b488bc44306de642105ac76dc39dd09e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b488bc44306de642105ac76dc39dd09e_JaffaCakes118
Size

374KB
MD5

b488bc44306de642105ac76dc39dd09e
SHA1

f0064e0feab7bec2e5dbec6e8334092b94337797
SHA256

63adbe75c0f393ab9cf05f5a7400a1b24b66935e505fd4fe7b28642b81a95442
SHA512

e79957495bf4ba6128dc9707b36f6182e40799f161615033f5c63cf4a53363ad3f481e2a8d7ec3683978ace8d5328ab5acb8760be73687937dd4acb606ea3896
SSDEEP

6144:oC+ZzmDZegFDpL0DN/R0N800u1LzZ0oXtFhfW/2X1e:o1m9/L1800+zFhZX1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b488bc44306de642105ac76dc39dd09e_JaffaCakes118

Files

b488bc44306de642105ac76dc39dd09e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6790ade7a76179e7c7c62c97cc980024

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

TextOutW
BitBlt
StretchBlt
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetTextColor
SetMapMode
SetBkMode
SetBkColor
SelectObject
SaveDC
RestoreDC
Rectangle
Polyline
Polygon
PatBlt
MoveToEx
LineTo
LPtoDP
GetTextMetricsA
GetTextExtentPointW
GetTextExtentPointA
GetTextExtentPoint32W
GetObjectW
GetObjectA
GetDeviceCaps
GetClipBox
ExtTextOutW
ExtTextOutA
EnumFontFamiliesExA
Ellipse
DeleteObject
DeleteMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreatePen
CreateMetaFileA
CreateFontIndirectW
CreateFontIndirectA
CreateFontA
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CloseMetaFile

user32

GetCursorPos
GetClientRect
GetClassNameW
GetClassNameA
GetClassInfoW
GetClassInfoExW
GetClassInfoExA
GetClassInfoA
GetCapture
GetActiveWindow
FindWindowExW
FindWindowExA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawTextA
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DialogBoxParamW
DialogBoxParamA
DialogBoxIndirectParamA
DestroyWindow
DestroyMenu
DestroyIcon
DeleteMenu
DeferWindowPos
DefWindowProcW
DefWindowProcA
CreateWindowExW
CreateWindowExA
CreatePopupMenu
CreateDialogParamW
CopyRect
CloseClipboard
ClientToScreen
CheckRadioButton
CheckMenuRadioItem
CheckDlgButton
CharUpperW
CharUpperA
CharToOemW
CharPrevW
CharPrevA
CharNextW
CharNextExA
CharNextA
CharLowerW
CharLowerA
CallWindowProcW
CallWindowProcA
CallNextHookEx
BeginPaint
BeginDeferWindowPos
AppendMenuW
AppendMenuA
AdjustWindowRectEx
AdjustWindowRect
ActivateKeyboardLayout
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetDlgItemInt
GetDlgItemTextA
GetDlgItemTextW
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetGUIThreadInfo
GetKeyState
GetKeyboardLayoutList
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoA
GetMenuItemInfoW
GetMenuState
GetMenuStringW
GetMessageW
GetMonitorInfoA
GetNextDlgGroupItem
GetNextDlgTabItem
GetParent
GetPropA
GetPropW
GetScrollBarInfo
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMetrics
GetWindow
GetWindowDC
GetWindowInfo
GetWindowLongA
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
InflateRect
InsertMenuA
InsertMenuItemA
InsertMenuItemW
InsertMenuW
IntersectRect
InvalidateRect
IsCharAlphaNumericW
IsChild
IsDialogMessageA
IsDialogMessageW
IsDlgButtonChecked
IsMenu
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
IsZoomed
KillTimer
LoadAcceleratorsA
LoadAcceleratorsW
LoadCursorA
LoadIconA
LoadImageA
LoadImageW
LoadMenuA
LoadMenuW
LoadStringA
LoadStringW
MapWindowPoints
MessageBeep
MessageBoxA
MessageBoxW
ModifyMenuW
MonitorFromPoint
MoveWindow
OffsetRect
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageA
PostMessageW
PostQuitMessage
PostThreadMessageA
RedrawWindow
RegisterClassA
RegisterClassExA
RegisterClassExW
RegisterClassW
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ScreenToClient
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageA
SendMessageCallbackW
SendMessageW
SetActiveWindow
SetCapture
SetClipboardData
SetCursor
SetDlgItemInt
SetDlgItemTextA
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenu
SetMenuDefaultItem
SetMenuItemInfoA
SetMenuItemInfoW
SetParent
SetPropA
SetPropW
SetRect
SetRectEmpty
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextA
SetWindowTextW
SetWindowsHookExA
ShowWindow
SystemParametersInfoA
TrackMouseEvent
TrackPopupMenu
TrackPopupMenuEx
TranslateAcceleratorA
TranslateAcceleratorW
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
WindowFromPoint
GetMessagePos

advapi32

RegDeleteValueW
UnregisterTraceGuids
TraceEvent
RevertToSelf
RegisterTraceGuidsA
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegQueryValueA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyExA
RegOpenKeyA
RegEnumValueW
RegEnumKeyExW
RegEnumKeyExA
RegEnumKeyA
AllocateAndInitializeSid
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW
RegCreateKeyExA
RegCloseKey
OpenThreadToken
OpenSCManagerA
OpenProcessToken
ImpersonateLoggedOnUser
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
GetTokenInformation
FreeSid
EqualSid
EnumServicesStatusA
CreateProcessWithLogonW
CloseServiceHandle

shlwapi

UrlUnescapeW
UrlUnescapeA
UrlCreateFromPathW
UrlApplySchemeW
StrTrimA
StrToIntW
StrToIntExW
StrToIntExA
StrToIntA
StrStrW
StrStrIW
StrStrIA
StrStrA
StrRChrW
StrRChrIW
StrFormatByteSizeW
StrDupW
StrDupA
StrCmpW
StrCmpNW
StrCmpNIW
StrCmpNIA
StrCmpIW
StrChrA
StrCSpnW
StrCSpnA
SHStrDupW
SHSetValueW
SHSetValueA
SHRegSetUSValueA
SHRegGetBoolUSValueA
SHQueryValueExW
SHQueryValueExA
SHQueryInfoKeyW
SHGetValueW
SHGetValueA
SHEnumKeyExW
SHDeleteValueW
SHDeleteValueA
SHDeleteKeyW
SHDeleteKeyA
ord16
SHCreateShellPalette
SHCopyKeyA
SHAutoComplete
PathUnquoteSpacesW
PathUnquoteSpacesA
PathUnExpandEnvStringsW
PathStripPathW
PathRenameExtensionW
PathRemoveFileSpecW
PathRemoveFileSpecA
PathRemoveExtensionW
PathRemoveBackslashW
PathRemoveArgsA
PathRelativePathToW
PathIsURLW
PathAddBackslashW
PathIsRootW
PathIsRelativeW
PathIsFileSpecW
PathIsDirectoryW
PathIsDirectoryEmptyW
PathIsContentTypeW
PathIsContentTypeA
PathGetArgsA
PathFindFileNameW
PathFindFileNameA
PathFindExtensionW
PathFileExistsW
PathFileExistsA
PathCompactPathExW
PathCombineW
PathCanonicalizeW
PathAppendW
PathAppendA
PathAddExtensionW
HashData

imm32

ImmEnumRegisterWordW
ImmDestroySoftKeyboard
ImmDestroyContext
ImmCreateIMCC
ImmGenerateMessage

rpcrt4

CStdStubBuffer_Connect
CStdStubBuffer_CountRefs
NdrOleFree
NdrOleAllocate
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrClientCall2
NdrCStdStubBuffer_Release
IUnknown_Release_Proxy
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_AddRef

ws2_32

ntohs
WSAEnumNameSpaceProvidersA
WSADuplicateSocketW
WSADuplicateSocketA
WSACloseEvent
WSACancelAsyncRequest
WSAAsyncGetProtoByNumber
WSAAsyncGetProtoByName

crypt32

CryptMsgGetAndVerifySigner
CertCompareCertificate

kernel32

CreateEventA
CreateEventW
CreateFileW
CreateMutexA
CreateMutexW
CreateProcessW
CreateThread
CreateTimerQueueTimer
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeleteTimerQueueTimer
DeviceIoControl
DuplicateHandle
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FindResourceA
FlushFileBuffers
FlushInstructionCache
FormatMessageA
FormatMessageW
FreeLibrary
FreeLibraryAndExitThread
FreeResource
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
CreateDirectoryW
GetDateFormatW
GetDriveTypeW
GetEnvironmentVariableW
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesW
GetFileSize
GetFileTime
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProfileIntA
GetShortPathNameW
GetStdHandle
GetStringTypeExA
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryA
GetTempFileNameA
GetTempFileNameW
GetTempPathA
GetTempPathW
GetTickCount
GetTimeFormatW
GetUserDefaultLCID
GetUserDefaultUILanguage
CopyFileW
CompareStringW
CompareStringA
CompareFileTime
GetCurrentThreadId
WriteFile
GetVersion
GetVersionExA
GlobalAlloc
GlobalFree
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByte
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
lstrlenW
lstrlenA
lstrcmpiW
lstrcmpiA
lstrcmpW
lstrcmpA
LoadLibraryExA
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateProcess
SystemTimeToFileTime
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetThreadPriority
SetLastError
SetHandleInformation
SetFileTime
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
RtlMoveMemory
ResumeThread
RemoveDirectoryW
RemoveDirectoryA
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceCounter
OpenThread
OpenMutexA
OpenFile
MultiByteToWideChar
MulDiv
MoveFileW
MoveFileExW
LockResource
LocalReAlloc
LocalFree
LocalAlloc
LoadResource
LoadLibraryW
CloseHandle

shell32

SHPathPrepareForWriteW

ole32

CLSIDFromString
CoAddRefServerProcess
CoAllowSetForegroundWindow
CoCreateGuid
CoCreateInstance
CoFreeUnusedLibraries
CoGetClassObject
CoGetInterfaceAndReleaseStream
CoGetMalloc
CoInitialize
CoInitializeEx
CoLockObjectExternal
CoMarshalInterThreadInterfaceInStream
CoMarshalInterface
CoRegisterClassObject
CoReleaseMarshalData
CoReleaseServerProcess
CoResumeClassObjects
CoRevokeClassObject
CoSetProxyBlanket
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
CoUnmarshalInterface
CoWaitForMultipleHandles
CreateDataAdviseHolder
CreateOleAdviseHolder
CreateStreamOnHGlobal
DoDragDrop
GetHGlobalFromStream
HWND_UserFree
HWND_UserMarshal
HWND_UserSize
HWND_UserUnmarshal
OleInitialize
OleLoadFromStream
OleRegEnumVerbs
OleRegGetMiscStatus
OleRegGetUserType
OleRun
OleSaveToStream
OleSetClipboard
OleUninitialize
PropVariantClear
PropVariantCopy
ReadClassStm
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
StringFromCLSID
StringFromGUID2
WriteClassStm

Sections

.text
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 244KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6790ade7a76179e7c7c62c97cc980024

Headers

File Characteristics

Imports

gdi32

user32

advapi32

shlwapi

imm32

rpcrt4

ws2_32

crypt32

kernel32

shell32

ole32

Sections

.text Size: 67KB - Virtual size: 68KB

.rdata Size: 244KB - Virtual size: 248KB

.data Size: 18KB - Virtual size: 19KB

.idata Size: 16KB - Virtual size: 19KB

.rsrc Size: 27KB - Virtual size: 27KB

.text
Size: 67KB - Virtual size: 68KB

.rdata
Size: 244KB - Virtual size: 248KB

.data
Size: 18KB - Virtual size: 19KB

.idata
Size: 16KB - Virtual size: 19KB

.rsrc
Size: 27KB - Virtual size: 27KB