmm

waveOutGetVolume
waveOutSetVolume
timeGetTime
PlaySoundW
PlaySoundA

wininet

FindNextUrlCacheEntryW
DeleteUrlCacheEntryW
FindFirstUrlCacheEntryW
FindCloseUrlCache
FindNextUrlCacheGroup
DeleteUrlCacheGroup
FindFirstUrlCacheGroup
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
InternetQueryOptionA
HttpOpenRequestA
InternetConnectA
InternetSetOptionA
InternetOpenA

credui

CredUIPromptForWindowsCredentialsW
CredUnPackAuthenticationBufferW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

netapi32

NetApiBufferFree
NetWkstaGetInfo

rpcrt4

UuidToStringA
RpcStringFreeA
UuidCreate

kernel32

ReleaseSemaphore
ExitProcess
GetSystemTime
SystemTimeToFileTime
GetShortPathNameW
GetLongPathNameW
SetErrorMode
K32EnumProcessModules
K32GetModuleBaseNameW
K32GetModuleInformation
VirtualProtect
K32EnumProcesses
K32GetModuleFileNameExA
VirtualAllocEx
WriteProcessMemory
VirtualFreeEx
K32GetProcessImageFileNameA
GetProcessTimes
LoadLibraryExA
GetModuleHandleW
InterlockedCompareExchange
FlushInstructionCache
SetThreadContext
GetThreadContext
VirtualProtectEx
VirtualQueryEx
GlobalSize
LocalFree
FormatMessageA
CopyFileA
OutputDebugStringA
FindResourceA
GetModuleFileNameA
EncodePointer
lstrcmpW
GlobalGetAtomNameA
SetThreadPriority
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
VerSetConditionMask
VerifyVersionInfoA
FileTimeToSystemTime
GetACP
GlobalFlags
GetCurrentDirectoryA
GetLocaleInfoW
GetSystemDefaultUILanguage
GetOEMCP
GetCPInfo
lstrcmpiA
FindFirstFileA
GetFileSize
GetFullPathNameA
LockFile
UnlockFile
DuplicateHandle
GetVolumeInformationA
SearchPathA
GetProfileIntA
FindResourceExW
FileTimeToLocalFileTime
GetFileTime
SystemTimeToTzSpecificLocalTime
GetUserDefaultLCID
UnhandledExceptionFilter
IsProcessorFeaturePresent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
HeapFree
CreateDirectoryW
CreateDirectoryA
OpenSemaphoreA
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
ResetEvent
SetThreadExecutionState
CreateSemaphoreA
GetSystemTimeAsFileTime
CreateProcessW
CreateThread
SetFilePointer
GetSystemDirectoryW
GetSystemDirectoryA
GetLocalTime
CreateEventA
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
SetUnhandledExceptionFilter
SetEvent
OpenEventA
OpenMutexA
CreateMutexA
VirtualFree
VirtualAlloc
GetVersionExA
lstrcmpA
lstrcpynW
lstrcpynA
GlobalUnlock
GlobalFree
GlobalLock
GlobalAlloc
GetWindowsDirectoryW
MulDiv
LoadLibraryExW
CreateFileA
LeaveCriticalSection
EnterCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetUserDefaultUILanguage
lstrcpyA
LoadLibraryA
GetWindowsDirectoryA
GetSystemDefaultLCID
GetDiskFreeSpaceExW
WaitForMultipleObjects
ResumeThread
FlushFileBuffers
SuspendThread
GetFileSizeEx
WriteFile
FindClose
FindFirstFileW
GetCurrentThread
SetThreadAffinityMask
GetCurrentProcess
GetProcessAffinityMask
WinExec
MoveFileW
SetLastError
SetEndOfFile
SetFilePointerEx
GetCurrentThreadId
GetProcessId
GetNativeSystemInfo
Sleep
GetCurrentProcessId
SetFileTime
CreateFileW
GetFileAttributesExA
GetExitCodeProcess
ReadFile
CreatePipe
FreeLibrary
GetProcAddress
LoadLibraryW
GetFileAttributesA
MoveFileExW
TerminateThread
TerminateProcess
DeleteFileW
GetTempFileNameW
GetTempPathW
DeleteFileA
GetTempFileNameA
GetModuleFileNameW
GetFileAttributesExW
GetFileAttributesW
GetTickCount
VirtualQuery
FormatMessageW
GetLastError
MultiByteToWideChar
CloseHandle
WaitForSingleObject
GetModuleHandleA
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
lstrlenA
lstrcatA
GetTempPathA
GetProcessHeap
OutputDebugStringW
CompareStringW
LCMapStringW
GetStringTypeW
FindNextFileW
QueryPerformanceFrequency
RtlUnwind
GetCommandLineA
GetCommandLineW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
GetModuleHandleExW
ExitThread
FreeLibraryAndExitThread
GetConsoleMode
ReadConsoleW
GetSystemInfo
HeapQueryInformation
SetStdHandle
GetStdHandle
GetConsoleOutputCP
GetDateFormatW
GetTimeFormatW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
GetCurrentDirectoryW
GetFullPathNameW
FindFirstFileExW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
CompareStringA

user32

SubtractRect
CreateMenu
GetComboBoxInfo
SetMenuDefaultItem
GetMenuDefaultItem
NotifyWinEvent
DeleteMenu
LoadMenuW
ReleaseCapture
SetCapture
GetAsyncKeyState
CharUpperA
TrackMouseEvent
RealChildWindowFromPoint
EnumDisplayMonitors
LoadCursorW
SetLayeredWindowAttributes
GetSysColorBrush
GetMenuItemInfoA
ShowOwnedPopups
GetMessageA
PostQuitMessage
MapVirtualKeyA
GetKeyNameTextA
SetMenuItemInfoA
GetMenuCheckMarkDimensions
CheckMenuItem
CheckDlgButton
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
GetMonitorInfoA
MonitorFromWindow
WinHelpA
SetScrollInfo
GetWindow
GetTopWindow
EqualRect
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetDlgCtrlID
SetWindowPlacement
GetWindowPlacement
IsChild
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
DefWindowProcA
GetMessageTime
PeekMessageA
SetRectEmpty
SendDlgItemMessageA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
SetActiveWindow
IsWindowEnabled
CreateDialogIndirectParamA
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemID
GetMenuState
GetMenuStringA
SetWindowTextA
FindWindowA
RegisterClipboardFormatA
GetUpdateRect
UnregisterClassA
InsertMenuItemW
GetDesktopWindow
EmptyClipboard
IsDialogMessageA
GetMenuItemCount
SetMenuItemBitmaps
FindWindowW
LockWindowUpdate
FlashWindowEx
GetForegroundWindow
DrawIcon
MonitorFromPoint
LoadIconW
RegisterWindowMessageW
ShowWindow
FindWindowExA
CloseClipboard
GetClipboardData
OpenClipboard
AppendMenuW
CreatePopupMenu
RegisterWindowMessageA
SetWindowRgn
IntersectRect
IsMenu
AdjustWindowRectEx
GetScrollInfo
IsWindowVisible
GetWindowRgn
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetClassNameA
MapWindowPoints
UnionRect
DispatchMessageA
TranslateMessage
DrawEdge
CreateWindowExW
DestroyWindow
SetWindowPos
GetSystemMenu
EnableMenuItem
EndDialog
MoveWindow
WinHelpW
EndPaint
BeginPaint
DialogBoxIndirectParamW
LoadIconA
GetLastActivePopup
LoadImageW
RedrawWindow
MessageBoxA
CopyIcon
LoadCursorA
IsWindow
ScreenToClient
GetMessagePos
MessageBeep
GetWindowThreadProcessId
EnumWindows
SetForegroundWindow
PtInRect
GetCursorPos
SetFocus
GetDlgItem
SendMessageW
SystemParametersInfoA
CallWindowProcA
IsIconic
IsZoomed
DrawFrameControl
GetClassLongA
DrawIconEx
DrawTextExW
GetSystemMetrics
SetWindowLongA
FrameRect
LoadMenuA
UpdateWindow
LoadImageA
CreateIconIndirect
GetIconInfo
ReleaseDC
GetDC
GetSysColor
DrawTextW
FillRect
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
MapVirtualKeyExA
IsCharLowerA
GetDoubleClickTime
InvertRect
HideCaret
GetNextDlgGroupItem
PostThreadMessageA
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
TranslateAcceleratorA
LoadAcceleratorsA
ModifyMenuA
CharUpperBuffA
SetClassLongA
BringWindowToTop
SetParent
SetCursorPos
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
DrawStateA
OffsetRect
DrawFocusRect
InflateRect
GetWindowTextW
CopyRect
TrackPopupMenuEx
GetSubMenu
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
GetKeyboardLayout
WaitMessage
SetRect
IsClipboardFormatAvailable
MapDialogRect
GetClipboardFormatNameA
GetActiveWindow
WindowFromPoint
ClientToScreen
InvalidateRect
SetCursor
GetParent
GetNextDlgTabItem
GetWindowLongA
DestroyIcon
DestroyMenu
DestroyCursor
GetKeyState
GetFocus
DefWindowProcW
SetWindowLongW
GetWindowLongW
KillTimer
SetTimer
SetWindowTextW
EnableWindow
PostMessageA
MessageBoxW
SendMessageA
LoadStringW
GetClientRect
GetWindowRect
CopyImage
EnableScrollBar
UpdateLayeredWindow
LoadBitmapW
IsRectEmpty
SetClipboardData

gdi32

SetViewportExtEx
SetWindowExtEx
SetWindowOrgEx
GetObjectType
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
DPtoLP
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreateCompatibleBitmap
BitBlt
CreateBitmap
SelectObject
SetBkColor
SetTextColor
DeleteDC
GetPixel
SetPixel
GetObjectA
RectInRegion
CreateRectRgnIndirect
CombineRgn
PatBlt
CreateFontIndirectA
CreateRoundRectRgn
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
ExtTextOutA
RealizePalette
SetDIBColorTable
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
LPtoDP
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
SetPixelV
GetTextFaceA
GetClipBox
ExcludeClipRect
TextOutA
Escape
CreatePatternBrush
CreateHatchBrush
CreateDCA
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SelectPalette
SaveDC
RestoreDC
RectVisible
PtVisible
IntersectClipRect
GetWindowExtEx
CreateCompatibleDC
GetStockObject
GetRgnBox
DeleteObject
CopyMetaFileA
RoundRect
SelectClipRgn
ExtSelectClipRgn
SetRectRgn
OffsetRgn
CreateRectRgn
GetDeviceCaps
GetTextExtentPoint32W
SetTextJustification
GetTextMetricsA
SetBkMode
LineTo
MoveToEx
CreatePen
StretchBlt
CreateDIBSection
Rectangle
TextOutW
SetViewportOrgEx
GetViewportOrgEx
CreateSolidBrush
GetTextExtentPoint32A
GetCurrentObject
GetBkColor
GetTextColor
GetViewportExtEx

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetOpenFileNameW
GetSaveFileNameW
FindTextW

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegDeleteValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegQueryValueA
RegSetValueExA
InitiateSystemShutdownA
RegEnumKeyA
RegDeleteKeyA
RegEnumValueA
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExW
RegSetValueExW
RegCreateKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

shell32

DragQueryFileW
DragFinish
SHGetFolderPathW
ShellExecuteA
Shell_NotifyIconW
ShellExecuteW
ord190
SHOpenFolderAndSelectItems
ord155
SHFileOperationW
SHBrowseForFolderA
DragQueryFileA
SHAppBarMessage
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetFileInfoA
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
SHGetDesktopFolder
DragAcceptFiles

comctl32

ord17
ImageList_GetImageCount
ImageList_GetIcon
InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathAppendW
PathFindExtensionA
PathFindFileNameA
PathFindExtensionW
PathIsUNCA
PathStripToRootA
StrFormatKBSizeA
PathRemoveFileSpecW

uxtheme

GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData

ole32

CoDisconnectObject
CoCreateGuid
CoInitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoTaskMemFree
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
CoInitializeEx
CreateStreamOnHGlobal
DoDragDrop

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
LoadTypeLi
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysAllocString
SysStringLen
VariantCopy
VarBstrFromDate
SysAllocStringByteLen
SysFreeString

gdiplus

GdipGetImagePixelFormat
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 594KB - Virtual size: 593KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 328KB - Virtual size: 359KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.detourd
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.detourc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 213KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1022bae1a28f4b17d9a4b56017c2409

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

winmm

wininet

credui

version

netapi32

rpcrt4

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

oleacc

imm32

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rdata Size: 594KB - Virtual size: 593KB

.data Size: 328KB - Virtual size: 359KB

.detourd Size: 512B - Virtual size: 12B

.detourc Size: 4KB - Virtual size: 4KB

.rsrc Size: 380KB - Virtual size: 380KB

.reloc Size: 213KB - Virtual size: 212KB

.text
Size: 3.1MB - Virtual size: 3.1MB

.rdata
Size: 594KB - Virtual size: 593KB

.data
Size: 328KB - Virtual size: 359KB

.detourd
Size: 512B - Virtual size: 12B

.detourc
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 380KB - Virtual size: 380KB

.reloc
Size: 213KB - Virtual size: 212KB