a29ed5beb2a78b4649199ade58e6b4c3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a29ed5beb2a78b4649199ade58e6b4c3_JaffaCakes118
Size

257KB
MD5

a29ed5beb2a78b4649199ade58e6b4c3
SHA1

e1671b241e151dd4e57466439bd53aeecba2eaf6
SHA256

e8f04c66fadeeb23f4638d8ed4d88738032a747482747c45845631280eb74453
SHA512

050ffb472c6c6a42cb788240cc4e12b0b9dc9a8253bebc6aa603346e05bd8143110143102f06f889c495ee0c1f311311e7a309198e439c94df01148558839943
SSDEEP

6144:5hPMhPbvrs+3hcHICis1ed00b9/oQoHv1a0weSMb3QGL:IgYoINs1ed0Uo3dZ1j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a29ed5beb2a78b4649199ade58e6b4c3_JaffaCakes118

Files

a29ed5beb2a78b4649199ade58e6b4c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aae7ca1716a138a64f16a8e556834f50

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

FindMimeFromData

oleaut32

VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
SystemTimeToVariantTime
SysAllocString

ole32

CoCreateGuid
CLSIDFromString
CoCreateInstance
CoTaskMemFree
StringFromCLSID

kernel32

ExpandEnvironmentStringsA
GetExitCodeThread
GetWindowsDirectoryW
TerminateThread
CreateEventW
FreeLibrary
LocalUnlock
CreateNamedPipeW
FindNextFileW
DisconnectNamedPipe
FlushViewOfFile
MulDiv
SetFilePointer
GetDiskFreeSpaceExW
GlobalLock
WideCharToMultiByte
LeaveCriticalSection
CreateProcessW
CreateIoCompletionPort
lstrcmpiW
SetUnhandledExceptionFilter
LockResource
FindFirstFileW
LocalAlloc
ExitThread
GetPrivateProfileStringW
GetProcessHeap
GetTempPathW
GetUserDefaultLangID
OpenEventW
SizeofResource
GetSystemTimeAsFileTime
GlobalUnlock
ReadFile
MapViewOfFile
LoadResource
GetTempFileNameW
LCMapStringW
FindClose
WaitForSingleObject
SetEndOfFile
GetFileSize
CreateMutexW
DeviceIoControl
SetThreadLocale
UnhandledExceptionFilter
TlsAlloc
CloseHandle
RaiseException
ReleaseMutex
CreateEventA
GetShortPathNameW
HeapAlloc
GetNumberFormatW
UnmapViewOfFile
SetLastError
IsDebuggerPresent
GetTimeFormatW
LocalFree
GetLocalTime
CopyFileW
GetModuleHandleW
WaitForMultipleObjects
OutputDebugStringW
lstrcmpW
GetCurrencyFormatW
EnterCriticalSection
GetSystemDirectoryA
CreateThread
TlsGetValue
ConnectNamedPipe
GlobalAlloc
GetThreadLocale
CreateDirectoryW
ExpandEnvironmentStringsW
FileTimeToSystemTime
GetDateFormatW
WaitNamedPipeW
CreateFileMappingA
Process32FirstW
SetProcessWorkingSetSize
GetUserDefaultLCID
FlushFileBuffers
GetCurrentThreadId
FindResourceW
DeleteCriticalSection
FindResourceA
Process32NextW
CreateFileW
CreateToolhelp32Snapshot
LoadLibraryExW
HeapFree
GetTempPathA
GetQueuedCompletionStatus
GetACP
GetSystemDirectoryW
SystemTimeToFileTime
WriteFile
DeleteFileW
GetTempFileNameA
TlsSetValue
OpenProcess
InitializeCriticalSectionAndSpinCount
VirtualAlloc

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

wininet

InternetGetLastResponseInfoA
InternetOpenA
HttpOpenRequestA
InternetConnectA
InternetCloseHandle
HttpSendRequestA
InternetCanonicalizeUrlW
HttpQueryInfoA
InternetSetOptionA
InternetQueryOptionA
InternetReadFile
InternetCombineUrlA

shlwapi

PathFileExistsW
PathIsDirectoryW
ColorHLSToRGB
PathCompactPathW
ColorRGBToHLS

advapi32

AllocateAndInitializeSid
OpenThreadToken
EqualSid
RegEnumKeyExW
AddAccessAllowedAce
InitializeAcl
RegQueryValueExA
FreeSid
RegQueryValueExW
RegOpenKeyExA
OpenSCManagerW
InitializeSecurityDescriptor
OpenServiceW
RegEnumValueW
GetTokenInformation
RegCloseKey
IsTextUnicode
RegOpenKeyExW
SetSecurityDescriptorDacl
GetLengthSid
OpenProcessToken
RegOpenKeyW
CloseServiceHandle

winmm

timeGetDevCaps
timeGetTime
timeKillEvent
timeSetEvent
PlaySoundA

gdi32

LPtoDP
GetCurrentPositionEx
GetPixel
SetWindowOrgEx
SetBkColor
GetClipBox
DPtoLP
BitBlt
SaveDC
DeleteDC
CreateCompatibleBitmap
SetLayout
SetBrushOrgEx
CreatePatternBrush
GetTextExtentPointW
GetViewportExtEx
GetCurrentObject
GetObjectW
SetTextColor
GetDIBits
IntersectClipRect
CreateFontIndirectW
CreateHatchBrush
CreateDIBPatternBrushPt
SetBkMode
AddFontMemResourceEx
GetDeviceCaps
SetMapMode
SetViewportOrgEx
GetTextAlign
DeleteObject
CreateDIBSection
ExtTextOutW
GetTextExtentPoint32A
Polygon
StretchBlt
GetObjectA
CombineRgn
EnumFontFamiliesExW
SetWindowExtEx
GetWindowOrgEx
SetViewportExtEx
SelectObject
SetTextAlign
RectVisible
PatBlt
CreateRectRgnIndirect
ExtCreatePen
CreateRoundRectRgn
PtVisible
GetTextExtentExPointW
Escape
GetTextMetricsA
Rectangle
CreatePen
CreateSolidBrush
SetStretchBltMode
GetMapMode
ExcludeClipRect
StretchDIBits
CreateCompatibleDC
TextOutA
TextOutW
GetWindowExtEx
RestoreDC
SetPixel
GetStockObject
CreateFontA
EnumFontFamiliesExA
GetTextExtentPoint32W
CreateBitmap

comdlg32

GetOpenFileNameW

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

psapi

EnumProcessModules
GetModuleFileNameExW

comctl32

ImageList_GetIconSize
ImageList_Draw
ImageList_DrawEx
ImageList_GetImageInfo
ord17

user32

DrawFrameControl
IsWindow
GetSysColor
ScreenToClient
DestroyWindow
SetForegroundWindow
GetAsyncKeyState
CreateWindowExA
EnableMenuItem
DrawEdge
SwitchDesktop
LoadCursorW
InvalidateRect
IsClipboardFormatAvailable
IsWindowEnabled
SetMenuDefaultItem
SystemParametersInfoA
DestroyIcon
GetDoubleClickTime
SetWindowsHookExA
GetCursorPos
PostMessageW
MapWindowPoints
GetMonitorInfoW
SetParent
DefWindowProcA
GetClassLongA
WindowFromPoint
GetWindowTextLengthW
RegisterClassExW
GetSystemMetrics
IsIconic
SetTimer
FindWindowW
TrackPopupMenu
NotifyWinEvent
GetWindowPlacement
BeginPaint
GetWindowTextW
SetWindowLongW
GetDC
LoadStringW
SetCursor
SetWindowLongA
IsWindowUnicode
SendMessageTimeoutA
ReleaseCapture
IsChild
EndDeferWindowPos
GetMenuItemCount
GetIconInfo
CloseDesktop
SetScrollInfo
CreateCursor
CheckMenuItem
GetWindowLongW
MessageBeep
FillRect
LoadImageW
UnhookWindowsHookEx
ModifyMenuW
AdjustWindowRectEx
SetScrollRange
GetClientRect
SetWindowPos
GetSubMenu
DispatchMessageW
ValidateRect
ReleaseDC
GetDesktopWindow
GetScrollInfo
DeleteMenu
PtInRect
EnableWindow
SendMessageW
RegisterClassA
GrayStringW
SetCapture
CallWindowProcW
InsertMenuW
OpenClipboard
PostMessageA
OffsetRect
SetClipboardData
EndPaint
GetCapture
GetWindowRect
CharUpperBuffW
GetWindowThreadProcessId
UpdateWindow
CreateWindowExW
IsWindowVisible
KillTimer
LoadMenuW
MapVirtualKeyW
DrawTextA
GetMenuItemID
GetActiveWindow
CopyIcon
CountClipboardFormats
SendMessageA
MonitorFromWindow
SetThreadDesktop
GetFocus
DispatchMessageA
RegisterWindowMessageA
LoadCursorFromFileA
DeferWindowPos
GetScrollPos
MoveWindow
TabbedTextOutW
ClientToScreen
SetWindowRgn
SystemParametersInfoW
RegisterClassW
OpenDesktopW
EnumClipboardFormats
CharLowerBuffW
keybd_event
GetCaretBlinkTime
DrawIconEx
RegisterClipboardFormatW
ScrollWindowEx
GetKeyState
RegisterClassExA
CloseClipboard
ScrollDC
wsprintfW
DrawTextExW
InvertRect
TranslateMessage
RegisterWindowMessageW
GetWindowDC
GetMessageA
RedrawWindow
DefWindowProcW
CallNextHookEx
SendNotifyMessageW
PeekMessageA
GetClassNameW
GetParent
GetDlgCtrlID
CopyRect
GetWindow
LoadCursorA
EmptyClipboard
DrawTextW
DrawIcon
MessageBoxW
GetClipboardData
GetWindowLongA
InflateRect
SetScrollPos
CreateIconFromResourceEx
ShowWindow
LoadIconW
SetFocus
CreateDesktopW
GetMessageW
BeginDeferWindowPos
LoadBitmapW
GetSysColorBrush
DrawFocusRect

msimg32

GradientFill

ws2_32

getservbyname
WSAStartup
htonl
htons
WSAGetLastError
WSASetLastError
WSACleanup
getservbyport
ntohs
inet_addr
gethostbyaddr
gethostbyname
inet_ntoa

shell32

SHBrowseForFolderW
ShellExecuteExW
SHGetMalloc
SHGetFileInfoW
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetDesktopFolder
Shell_NotifyIconW

rpcrt4

NdrClientInitializeNew
NdrFreeBuffer
RpcStringFreeW
NdrConformantArrayMarshall
RpcBindingServerFromClient
NdrPointerFree
NdrGetBuffer
UuidCreate
RpcBindingFree
NdrConformantStringMarshall
NdrConformantStringBufferSize
RpcBindingFromStringBindingW
NdrAllocate
I_RpcGetBuffer
NdrConvert
NdrConformantStringUnmarshall
NdrConformantArrayBufferSize
RpcRaiseException
RpcStringBindingParseW
NdrConformantArrayUnmarshall
NdrServerInitializeNew
RpcStringBindingComposeW
NdrSendReceive
RpcBindingToStringBindingW

odbccp32

SQLGetPrivateProfileString
SelectTransDlg
SQLCreateDataSourceExW
SQLConfigDriverW
SQLInstallDriver
SQLLoadDataSourcesListBox

imgutil

DllCanUnloadNow

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cFpZjg
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ITj
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.SmUrX
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Gsu
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.u
Size: 1024B - Virtual size: 994B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GxPy
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 213KB - Virtual size: 516KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WwgYlo
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.r
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aae7ca1716a138a64f16a8e556834f50

Headers

DLL Characteristics

File Characteristics

Imports

urlmon

oleaut32

ole32

kernel32

version

wininet

shlwapi

advapi32

winmm

gdi32

comdlg32

oleacc

psapi

comctl32

user32

msimg32

ws2_32

shell32

rpcrt4

odbccp32

imgutil

Sections

.text Size: 18KB - Virtual size: 18KB

.cFpZjg Size: 1024B - Virtual size: 1KB

.ITj Size: 512B - Virtual size: 412B

.SmUrX Size: 1024B - Virtual size: 1KB

.Gsu Size: 2KB - Virtual size: 2KB

.rdata Size: 12KB - Virtual size: 12KB

.u Size: 1024B - Virtual size: 994B

.GxPy Size: 1024B - Virtual size: 730B

.data Size: 213KB - Virtual size: 516KB

.WwgYlo Size: 1KB - Virtual size: 1KB

.r Size: 1024B - Virtual size: 1KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 18KB - Virtual size: 18KB

.cFpZjg
Size: 1024B - Virtual size: 1KB

.ITj
Size: 512B - Virtual size: 412B

.SmUrX
Size: 1024B - Virtual size: 1KB

.Gsu
Size: 2KB - Virtual size: 2KB

.rdata
Size: 12KB - Virtual size: 12KB

.u
Size: 1024B - Virtual size: 994B

.GxPy
Size: 1024B - Virtual size: 730B

.data
Size: 213KB - Virtual size: 516KB

.WwgYlo
Size: 1KB - Virtual size: 1KB

.r
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 3KB - Virtual size: 2KB