a39bdcbd71c5d0fc9f9f4b69520ffe84_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a39bdcbd71c5d0fc9f9f4b69520ffe84_JaffaCakes118
Size

985KB
MD5

a39bdcbd71c5d0fc9f9f4b69520ffe84
SHA1

4766ec42cfa151a5060cb7a2e256317a5f06989e
SHA256

ceacb6bee3e944be2a94b135e9695e9f49b285bf01af92cbb91c56351b23af35
SHA512

eaf9f8b3c3b7e442f1f47cdf6cdc0c9859a4d7bb74b912544b3210649d4678dad741df1454694b7605ce177bd7d1db1856a38887f2487b9e884ab0d9b3cad1b3
SSDEEP

12288:8ZXecF7Rok67PFBrepnoPanUR0a5CD4Xjq6oViU0PoTDbp+gfLmwWUNd3+7JgB7R:85SPbEnocy+zk7oPbp1Dm+kgZKMvs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a39bdcbd71c5d0fc9f9f4b69520ffe84_JaffaCakes118

Files

a39bdcbd71c5d0fc9f9f4b69520ffe84_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d1a8a6c7610072d7ccc530c0e9e9afa0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mmioOpenW
timeGetTime
mciGetErrorStringW
mmioClose
mciSendCommandA
mmioDescend

comdlg32

CommDlgExtendedError
GetFileTitleW
ChooseColorW
ChooseFontW

shlwapi

PathFindExtensionW
PathIsRelativeW
PathRemoveFileSpecW
PathFindFileNameW
PathAppendW
PathRemoveExtensionW
StrStrIW
PathRemoveFileSpecA
PathCompactPathW
PathIsRootW
PathIsDirectoryW
PathRenameExtensionW
PathAddExtensionW
PathAddBackslashW
PathFileExistsW
PathAppendA
StrCmpIW

gdiplus

GdipDrawImageRectRect
GdipGetImageHeight
GdipImageRotateFlip
GdipDeleteGraphics
GdipBitmapGetPixel
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageThumbnail
GdipCreateFromHDC
GdipGetImageWidth
GdipCreateHBITMAPFromBitmap
GdipFree
GdipLoadImageFromFileICM
GdipAlloc
GdipGetImageBounds
GdiplusShutdown
GdipLoadImageFromFile

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
ShellExecuteW
ShellExecuteExW
SHGetSpecialFolderPathW
SHGetFileInfoW
SHFileOperationW
DragQueryFileW
SHGetSpecialFolderLocation
SHGetMalloc
DragAcceptFiles
SHBindToParent
ILGetSize
ILGetSize

ole32

CoInitialize
CoTaskMemAlloc
OleInitialize
CoGetObject
CoTaskMemFree
OleUninitialize
CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
StringFromGUID2
GetRunningObjectTable
CreateClassMoniker
CoUninitialize
ReleaseStgMedium

comctl32

FlatSB_GetScrollInfo
ImageList_EndDrag
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_Draw
ImageList_GetIcon
_TrackMouseEvent
ImageList_SetBkColor
ImageList_DragEnter
ImageList_Replace
ImageList_DragMove
ImageList_BeginDrag
ImageList_AddMasked
ImageList_DragLeave

avifil32

AVIStreamReadFormat
AVIFileRelease
AVIFileGetStream
AVIStreamInfoW
AVIFileOpenW
AVIStreamRead
AVIStreamRelease
AVIFileExit
AVIFileInit

advapi32

CryptEncrypt
GetTokenInformation
CryptDecrypt
CryptDestroyKey
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegCreateKeyExA
FreeSid
RegEnumKeyExW
CryptReleaseContext
RegisterEventSourceW
RegSetValueExA
RegDeleteKeyW
CryptDestroyHash
AdjustTokenPrivileges
OpenProcessToken
CryptCreateHash
LookupPrivilegeValueW
RegQueryInfoKeyW
RegCloseKey
AllocateAndInitializeSid
ReportEventW
RegEnumValueW
RegSetValueExW
CryptAcquireContextW
GetUserNameA
RegCreateKeyExW
CryptDeriveKey
EqualSid
CryptHashData

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

VirtualFree
Process32NextW
GetCurrentThread
LockResource
GetModuleHandleA
GetProfileIntW
lstrcatW
LoadResource
GetProcessHeap
GlobalFree
LoadLibraryW
Thread32Next
DeviceIoControl
_llseek
CreateFileMappingA
LocalFree
GetTickCount
GetLongPathNameW
GetDriveTypeW
lstrcpyW
GetVolumeInformationW
CreatePipe
CreateThread
GetTimeFormatW
Process32FirstW
EnterCriticalSection
GetModuleFileNameA
GetSystemTimeAsFileTime
SetConsoleTitleW
FindNextFileW
GetDiskFreeSpaceExW
CopyFileW
FreeResource
GetComputerNameA
lstrlenA
RemoveDirectoryW
LeaveCriticalSection
GetACP
OpenFileMappingW
GetProcAddress
FatalAppExitW
GetSystemTime
SetThreadPriority
OutputDebugStringW
CreateFileW
CreateFileMappingW
GetThreadLocale
GetFileSize
GetFullPathNameW
GetDateFormatW
GetFileAttributesW
GetVersionExA
WaitForSingleObject
GlobalLock
WaitForMultipleObjects
FindResourceW
GetVersionExW
FindFirstFileW
IsBadWritePtr
lstrcatA
GetShortPathNameW
SetCurrentDirectoryW
InterlockedDecrement
GlobalMemoryStatus
AllocConsole
SetEvent
FileTimeToSystemTime
Thread32First
RaiseException
LocalFileTimeToFileTime
GetExitCodeProcess
ReadFile
GetCurrentProcess
QueryPerformanceCounter
MoveFileW
CreateEventW
GetTempFileNameW
GetLocaleInfoW
LoadLibraryExW
UnmapViewOfFile
CloseHandle
TerminateProcess
lstrcmpiW
GetStartupInfoW
QueryPerformanceFrequency
HeapAlloc
GetDriveTypeA
CreateMutexW
LocalAlloc
InterlockedIncrement
WideCharToMultiByte
GetLogicalDriveStringsW
SetFilePointer
GlobalAlloc
SystemTimeToFileTime
GetStdHandle
GlobalUnlock
InitializeCriticalSection
GetCurrentProcessId
FlushFileBuffers
ResumeThread
GetFileAttributesA
ResetEvent
DeleteFileW
GetExitCodeThread
DebugBreak
OpenProcess
VirtualAlloc
GetModuleFileNameW
SetFileAttributesW
ReleaseMutex
CreateDirectoryW
GetLocalTime
FreeLibrary
MapViewOfFile
CreateFileA
GetCurrentThreadId
MultiByteToWideChar
GetModuleHandleW
GetLastError
GetPrivateProfileStringW
GetProcessAffinityMask
Sleep
IsBadReadPtr
FindClose
CreateToolhelp32Snapshot
GetVersion
SuspendThread
CreateProcessW
SetProcessAffinityMask
GetTempPathW
lstrlenW
WriteFile
DeleteCriticalSection
FormatMessageW
GetLocaleInfoA
GetSystemInfo
LoadLibraryA
GetNumberFormatW
GetCurrentDirectoryW
FileTimeToLocalFileTime
MulDiv
GetDiskFreeSpaceA
InterlockedExchange
GetSystemDefaultLangID
HeapFree

msimg32

AlphaBlend

user32

WaitForInputIdle
GetDlgItemTextW
PostThreadMessageW
SendMessageTimeoutW
LoadBitmapW
DispatchMessageW
TranslateMessage
LockWindowUpdate
wvsprintfA
GetSystemMenu
GetFocus
SetRectEmpty
SetDlgItemTextW
GetSysColor
GetMenu
GetClassInfoW
WindowFromPoint
FillRect
ScreenToClient
GetKeyState
ExitWindowsEx
wsprintfA
GetDC
GetWindowLongW
GetWindowDC
IsClipboardFormatAvailable
EndDialog
EndPaint
UnregisterClassW
EnableWindow
FindWindowW
SetWindowLongW
GetOpenClipboardWindow
CloseClipboard
GetDlgItemInt
GetCursorPos
IsWindowEnabled
CopyRect
PostQuitMessage
UpdateWindow
SendDlgItemMessageW
SystemParametersInfoW
SetWindowRgn
InflateRect
CheckMenuItem
SetTimer
GetWindow
ClientToScreen
DrawIconEx
DestroyMenu
IsRectEmpty
RegisterHotKey
InvalidateRect
LoadCursorW
KillTimer
MapDialogRect
CheckDlgButton
FindWindowExW
GetParent
RegisterClipboardFormatW
GetDlgItem
GetLastActivePopup
GetClipboardData
OpenClipboard
GrayStringW
LoadStringW
IsZoomed
DestroyIcon
EnableMenuItem
SetActiveWindow
GetActiveWindow
GetDesktopWindow
GetMessagePos
RegisterWindowMessageW
MessageBoxW
IsIconic
IsDlgButtonChecked
PeekMessageW
LoadIconW
ReleaseDC
SetCapture
GetSystemMetrics
PostMessageW
PtInRect
RedrawWindow
SetForegroundWindow
GetClientRect
SetWindowTextW
SetCursor
OffsetRect
GetCapture
BeginPaint
SetDlgItemInt
GetWindowTextW
wsprintfW
ReleaseCapture
MoveWindow
SetClipboardData
DrawTextExW
IsWindow
IsWindowVisible
GetWindowRect
DrawTextW
AdjustWindowRectEx
SetMenu
DrawFocusRect
GetComboBoxInfo
LoadImageW
EqualRect
TrackPopupMenu
SendMessageW
BringWindowToTop
SetWindowPos
TabbedTextOutW
GetDlgCtrlID
GetSubMenu
UpdateLayeredWindow
SetClassLongW
ShowWindow
SetRect
RemoveMenu
DrawStateW
LoadMenuW

gdi32

CreateSolidBrush
GetPixel
SetBkMode
SetDIBits
PtInRegion
Rectangle
GetCharABCWidthsW
CreateDIBSection
OffsetRgn
CreateFontIndirectW
GetTextColor
GetViewportExtEx
CreateRectRgnIndirect
PatBlt
RectVisible
SetTextColor
GetDeviceCaps
DeleteObject
GetMapMode
GetWindowExtEx
GetObjectW
CreateBitmapIndirect
CreateCompatibleBitmap
GetTextExtentPoint32W
ExtCreatePen
GetStockObject
CreateDCW
PtVisible
TextOutW
CreateBitmap
DPtoLP
SetTextAlign
CreatePalette
CreateICW
LPtoDP
CreateRectRgn
StretchBlt
CombineRgn
GetDIBits
GetTextMetricsW
CreateHalftonePalette
DeleteDC
Escape
SetStretchBltMode
RealizePalette
CreatePen
SelectObject
GetCurrentObject
ExtTextOutW
CreateCompatibleDC
BitBlt
GetDIBColorTable

Sections

.text
Size: 623KB - Virtual size: 622KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 319KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1a8a6c7610072d7ccc530c0e9e9afa0

Headers

File Characteristics

Imports

winmm

comdlg32

shlwapi

gdiplus

shell32

ole32

comctl32

avifil32

advapi32

version

kernel32

msimg32

user32

gdi32

Sections

.text Size: 623KB - Virtual size: 622KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 319KB - Virtual size: 3.6MB

.rsrc Size: 29KB - Virtual size: 29KB

.text
Size: 623KB - Virtual size: 622KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 319KB - Virtual size: 3.6MB

.rsrc
Size: 29KB - Virtual size: 29KB