b6251d6f1a7ff705616b6eda9a9430d7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b6251d6f1a7ff705616b6eda9a9430d7_JaffaCakes118
Size

848KB
MD5

b6251d6f1a7ff705616b6eda9a9430d7
SHA1

02da09680f5ed92e6efe89fc0b2b6a7eb62cde64
SHA256

9df2f19fe78aba258e20b247c1c14cfdf78c0cd4ef37878518e4d7daf0f61fa1
SHA512

2600417e15d2a0ccdf51aed75fd187d99deaaa15715b5c7e67dda871aa96fa619899684922e1c441e550ed523a20a478c1367fd6447b47cad49d534ac511c6eb
SSDEEP

24576:RmZo+bYVAFhgH71wFQl/O10JC2v1Uf0pgs0kuO2:RmZThDCJ/tzv1U8plqO2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6251d6f1a7ff705616b6eda9a9430d7_JaffaCakes118

Files

b6251d6f1a7ff705616b6eda9a9430d7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cc753492cf13cdf40c153818898aeb85

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
FileTimeToSystemTime
SetLastError
QueryPerformanceCounter
GlobalSize
InitializeCriticalSection
GlobalFlags
FlushFileBuffers
GetLocaleInfoW
LockFile
ExitThread
GetVersionExW
SetEnvironmentVariableA
TlsFree
FormatMessageW
InterlockedExchange
SetEndOfFile
GetTempPathW
LocalAlloc
CloseHandle
CopyFileW
GetStartupInfoW
GetFileType
HeapAlloc
HeapSize
VirtualAlloc
WriteFile
CreateFileW
FreeResource
GetTempFileNameW
GetFileTime
GetCurrentProcess
LoadLibraryW
SetHandleCount
SetUnhandledExceptionFilter
SetThreadPriority
CreateMutexW
TerminateThread
GetCPInfo
GetSystemDirectoryW
GlobalUnlock
GetProcAddress
WaitForSingleObject
FreeEnvironmentStringsW
GetStringTypeW
GlobalHandle
GetACP
lstrlenW
LockResource
HeapSetInformation
SetEvent
GetConsoleCP
GlobalGetAtomNameW
GetFullPathNameW
Sleep
EnterCriticalSection
HeapQueryInformation
CreateEventW
HeapCreate
GetStdHandle
GetFileAttributesExW
GlobalAddAtomW
SetStdHandle
GlobalLock
GetFileSizeEx
HeapDestroy
FileTimeToLocalFileTime
lstrlenA
GetVolumeInformationW
IsValidCodePage
DeleteCriticalSection
GetCurrentProcessId
MultiByteToWideChar
GlobalAlloc
IsProcessorFeaturePresent
GetCurrentThread
FreeLibrary
WideCharToMultiByte
LocalReAlloc
CreateThread
GetModuleFileNameW
MulDiv
ReadFile
FindClose
SetFilePointer
UnhandledExceptionFilter
GetFileSize
RaiseException
GetModuleHandleW
FindFirstFileW
HeapReAlloc
GetUserDefaultUILanguage
GetCurrentDirectoryW
InterlockedIncrement
HeapFree
FindResourceW
GetNumberFormatW
GetSystemTimeAsFileTime
lstrcmpiW
GlobalReAlloc
GetSystemInfo
DuplicateHandle
CreateNamedPipeW
GetEnvironmentStringsW
FindResourceExW
TlsAlloc
GetFileAttributesW
WriteConsoleW
ResumeThread
GetProcessHeap
GetTimeZoneInformation
lstrcmpW
lstrcpyW
InitializeCriticalSectionAndSpinCount
GlobalFree
LCMapStringW
LocalFree
LoadResource
RtlUnwind
UnlockFile
GetConsoleMode
GetCommandLineW
GlobalDeleteAtom
SizeofResource
GlobalFindAtomW
GetCurrentThreadId
LoadLibraryExW
LeaveCriticalSection
VirtualProtectEx
TlsSetValue
WaitForMultipleObjects
CompareStringW
VirtualQuery
GetLastError
InterlockedDecrement
IsDebuggerPresent
GetOEMCP
GetTickCount
lstrcmpA

user32

PostQuitMessage
WinHelpW
ModifyMenuW
PostMessageW
GetKeyNameTextW
GetKeyboardLayout
EndDeferWindowPos
GetClassInfoExW
GetMenuItemID
CopyImage
SetWindowTextW
DefMDIChildProcW
PostThreadMessageW
ShowScrollBar
SetScrollRange
SetWindowPlacement
SendDlgItemMessageW
LoadIconW
GetWindowPlacement
CreatePopupMenu
AppendMenuW
DestroyIcon
SetCursorPos
GetClassInfoW
DestroyWindow
SetRect
GetMenuDefaultItem
SetMenuItemBitmaps
IsZoomed
EnableMenuItem
NotifyWinEvent
TrackPopupMenu
EndPaint
ToUnicodeEx
EqualRect
MonitorFromPoint
GetDesktopWindow
MessageBoxW
MapWindowPoints
IsWindow
GetAsyncKeyState
IsDialogMessageW
IsChild
BeginDeferWindowPos
ReleaseCapture
InvertRect
FillRect
DestroyAcceleratorTable
DrawIconEx
IsCharLowerW
GetNextDlgGroupItem
BeginPaint
CreateAcceleratorTableW
RealChildWindowFromPoint
GetSysColorBrush
GetMenuItemCount
PeekMessageW
GetCapture
GetUpdateRect
CheckDlgButton
CreateMenu
UnpackDDElParam
DialogBoxParamW
SetMenu
GetClientRect
GetLastActivePopup
CopyAcceleratorTableW
GetWindowThreadProcessId
IsMenu
GetKeyboardState
DispatchMessageW
GetWindowRgn
DefFrameProcW
RegisterClipboardFormatW
MapVirtualKeyExW
GetMonitorInfoW
GetDlgItem
TranslateMDISysAccel
ShowOwnedPopups
SetWindowLongW
GetDoubleClickTime
ShowWindow
IsWindowVisible
TranslateAcceleratorW
CloseClipboard
PtInRect
SetClipboardData
EmptyClipboard
MapVirtualKeyW
GetKeyState
SubtractRect
BringWindowToTop
SetTimer
GetScrollRange
DestroyCursor
CreateDialogIndirectParamW
GetCursorPos
GetMessageTime
RegisterClassW
LoadCursorW
UpdateWindow
GetWindow
DrawTextExW
ValidateRect
GetActiveWindow
LockWindowUpdate
OpenClipboard
ScreenToClient
GetSystemMetrics
ScrollWindow
InsertMenuItemW
EnableScrollBar
CallNextHookEx
IsIconic
GetMenuStringW
InsertMenuW
KillTimer
SetWindowRgn
DeleteMenu
DestroyMenu
MapDialogRect
AdjustWindowRectEx
SetScrollPos
ReuseDDElParam
DrawTextW
DrawIcon
LoadImageW
GetForegroundWindow
EnumWindows
UnionRect
SetForegroundWindow
IsRectEmpty
InvalidateRect
GetMessageW
UpdateLayeredWindow
GetMessagePos
SetWindowPos
GetFocus
GetWindowTextLengthW
GetMenuState
GetClassNameW
DrawFrameControl
GetWindowLongW
EndDialog
SetCapture
SetCursor
SystemParametersInfoW
EnableWindow
GetDlgCtrlID
IsClipboardFormatAvailable
CopyRect
RedrawWindow
IsWindowEnabled
LoadAcceleratorsW
DrawFocusRect
GetScrollPos
CopyIcon
GetDC
SetRectEmpty
SetClassLongW
RemovePropW
GetClassLongW
SetMenuDefaultItem
HideCaret
CreateWindowExW
RemoveMenu
LoadBitmapW
SetLayeredWindowAttributes
GetNextDlgTabItem
GetMenuCheckMarkDimensions
GetMenuItemInfoW
WaitMessage
SetPropW
CharUpperW
SendDlgItemMessageA
SetScrollInfo
SetParent
CheckMenuItem
DefWindowProcW
MonitorFromWindow
InflateRect
EnumDisplayMonitors
TranslateMessage
GetScrollInfo
GrayStringW
IntersectRect
UnhookWindowsHookEx
CharUpperBuffW
GetTopWindow
GetSysColor
GetPropW
DrawMenuBar
MessageBeep
SetActiveWindow
CallWindowProcW
SetFocus
GetWindowTextW
DrawStateW
LoadMenuW
OffsetRect
MoveWindow
SendMessageW
DeferWindowPos
ClientToScreen
GetSystemMenu
GetMenu
FrameRect
GetWindowRect
ReleaseDC
RegisterWindowMessageW
SetWindowsHookExW
GetIconInfo
TabbedTextOutW
GetWindowDC
DrawEdge
GetSubMenu
WindowFromPoint

gdi32

GetBkColor
Polyline
GetNearestPaletteIndex
EnumFontFamiliesW
TextOutW
SetMapMode
SelectClipRgn
GetBitmapBits
CreateRectRgn
SaveDC
SetViewportExtEx
PtInRegion
OffsetRgn
GetTextMetricsW
GetTextColor
ExtFloodFill
Rectangle
BitBlt
SetPixel
SetPaletteEntries
SetBkColor
StretchBlt
ScaleViewportExtEx
GetPixel
LPtoDP
GetObjectW
CreateDIBSection
ExtTextOutW
CreateBitmap
Polygon
OffsetWindowOrgEx
SetRectRgn
SelectObject
CombineRgn
GetWindowOrgEx
SetROP2
OffsetViewportOrgEx
GetTextFaceW
FrameRgn
GetDeviceCaps
PtVisible
CreateCompatibleBitmap
GetTextCharsetInfo
GetPaletteEntries
CreateDCW
DPtoLP
RestoreDC
CreateDIBitmap
GetViewportOrgEx
SetWindowExtEx
CreateHatchBrush
Escape
GetClipBox
CreateCompatibleDC
MoveToEx
SelectPalette
GetRgnBox
SetBkMode
CreatePatternBrush
CreatePalette
CreatePen
SetTextAlign
RectVisible
EnumFontFamiliesExW
PatBlt
SetPolyFillMode
SetViewportOrgEx
RealizePalette
CreateFontIndirectW
IntersectClipRect
SetTextColor
SetWindowOrgEx
GetTextExtentPoint32W
DeleteDC
CreateSolidBrush
GetObjectType
CreatePolygonRgn
ScaleWindowExtEx
SetDIBColorTable
LineTo
FillRgn
Ellipse
GetLayout
CreateEllipticRgn
SetPixelV
CreateRectRgnIndirect
GetWindowExtEx
GetBoundsRect
DeleteObject
ExtSelectClipRgn
GetSystemPaletteEntries
ExcludeClipRect
SetLayout
GetViewportExtEx
CreateRoundRectRgn
CopyMetaFileW

advapi32

SetSecurityDescriptorSacl
InitializeSecurityDescriptor
RegSetValueExW
ConvertSidToStringSidW
GetTokenInformation
RegQueryValueExW
RegDeleteKeyW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegDeleteValueW
RegCloseKey
SetSecurityDescriptorDacl
RegOpenKeyExW
OpenThreadToken
GetSecurityDescriptorSacl
OpenProcessToken
RegEnumKeyExW
RegCreateKeyExW
IsValidSid

shell32

DragQueryFileW
DragFinish
SHGetFileInfoW
SHGetDesktopFolder
SHAppBarMessage
SHGetPathFromIDListW
SHGetFolderLocation
ShellExecuteW
SHBrowseForFolderW
ShellExecuteExW
SHGetSpecialFolderLocation

ole32

CoLockObjectExternal
OleGetClipboard
CoCreateInstance
ReleaseStgMedium
CoTaskMemFree
CLSIDFromString
DoDragDrop
IsAccelerator
OleLockRunning
RevokeDragDrop
CoInitializeEx
OleCreateMenuDescriptor
CreateStreamOnHGlobal
OleDuplicateData
OleTranslateAccelerator
CoInitialize
CoTaskMemAlloc
CoUninitialize
OleDestroyMenuDescriptor
RegisterDragDrop

oleaut32

VariantClear
VariantChangeType
SysStringLen
SystemTimeToVariantTime
SysAllocStringByteLen
VariantTimeToSystemTime
VarBstrFromDate
SysFreeString
SysAllocString
SysAllocStringLen
VariantInit
SysStringByteLen

comctl32

ImageList_GetIconSize

shlwapi

SHDeleteEmptyKeyA
SHDeleteValueA
PathRemoveFileSpecW
PathFindExtensionW
PathIsUNCW
PathStripToRootW
PathFindFileNameW

gdiplus

GdipDrawImageRectI
GdipDisposeImage
GdipGetImagePalette
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipFree
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStream
GdipAlloc
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipCloneImage
GdipDeleteGraphics
GdipBitmapLockBits
GdipCreateFromHDC
GdipGetImagePaletteSize
GdipGetImageHeight
GdipDrawImageI
GdiplusStartup
GdipGetImageWidth
GdiplusShutdown
GdipSetInterpolationMode

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ryuw
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tyu
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kyup
Size: 287KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kyupl
Size: 1024B - Virtual size: 517B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kuyul
Size: 517KB - Virtual size: 517KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc753492cf13cdf40c153818898aeb85

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

gdiplus

Sections

.text Size: 9KB - Virtual size: 8KB

.ryuw Size: 3KB - Virtual size: 3KB

.tyu Size: 8KB - Virtual size: 8KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 512B - Virtual size: 188KB

.kyup Size: 287KB - Virtual size: 287KB

.kyupl Size: 1024B - Virtual size: 517B

.kuyul Size: 517KB - Virtual size: 517KB

.rsrc Size: 1024B - Virtual size: 712B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 8KB

.ryuw
Size: 3KB - Virtual size: 3KB

.tyu
Size: 8KB - Virtual size: 8KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 512B - Virtual size: 188KB

.kyup
Size: 287KB - Virtual size: 287KB

.kyupl
Size: 1024B - Virtual size: 517B

.kuyul
Size: 517KB - Virtual size: 517KB

.rsrc
Size: 1024B - Virtual size: 712B

.reloc
Size: 5KB - Virtual size: 4KB