af6102b21709ce0f2591c95a5994722f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

af6102b21709ce0f2591c95a5994722f_JaffaCakes118
Size

846KB
MD5

af6102b21709ce0f2591c95a5994722f
SHA1

a8c76bf4a6ed32d1a8aa15340d071aa7cea14221
SHA256

d2a1d6892e016d68db22215610ef3fd09b86ffea5e36db1944f8ebc6e278b7b7
SHA512

dd4a604455b7bb4aa241e6acf2a8257d185285fa5d35f6cffc59b5d00f997cd5d6ebd96d1bda40af66c87c67989547ac9c063c7d01ea1f3248b9ff59c7283823
SSDEEP

12288:wKqQfidLI1dfCMRMmrBim9bzdxTOEm+F9PZ1pGVuC7PQjIE4H/KOZTVj8pqpj:wbe19zMkBicbxxo+FvvC7PgIRdhj8Ap

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af6102b21709ce0f2591c95a5994722f_JaffaCakes118

Files

af6102b21709ce0f2591c95a5994722f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6b4081206ad2d42c2579c7b4b5e02903

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAddAtomA
FindResourceA
GetEnvironmentStrings
FindNextFileA
HeapSize
SetFilePointer
FormatMessageA
GlobalGetAtomNameA
HeapCreate
CompareStringW
LCMapStringA
GetModuleFileNameW
VirtualFree
TerminateProcess
GetComputerNameA
FreeEnvironmentStringsA
InitializeCriticalSection
DuplicateHandle
GetProcessHeap
InterlockedDecrement
GlobalReAlloc
RaiseException
TlsFree
GetFileAttributesA
SetErrorMode
ConvertDefaultLocale
LockFile
FreeLibrary
LocalReAlloc
SetHandleCount
EnumResourceLanguagesA
FreeEnvironmentStringsW
VirtualProtect
lstrcmpW
MoveFileA
WriteFile
GetModuleFileNameA
UnlockFile
GetCurrentThreadId
GlobalHandle
SystemTimeToFileTime
GetPrivateProfileIntA
GlobalMemoryStatus
GetCurrentThread
lstrcmpA
HeapAlloc
FlushFileBuffers
GetConsoleOutputCP
GetSystemDirectoryA
ExitThread
TerminateThread
lstrlenA
SetEndOfFile
GetSystemInfo
GetProcAddress
RtlUnwind
GlobalDeleteAtom
WriteConsoleW
GetFileInformationByHandle
GetACP
GetDiskFreeSpaceA
IsValidLocale
GetUserDefaultLangID
GlobalLock
GetModuleHandleA
LocalFree
SizeofResource
GetStringTypeW
GlobalUnlock
WinExec
ResumeThread
PeekNamedPipe
VirtualQuery
CreateFileA
GetLogicalDrives
CloseHandle
GetSystemTimeAsFileTime
SetCurrentDirectoryA
SetStdHandle
FindClose
SetLastError
GetFileTime
GlobalFindAtomA
lstrcmpiA
GetStartupInfoA
HeapDestroy
GetFileType
GetSystemDefaultLangID
WaitForSingleObject
InterlockedIncrement
GetPrivateProfileStringA
GetLocaleInfoW
GlobalAlloc
ReleaseSemaphore
LCMapStringW
UnhandledExceptionFilter
GetTimeZoneInformation
GetOEMCP
ExitProcess
SetUnhandledExceptionFilter
GetLocaleInfoA
FreeResource
GetFullPathNameA
WideCharToMultiByte
LoadLibraryA
GetTempFileNameA
LockResource
GetTickCount
GetCommandLineA
SetEvent
VirtualAlloc
TlsAlloc
GetStringTypeExA
LeaveCriticalSection
GetVersion
ResetEvent
SetFileTime
MultiByteToWideChar
MulDiv
TlsGetValue
GlobalFree
LocalFileTimeToFileTime
GetCurrentDirectoryA
QueryPerformanceCounter
IsDBCSLeadByte
TlsSetValue
GetVolumeInformationA
SetThreadPriority
CreateSemaphoreA
GlobalFlags
FindFirstFileA
DeleteFileA
LoadResource
GetUserDefaultLCID
InterlockedExchange
GetFileSize
HeapReAlloc
GetCurrentProcessId
GetVersionExA
GetCPInfo
GetDriveTypeA
LocalAlloc
EnterCriticalSection
GetConsoleMode
IsValidCodePage
FileTimeToSystemTime
GetThreadLocale
WriteConsoleA
GetLastError
DeleteCriticalSection
GetConsoleCP
CreateThread
Sleep
SetEnvironmentVariableA
GetStringTypeA
FileTimeToLocalFileTime
WritePrivateProfileStringA
GetEnvironmentStringsW
IsDebuggerPresent
CreateEventA
GetStdHandle
VerLanguageNameA
EnumSystemLocalesA
CompareStringA
HeapFree
ReadFile
GetCurrentProcess

user32

EqualRect
CopyRect
PostQuitMessage
GetKeyState
GetSystemMenu
UnpackDDElParam
GetMenuCheckMarkDimensions
InflateRect
TranslateMessage
wsprintfA
SendDlgItemMessageA
SetFocus
GetMenuItemInfoA
CheckMenuItem
IsWindowEnabled
SetDlgItemTextA
TrackPopupMenu
CreateWindowExA
GetMessageA
LoadMenuA
PtInRect
SetWindowPos
GetSystemMetrics
HideCaret
IsRectEmpty
GetCursorPos
WinHelpA
GetClassLongA
IsZoomed
LoadIconA
UpdateWindow
CharUpperA
DeleteMenu
SetRect
DefWindowProcA
GetNextDlgGroupItem
SetScrollInfo
GetLastActivePopup
CreateMenu
LoadAcceleratorsA
LoadCursorA
GetPropA
InsertMenuItemA
SetRectEmpty
CreatePopupMenu
CreateCaret
IsDialogMessageA
GetClientRect
RemovePropA
IsWindow
GetWindowRect
CopyAcceleratorTableA
RegisterClipboardFormatA
ReleaseDC
ShowScrollBar
GetMenuItemCount
ScrollWindow
DestroyCaret
GetForegroundWindow
MessageBeep
ScreenToClient
BringWindowToTop
OffsetRect
PeekMessageA
GetNextDlgTabItem
GetFocus
SetWindowTextA
SetScrollPos
BeginDeferWindowPos
ValidateRect
DeferWindowPos
GrayStringA
IntersectRect
GetWindowThreadProcessId
EnableWindow
IsWindowVisible
ShowCaret
EndPaint
DispatchMessageA
TabbedTextOutA
GetClassInfoExA
SetForegroundWindow
GetSysColorBrush
FillRect
WindowFromPoint
EndDeferWindowPos
GetClassInfoA
SetParent
SetCursor
SetWindowContextHelpId
GetDlgCtrlID
MessageBoxA
GetParent
GetMessageTime
IsIconic
GetSysColor
RegisterClassA
SetScrollRange
AppendMenuA
GetActiveWindow
CallWindowProcA
GetTabbedTextExtentA
DrawFocusRect
GetDesktopWindow
GetMessagePos
SetTimer
UnregisterClassA
FrameRect
SetMenu
MapDialogRect
InsertMenuA
ShowOwnedPopups
SetWindowRgn
KillTimer
GetScrollInfo
DestroyMenu
GetScrollRange
ClientToScreen
GetDC
ReuseDDElParam
GetMenu
PostThreadMessageA
LockWindowUpdate
LoadBitmapA
SystemParametersInfoA
SetCapture
RedrawWindow
CharNextA
TranslateAcceleratorA
DrawIcon
DrawTextExA
GetWindowPlacement
SetActiveWindow
MapWindowPoints
FindWindowA
EnableMenuItem
GetCapture
BeginPaint
SetPropA
GetWindowTextA
SendMessageA
GetWindowTextLengthA
EndDialog
RegisterWindowMessageA
CallNextHookEx
DestroyWindow
ModifyMenuA
AdjustWindowRectEx
GetMenuItemID
GetTopWindow
MoveWindow
SetWindowsHookExA
SetWindowLongA
PostMessageA
DestroyCursor
DrawMenuBar
CreateDialogIndirectParamA
DrawTextA
GetSubMenu
ShowWindow
GetWindowLongA
GetWindowDC
SetMenuItemBitmaps
ReleaseCapture
GetMenuState
RemoveMenu
GetMenuStringA
SetCaretPos
InvalidateRect
GetDlgItem
UnhookWindowsHookEx
GetDCEx
InvalidateRgn
GetClassNameA
GetWindow
IsChild
GetScrollPos

gdi32

EndDoc
RectVisible
ScaleViewportExtEx
GetObjectA
GetTextExtentPoint32A
StartDocA
GetSystemPaletteEntries
EndPage
RealizePalette
SetStretchBltMode
GetTextFaceA
SetWindowExtEx
CreatePalette
Rectangle
GetWindowOrgEx
SetTextColor
CreateRectRgnIndirect
SetTextAlign
GetCharWidthA
TextOutA
CreateBitmap
SetMapMode
GetClipBox
GetROP2
AbortDoc
SetWindowOrgEx
DeleteDC
SetBkColor
IntersectClipRect
PtVisible
GetBkColor
BitBlt
CreatePen
SelectPalette
GetDeviceCaps
GetDIBits
LPtoDP
GetBkMode
Escape
DeleteObject
CreateCompatibleBitmap
GetCurrentPositionEx
SetViewportOrgEx
Polygon
CreateRectRgn
SetPolyFillMode
PatBlt
SetBkMode
GetTextAlign
FloodFill
Pie
RoundRect
DPtoLP
Ellipse
ExtTextOutA
SelectObject
GetPixel
SetAbortProc
RestoreDC
SelectClipRgn
SetPixelFormat
LineTo
SetViewportExtEx
GetViewportExtEx
CreateDCA
ExcludeClipRect
CreatePatternBrush
GetWindowExtEx
CreateFontA
EnumFontFamiliesA
CreateSolidBrush
CreateEllipticRgn
StretchDIBits
GetStockObject
OffsetViewportOrgEx
GetMapMode
GetStretchBltMode
SetROP2
CreateCompatibleDC
ExtSelectClipRgn
ScaleWindowExtEx
MoveToEx
SaveDC
CombineRgn
Polyline
StartPage
CreateFontIndirectA
SetRectRgn
ChoosePixelFormat
SwapBuffers
GetTextMetricsA
GetPolyFillMode
GetTextColor
GetRgnBox
GetNearestColor
GetViewportOrgEx

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyExA
GetUserNameA
RegOpenKeyA
RegCloseKey
GetFileSecurityA
SetFileSecurityA
RegEnumKeyA
RegDeleteValueA
RegQueryValueA
RegCreateKeyA

shell32

ShellExecuteA
DragAcceptFiles
DragFinish
SHBrowseForFolderA
DragQueryFileA
SHGetPathFromIDListA

ole32

OleCreateMenuDescriptor
CreateStreamOnHGlobal
OleInitialize
CoTaskMemAlloc
OleFlushClipboard
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
OleIsCurrentClipboard
IsAccelerator
CoTaskMemFree
CreateILockBytesOnHGlobal
OleTranslateAccelerator
CoRegisterMessageFilter
CLSIDFromProgID
OleDestroyMenuDescriptor
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CoRevokeClassObject

oleaut32

VariantInit
VariantChangeType
VariantTimeToSystemTime
SysFreeString
SysAllocStringByteLen
SysAllocStringLen
SafeArrayDestroy
SystemTimeToVariantTime
VariantCopy
OleCreateFontIndirect
VariantClear
OleLoadPicture
SysStringLen
SysAllocString

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathStripToRootA
PathFindExtensionA
UrlUnescapeA
PathFindFileNameA
PathIsUNCA

version

VerQueryValueA

wininet

InternetCanonicalizeUrlA
InternetSetFilePointer
InternetWriteFile
InternetCloseHandle
InternetGetLastResponseInfoA
InternetOpenA
InternetSetStatusCallback
InternetQueryDataAvailable
InternetCrackUrlA
InternetQueryOptionA
InternetOpenUrlA
InternetReadFile

secur32

QuerySecurityPackageInfoA

oledlg

ord8

opengl32

glPopAttrib
glFinish
glGenLists
wglMakeCurrent
glListBase
glDeleteLists
glTranslatef
wglDeleteContext
wglCreateContext
glClear
glColor3ub
glClearDepth
glMatrixMode
glPushAttrib
glEnd
glBegin
glScalef
wglGetCurrentDC
glHint
glLoadIdentity
glOrtho
glLineWidth
glPushMatrix
glDepthFunc
glColor3f
glClearColor
wglGetCurrentContext
glVertex2f
glCallLists
wglUseFontOutlinesA
glVertex3f
glPopMatrix
glEnable
glViewport
glRotatef

wldap32

ord95

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xyue
Size: 751KB - Virtual size: 751KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 1021KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b4081206ad2d42c2579c7b4b5e02903

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

version

wininet

secur32

oledlg

opengl32

wldap32

Sections

.text Size: 19KB - Virtual size: 18KB

.xyue Size: 751KB - Virtual size: 751KB

.rdata Size: 30KB - Virtual size: 30KB

.data Size: 35KB - Virtual size: 1021KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 19KB - Virtual size: 18KB

.xyue
Size: 751KB - Virtual size: 751KB

.rdata
Size: 30KB - Virtual size: 30KB

.data
Size: 35KB - Virtual size: 1021KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 7KB - Virtual size: 6KB