b79b7205be37dcfffd85c41db0e63293_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b79b7205be37dcfffd85c41db0e63293_JaffaCakes118
Size

332KB
MD5

b79b7205be37dcfffd85c41db0e63293
SHA1

86c84f3638793d93bf671baf001ad639e3ba1556
SHA256

1f9c988c0ad647511ef75e17b1559448b4817c59551970d16b54f57ec11ff58f
SHA512

efa0f5c95df09ea36e11ebc1dc8300aa2de6750859a3140c0cb6dc2c804c88656d8d2ad64ae6bd9df1ec97966606265654a4e53c21a9b498071cde1185bd6669
SSDEEP

6144:kQue0BBX8up79CqycHGAF9dwDmXQU+1auoJ7PxmoUhOqYTmVNn:kQQBBsw70hcHGgcLBoJDxmo2YSj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b79b7205be37dcfffd85c41db0e63293_JaffaCakes118

Files

b79b7205be37dcfffd85c41db0e63293_JaffaCakes118
.exe windows:5 windows x86 arch:x86

43274519f0305f9ef9439a96ddb722a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
TlsSetValue
MulDiv
ReplaceFileW
FileTimeToSystemTime
GlobalSize
LocalReAlloc
QueueUserWorkItem
QueryDosDeviceW
CreateThread
EnumUILanguagesW
HeapDestroy
GetEnvironmentVariableW
lstrlenW
GetModuleHandleExA
CreateEventW
InitializeCriticalSectionAndSpinCount
TerminateProcess
TryEnterCriticalSection
GetSystemWow64DirectoryW
DuplicateHandle
GetWindowsDirectoryW
ActivateActCtx
FormatMessageW
GetTimeFormatW
UnhandledExceptionFilter
FindFirstFileW
DeleteFileW
VirtualQuery
CreateTimerQueueTimer
InterlockedIncrement
GetSystemDirectoryA
GetFileInformationByHandle
InterlockedCompareExchange
FlushInstructionCache
GetSystemDefaultLCID
LoadResource
MoveFileExW
GetTempFileNameW
GetSystemDefaultUILanguage
ResumeThread
VirtualFree
CreateDirectoryW
TlsGetValue
GlobalFree
WritePrivateProfileStringW
HeapReAlloc
HeapAlloc
GetModuleHandleExW
GetSystemInfo
GetLongPathNameW
OpenMutexA
GetCurrentDirectoryW
RemoveDirectoryW
DeleteCriticalSection
DeactivateActCtx
CompareStringA
GetThreadContext
SetEnvironmentVariableW
FindResourceExW
GetProcessHeap
CreateEventA
LoadLibraryW
TerminateThread
CreateProcessW
DisableThreadLibraryCalls
ReleaseActCtx
QueryPerformanceFrequency
Process32NextW
UnmapViewOfFile
UnlockFileEx
GetTickCount
ReadFile
FindClose
VirtualProtect
GetTempPathW
AddAtomW
lstrcmpiW
CreateMutexW
CopyFileW
FileTimeToLocalFileTime
GetModuleFileNameW
GetSystemTime
HeapFree
GetCurrentThread
GlobalAlloc
SetThreadPriority
VirtualAlloc
QueryPerformanceCounter
GetModuleHandleA
lstrlenA
OpenEventW
WaitForSingleObjectEx
GetModuleHandleW
LockFileEx
GetFileAttributesExW
GlobalReAlloc
CreateFileW
SetCurrentDirectoryA
IsDBCSLeadByte
LoadLibraryA
GetLocalTime
DeleteAtom
ReleaseSemaphore
CompareFileTime
GetPrivateProfileStringW
GlobalLock
LoadLibraryExW
CreateFileMappingW
SetEvent
ExpandEnvironmentStringsA
SetLastError
OutputDebugStringA
SetFileAttributesW
IsWow64Process
LocalFree
RaiseException
SizeofResource
OpenMutexW
ResetEvent
SetEndOfFile
FindResourceW
GetProcAddress
GetFileAttributesA
HeapCreate
GlobalUnlock
CreateSemaphoreW
InitializeCriticalSection
SetFileTime
InterlockedDecrement
FreeLibrary
GetPrivateProfileSectionNamesW
GetUserDefaultUILanguage
GetCurrentProcess
LocalAlloc
SetThreadExecutionState
GetFullPathNameW
GetFileSize
GetPrivateProfileStringA
CloseHandle
OpenProcess
CreateFileMappingA
GetSystemTimeAsFileTime
lstrcmpA
SetProcessShutdownParameters
GetFileSizeEx
SetProcessWorkingSetSize
lstrcmpiA
SetErrorMode
Sleep
WideCharToMultiByte
SystemTimeToFileTime
GetLocaleInfoW
CompareStringW
LocalFileTimeToFileTime
CreateMutexA
FreeLibraryAndExitThread
InterlockedExchange
LocalSize
GetThreadPriority
WaitForSingleObject
GetCurrentThreadId
lstrcmpW
DebugBreak
SetThreadContext
GetCurrentProcessId
WritePrivateProfileSectionW
WriteFile
SearchPathW
GetLogicalDriveStringsW
LockResource
TlsAlloc
GetCPInfo
CreateDirectoryA
ReleaseMutex
SetCurrentDirectoryW
ExpandEnvironmentStringsW
CreateActCtxW
SetUnhandledExceptionFilter
GlobalAddAtomW
GetACP
GetModuleFileNameA
FindAtomW
GetDateFormatW
WaitForMultipleObjects
GetLastError
CreateFileA
SuspendThread
ExitProcess
GetVersionExW
Process32FirstW
GetSystemDirectoryW
SetFilePointer
GetVersionExA
CreateToolhelp32Snapshot
EnterCriticalSection
GetNumberFormatW
GetPrivateProfileSectionW
GetExitCodeThread
GetFileAttributesW
LeaveCriticalSection
GetShortPathNameW
MoveFileW
GetVersion
GetUserDefaultLCID
MapViewOfFile
GetAtomNameW
DeleteTimerQueueTimer
TlsFree
SetFilePointerEx
FindNextFileW
MultiByteToWideChar
GlobalFlags
GlobalAddAtomA
LCMapStringW
GlobalDeleteAtom

shell32

SHChangeNotify
SHGetFolderLocation
SHBrowseForFolderW
SHFileOperationW
SHBindToParent
SHGetPathFromIDListW
Shell_NotifyIconA
SHSetLocalizedName
SHGetFolderPathAndSubDirW
SHAppBarMessage
ExtractIconExW
SHGetFolderPathW
ExtractAssociatedIconExW
ShellExecuteExW
DragQueryFileW
ShellExecuteA
SHGetInstanceExplorer
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetSpecialFolderPathW
SHGetFileInfoW
SHPathPrepareForWriteW
Shell_NotifyIconW
SHGetDataFromIDListW
SHCreateShellItem
ShellExecuteW
ShellAboutW
ExtractIconW

ntdll

NtAllocateVirtualMemory
LdrGetDllHandle
RtlUshortByteSwap

psapi

GetProcessImageFileNameW

user32

AppendMenuW
IsChild
GetClientRect
EndPaint
SetCapture
CharPrevW
MessageBoxW
SendMessageTimeoutA
SetTimer
CreateMenu
DrawEdge
GetWindowLongW
WinHelpW
UnhookWindowsHookEx
SetClipboardViewer
GetWindowRgnBox
LoadCursorW
SetClipboardData
GetShellWindow
GetNextDlgTabItem
IsMenu
TranslateAcceleratorW
IsWindow
CheckMenuRadioItem
DrawTextW
GetAsyncKeyState
GetForegroundWindow
GetFocus
GetSystemMetrics
WaitForInputIdle
GetAncestor
SetRect
SetDlgItemTextW
DdeUninitialize
LoadBitmapW
SetMenuItemBitmaps
GetClassNameW
SendDlgItemMessageW
SetMenuItemInfoW
PtInRect
GetMenuStringW
IntersectRect
GetMenuItemInfoA
CopyImage
GetWindowLongA
SetFocus
FindWindowExW
UnionRect
EnumWindows
MapVirtualKeyW
ClientToScreen
GetWindowTextW
SetWindowPlacement
LoadAcceleratorsW
GetTopWindow
GetCursorPos
CallWindowProcW
AttachThreadInput
GetLastActivePopup
RegisterWindowMessageW
IsWindowEnabled
CheckRadioButton
SetParent
IsDlgButtonChecked
BeginDeferWindowPos
GetMenuDefaultItem
MessageBoxIndirectW
GetMessageW
UpdateWindow
MessageBoxExW
MonitorFromWindow
GetMenuState
MessageBoxIndirectA
WindowFromPoint
InvalidateRect
CreateDialogParamW
KillTimer
CloseClipboard
SendNotifyMessageW
ShowWindow
DrawFrameControl
CharUpperW
AdjustWindowRect
ChangeClipboardChain
DrawFocusRect
RegisterClassExW
MessageBoxExA
DdeFreeDataHandle
GetComboBoxInfo
GetClipboardData
TrackPopupMenu
DestroyMenu
SetCursor
GetSubMenu
LoadCursorA
DialogBoxParamW
PeekMessageA
GetClassLongW
IsWindowUnicode
DdeGetData
EnumChildWindows
UnregisterClassW
GetKeyboardLayout
GetScrollInfo
CreateWindowExW
UpdateLayeredWindow
CharLowerW
SetScrollInfo
PostThreadMessageW
IsHungAppWindow
MonitorFromPoint
SetWindowRgn
RegisterClassW
ShowScrollBar
SendMessageW
IsIconic
DdeCreateDataHandle
VkKeyScanExW
DispatchMessageA
MonitorFromRect
GetIconInfo
GetDC
SystemParametersInfoA
EmptyClipboard
DrawTextExW
GetSysColor
GetDlgItem
GetMessageTime
SetWindowTextW
CopyIcon
GetWindowInfo
CopyRect
SetDlgItemInt
MsgWaitForMultipleObjectsEx
SetMenu
DestroyWindow
GetMenuItemCount
SetScrollPos
EnumDisplaySettingsW
WaitMessage
AdjustWindowRectEx
GetSystemMenu
MessageBeep
OpenClipboard
LoadStringA
LoadImageW
CharNextW
LoadStringW
SendMessageTimeoutW
EnumThreadWindows
GetWindowTextLengthW
DdeConnect
FindWindowA
CheckMenuItem
RegisterWindowMessageA
DispatchMessageW
SendMessageA
GetClassInfoW
GetLastInputInfo
FillRect
GetWindow
MapDialogRect
MoveWindow
HideCaret
DdeClientTransaction
GetActiveWindow
GetDoubleClickTime
ReleaseDC
RegisterClipboardFormatW
SetWindowLongW
RemovePropA
OffsetRect
GetClipboardFormatNameW
SetActiveWindow
ReleaseCapture
SetCursorPos
GetMessageA
GetWindowThreadProcessId
GetWindowPlacement
MapWindowPoints
PostQuitMessage
DdeFreeStringHandle
TrackPopupMenuEx
LoadIconW
DestroyAcceleratorTable
GetCapture
DialogBoxIndirectParamA
ScreenToClient
EnumDesktopWindows
BeginPaint
GetMenuItemInfoW
PeekMessageW
LockSetForegroundWindow
DestroyIcon
GetKeyNameTextW
ShowCaret
TranslateMessage
CheckDlgButton
DialogBoxIndirectParamW
GetDlgItemTextW
GetKeyState
GetProcessWindowStation
GetClassWord
NotifyWinEvent
LoadMenuW
CallMsgFilterW
PostMessageW
GetDialogBaseUnits
SetWindowPos
FindWindowW
SetRectEmpty
GetClassInfoExW
CharNextA
EndDeferWindowPos
RemoveMenu
SetWindowsHookExW
GetParent
AllowSetForegroundWindow
IsDialogMessageW
RegisterClipboardFormatA
EnableMenuItem
GetMonitorInfoW
EndDialog
DialogBoxParamA
GetCursor
ShowOwnedPopups
CallNextHookEx
CharLowerBuffW
EnableWindow
PostThreadMessageA
MsgWaitForMultipleObjects
PostMessageA
CreateIconIndirect
DrawIconEx
DdeCreateStringHandleW
IsRectEmpty
DdeDisconnect
IsWindowVisible
GetPropW
EqualRect
RemovePropW
GetPropA
DdeInitializeW
IsCharAlphaNumericW
InsertMenuItemW
ChildWindowFromPoint
DeferWindowPos
SetPropW
DefWindowProcW
InsertMenuW
GetMenuItemID
EndMenu
DefWindowProcA
InflateRect
SystemParametersInfoW
DdeNameService
GetWindowDC
SetPropA
CharPrevA
GetDlgCtrlID
SetWindowLongA
AnimateWindow
CreatePopupMenu
GetSysColorBrush
RedrawWindow
TrackMouseEvent
SetMenuDefaultItem
GetWindowRect
GetMessagePos
DdeQueryStringW
DeleteMenu
GetDesktopWindow
SetForegroundWindow
wsprintfW

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
GetTokenInformation
RegQueryValueExW
RegOpenKeyW
GetTraceEnableLevel
RegOpenKeyExW
RegCreateKeyExA
RegEnumValueW
CryptHashData
RegisterTraceGuidsW
CryptDestroyHash
RegSetValueExA
RegQueryValueExA
RegOpenCurrentUser
RegEnumValueA
RegCreateKeyA
RegSetValueExW
CreateProcessAsUserW
RegCloseKey
CryptReleaseContext
GetTraceEnableFlags
TraceMessage
RegEnumKeyW
OpenThreadToken
CryptAcquireContextW
DuplicateTokenEx
RegOpenKeyExA
GetUserNameW
RegQueryValueW
IsTextUnicode
RegDeleteValueW
GetTraceLoggerHandle
CryptGetHashParam
RegDeleteKeyA
OpenProcessToken
RegDeleteValueA
ConvertSidToStringSidW
RegCreateKeyExW
SetTokenInformation
ImpersonateSelf
RegEnumKeyExW
UnregisterTraceGuids
RegQueryInfoKeyW
TraceEvent
GetLengthSid
CryptCreateHash
ConvertStringSidToSidW
RegDeleteKeyW
SetThreadToken

uxtheme

GetThemeMetric
DrawThemeParentBackground
DrawThemeBackground
GetThemeFont
GetThemeBackgroundContentRect
OpenThemeData
GetThemeAppProperties
IsThemeActive
GetThemeBackgroundExtent
GetThemePartSize
IsAppThemed
CloseThemeData
GetThemeMargins
GetThemeColor
SetWindowTheme

gdi32

SetMapMode
SetViewportExtEx
OffsetRgn
GetDCOrgEx
GetObjectA
DeleteEnhMetaFile
CreatePalette
SelectObject
MoveToEx
CreateBitmap
ExtCreateRegion
GetStockObject
SetStretchBltMode
GetDeviceCaps
BitBlt
CreateFontIndirectW
GetTextExtentPoint32W
GetRegionData
GetTextAlign
CreateCompatibleBitmap
CreateFontIndirectA
LineTo
GetDIBits
SetBkColor
GetBkColor
SetBkMode
CreatePen
SetTextColor
GetObjectW
GetRgnBox
CreateFontW
GetTextExtentExPointI
CreatePatternBrush
GetTextCharset
CreateSolidBrush
CreateCompatibleDC
GetTextMetricsW
CreateDIBSection
DeleteDC
LPtoDP
SetTextAlign
PlayEnhMetaFile
CreatePolygonRgn
CreateDCW
GetPaletteEntries
StretchDIBits
CreateHalftonePalette
GetTextExtentPoint32A
StretchBlt
OffsetWindowOrgEx
SetViewportOrgEx
DeleteObject
RectVisible
SetWindowExtEx
Rectangle
SaveDC
CreateMetaFileW
SelectPalette
GetTextExtentPointW
CreateRectRgnIndirect
GetBrushOrgEx
CreateDCA
RealizePalette
ExtTextOutW
CloseEnhMetaFile
IntersectClipRect
GetTextColor
GetGlyphIndicesW
GetBkMode
CreateDIBPatternBrushPt
CreateEnhMetaFileA
EqualRgn
GetPixel
TextOutW
GetLayout
CreateRectRgn
GetClipBox
PatBlt
RestoreDC
SetLayout
SetDCPenColor
SetRectRgn
SetWindowOrgEx
TextOutA
SetBrushOrgEx
CombineRgn
GetSystemPaletteEntries
SetPaletteEntries
CloseMetaFile

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

43274519f0305f9ef9439a96ddb722a1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

ntdll

psapi

user32

advapi32

uxtheme

gdi32

Sections

.text Size: 183KB - Virtual size: 183KB

.rdata Size: 88KB - Virtual size: 88KB

.rsrc Size: 21KB - Virtual size: 21KB

.data Size: 37KB - Virtual size: 1.4MB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 183KB - Virtual size: 183KB

.rdata
Size: 88KB - Virtual size: 88KB

.rsrc
Size: 21KB - Virtual size: 21KB

.data
Size: 37KB - Virtual size: 1.4MB

.tls
Size: 512B - Virtual size: 4KB