af5515c4919e4793866958b9f9c79531_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

af5515c4919e4793866958b9f9c79531_JaffaCakes118
Size

848KB
MD5

af5515c4919e4793866958b9f9c79531
SHA1

b2faf0d0fefd21592a128544e794bdcbc54225c3
SHA256

fb60c476884a432265c2a47e325fa3e2932fdfcaa30fcb4f65edb2a502adc35c
SHA512

322d2694f76109f44ea66f696f8a0ff54c0d35c3a6ec8833cc58f6e5cec4d49359defda34c4a288b9fe29a7653d54638f547dccbe3d1de5b5ab725ee23a0b4e1
SSDEEP

24576:TYOzI2nFIKl6m+iMNzNIuSSgkJSuBN3/t8A6UYL8by+p2U:TYwnZxMN3Q0ZPmUYQB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af5515c4919e4793866958b9f9c79531_JaffaCakes118

Files

af5515c4919e4793866958b9f9c79531_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3edaa852398a540b273ea4652bf7da77

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForMultipleObjects
DeleteCriticalSection
SetEvent
GetACP
GetCPInfo
WaitForSingleObject
GetCurrentThreadId
FreeResource
FindResourceExW
FindClose
LocalReAlloc
GlobalSize
GetSystemDefaultLangID
SizeofResource
GetFileSizeEx
GlobalAlloc
GetProcAddress
InterlockedDecrement
SetLastError
GetSystemDirectoryW
TlsSetValue
WideCharToMultiByte
DuplicateHandle
LoadLibraryExW
lstrcmpW
VirtualProtectEx
InterlockedCompareExchange
LockFile
FreeLibrary
HeapAlloc
GlobalLock
GetFileType
GetConsoleMode
GetStartupInfoW
SetHandleCount
SetEnvironmentVariableA
TlsGetValue
GetUserDefaultUILanguage
GetLocaleInfoW
GlobalDeleteAtom
VirtualQuery
CreateEventW
ResumeThread
FreeEnvironmentStringsW
GlobalFindAtomW
Sleep
HeapSize
LockResource
lstrcmpiW
HeapCreate
GetVersionExW
lstrcpyW
GetProcessHeap
MulDiv
TerminateThread
QueryPerformanceCounter
GetFullPathNameW
GetCurrentProcess
GetNumberFormatW
SetThreadPriority
CompareStringW
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetCurrentThread
InterlockedIncrement
WriteFile
GetCommandLineW
FormatMessageW
ExitThread
GlobalReAlloc
LoadResource
LocalFree
GetStdHandle
GlobalUnlock
GlobalFlags
SetUnhandledExceptionFilter
VirtualAlloc
SetEndOfFile
WriteConsoleW
LeaveCriticalSection
ReadFile
GetTempPathW
LCMapStringW
UnlockFile
RaiseException
GetEnvironmentStringsW
lstrcmpA
GetModuleHandleW
GlobalGetAtomNameW
LoadLibraryW
InterlockedExchange
InitializeCriticalSection
GlobalFree
FileTimeToSystemTime
GetCurrentDirectoryW
CreateThread
MultiByteToWideChar
GetTickCount
lstrlenW
TlsAlloc
FindResourceW
GlobalHandle
TlsFree
GetTempFileNameW
HeapDestroy
HeapReAlloc
FileTimeToLocalFileTime
CreateNamedPipeW
GetLastError
HeapSetInformation
GetCurrentProcessId
IsProcessorFeaturePresent
CreateFileW
FindFirstFileW
GetTimeZoneInformation
GetModuleFileNameW
LocalAlloc
FlushFileBuffers
GetConsoleCP
SetStdHandle
GetSystemTimeAsFileTime
GetFileSize
CloseHandle
GetStringTypeW
GetFileAttributesW
IsDebuggerPresent
IsValidCodePage
HeapFree
HeapQueryInformation
GlobalAddAtomW
SetFilePointer
lstrlenA
GetFileAttributesExW
GetSystemInfo
EnterCriticalSection
CreateMutexW
UnhandledExceptionFilter
CopyFileW
GetOEMCP
GetVolumeInformationW
GetFileTime

user32

SetForegroundWindow
GetWindowPlacement
DispatchMessageW
DrawStateW
CreateMenu
TabbedTextOutW
IsMenu
GetKeyNameTextW
MapWindowPoints
KillTimer
AdjustWindowRectEx
GetWindowTextLengthW
SetWindowsHookExW
RedrawWindow
ValidateRect
GetMenuState
UpdateLayeredWindow
InsertMenuW
CreateAcceleratorTableW
CreateDialogIndirectParamW
DefFrameProcW
CallNextHookEx
TranslateMessage
CharUpperW
DestroyCursor
ShowScrollBar
AppendMenuW
GetSubMenu
GetDlgCtrlID
IsChild
GetDC
IsWindow
InvertRect
ScrollWindow
MessageBoxW
SetTimer
SystemParametersInfoW
SetMenuItemBitmaps
RealChildWindowFromPoint
GrayStringW
GetSysColorBrush
HideCaret
SetCursor
CharUpperBuffW
EndPaint
SetClassLongW
TranslateAcceleratorW
SendDlgItemMessageW
IsDialogMessageW
GetMenuItemInfoW
LoadAcceleratorsW
OffsetRect
IsZoomed
CreateWindowExW
LoadIconW
SetClipboardData
SetScrollPos
GetIconInfo
ShowOwnedPopups
GetClassInfoW
GetMenuItemCount
SetRectEmpty
DrawTextExW
SetRect
BringWindowToTop
GetClassNameW
IsClipboardFormatAvailable
MapDialogRect
ShowWindow
PostQuitMessage
SetMenuDefaultItem
DestroyMenu
CallWindowProcW
CloseClipboard
GetTopWindow
LoadMenuW
GetUpdateRect
GetForegroundWindow
GetAsyncKeyState
NotifyWinEvent
ReleaseCapture
LoadBitmapW
SendDlgItemMessageA
UnionRect
IntersectRect
IsWindowVisible
ToUnicodeEx
EmptyClipboard
DrawIconEx
GetCapture
GetMenuCheckMarkDimensions
InvalidateRect
SetPropW
GetMenuDefaultItem
IsIconic
EnableScrollBar
GetDoubleClickTime
GetKeyboardState
RegisterClipboardFormatW
GetSystemMenu
SetLayeredWindowAttributes
GetKeyState
UnpackDDElParam
GetActiveWindow
GetKeyboardLayout
DestroyAcceleratorTable
SetWindowPos
GetNextDlgGroupItem
GetWindowTextW
GetDlgItem
GetMenuItemID
GetNextDlgTabItem
GetMenuStringW
CheckMenuItem
GetCursorPos
OpenClipboard
DrawFrameControl
ScreenToClient
SubtractRect
SendMessageW
CheckDlgButton
MessageBeep
SetWindowPlacement
SetCursorPos
GetWindowDC
GetMessageW
GetScrollRange
WinHelpW
LockWindowUpdate
GetDesktopWindow
SetParent
EnableWindow
DrawMenuBar
ReuseDDElParam
EnableMenuItem
GetMessagePos
GetMessageTime
GetClassLongW
CopyAcceleratorTableW
EndDialog
DefWindowProcW
GetScrollInfo
ReleaseDC
LoadCursorW
MapVirtualKeyExW
GetClassInfoExW
GetMonitorInfoW
SetMenu
PostThreadMessageW
MonitorFromPoint
DrawFocusRect
GetClientRect
IsRectEmpty
RegisterWindowMessageW
GetWindowLongW
SetFocus
GetSystemMetrics
DeferWindowPos
CopyRect
RemovePropW
GetMenu
EqualRect
UpdateWindow
SetScrollInfo
MonitorFromWindow
SetActiveWindow
DefMDIChildProcW
DestroyWindow
TrackPopupMenu
DialogBoxParamW
DrawIcon
InflateRect
CopyIcon
IsWindowEnabled
RegisterClassW
FrameRect
GetWindowRect
DestroyIcon
UnhookWindowsHookEx
DrawTextW
PeekMessageW
MoveWindow
ClientToScreen
CreatePopupMenu
DeleteMenu
DrawEdge
WindowFromPoint
GetPropW
CopyImage
EnumDisplayMonitors
BeginPaint
GetScrollPos
GetSysColor
FillRect
ModifyMenuW
PostMessageW
BeginDeferWindowPos
IsCharLowerW
TranslateMDISysAccel
SetScrollRange
MapVirtualKeyW
RemoveMenu
SetCapture
GetWindowThreadProcessId
SetWindowTextW
GetWindow
EndDeferWindowPos
SetWindowLongW
GetLastActivePopup
EnumWindows
InsertMenuItemW
SetWindowRgn
GetFocus
PtInRect
LoadImageW
GetWindowRgn
WaitMessage

gdi32

GetBoundsRect
LPtoDP
FrameRgn
RectVisible
Escape
LineTo
Polygon
SetPixelV
GetRgnBox
ExtTextOutW
TextOutW
DeleteObject
RestoreDC
OffsetViewportOrgEx
GetClipBox
BitBlt
ExcludeClipRect
GetBkColor
OffsetWindowOrgEx
FillRgn
MoveToEx
EnumFontFamiliesExW
IntersectClipRect
GetTextMetricsW
SelectObject
GetWindowExtEx
SetTextColor
CreatePatternBrush
PtInRegion
ScaleWindowExtEx
SelectClipRgn
GetViewportExtEx
DeleteDC
GetTextCharsetInfo
CreatePalette
RealizePalette
CreateDIBitmap
SetBkColor
CreateDCW
PatBlt
CreateRoundRectRgn
CopyMetaFileW
PtVisible
GetSystemPaletteEntries
GetPixel
CreateDIBSection
Rectangle
ExtFloodFill
DPtoLP
CreateHatchBrush
CreatePolygonRgn
StretchBlt
SetLayout
OffsetRgn
GetTextFaceW
SetDIBColorTable
CreateFontIndirectW
SetWindowExtEx
SelectPalette
SetRectRgn
GetTextColor
SetMapMode
CreateRectRgnIndirect
CreatePen
CreateRectRgn
SetPixel
CreateSolidBrush
ExtSelectClipRgn
CreateBitmap
GetLayout
SetROP2
CreateEllipticRgn
GetBitmapBits
SetPaletteEntries
ScaleViewportExtEx
GetObjectType
Polyline
GetTextExtentPoint32W
SetViewportExtEx
GetDeviceCaps
SetWindowOrgEx
SetPolyFillMode
GetObjectW
GetViewportOrgEx
CombineRgn
SaveDC
CreateCompatibleDC
SetViewportOrgEx
CreateCompatibleBitmap
GetPaletteEntries
EnumFontFamiliesW
GetWindowOrgEx
SetBkMode
Ellipse
SetTextAlign
GetNearestPaletteIndex

advapi32

IsValidSid
ConvertSidToStringSidW
RegDeleteValueW
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCreateKeyExW
OpenProcessToken
RegQueryValueExW
RegSetValueExW
OpenThreadToken
InitializeSecurityDescriptor
RegCloseKey
RegEnumKeyExW
RegDeleteKeyW
GetTokenInformation
SetSecurityDescriptorSacl
RegOpenKeyExW
SetSecurityDescriptorDacl

shell32

SHGetDesktopFolder
SHGetFileInfoW
SHAppBarMessage
SHGetFolderLocation
ShellExecuteExW
ShellExecuteW
SHGetPathFromIDListW
DragQueryFileW
SHGetSpecialFolderLocation
DragFinish
SHBrowseForFolderW

ole32

CLSIDFromString
IsAccelerator
RevokeDragDrop
CoUninitialize
OleDuplicateData
ReleaseStgMedium
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleTranslateAccelerator
CoInitializeEx
DoDragDrop
CoInitialize
CoTaskMemFree
RegisterDragDrop
OleGetClipboard
CoTaskMemAlloc
OleLockRunning
CoLockObjectExternal
CreateStreamOnHGlobal
CoCreateInstance

oleaut32

VariantClear
VariantTimeToSystemTime
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SysAllocString
VariantChangeType
VariantInit
VarBstrFromDate
SysFreeString
SystemTimeToVariantTime

comctl32

ImageList_GetIconSize

shlwapi

SHDeleteEmptyKeyA
PathFindFileNameW
PathIsUNCW
PathRemoveFileSpecW
PathFindExtensionW
SHDeleteValueA
PathStripToRootW
SHGetThreadRef

winmm

PlaySoundW

msimg32

TransparentBlt
AlphaBlend

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

gdiplus

GdipCloneImage
GdiplusShutdown
GdipGetImagePaletteSize
GdipDrawImageI
GdipDrawImageRectI
GdiplusStartup
GdipBitmapLockBits
GdipFree
GdipAlloc
GdipCreateFromHDC
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipGetImagePalette
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipGetImageHeight
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipGetImageWidth
GdipSetInterpolationMode
GdipCreateBitmapFromStream

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

Sections

.text
Size: 1024B - Virtual size: 569B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tew
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.klop
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rlew
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.koopl
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kupol
Size: 500KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3edaa852398a540b273ea4652bf7da77

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

msimg32

imm32

gdiplus

oleacc

Sections

.text Size: 1024B - Virtual size: 569B

.tew Size: 3KB - Virtual size: 3KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 154KB

.klop Size: 304KB - Virtual size: 303KB

.rlew Size: 8KB - Virtual size: 8KB

.koopl Size: 9KB - Virtual size: 8KB

.kupol Size: 500KB - Virtual size: 500KB

.rsrc Size: 1024B - Virtual size: 712B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 1024B - Virtual size: 569B

.tew
Size: 3KB - Virtual size: 3KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 154KB

.klop
Size: 304KB - Virtual size: 303KB

.rlew
Size: 8KB - Virtual size: 8KB

.koopl
Size: 9KB - Virtual size: 8KB

.kupol
Size: 500KB - Virtual size: 500KB

.rsrc
Size: 1024B - Virtual size: 712B

.reloc
Size: 5KB - Virtual size: 4KB