a94042331be5560fac8e23e07e86fb02_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a94042331be5560fac8e23e07e86fb02_JaffaCakes118
Size

1.3MB
MD5

a94042331be5560fac8e23e07e86fb02
SHA1

fbe1782ade24d00c5e74b47d38a08db3ae3f900d
SHA256

f5fd64e74b4457446a77706f5c0ce6c08287c88ab3586f514a22efe5d02fdf12
SHA512

e92cd92966a458866f4443110fe63106eede88a7860e8bac58e781ac9afb04b7c19da71269741689c5706b4786840ffc475a259bd4213141be6e657d63c61228
SSDEEP

12288:uKmPKcel4LK12wVypaD5tgFn9Z02N3maJH0UWxS1ORGR+fk9e7fxk9:uucelR4wVypajmFBRJHPWxiORGr9mxY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a94042331be5560fac8e23e07e86fb02_JaffaCakes118

Files

a94042331be5560fac8e23e07e86fb02_JaffaCakes118
.exe windows:4 windows x86 arch:x86

298c217bc48dbe7cd5c7d3439601a0a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Don\source\notepad++\trunk\PowerEditor\bin\npp.pdb

Imports

comctl32

InitCommonControlsEx
ImageList_AddMasked
ImageList_SetIconSize
ord17
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_Draw

shlwapi

PathStripPathW
PathIsRelativeW
PathAddExtensionW
PathFindExtensionW
PathRemoveExtensionW
PathMatchSpecW
PathIsDirectoryW
PathCompactPathExW
PathFindFileNameW
PathAppendW
PathFileExistsW
PathRemoveFileSpecW

shell32

SHGetMalloc
Shell_NotifyIconW
SHGetSpecialFolderLocation
DragQueryPoint
DragQueryFileW
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW
DragFinish

kernel32

GlobalSize
CopyFileW
FindClose
FindNextFileW
FindFirstFileW
TerminateThread
CreateThread
lstrcpynW
GetSystemInfo
GetModuleHandleW
GetVersionExW
ExpandEnvironmentStringsW
GetTimeFormatW
GetDateFormatW
GetLocalTime
MulDiv
WaitForMultipleObjects
WaitForSingleObject
OpenEventW
SetEvent
GetExitCodeProcess
ReadFile
PeekNamedPipe
Sleep
ResumeThread
CreateEventW
CreateProcessW
CreatePipe
GetOEMCP
GetACP
SizeofResource
LockResource
LoadResource
FindResourceW
LocalLock
LocalAlloc
GetTempPathW
CreateMutexW
SetLastError
GetCommandLineW
SetFilePointer
HeapReAlloc
VirtualAlloc
CreateDirectoryW
HeapCreate
HeapDestroy
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
ExitProcess
HeapSize
GetFileType
SetHandleCount
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetModuleFileNameA
GetStdHandle
WriteFile
GetCurrentDirectoryA
IsValidCodePage
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetStringTypeW
GetStringTypeA
GetCPInfo
LCMapStringW
LCMapStringA
GetStartupInfoA
GetProcessHeap
HeapAlloc
GetVersionExA
GetCommandLineA
HeapFree
GetSystemTimeAsFileTime
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
RtlUnwind
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedExchange
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LocalUnlock
LoadLibraryW
GetProcAddress
CreateFileW
GetCurrentProcessId
GetCurrentProcess
CloseHandle
FreeLibrary
SetCurrentDirectoryW
GetCurrentThreadId
GetCurrentDirectoryW
WideCharToMultiByte
MultiByteToWideChar
GetLastError
FormatMessageW
LocalFree
GetFileAttributesW
SetFileAttributesW
MoveFileW
GetFullPathNameW
GetLongPathNameW
lstrcmpiW
DeleteFileW
lstrcpyW
lstrlenW
GetModuleFileNameW
lstrcatW
lstrcmpW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetLocaleInfoA
GetUserDefaultLCID
SetEnvironmentVariableA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
LoadLibraryA
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEndOfFile
GetDriveTypeA
CompareStringA
CompareStringW
VirtualFree

user32

DragDetect
AppendMenuW
RegisterWindowMessageW
IsWindow
CreateCursor
ScrollWindow
SetScrollInfo
SetMenuItemInfoW
InsertMenuItemW
LoadStringW
LoadMenuW
IsDialogMessageA
IsDialogMessageW
TranslateAcceleratorW
GetMessageA
GetMessageW
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
IsZoomed
GetMenuItemCount
GetSubMenu
DrawMenuBar
IsClipboardFormatAvailable
GetClipboardData
EndDialog
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
MonitorFromWindow
GetMonitorInfoW
SetForegroundWindow
SetWindowPlacement
GetMenuItemID
DialogBoxIndirectParamW
GetMenuStringW
CheckMenuRadioItem
GetMenuState
DestroyCursor
CheckMenuItem
EnableMenuItem
DestroyAcceleratorTable
DialogBoxParamW
RemoveMenu
DestroyIcon
mouse_event
WindowFromPoint
PtInRect
SetDlgItemInt
MapWindowPoints
LoadImageW
CreatePopupMenu
InsertMenuW
DestroyMenu
TrackPopupMenu
GetWindowTextW
SetCapture
GetActiveWindow
IsChild
GetDlgCtrlID
SetParent
RedrawWindow
GetCursorPos
GetCapture
CreateDialogIndirectParamW
RegisterClassExW
ReleaseCapture
FindWindowW
SetWindowsHookExW
UnhookWindowsHookEx
SetWindowTextW
LoadBitmapW
CallNextHookEx
ScreenToClient
GetDlgItemTextW
SetDlgItemTextW
MessageBoxW
GetDlgItemInt
CreateDialogParamW
CreateAcceleratorTableW
IsWindowUnicode
SetWindowLongA
DrawFocusRect
FillRect
FrameRect
SendDlgItemMessageW
SetWindowLongW
GetWindowLongW
GetSysColor
InflateRect
ClientToScreen
CallWindowProcW
SetWindowPos
IsWindowVisible
GetWindowRect
ShowWindow
RegisterClassW
BeginPaint
EndPaint
GetFocus
PostMessageW
LoadCursorW
SetCursor
DestroyWindow
CreateCaret
DestroyCaret
GetSystemMetrics
GetWindowPlacement
MoveWindow
CreateWindowExW
SetFocus
GetScrollPos
GetScrollRange
UpdateWindow
DefWindowProcW
DrawFrameControl
GetMenu
ShowCaret
MessageBeep
DrawTextW
SetCaretPos
HideCaret
GetParent
ShowScrollBar
SetScrollRange
InvalidateRect
SetScrollPos
GetKeyboardState
ToAscii
wsprintfW
GetDC
DrawEdge
DrawTextExW
ReleaseDC
GetClientRect
LoadIconW
DrawIcon
GetDlgItem
SendMessageW
EnableWindow
CallWindowProcA
CharUpperW
CharLowerW
TranslateMessage
DispatchMessageW
CreateMenu
SystemParametersInfoW
DeleteMenu
PostQuitMessage
SetMenu
IsIconic
GetKeyState
GetClassNameW
RealChildWindowFromPoint
PeekMessageW
ModifyMenuW

gdi32

GetTextMetricsW
CreateHatchBrush
LineTo
MoveToEx
RestoreDC
DeleteDC
BitBlt
CreateCompatibleBitmap
GetObjectW
CreateCompatibleDC
SaveDC
CreateFontW
OffsetWindowOrgEx
PatBlt
SetBrushOrgEx
CreatePatternBrush
CreateBitmap
GetTextExtentPointW
RemoveFontResourceW
EnumFontFamiliesExW
AddFontResourceW
EndDoc
EndPage
ExtTextOutW
SetTextAlign
SetBkColor
StartPage
StartDocW
DPtoLP
GetDeviceCaps
CreateFontIndirectW
GetPixel
SetTextColor
CreateSolidBrush
GetTextExtentPoint32W
GetROP2
SetROP2
GetStockObject
CreatePen
Rectangle
DeleteObject
SetBkMode
SetWindowOrgEx
SelectObject

comdlg32

ChooseColorW
GetOpenFileNameW
PrintDlgW
GetSaveFileNameW

advapi32

RegCloseKey
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
IsTextUnicode
RegQueryInfoKeyW

ole32

CoInitialize
CoUninitialize

Sections

.text
Size: 732KB - Virtual size: 731KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 40KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 388KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

298c217bc48dbe7cd5c7d3439601a0a4

Headers

File Characteristics

PDB Paths

Imports

comctl32

shlwapi

shell32

kernel32

user32

gdi32

comdlg32

advapi32

ole32

Sections

.text Size: 732KB - Virtual size: 731KB

.rdata Size: 120KB - Virtual size: 119KB

.data Size: 40KB - Virtual size: 112KB

.rsrc Size: 388KB - Virtual size: 388KB

.text
Size: 732KB - Virtual size: 731KB

.rdata
Size: 120KB - Virtual size: 119KB

.data
Size: 40KB - Virtual size: 112KB

.rsrc
Size: 388KB - Virtual size: 388KB