b4def277aaa292d789892cae5c5023f9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b4def277aaa292d789892cae5c5023f9_JaffaCakes118
Size

855KB
MD5

b4def277aaa292d789892cae5c5023f9
SHA1

cd2c29e0d04c59df6042eb19617f4c4a6b729594
SHA256

1f4f44187d1a6df556bfe0ed6c62bf9edd8f96534f2501a382b6443982f839b7
SHA512

a6df2bd4b737f59d485034c943e9590da8f2283e19da699e1c6d8815abe9d720262eab43677a32d66bb8da90b86d854a62c10dde715075e48c73461da3b2c272
SSDEEP

24576:IPAfJirEX+1STLLdRhv/3UNl4gmns53ahfGNTKXU:IPQUEXpeNlvmcqhON2XU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4def277aaa292d789892cae5c5023f9_JaffaCakes118

Files

b4def277aaa292d789892cae5c5023f9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a4c8b2042e47489d2d8f2825598156e5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
GetStartupInfoW
GetCPInfo
EnterCriticalSection
GetCurrentDirectoryW
VirtualFree
GetProcAddress
GlobalAlloc
SetLastError
GlobalFindAtomW
GetPrivateProfileStringW
SearchPathW
GetStringTypeW
LoadResource
UnlockFile
GetLastError
CreateFileW
HeapDestroy
DisconnectNamedPipe
FindResourceA
HeapQueryInformation
GetCurrentThreadId
CreateEventW
GetConsoleOutputCP
UnhandledExceptionFilter
GetTempFileNameW
GetVersion
GetUserDefaultUILanguage
GetFileAttributesW
InterlockedExchange
FreeEnvironmentStringsW
DuplicateHandle
ExitProcess
GlobalHandle
HeapFree
GetProfileIntW
OpenEventW
GlobalReAlloc
FlushFileBuffers
LCMapStringW
GetCommandLineW
GetTickCount
CompareStringW
GlobalFlags
LocalFree
GetLocaleInfoW
GetOverlappedResult
PeekNamedPipe
LocalAlloc
CreateDirectoryW
GetFileAttributesExW
lstrcmpA
SetHandleCount
HeapAlloc
GlobalLock
ReadFile
FreeLibrary
GetWindowsDirectoryW
GetCurrentDirectoryA
GetOEMCP
lstrcpyW
RaiseException
GetFileSizeEx
WaitForSingleObject
TerminateProcess
FindFirstFileW
FreeResource
SetThreadPriority
lstrcmpiW
lstrcmpW
InterlockedIncrement
InitializeCriticalSection
GetNumberFormatW
SetEnvironmentVariableA
GetTempPathW
GetVolumeInformationW
TlsSetValue
GlobalDeleteAtom
QueryPerformanceCounter
HeapSize
GetFileSize
CopyFileW
LocalReAlloc
SetEndOfFile
GlobalSize
TlsGetValue
Sleep
FileTimeToLocalFileTime
GetSystemInfo
VirtualProtect
IsValidLocale
ConnectNamedPipe
GlobalGetAtomNameW
IsProcessorFeaturePresent
FindResourceW
WaitForMultipleObjects
GetSystemDefaultUILanguage
LeaveCriticalSection
GlobalFree
ExitThread
GlobalUnlock
GetConsoleCP
lstrlenA
GetEnvironmentStringsW
GetFileInformationByHandle
GetModuleFileNameW
WideCharToMultiByte
FindFirstFileExW
TlsAlloc
GetACP
InterlockedCompareExchange
GetCurrentThread
GlobalAddAtomW
GetDriveTypeW
FindResourceExW
DeleteFileW
VirtualAlloc
GetCurrentProcess
SetCurrentDirectoryW
LoadLibraryW
GetCurrentProcessId
FileTimeToSystemTime
GetVersionExW
GetFileType
WritePrivateProfileStringW
CreateThread
FlushInstructionCache
SetEvent
GetPrivateProfileIntW
GetModuleHandleW
DeleteCriticalSection
InterlockedDecrement
GetFileTime
ResumeThread
CloseHandle
GetSystemDirectoryW
TlsFree
InitializeCriticalSectionAndSpinCount
IsValidCodePage
OpenMutexW
MultiByteToWideChar
FindClose
GetTimeZoneInformation
FormatMessageW
WriteFile
CreateMutexW
HeapSetInformation
ConvertDefaultLocale
HeapCreate
GetConsoleMode
SizeofResource
LockResource
MoveFileExW
DeleteAtom
VirtualQuery
SetUnhandledExceptionFilter
GetStdHandle
HeapReAlloc
MulDiv
GetSystemTimeAsFileTime
SetErrorMode
RtlUnwind
LockFile
LoadLibraryExW
GetProcessHeap
GetFullPathNameW
SetStdHandle
lstrlenW
WriteConsoleW
CreateNamedPipeW
SetFilePointer

user32

PeekMessageW
ToUnicodeEx
MapWindowPoints
UnhookWindowsHookEx
IsChild
CreateWindowExW
TrackPopupMenu
GetParent
UnregisterClassA
GetSystemMenu
BeginPaint
ShowOwnedPopups
DestroyCursor
DrawTextExW
GetMenuDefaultItem
UnregisterClassW
GetPropW
CopyAcceleratorTableW
GetSysColorBrush
PostThreadMessageW
ExitWindowsEx
ClientToScreen
GetUpdateRect
SetActiveWindow
SetCursor
SetRectEmpty
FrameRect
GetDoubleClickTime
DialogBoxIndirectParamW
GetNextDlgTabItem
AdjustWindowRectEx
IsZoomed
InvertRect
DeleteMenu
CreateMenu
GetDlgItem
GetMessagePos
GetKeyboardState
GetIconInfo
TranslateAcceleratorW
RemoveMenu
IsWindowVisible
WinHelpW
EndDialog
GetSystemMetrics
GetClassNameW
SetForegroundWindow
SetScrollPos
GetDC
GetMenuCheckMarkDimensions
RealChildWindowFromPoint
DrawEdge
SetWindowTextA
MapDialogRect
IsCharLowerW
DrawFrameControl
MessageBeep
SetWindowRgn
HideCaret
SetWindowsHookExW
GetDialogBaseUnits
DefWindowProcW
CharUpperBuffW
FillRect
DestroyIcon
IsMenu
GetDlgCtrlID
RegisterHotKey
SetWindowTextW
UnionRect
SetMenuDefaultItem
CallWindowProcW
GetActiveWindow
CharUpperW
GrayStringW
LoadIconW
UnregisterHotKey
RegisterClipboardFormatW
PostQuitMessage
DeferWindowPos
SubtractRect
IsRectEmpty
InsertMenuW
EqualRect
GetFocus
SetRect
SystemParametersInfoW
GetMessageW
SetClipboardData
GetNextDlgGroupItem
ValidateRect
SendDlgItemMessageW
TabbedTextOutW
RegisterWindowMessageW
GetWindowLongW
SetLayeredWindowAttributes
ModifyMenuW
DialogBoxParamW
GetScrollRange
UpdateLayeredWindow
ReleaseDC
RemovePropW
SetPropW
SendMessageTimeoutW
DrawIcon
GetClientRect
ReuseDDElParam
LoadAcceleratorsW
CheckDlgButton
MessageBoxW
MapVirtualKeyW
IsWindow
GetAsyncKeyState
IsDialogMessageW
EndPaint
GetForegroundWindow
GetMenuItemInfoW
SetFocus
GetMenuState
GetMenuItemCount
GetDlgItemTextW
GetKeyState
GetScrollPos
MonitorFromWindow
DrawIconEx
SetMenu
GetSubMenu
TranslateMDISysAccel
NotifyWinEvent
CopyIcon
EnableScrollBar
DestroyMenu
GetWindowRgn
SetParent
ShowScrollBar
BeginDeferWindowPos
EnableWindow
IntersectRect
SendMessageW
ScrollWindow
SetWindowLongW
UpdateWindow
AllowSetForegroundWindow
DestroyAcceleratorTable
DrawTextW
GetClassInfoW
SetCursorPos
DrawStateW
GetMessageTime
ShowWindow
SetWindowPlacement
WindowFromPoint
CreatePopupMenu
CheckMenuItem
EnumWindows
GetClassInfoExW
SetWindowPos
SetDlgItemTextW
SetScrollRange
MapVirtualKeyExW
OpenClipboard
CreateDialogIndirectParamW
EnableMenuItem
LoadBitmapW
CallNextHookEx
CreateAcceleratorTableW
DrawFocusRect
SetClassLongW
GetMonitorInfoW
GetWindowTextW
GetMenu
GetCursorPos
DispatchMessageW
LoadCursorW
GetWindowRect
InvalidateRect
RegisterClassW
GetCapture
IsIconic
PostMessageW
GetKeyboardLayout
ScreenToClient
EnumDisplayMonitors
InsertMenuItemW
IsWindowEnabled
GetSysColor
DrawMenuBar
LoadMenuW
InflateRect
SetScrollInfo
GetWindow
EndDeferWindowPos
DefMDIChildProcW
MonitorFromPoint
SetTimer
MoveWindow
OffsetRect
ReleaseCapture
GetWindowPlacement
GetKeyNameTextW
DestroyWindow
SendDlgItemMessageA
LoadImageW
GetWindowDC
GetLastActivePopup
LockWindowUpdate
GetClassLongW
CopyRect
GetScrollInfo
GetTopWindow
WaitMessage
GetWindowTextLengthW
RedrawWindow
KillTimer
AppendMenuW
CopyImage
PtInRect
SetCapture
GetDesktopWindow
CloseClipboard
GetMenuStringW
DefFrameProcW
EmptyClipboard
GetWindowThreadProcessId
TranslateMessage
BringWindowToTop
UnpackDDElParam
IsClipboardFormatAvailable
SetMenuItemBitmaps
GetMenuItemID

gdi32

GetTextExtentPoint32W
GetWindowExtEx
GetPixel
GetDeviceCaps
CreatePen
Polyline
SetRectRgn
GetBkColor
ExtTextOutW
PtVisible
OffsetViewportOrgEx
GetViewportOrgEx
CreateRectRgnIndirect
GetPaletteEntries
GetViewportExtEx
GetRgnBox
CreateCompatibleBitmap
EnumFontFamiliesW
GetTextFaceW
CreateDCW
CreateDIBitmap
TextOutW
CreateHatchBrush
ScaleWindowExtEx
CreatePalette
IntersectClipRect
CreateRoundRectRgn
DPtoLP
SaveDC
RoundRect
CreateFontW
SetTextColor
CreateFontIndirectW
LineTo
Escape
RectVisible
GetWindowOrgEx
LPtoDP
SetTextAlign
Polygon
Ellipse
GetBkMode
DeleteObject
GetTextCharsetInfo
SetDIBColorTable
RestoreDC
CombineRgn
SetPixelV
SetWindowExtEx
SetBkColor
GetBoundsRect
StretchDIBits
GetStockObject
SetPixel
ExcludeClipRect
Rectangle
SetMapMode
SetROP2
ScaleViewportExtEx
SetWindowOrgEx
ExtFloodFill
SetBkMode
SelectPalette
EnumFontFamiliesExW
GetObjectType
StretchBlt
BitBlt
CreateBitmap
FillRgn
RealizePalette
CreatePatternBrush
PatBlt
SetPaletteEntries
SetViewportOrgEx
PtInRegion
CopyMetaFileW
SelectObject
SelectClipRgn
SetViewportExtEx
CreateSolidBrush
GetCharWidthW
SetLayout
DeleteDC
CreateCompatibleDC
OffsetWindowOrgEx
CreateRectRgn
CreateDIBSection
FrameRgn
CreateEllipticRgn
SetPolyFillMode
GetObjectW
MoveToEx
GetTextMetricsW
GetSystemPaletteEntries
CreatePolygonRgn
ExtSelectClipRgn
GetTextColor
GetBitmapBits
GetLayout
GetClipBox
GetNearestPaletteIndex
SetDIBits
OffsetRgn

comdlg32

GetOpenFileNameW
GetFileTitleW
GetSaveFileNameW

advapi32

SetSecurityDescriptorDacl
RegQueryValueExW
RegCloseKey
InitializeSecurityDescriptor
RegEnumValueW
LookupPrivilegeValueW
RegEnumKeyExW
CheckTokenMembership
RegOpenKeyExW
FreeSid
GetTokenInformation
RegCreateKeyExW
AdjustTokenPrivileges
RegSetValueExW
RegQueryValueW
OpenProcessToken
SetSecurityDescriptorSacl
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
AllocateAndInitializeSid

shell32

SHGetDiskFreeSpaceExW
DragQueryFileW
ShellExecuteExW
SHBrowseForFolderW
Shell_NotifyIconW
DuplicateIcon
SHChangeNotify
SHAppBarMessage
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFolderLocation
SHGetPathFromIDListW
DragFinish
SHGetSpecialFolderPathW
SHGetFolderPathW
SHGetFileInfoW
ShellExecuteW

ole32

OleGetClipboard
CoCreateGuid
CoTaskMemFree
ReleaseStgMedium
OleUninitialize
CoFreeUnusedLibraries
CoUninitialize
CLSIDFromString
CoRevokeClassObject
OleIsCurrentClipboard
OleInitialize
DoDragDrop
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleDuplicateData
CoLockObjectExternal
CoRegisterMessageFilter
CoInitializeEx
CoInitialize
CoCreateInstance
CoTaskMemAlloc
OleFlushClipboard
RevokeDragDrop
OleCreateMenuDescriptor
OleLockRunning
IsAccelerator
RegisterDragDrop
CreateStreamOnHGlobal

oleaut32

SysAllocString
SysStringLen
VariantClear
VarBstrCmp
VarBstrCat
SysAllocStringLen
SysStringByteLen
VariantInit
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringByteLen
SysFreeString
VarBstrFromDate
VariantChangeType

comctl32

_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathFindFileNameW
PathStripToRootW
PathRemoveFileSpecW
PathIsUNCW
PathFindExtensionW

winmm

PlaySoundW

msimg32

AlphaBlend
TransparentBlt

mpr

WNetAddConnection3W

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

oledlg

OleUIBusyW

gdiplus

GdiplusStartup
GdipDisposeImage
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipAlloc
GdipSetInterpolationMode
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipDrawImageI
GdipGetImageHeight
GdipGetImagePaletteSize
GdipDrawImageRectI
GdipGetImagePixelFormat
GdiplusShutdown
GdipCloneImage
GdipBitmapUnlockBits
GdipGetImageWidth
GdipCreateBitmapFromHBITMAP
GdipBitmapLockBits
GdipDeleteGraphics
GdipFree
GdipCreateBitmapFromScan0

msvcrt

exit

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
ObjectFromLresult
LresultFromObject

esent

JetMove

Sections

.text
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.55
Size: - Virtual size: 170KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aa
Size: 321KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bb
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.a46
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asshole
Size: 214KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4c8b2042e47489d2d8f2825598156e5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

msimg32

mpr

imm32

oledlg

gdiplus

msvcrt

oleacc

esent

Sections

.text Size: 149KB - Virtual size: 148KB

.cc Size: 512B - Virtual size: 36B

.55 Size: - Virtual size: 170KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 512B - Virtual size: 828B

.aa Size: 321KB - Virtual size: 320KB

.bb Size: 144KB - Virtual size: 144KB

.a46 Size: 1KB - Virtual size: 1KB

.asshole Size: 214KB - Virtual size: 213KB

.rsrc Size: 1024B - Virtual size: 720B

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 149KB - Virtual size: 148KB

.cc
Size: 512B - Virtual size: 36B

.55
Size: - Virtual size: 170KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 512B - Virtual size: 828B

.aa
Size: 321KB - Virtual size: 320KB

.bb
Size: 144KB - Virtual size: 144KB

.a46
Size: 1KB - Virtual size: 1KB

.asshole
Size: 214KB - Virtual size: 213KB

.rsrc
Size: 1024B - Virtual size: 720B

.reloc
Size: 5KB - Virtual size: 5KB