acf3489751643342ff2d789c6ac45619_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

acf3489751643342ff2d789c6ac45619_JaffaCakes118
Size

841KB
MD5

acf3489751643342ff2d789c6ac45619
SHA1

10293ca2362c73185d51f09611ae2a4168c1c0f5
SHA256

4fc0a54b1c72f6a61e8f3aca09b811753acdbeba2c4878077752916c0e8e0567
SHA512

1c0280ec963845d42d77ab477967ab5729734d4a81b57e037dfde4f77d436153eb578859d3768e6474b9637b14a0372b4e6fa7f44cd8b94080ff0ba739c0a591
SSDEEP

24576:dYDbJsWQeoADVBg7Mmxm7wLHYdb5q3hV:dYD6BeoAXgImxmUL4db5k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acf3489751643342ff2d789c6ac45619_JaffaCakes118

Files

acf3489751643342ff2d789c6ac45619_JaffaCakes118
.exe windows:5 windows x86 arch:x86

79bea8f2f4b86864e74332da0febac16

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
LocalFree
WriteConsoleW
TlsGetValue
GetCurrentProcess
LoadLibraryW
GetSystemInfo
FindClose
lstrcmpiW
InterlockedExchange
FormatMessageW
GetOEMCP
TlsSetValue
VirtualProtectEx
GetTimeZoneInformation
WaitForSingleObject
InterlockedIncrement
GetOverlappedResult
GetProcessHeap
GetNumberFormatW
GetModuleHandleW
SearchPathW
GetTempFileNameW
FreeEnvironmentStringsW
GetCurrentThread
GlobalAddAtomW
RtlUnwind
TerminateProcess
lstrlenW
InterlockedDecrement
CompareStringW
InitializeCriticalSectionAndSpinCount
FreeResource
CreateFileW
lstrcpyW
GetProcAddress
GetEnvironmentStringsW
GlobalFlags
GetTempPathW
HeapReAlloc
SizeofResource
OpenEventW
LCMapStringW
SetLastError
GetModuleFileNameW
MulDiv
GlobalAlloc
HeapSetInformation
VirtualAlloc
CopyFileW
GetFileSizeEx
SetHandleCount
FindResourceExW
ResumeThread
GetProfileIntW
SetFilePointer
GetSystemDirectoryW
IsValidCodePage
HeapCreate
Sleep
MultiByteToWideChar
GlobalHandle
TerminateThread
GetCurrentThreadId
InitializeCriticalSection
lstrcmpA
SetThreadPriority
WriteFile
GlobalFree
LockFile
GetConsoleCP
GetVersionExW
HeapQueryInformation
CreateEventW
GlobalUnlock
GlobalFindAtomW
SetEnvironmentVariableA
SetEndOfFile
CloseHandle
FreeLibrary
FlushFileBuffers
DuplicateHandle
GetStdHandle
GetLastError
UnlockFile
LocalReAlloc
CreateThread
UnhandledExceptionFilter
HeapDestroy
GlobalSize
FileTimeToSystemTime
CreateNamedPipeW
GetFullPathNameW
VirtualQuery
FindResourceW
HeapSize
LeaveCriticalSection
GetConsoleMode
GetCommandLineW
IsDebuggerPresent
lstrlenA
GetFileAttributesW
GlobalReAlloc
WaitForMultipleObjects
FileTimeToLocalFileTime
GetCurrentProcessId
GetVolumeInformationW
ReadFile
FindFirstFileW
IsProcessorFeaturePresent
LoadLibraryExW
HeapFree
ExitThread
GetCurrentDirectoryW
lstrcmpW
GetUserDefaultUILanguage
GetStartupInfoW
GlobalDeleteAtom
SetEvent
TlsAlloc
WideCharToMultiByte
GetCPInfo
CreateMutexW
InterlockedCompareExchange
SetUnhandledExceptionFilter
GetFileSize
GetFileAttributesExW
LockResource
HeapAlloc
DisconnectNamedPipe
GlobalLock
GetTickCount
GetSystemTimeAsFileTime
GetFileType
LocalAlloc
GetACP
LoadResource
RaiseException
TlsFree
GetFileTime
GlobalGetAtomNameW
EnterCriticalSection
DeleteCriticalSection
SetStdHandle
GetLocaleInfoW
GetStringTypeW

user32

GetCapture
DestroyCursor
CreateWindowExW
BeginDeferWindowPos
CreatePopupMenu
InflateRect
KillTimer
MonitorFromPoint
GetMenuItemID
SetRect
DrawFrameControl
MapDialogRect
GrayStringW
GetDoubleClickTime
UnpackDDElParam
EqualRect
TranslateAcceleratorW
SetCursorPos
GetForegroundWindow
GetIconInfo
GetSystemMenu
GetSysColor
FillRect
PtInRect
GetMonitorInfoW
GetKeyNameTextW
ShowScrollBar
DestroyWindow
WinHelpW
PostMessageW
GetMessageTime
MapWindowPoints
OpenClipboard
DeferWindowPos
GetMenuItemCount
TranslateMDISysAccel
CallWindowProcW
LoadMenuW
IsWindow
CopyRect
UpdateWindow
CallNextHookEx
GetPropW
SetMenuDefaultItem
GetWindowRgn
DrawEdge
ScreenToClient
GetClassInfoExW
GetLastActivePopup
DrawIcon
EnableScrollBar
DrawStateW
SetWindowTextW
FrameRect
UnionRect
GetWindow
SetScrollPos
ReleaseDC
EnableWindow
GetKeyboardLayout
LockWindowUpdate
PeekMessageW
CreateMenu
GetMessagePos
CopyAcceleratorTableW
SetParent
IsMenu
SetFocus
EnumDisplayMonitors
IsIconic
IsWindowEnabled
GetDlgCtrlID
SetActiveWindow
EndDeferWindowPos
DrawMenuBar
ValidateRect
ScrollWindow
GetMenuItemInfoW
AppendMenuW
SetClassLongW
DestroyAcceleratorTable
RegisterWindowMessageW
HideCaret
DispatchMessageW
SetRectEmpty
SetTimer
GetClassInfoW
LoadIconW
SetWindowRgn
DialogBoxParamW
ShowOwnedPopups
ClientToScreen
ShowWindow
GetMenuCheckMarkDimensions
ModifyMenuW
SystemParametersInfoW
NotifyWinEvent
ReuseDDElParam
CharUpperW
InsertMenuItemW
SetScrollRange
MessageBeep
MapVirtualKeyExW
RegisterClassW
DestroyMenu
GetParent
DeleteMenu
CheckMenuItem
SendDlgItemMessageW
GetFocus
DrawTextW
MessageBoxW
GetMenuStringW
ToUnicodeEx
SetWindowsHookExW
GetAsyncKeyState
SetMenuItemBitmaps
DefMDIChildProcW
GetCursorPos
BeginPaint
DefFrameProcW
IsRectEmpty
GetScrollPos
GetKeyboardState
CloseClipboard
DestroyIcon
PostQuitMessage
SubtractRect
SetWindowPos
GetActiveWindow
CopyIcon
GetMessageW
CreateAcceleratorTableW
GetNextDlgGroupItem
GetScrollRange
SetMenu
GetWindowRect
GetDesktopWindow
GetDlgItem
InvertRect
IsClipboardFormatAvailable
AdjustWindowRectEx
CreateDialogIndirectParamW
TranslateMessage
IsChild
MonitorFromWindow
ReleaseCapture
RegisterClipboardFormatW
GetWindowThreadProcessId
GetNextDlgTabItem
WindowFromPoint
SetForegroundWindow
IsWindowVisible
SetLayeredWindowAttributes
InvalidateRect
DrawTextExW
LoadBitmapW
GetUpdateRect
GetWindowTextW
LoadAcceleratorsW
WaitMessage
GetWindowDC
UnhookWindowsHookEx
OffsetRect
SendMessageW
DrawIconEx
SetScrollInfo
SetPropW
GetTopWindow
RemoveMenu
GetMenuState
LoadImageW
RedrawWindow
GetMenu
CheckDlgButton
GetDC
CopyImage
GetSysColorBrush
SetCapture
CharUpperBuffW
SetWindowLongW
InsertMenuW
LoadCursorW
SetWindowPlacement
EnumWindows
DefWindowProcW
EmptyClipboard
GetClassLongW
DrawFocusRect
TrackPopupMenu
SetClipboardData
SendDlgItemMessageA
GetClassNameW
GetScrollInfo
GetSubMenu
GetWindowPlacement
TabbedTextOutW
RemovePropW
GetMenuDefaultItem
GetClientRect
EnableMenuItem
GetWindowLongW
GetKeyState
MoveWindow
BringWindowToTop
IsDialogMessageW
IntersectRect
PostThreadMessageW
GetSystemMetrics
IsZoomed
MapVirtualKeyW
GetWindowTextLengthW
EndDialog
EndPaint
SetCursor
UpdateLayeredWindow
IsCharLowerW
RealChildWindowFromPoint

gdi32

ScaleWindowExtEx
GetTextExtentPoint32W
CreatePatternBrush
CombineRgn
StretchBlt
GetBitmapBits
GetViewportOrgEx
SetRectRgn
GetTextFaceW
GetBkColor
OffsetWindowOrgEx
CreateFontIndirectW
ExtFloodFill
GetObjectType
SetPaletteEntries
CreatePalette
SetWindowOrgEx
SetTextColor
CreateRoundRectRgn
DPtoLP
CreatePen
SelectPalette
GetTextCharsetInfo
GetStockObject
SetBkColor
GetNearestPaletteIndex
GetWindowExtEx
GetRgnBox
PtVisible
CreateRectRgn
BitBlt
SelectObject
LineTo
LPtoDP
CreateCompatibleBitmap
DeleteDC
Rectangle
OffsetRgn
RectVisible
SetBkMode
CreateDIBitmap
SetViewportExtEx
Ellipse
GetObjectW
PatBlt
SelectClipRgn
CreateDIBSection
CreateDCW
RestoreDC
CreatePolygonRgn
CopyMetaFileW
CreateRectRgnIndirect
GetClipBox
ExtSelectClipRgn
RealizePalette
ExcludeClipRect
CreateBitmap
Polyline
FrameRgn
SetLayout
TextOutW
CreateSolidBrush
MoveToEx
SetPixelV
OffsetViewportOrgEx
FillRgn
GetDeviceCaps
GetWindowOrgEx
IntersectClipRect
EnumFontFamiliesW
GetLayout
Escape
GetBoundsRect
ScaleViewportExtEx
SetMapMode
SaveDC
CreateHatchBrush
CreateCompatibleDC
Polygon
GetPixel
SetPolyFillMode
SetROP2
GetTextColor
DeleteObject
SetTextAlign
GetTextMetricsW
SetViewportOrgEx
SetPixel
CreateEllipticRgn
ExtTextOutW
EnumFontFamiliesExW
GetSystemPaletteEntries
GetPaletteEntries
GetViewportExtEx
SetWindowExtEx
PtInRegion
SetDIBColorTable

comdlg32

GetOpenFileNameW
GetFileTitleW

advapi32

RegCreateKeyExW
IsValidSid
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
ConvertSidToStringSidW
RegOpenKeyExW
RegDeleteValueW
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
GetTokenInformation
RegSetValueExW
OpenThreadToken
RegDeleteKeyW
RegEnumKeyExW
RegCloseKey
OpenProcessToken
InitializeSecurityDescriptor
RegQueryValueExW

shell32

SHGetFileInfoW
DragQueryFileW
SHGetDesktopFolder
DragFinish
ShellExecuteW
SHBrowseForFolderW
SHGetFolderLocation
SHGetPathFromIDListW
SHAppBarMessage
ShellExecuteExW
SHGetSpecialFolderLocation

ole32

CoInitialize
ReleaseStgMedium
RevokeDragDrop
CoTaskMemAlloc
OleGetClipboard
OleDestroyMenuDescriptor
OleLockRunning
CoLockObjectExternal
OleCreateMenuDescriptor
OleTranslateAccelerator
CoInitializeEx
CoCreateInstance
IsAccelerator
CoUninitialize
RegisterDragDrop
DoDragDrop
CLSIDFromString
CoTaskMemFree
CreateStreamOnHGlobal
OleDuplicateData

oleaut32

VarBstrFromDate
SystemTimeToVariantTime
SysFreeString
SysAllocStringByteLen
SysAllocString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysStringByteLen
VariantTimeToSystemTime
SysStringLen

comctl32

ImageList_GetIconSize

shlwapi

ord215
PathIsUNCW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathRemoveFileSpecW
ord345
SHDeleteValueA

winmm

PlaySoundW

msimg32

TransparentBlt
AlphaBlend

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

gdiplus

GdipDrawImageI
GdipGetImagePixelFormat
GdipGetImagePalette
GdipSetInterpolationMode
GdipGetImageHeight
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipCreateFromHDC
GdipBitmapLockBits
GdipCloneImage
GdipDrawImageRectI
GdipAlloc
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipBitmapUnlockBits
GdiplusShutdown
GdiplusStartup
GdipDeleteGraphics
GdipFree

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

Exports

Exports

MyCopyMemory

Sections

.text
Size: 210KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.kpo
Size: - Virtual size: 5.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 432KB - Virtual size: 431KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kop
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79bea8f2f4b86864e74332da0febac16

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

msimg32

imm32

gdiplus

oleacc

Exports

Exports

Sections

.text Size: 210KB - Virtual size: 209KB

.kpo Size: - Virtual size: 5.4MB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 432KB - Virtual size: 431KB

.kop Size: 135KB - Virtual size: 135KB

.tls Size: 512B - Virtual size: 57B

.rsrc Size: 33KB - Virtual size: 32KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 210KB - Virtual size: 209KB

.kpo
Size: - Virtual size: 5.4MB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 432KB - Virtual size: 431KB

.kop
Size: 135KB - Virtual size: 135KB

.tls
Size: 512B - Virtual size: 57B

.rsrc
Size: 33KB - Virtual size: 32KB

.reloc
Size: 14KB - Virtual size: 13KB