a5b59d4a2c6f06115489052d27a16ef2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a5b59d4a2c6f06115489052d27a16ef2_JaffaCakes118
Size

841KB
MD5

a5b59d4a2c6f06115489052d27a16ef2
SHA1

a619faa403506ee89f177334f70afcedc233be78
SHA256

84092f1d538ab7dc55369752890d84f3fc16a373bcad2a5f49a8e22b1547983b
SHA512

c356f1de6471ab17983c70433c85cef32a9e71e996c7d36c0aecbe4fd95b8ad044e98055af274cd2abd830f1ea0dec8ff8b1b46bb34f82c1e36dd7b6590af172
SSDEEP

24576:bn8LO5SEMJC9wOnb5EQzF4/jGpiIBMjUMGa:b8DJC9wO9FzOjGxM+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5b59d4a2c6f06115489052d27a16ef2_JaffaCakes118

Files

a5b59d4a2c6f06115489052d27a16ef2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

25960f0ad8f44524077cfd0309e8cd3f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
SetUnhandledExceptionFilter
EnterCriticalSection
TlsFree
GetStdHandle
GetNumberFormatW
GlobalGetAtomNameW
GlobalDeleteAtom
GetVolumeInformationW
SetFilePointer
TerminateProcess
TlsAlloc
Sleep
GetLocaleInfoW
GetConsoleOutputCP
VirtualProtectEx
GetCurrentDirectoryA
InitializeCriticalSection
HeapCreate
ReadFile
GetCurrentProcessId
WaitForSingleObject
FindResourceExW
GetEnvironmentStringsW
IsValidCodePage
HeapAlloc
HeapSetInformation
WriteFile
CreateNamedPipeW
FindClose
SetEnvironmentVariableA
GetVersionExW
LockResource
FileTimeToLocalFileTime
GetCommandLineW
SetEvent
GetOEMCP
SetThreadPriority
GetFullPathNameW
GetCurrentThread
GetCurrentDirectoryW
SetHandleCount
HeapSize
GetSystemDirectoryW
DeleteCriticalSection
InterlockedDecrement
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
GlobalFlags
GetCPInfo
FormatMessageW
GetTimeZoneInformation
lstrlenW
UnhandledExceptionFilter
GlobalAlloc
GetStringTypeW
GetProcessHeap
IsProcessorFeaturePresent
GetSystemInfo
GlobalHandle
GetConsoleCP
GlobalFree
LockFile
lstrlenA
GetFileAttributesExW
GetCurrentThreadId
ResumeThread
InterlockedExchange
GetTempPathW
lstrcmpiW
CloseHandle
GetTempFileNameW
OpenEventW
InterlockedIncrement
FreeEnvironmentStringsW
FindResourceW
GetOverlappedResult
ExitProcess
FlushFileBuffers
GetFileAttributesW
GetModuleFileNameW
ExitThread
SearchPathW
CopyFileW
WaitForMultipleObjects
GetProcAddress
GlobalUnlock
GetFileSize
LocalFree
UnlockFile
HeapQueryInformation
RtlUnwind
SetStdHandle
HeapReAlloc
GetStartupInfoW
GetFileTime
TlsSetValue
SizeofResource
CreateThread
CreateMutexW
GlobalLock
RaiseException
LoadResource
GetCurrentProcess
GetFileType
CreateEventW
CompareStringW
CreateFileW
LoadLibraryW
TlsGetValue
LocalReAlloc
QueryPerformanceCounter
LeaveCriticalSection
GetSystemTimeAsFileTime
GetProfileIntW
IsDebuggerPresent
VirtualAlloc
lstrcmpA
FreeLibrary
MulDiv
DuplicateHandle
LCMapStringW
LoadLibraryExW
InterlockedCompareExchange
GetACP
VirtualQuery
GlobalReAlloc
GetConsoleMode
lstrcmpW
LocalAlloc
lstrcpyW
TerminateThread
GetTickCount
GetUserDefaultUILanguage
GetFileSizeEx
FileTimeToSystemTime
GlobalSize
GlobalFindAtomW
GlobalAddAtomW
DisconnectNamedPipe
FreeResource
GetLastError
MultiByteToWideChar
GetModuleHandleW
FindFirstFileW
SetEndOfFile
SetLastError
WriteConsoleW
HeapDestroy

user32

ReuseDDElParam
GetTopWindow
DestroyAcceleratorTable
MonitorFromWindow
GetMonitorInfoW
SetScrollPos
SetWindowLongW
MapVirtualKeyExW
CheckMenuItem
DestroyIcon
SetLayeredWindowAttributes
MessageBoxW
RealChildWindowFromPoint
GetForegroundWindow
GetKeyboardLayout
SetMenuDefaultItem
EnableMenuItem
SetMenu
GetWindow
UpdateWindow
DrawEdge
IsWindowEnabled
GetMenuItemCount
SystemParametersInfoW
SetTimer
InvertRect
TranslateAcceleratorW
MonitorFromPoint
GetActiveWindow
RegisterClipboardFormatW
SetParent
IsMenu
ToUnicodeEx
CopyRect
GetKeyboardState
PostThreadMessageW
WinHelpW
ValidateRect
LoadMenuW
EqualRect
GetCursorPos
NotifyWinEvent
DestroyMenu
GetWindowRect
OpenClipboard
HideCaret
GetDesktopWindow
SendMessageW
MoveWindow
GetAsyncKeyState
DrawMenuBar
RedrawWindow
GetWindowPlacement
InflateRect
CharUpperBuffW
FrameRect
GetNextDlgGroupItem
DestroyWindow
SetWindowTextW
GetMenuCheckMarkDimensions
AppendMenuW
DeleteMenu
GetParent
SendDlgItemMessageW
DrawIcon
UnpackDDElParam
SetCapture
IsWindow
GetClientRect
EnableScrollBar
EmptyClipboard
RegisterClassW
DefFrameProcW
LoadBitmapW
GetSystemMetrics
GetSysColorBrush
MapVirtualKeyW
BringWindowToTop
RegisterWindowMessageW
EndDeferWindowPos
GetMessageTime
LockWindowUpdate
SetMenuItemBitmaps
IsIconic
CheckDlgButton
InsertMenuItemW
PostQuitMessage
GetScrollInfo
IsWindowVisible
UnionRect
ShowScrollBar
EnumWindows
ScrollWindow
SetScrollRange
FillRect
EnumDisplayMonitors
GetMenuStringW
GetCapture
TranslateMessage
LoadIconW
SetFocus
IsCharLowerW
GetMessagePos
SubtractRect
SendDlgItemMessageA
GetWindowDC
GrayStringW
BeginPaint
ModifyMenuW
GetDC
GetIconInfo
LoadImageW
WindowFromPoint
EndPaint
SetActiveWindow
GetLastActivePopup
CopyImage
CharUpperW
GetFocus
SetCursor
GetSubMenu
DispatchMessageW
ShowWindow
UpdateLayeredWindow
CreateMenu
SetClipboardData
GetScrollPos
TabbedTextOutW
GetMenuItemInfoW
IsRectEmpty
LoadAcceleratorsW
GetClassInfoW
ClientToScreen
CloseClipboard
GetMenuDefaultItem
EndDialog
DestroyCursor
GetNextDlgTabItem
GetWindowTextW
GetClassInfoExW
ScreenToClient
WaitMessage
AdjustWindowRectEx
IsDialogMessageW
GetKeyNameTextW
GetSystemMenu
SetWindowsHookExW
GetPropW
DrawFocusRect
DrawStateW
IsChild
DrawTextExW
GetUpdateRect
KillTimer
ShowOwnedPopups
SetWindowRgn
GetWindowLongW
PostMessageW
DrawTextW
CreateDialogIndirectParamW
SetWindowPos
GetClassLongW
GetWindowThreadProcessId
IsClipboardFormatAvailable
SetCursorPos
MapDialogRect
GetDlgItem
SetRect
CopyAcceleratorTableW
CallWindowProcW
GetMenu
DialogBoxParamW
SetRectEmpty
GetMenuItemID
CreateWindowExW
SetPropW
GetMenuState
RemoveMenu
IsZoomed
MapWindowPoints
SetWindowPlacement
PeekMessageW
CreatePopupMenu
GetKeyState
GetWindowTextLengthW
UnhookWindowsHookEx
GetScrollRange
LoadCursorW
BeginDeferWindowPos
EnableWindow
ReleaseDC
TranslateMDISysAccel
MessageBeep
InsertMenuW
SetScrollInfo
OffsetRect
GetDoubleClickTime
GetDlgCtrlID
CreateAcceleratorTableW
GetClassNameW
CopyIcon
GetWindowRgn
InvalidateRect
RemovePropW
ReleaseCapture
DefWindowProcW
DeferWindowPos
IntersectRect
TrackPopupMenu
DrawIconEx
DefMDIChildProcW
CallNextHookEx
SetForegroundWindow
DrawFrameControl
GetMessageW
PtInRect
GetSysColor
SetClassLongW

gdi32

SetViewportExtEx
GetViewportOrgEx
FillRgn
CreatePalette
LPtoDP
ExtFloodFill
CreateBitmap
CreateCompatibleBitmap
FrameRgn
SaveDC
GetTextFaceW
CreatePolygonRgn
GetTextMetricsW
SetViewportOrgEx
GetStockObject
ScaleWindowExtEx
CreateRoundRectRgn
ExtTextOutW
GetLayout
GetBkColor
CreateDIBSection
TextOutW
CreateCompatibleDC
GetNearestPaletteIndex
RectVisible
GetSystemPaletteEntries
ScaleViewportExtEx
GetTextCharsetInfo
SetRectRgn
GetPaletteEntries
CreateEllipticRgn
CopyMetaFileW
GetTextExtentPoint32W
PtVisible
RealizePalette
CreatePen
DeleteDC
PtInRegion
GetClipBox
SelectClipRgn
SetBkMode
RestoreDC
SetPolyFillMode
StretchBlt
GetWindowOrgEx
GetWindowExtEx
ExcludeClipRect
Polygon
PatBlt
BitBlt
SetTextAlign
CreateFontIndirectW
SetTextColor
GetBitmapBits
CreateHatchBrush
Rectangle
Polyline
DPtoLP
GetDeviceCaps
OffsetRgn
GetObjectW
GetPixel
GetViewportExtEx
OffsetViewportOrgEx
Ellipse
OffsetWindowOrgEx
EnumFontFamiliesW
DeleteObject
SetDIBColorTable
CreateDCW
GetRgnBox
SetWindowOrgEx
IntersectClipRect
ExtSelectClipRgn
SetPixel
SetPixelV
CreateDIBitmap
SetMapMode
GetBoundsRect
SetLayout
GetTextColor
MoveToEx
SelectObject
SelectPalette
SetBkColor
CreateRectRgnIndirect
LineTo
SetPaletteEntries
Escape
CreateSolidBrush
GetObjectType
SetROP2
EnumFontFamiliesExW
CreatePatternBrush
CreateRectRgn
SetWindowExtEx
CombineRgn

comdlg32

GetFileTitleW
GetOpenFileNameW

advapi32

IsValidSid
RegEnumKeyExW
RegDeleteValueW
RegOpenKeyExW
InitializeSecurityDescriptor
SetSecurityDescriptorSacl
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
GetTokenInformation
ConvertSidToStringSidW
RegQueryValueExW
OpenProcessToken
RegSetValueExW
GetSecurityDescriptorSacl
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenThreadToken

shell32

ShellExecuteExW
ShellExecuteW
DragFinish
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
DragQueryFileW
SHAppBarMessage
SHGetFolderLocation
SHGetFileInfoW
SHGetPathFromIDListW

ole32

CoInitializeEx
CLSIDFromString
OleCreateMenuDescriptor
CoInitialize
CoTaskMemFree
CreateStreamOnHGlobal
OleTranslateAccelerator
RegisterDragDrop
OleDuplicateData
OleGetClipboard
CoUninitialize
OleLockRunning
RevokeDragDrop
DoDragDrop
CoLockObjectExternal
CoTaskMemAlloc
CoCreateInstance
IsAccelerator
OleDestroyMenuDescriptor
ReleaseStgMedium

oleaut32

VariantChangeType
SysStringLen
SysAllocStringByteLen
VariantClear
SysFreeString
SysAllocString
SystemTimeToVariantTime
VarBstrFromDate
VariantInit
SysStringByteLen
VariantTimeToSystemTime
SysAllocStringLen

comctl32

ImageList_GetIconSize

shlwapi

SHCopyKeyA
PathIsUNCW
PathRemoveFileSpecW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
SHDeleteValueA
ord215

winmm

PlaySoundW

msimg32

TransparentBlt
AlphaBlend

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

gdiplus

GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipAlloc
GdipDeleteGraphics
GdipCreateFromHDC
GdipCloneImage
GdipGetImageGraphicsContext
GdipGetImagePalette
GdipFree
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdiplusShutdown
GdipSetInterpolationMode
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdiplusStartup

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

Exports

Exports

MyCopyMemory

Sections

.text
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ssw
Size: - Virtual size: 5.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qqw
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ttw
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddw
Size: 278KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

25960f0ad8f44524077cfd0309e8cd3f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

msimg32

imm32

gdiplus

oleacc

Exports

Exports

Sections

.text Size: 194KB - Virtual size: 194KB

.ssw Size: - Virtual size: 5.4MB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 24B

.qqw Size: 150KB - Virtual size: 150KB

.ttw Size: 154KB - Virtual size: 153KB

.ddw Size: 278KB - Virtual size: 277KB

.tls Size: 512B - Virtual size: 57B

.rsrc Size: 33KB - Virtual size: 32KB

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 194KB - Virtual size: 194KB

.ssw
Size: - Virtual size: 5.4MB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 24B

.qqw
Size: 150KB - Virtual size: 150KB

.ttw
Size: 154KB - Virtual size: 153KB

.ddw
Size: 278KB - Virtual size: 277KB

.tls
Size: 512B - Virtual size: 57B

.rsrc
Size: 33KB - Virtual size: 32KB

.reloc
Size: 14KB - Virtual size: 14KB