a5b0501cb7ced39bc5b6a8ce64ee4996_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a5b0501cb7ced39bc5b6a8ce64ee4996_JaffaCakes118
Size

332KB
MD5

a5b0501cb7ced39bc5b6a8ce64ee4996
SHA1

acd5a52bce04f872f4542340260e7ae07f04147a
SHA256

cc8def75db67d9e1074f1ab946f31263dffe1d21b18ff7d716c3bf6dca37eee2
SHA512

ccfaa1852e2fd387103d8c32361b4959c0e50579700cb626ae4d5a8c4f720087bbaeea9f3766d9c6ed7810cdf23e5616b80dc8d4ba3c5ae2800119b511cc26c7
SSDEEP

6144:+/75YgN6hlPKtgJjBc6C0uHVmxixTUQoXugm16ITcoBYcr05T+brEB8Digy9QTrb:+/75XN6hhKwC0ufx/QIBpr05GrCGY+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5b0501cb7ced39bc5b6a8ce64ee4996_JaffaCakes118

Files

a5b0501cb7ced39bc5b6a8ce64ee4996_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c61f886e4a0ffb21290828170dee19ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

LdrGetDllHandle
NtAllocateVirtualMemory
RtlUshortByteSwap

gdi32

CreateEnhMetaFileA
SetDCPenColor
CreateFontIndirectW
StretchBlt
CreateRectRgnIndirect
GetDCOrgEx
GetPaletteEntries
TextOutW
GetDeviceCaps
SetMapMode
CreatePolygonRgn
CreateFontIndirectA
CreateFontW
GetRgnBox
SetViewportExtEx
SetStretchBltMode
CreateRectRgn
SetTextAlign
CloseEnhMetaFile
GetObjectA
CreatePatternBrush
MoveToEx
SetBrushOrgEx
GetSystemPaletteEntries
GetClipBox
CreateDCW
GetBrushOrgEx
GetGlyphIndicesW
SetTextColor
CreateBitmap
GetTextExtentExPointI
PlayEnhMetaFile
GetTextAlign
LPtoDP
TextOutA
GetBkColor
CreateCompatibleBitmap
SelectObject
CreatePen
GetTextExtentPoint32W
RectVisible
SelectPalette
RealizePalette
OffsetRgn
SetPaletteEntries
CreateCompatibleDC
SetWindowExtEx
GetDIBits
SaveDC
CreateSolidBrush
CreateDIBSection
GetPixel
ExtCreateRegion
BitBlt
GetStockObject
GetLayout
OffsetWindowOrgEx
EqualRgn
GetTextExtentPointW
CreateDIBPatternBrushPt
SetRectRgn
StretchDIBits
SetWindowOrgEx
GetObjectW
CreateHalftonePalette
GetTextExtentPoint32A
DeleteObject
CreatePalette
PatBlt
GetTextColor
IntersectClipRect
SetLayout
CombineRgn
CreateDCA
CloseMetaFile
Rectangle
RestoreDC
LineTo
DeleteEnhMetaFile
SetBkColor
CreateMetaFileW
DeleteDC
GetTextMetricsW
SetBkMode
ExtTextOutW
GetBkMode
GetRegionData
SetViewportOrgEx
GetTextCharset

user32

AdjustWindowRectEx
MonitorFromWindow
InsertMenuW
SetDlgItemTextW
TrackPopupMenuEx
EnableWindow
GetMenuStringW
EndDialog
GetMenuDefaultItem
GetMenuItemCount
MessageBoxExA
SetWindowTextW
DdeFreeStringHandle
GetComboBoxInfo
LoadIconW
IsCharAlphaNumericW
GetDlgCtrlID
IsIconic
DestroyAcceleratorTable
BeginPaint
WindowFromPoint
SystemParametersInfoW
DialogBoxIndirectParamA
GetWindowInfo
MsgWaitForMultipleObjects
FindWindowExW
SetScrollPos
AdjustWindowRect
RegisterClipboardFormatA
MessageBoxIndirectA
ChangeClipboardChain
GetWindowTextLengthW
AttachThreadInput
CallNextHookEx
EqualRect
OpenClipboard
GetWindowLongW
PeekMessageA
MonitorFromPoint
DrawEdge
GetMessagePos
GetMessageA
SetMenuDefaultItem
GetWindowRect
DdeConnect
CharLowerBuffW
IsWindowEnabled
MapWindowPoints
DefWindowProcW
RegisterWindowMessageA
GetAncestor
MoveWindow
CharPrevA
IsMenu
wsprintfW
DdeDisconnect
SetCursorPos
KillTimer
AppendMenuW
SetWindowLongA
UpdateWindow
ChildWindowFromPoint
NotifyWinEvent
CreateDialogParamW
MsgWaitForMultipleObjectsEx
LoadStringA
GetScrollInfo
CallMsgFilterW
TrackPopupMenu
ReleaseCapture
GetClassLongW
HideCaret
EnumThreadWindows
DialogBoxParamA
DialogBoxParamW
GetFocus
CreatePopupMenu
DdeCreateDataHandle
CopyIcon
SendMessageTimeoutA
UnregisterClassW
UnionRect
SetWindowLongW
SetCapture
PostThreadMessageA
SendDlgItemMessageW
CreateIconIndirect
UnhookWindowsHookEx
EndPaint
SendMessageW
InvalidateRect
DdeUninitialize
WaitForInputIdle
DestroyMenu
PostMessageA
SetWindowPlacement
PostMessageW
DrawFrameControl
SetPropA
GetClipboardFormatNameW
FillRect
ShowOwnedPopups
LoadStringW
MessageBoxW
CharNextW
DefWindowProcA
GetLastInputInfo
LoadAcceleratorsW
IsDlgButtonChecked
DeferWindowPos
GetProcessWindowStation
CreateMenu
EnumChildWindows
GetWindowLongA
GetWindowDC
EndDeferWindowPos
DestroyWindow
DdeNameService
EnableMenuItem
GetSysColorBrush
GetNextDlgTabItem
GetPropA
GetClientRect
CloseClipboard
GetMenuItemInfoA
GetAsyncKeyState
GetKeyboardLayout
GetMenuItemInfoW
IsWindowVisible
LoadCursorW
UpdateLayeredWindow
GetClassWord
SetWindowsHookExW
SetClipboardData
GetWindowPlacement
GetForegroundWindow
SetFocus
TrackMouseEvent
CopyImage
GetClassInfoExW
RemovePropA
FindWindowW
GetIconInfo
GetShellWindow
EndMenu
LoadCursorA
SetMenuItemInfoW
LoadImageW
DdeCreateStringHandleW
AnimateWindow
PeekMessageW
CreateWindowExW
IntersectRect
RegisterWindowMessageW
SetScrollInfo
DdeInitializeW
DispatchMessageA
MessageBoxIndirectW
GetSysColor
FindWindowA
GetKeyNameTextW
DeleteMenu
IsWindow
WinHelpW
CharPrevW
PtInRect
CheckMenuItem
WaitMessage
DialogBoxIndirectParamW
CheckMenuRadioItem
ReleaseDC
MonitorFromRect
CharUpperW
IsChild
SetWindowRgn
GetDesktopWindow
CheckRadioButton
MapDialogRect
DdeClientTransaction
GetSystemMenu
GetActiveWindow
GetMenuItemID
MessageBoxExW
DdeFreeDataHandle
GetDlgItem
SetClipboardViewer
LoadBitmapW
PostThreadMessageW
BeginDeferWindowPos
GetWindowRgnBox
DispatchMessageW
SendNotifyMessageW
CheckDlgButton
CharLowerW
GetCursorPos
MessageBeep
DdeGetData
DrawTextExW
GetWindowThreadProcessId
EnumDisplaySettingsW
GetMonitorInfoW
GetDlgItemTextW
SetMenu
SetForegroundWindow
GetParent
MapVirtualKeyW
SetDlgItemInt
TranslateAcceleratorW
SetActiveWindow
SetRect
GetWindowTextW
SetCursor
GetDC
GetMessageTime
SendMessageA
PostQuitMessage
TranslateMessage
CharNextA
SendMessageTimeoutW
GetLastActivePopup
DrawIconEx
GetClassInfoW
SetPropW
GetSystemMetrics
ClientToScreen
RegisterClassExW
GetTopWindow
SetTimer
GetSubMenu
EnumWindows
SetMenuItemBitmaps
IsRectEmpty
ShowScrollBar
GetKeyState
IsWindowUnicode
EnumDesktopWindows
OffsetRect
VkKeyScanExW
SetWindowPos
DdeQueryStringW
ScreenToClient
GetMenuState
IsDialogMessageW
SetParent
ShowWindow
GetMessageW
RegisterClipboardFormatW
AllowSetForegroundWindow
DestroyIcon
LoadMenuW
ShowCaret
IsHungAppWindow
GetDoubleClickTime
CopyRect
DrawFocusRect
RemovePropW
GetPropW
SystemParametersInfoA
RegisterClassW
GetDialogBaseUnits
RedrawWindow
InsertMenuItemW
InflateRect
GetCapture
GetClipboardData
GetWindow
LockSetForegroundWindow
EmptyClipboard
DrawTextW
GetCursor
CallWindowProcW
RemoveMenu
SetRectEmpty
GetClassNameW

advapi32

RegCreateKeyA
CryptHashData
RegCloseKey
RegEnumKeyW
ConvertStringSidToSidW
RegisterTraceGuidsW
UnregisterTraceGuids
RegOpenKeyExA
RegDeleteKeyA
OpenProcessToken
GetLengthSid
GetTraceLoggerHandle
CryptAcquireContextW
ImpersonateSelf
RegEnumValueA
IsTextUnicode
GetTraceEnableLevel
RegOpenKeyExW
RegDeleteValueA
CryptDestroyHash
TraceMessage
RegQueryValueExW
GetTokenInformation
GetUserNameW
OpenThreadToken
RegSetValueExW
RegCreateKeyExA
GetTraceEnableFlags
CryptReleaseContext
RegOpenCurrentUser
CreateProcessAsUserW
DuplicateTokenEx
RegDeleteKeyW
RegCreateKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueW
RegQueryInfoKeyW
RegQueryValueExA
ConvertSidToStringSidW
CryptCreateHash
RegEnumKeyExW
RegDeleteValueW
SetThreadToken
RegSetValueExA
SetTokenInformation
CryptGetHashParam
RegOpenKeyW
RegEnumValueW
TraceEvent

kernel32

DeleteAtom
EnumUILanguagesW
SetFilePointerEx
DeleteTimerQueueTimer
GetShortPathNameW
DeleteCriticalSection
HeapDestroy
FindAtomW
GlobalLock
LCMapStringW
CreateFileA
ActivateActCtx
TerminateProcess
GetAtomNameW
lstrcmpA
GetModuleHandleW
WaitForSingleObjectEx
GlobalUnlock
OpenProcess
ReleaseSemaphore
WaitForMultipleObjects
SetThreadContext
GetTempPathW
ExpandEnvironmentStringsA
lstrcmpiA
ResetEvent
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
DisableThreadLibraryCalls
GlobalSize
OpenMutexW
UnlockFileEx
InterlockedCompareExchange
Process32NextW
GetPrivateProfileStringW
CreateEventW
GetModuleFileNameW
GlobalFree
GlobalDeleteAtom
LockResource
QueryDosDeviceW
LocalReAlloc
GlobalFlags
WaitForSingleObject
LocalSize
DeactivateActCtx
VirtualFree
QueueUserWorkItem
SetEvent
SetEnvironmentVariableW
GlobalReAlloc
SetLastError
GetSystemDefaultLCID
LoadLibraryExW
WritePrivateProfileStringW
GetTickCount
GetThreadContext
ReadFile
FindFirstFileW
GlobalAddAtomA
TlsFree
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
CreateFileW
LoadResource
ReplaceFileW
GetTimeFormatW
VirtualAlloc
lstrcmpW
MultiByteToWideChar
FindResourceW
RaiseException
CreateFileMappingW
CompareStringW
GetLocaleInfoW
LocalFileTimeToFileTime
CreateSemaphoreW
FreeLibraryAndExitThread
MoveFileW
GetCurrentThreadId
SetProcessWorkingSetSize
GetFileAttributesW
HeapReAlloc
GetEnvironmentVariableW
GetVersion
GetSystemDefaultUILanguage
SearchPathW
SetCurrentDirectoryW
GetDateFormatW
SizeofResource
CreateDirectoryA
lstrlenW
LockFileEx
AddAtomW
GetUserDefaultLCID
OpenMutexA
lstrlenA
HeapCreate
FreeLibrary
SetErrorMode
CloseHandle
GetLogicalDriveStringsW
GetFileAttributesA
SetThreadPriority
CompareStringA
LocalFree
CreateMutexA
GetProcAddress
FindResourceExW
FormatMessageW
GetProcessHeap
OutputDebugStringA
GetModuleHandleExW
GetSystemInfo
FileTimeToSystemTime
GlobalAlloc
lstrcmpiW
CreateMutexW
GetVersionExW
ExpandEnvironmentStringsW
ExitProcess
LoadLibraryA
OpenEventW
SetFileAttributesW
GetModuleHandleA
GetThreadLocale
WriteFile
GetACP
GetExitCodeThread
ReleaseActCtx
UnmapViewOfFile
QueryPerformanceCounter
GetSystemWow64DirectoryW
GetSystemTime
VirtualProtect
LeaveCriticalSection
GetFileInformationByHandle
SetFileTime
GetCurrentProcess
DeleteFileW
InterlockedExchange
TlsSetValue
MapViewOfFile
CreateDirectoryW
VirtualQuery
GetPrivateProfileSectionW
CopyFileW
GetLastError
HeapAlloc
GetPrivateProfileStringA
GetLocalTime
InterlockedDecrement
FindClose
QueryPerformanceFrequency
InterlockedIncrement
GetCPInfo
GetNumberFormatW
GetFullPathNameW
SetProcessShutdownParameters
EnterCriticalSection
FindNextFileW
GetFileAttributesExW
FlushInstructionCache
CreateActCtxW
GetWindowsDirectoryW
CreateEventA
UnhandledExceptionFilter
WritePrivateProfileSectionW
InitializeCriticalSection
CreateProcessW
MulDiv
GetCurrentThread
GetModuleFileNameA
TlsGetValue
IsWow64Process
HeapFree
RemoveDirectoryW
GetSystemDirectoryW
GlobalAddAtomW
CompareFileTime
DuplicateHandle
GetLongPathNameW
GetVersionExA
TlsAlloc
TerminateThread
SetFilePointer
LoadLibraryW
DebugBreak
SetUnhandledExceptionFilter
GetPrivateProfileSectionNamesW
GetCurrentDirectoryW
TryEnterCriticalSection
ResumeThread
GetTempFileNameW
IsDBCSLeadByte
SystemTimeToFileTime
ReleaseMutex
SetEndOfFile
Sleep
GetUserDefaultUILanguage
GetSystemDirectoryA
Process32FirstW
GetCurrentProcessId
SetCurrentDirectoryA
GetThreadPriority
GetModuleHandleExA
GetFileSize
LocalAlloc
SuspendThread
SetThreadExecutionState
CreateTimerQueueTimer
CreateToolhelp32Snapshot
CreateFileMappingA
CreateThread
MoveFileExW
GetFileSizeEx

uxtheme

IsAppThemed
GetThemeBackgroundExtent
SetWindowTheme
DrawThemeBackground
GetThemeMargins
GetThemeBackgroundContentRect
GetThemeColor
GetThemeAppProperties
OpenThemeData
IsThemeActive
GetThemePartSize
DrawThemeParentBackground
CloseThemeData
GetThemeFont
GetThemeMetric

shell32

DragQueryFileW
SHGetPathFromIDListA
Shell_NotifyIconW
SHGetFileInfoW
SHGetSpecialFolderLocation
SHGetFolderPathAndSubDirW
SHFileOperationW
SHGetDesktopFolder
SHGetFolderLocation
SHGetDataFromIDListW
SHGetPathFromIDListW
ExtractIconW
SHGetInstanceExplorer
SHBrowseForFolderW
ShellExecuteExW
SHChangeNotify
SHAppBarMessage
ShellExecuteW
ExtractAssociatedIconExW
SHPathPrepareForWriteW
SHGetFolderPathW
Shell_NotifyIconA
ShellAboutW
SHCreateShellItem
SHBindToParent
ExtractIconExW
SHSetLocalizedName
ShellExecuteA
SHGetSpecialFolderPathW

psapi

GetProcessImageFileNameW

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c61f886e4a0ffb21290828170dee19ce

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

gdi32

user32

advapi32

kernel32

uxtheme

shell32

psapi

Sections

.text Size: 183KB - Virtual size: 183KB

.rdata Size: 88KB - Virtual size: 88KB

.rsrc Size: 21KB - Virtual size: 21KB

.data Size: 37KB - Virtual size: 1.4MB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 183KB - Virtual size: 183KB

.rdata
Size: 88KB - Virtual size: 88KB

.rsrc
Size: 21KB - Virtual size: 21KB

.data
Size: 37KB - Virtual size: 1.4MB

.tls
Size: 512B - Virtual size: 4KB