bd6623f3232021d0a106de06478ab465_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bd6623f3232021d0a106de06478ab465_JaffaCakes118
Size

867KB
MD5

bd6623f3232021d0a106de06478ab465
SHA1

8918590a664b185167c5157df5a85357c3c7bc25
SHA256

ad76c3fdeaa7eab3ad211905f52bab559222b7ae714b160d40ea772693a41425
SHA512

0f9cdf6b87b75e16e8f36f7d4c8be0a49025ece6c6e543f433e28f42391f8cb70589ce488d4dc7340ab263b98548f88124d741b68ef2b08a92d32e92b9a2e96f
SSDEEP

12288:fD8BGiq4K4ZyJiaUbyEEg1ZJKGFkyVA9Ggrs2iyPn/odpU1QcE2SICkSeWchrdAk:b8ciq0Z+gZJzAd7P8iTSquU2hjU0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd6623f3232021d0a106de06478ab465_JaffaCakes118

Files

bd6623f3232021d0a106de06478ab465_JaffaCakes118
.dll windows:5 windows x86 arch:x86

5e62b875ff8a78c39611064201209a8e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumResourceNamesW
InterlockedExchange
WriteProcessMemory
GetLastError
TlsGetValue
HeapReAlloc
WritePrivateProfileSectionW
SetHandleCount
GetConsoleMode
GetLocalTime
GetShortPathNameW
HeapSize
TlsFree
FindFirstFileW
MultiByteToWideChar
VirtualFree
CloseHandle
WriteConsoleW
GetProcessHeap
SetUnhandledExceptionFilter
GetStartupInfoW
GetWindowsDirectoryW
GetStdHandle
FreeEnvironmentStringsW
IsValidCodePage
GlobalFree
GetSystemTimeAsFileTime
FindResourceW
GetFileSize
GetStringTypeA
LockResource
Process32FirstW
ExitProcess
MulDiv
ResumeThread
GetLocaleInfoA
GetOEMCP
GetSystemDirectoryW
GetFullPathNameW
InterlockedIncrement
GetCPInfo
SetFileAttributesW
FormatMessageW
ExitThread
GetPrivateProfileSectionW
GlobalMemoryStatusEx
SetErrorMode
SizeofResource
InitializeCriticalSectionAndSpinCount
SetEvent
CreateEventW
GetTempPathW
GetModuleHandleW
TerminateProcess
GetDateFormatA
DuplicateHandle
WaitForSingleObject
CreateHardLinkW
LoadLibraryA
CompareStringA
FindClose
SetPriorityClass
CreateThread
Beep
GlobalAlloc
GlobalLock
IsDebuggerPresent
ReadFile
SetFilePointerEx
GetTickCount
VirtualProtect
GetCurrentProcess
LoadLibraryW
GlobalUnlock
GetConsoleOutputCP
LCMapStringW
CompareStringW
GetACP
GetTempFileNameW
SetFilePointer
SetLastError
FindNextFileW
VirtualFreeEx
HeapFree
LeaveCriticalSection
QueryPerformanceCounter
OutputDebugStringW
WritePrivateProfileStringW
SetVolumeLabelW
GetCommandLineW
FreeLibrary
GetProcessIoCounters
DeleteCriticalSection
GetSystemInfo
GetModuleHandleA
WriteFile
CopyFileW
SetCurrentDirectoryW
DeleteFileW
CreateToolhelp32Snapshot
EnterCriticalSection
CreateDirectoryW
GetCurrentThread
GetPrivateProfileSectionNamesW
GetComputerNameW
RaiseException
SetEnvironmentVariableA
MoveFileW
CreateFileA
CreatePipe
FileTimeToLocalFileTime
SetStdHandle
GetExitCodeProcess
GetDriveTypeW
GetPrivateProfileStringW
Process32NextW
SetFileTime
TlsAlloc
Sleep
RtlUnwind
OpenProcess
GetTimeZoneInformation
LCMapStringA
GetCurrentThreadId
GetFileAttributesW
GetEnvironmentStringsW
CreateProcessW
WriteConsoleA
GetVersionExW
CreateFileW
SystemTimeToFileTime
LoadResource
GetProcAddress
FlushFileBuffers
GetCurrentDirectoryW
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetModuleFileNameW
FileTimeToSystemTime
UnhandledExceptionFilter
ReadProcessMemory
GetTimeFormatA
GetCurrentProcessId
GetFileType
SetEnvironmentVariableW
TerminateThread
QueryPerformanceFrequency
lstrcmpiW
TlsSetValue
SetEndOfFile
GetEnvironmentVariableW
WideCharToMultiByte
GetStartupInfoA
LoadLibraryExW
InterlockedDecrement
GetModuleFileNameA
LocalFileTimeToFileTime
RemoveDirectoryW
DeviceIoControl
GetConsoleCP
VirtualAlloc
HeapAlloc

user32

GetKeyboardState
TranslateMessage
KillTimer
CountClipboardFormats
OpenDesktopW
IsWindowEnabled
SetCursor
GetSystemMetrics
GetMenuStringW
SetKeyboardState
GetDlgCtrlID
GetMonitorInfoW
GetCursorPos
SendDlgItemMessageW
GetWindowDC
GetCaretPos
SendMessageW
GetSubMenu
GetForegroundWindow
MessageBeep
GetProcessWindowStation
InsertMenuItemW
BeginPaint
GetWindowLongW
PostMessageW
IsIconic
FlashWindow
DialogBoxParamW
IsCharLowerW
TranslateAcceleratorW
WindowFromPoint
SetActiveWindow
GetDesktopWindow
GetWindowTextLengthW
InvalidateRect
GetUserObjectSecurity
CreatePopupMenu
OpenWindowStationW
VkKeyScanW
DefWindowProcW
GetClassLongW
GetMenuItemID
SetForegroundWindow
DeleteMenu
SetFocus
LoadIconW
SetWindowLongW
OpenClipboard
CopyImage
FindWindowExW
LoadImageW
IsZoomed
SendInput
GetParent
GetCursorInfo
PeekMessageW
SetUserObjectSecurity
EnableWindow
GetClipboardData
ClientToScreen
mouse_event
IsClipboardFormatAvailable
TrackPopupMenuEx
PostQuitMessage
IsMenu
SetMenuDefaultItem
CloseWindowStation
SetWindowPos
DrawFrameControl
DispatchMessageW
DestroyAcceleratorTable
CheckMenuRadioItem
GetDC
SetClipboardData
CloseDesktop
MapVirtualKeyW
CharNextW
CreateAcceleratorTableW
UnregisterHotKey
FrameRect
SetWindowTextW
keybd_event
SetMenu
GetClientRect
CreateWindowExW
SetProcessWindowStation
MoveWindow
CharUpperBuffW
CreateMenu
CopyRect
GetKeyboardLayoutNameW
GetMenu
DrawFocusRect
DrawTextW
EnumThreadWindows
GetWindowThreadProcessId
GetDlgItem
DestroyWindow
GetWindowTextW
PtInRect
RegisterClassExW
GetWindowRect
DefDlgProcW
ShowWindow
ReleaseDC
CreateIconFromResourceEx
SystemParametersInfoW
FillRect
SetCapture
GetActiveWindow
SetLayeredWindowAttributes
SendMessageTimeoutW
ReleaseCapture
SetMenuItemInfoW
GetSysColor
FindWindowW
GetFocus
LockWindowUpdate
MonitorFromRect
RegisterHotKey
GetMenuItemCount
IsCharAlphaNumericW
IsDialogMessageW
EndPaint
RedrawWindow
CharLowerBuffW
GetMessageW
ExitWindowsEx
DestroyIcon
IsCharAlphaW
EndDialog
EnumWindows
GetKeyState
MessageBoxW
AdjustWindowRectEx
GetClassNameW
ScreenToClient
DrawMenuBar
GetMenuItemInfoW
DestroyMenu
MonitorFromPoint
IsWindowVisible
IsCharUpperW
SetTimer
LoadStringW
InflateRect
EnumChildWindows
CloseClipboard
SetRect
BlockInput
AttachThreadInput
MessageBoxA
RegisterWindowMessageW
IsWindow
IsDlgButtonChecked
wsprintfW
EmptyClipboard
LoadCursorW
GetAsyncKeyState

gdi32

Ellipse
MoveToEx
SetTextColor
SetBkMode
StrokeAndFillPath
DeleteDC
SetViewportOrgEx
StrokePath
GetTextExtentPoint32W
StretchBlt
SelectObject
DeleteObject
BeginPath
CreateFontW
CreateCompatibleBitmap
Rectangle
RoundRect
GetPixel
CreateSolidBrush
GetDIBits
GetTextFaceW
CreateDCW
EndPath
CreatePen
CloseFigure
PolyDraw
CreateCompatibleDC
GetStockObject
SetPixel
LineTo
SetBkColor
GetObjectW
GetDeviceCaps
ExtCreatePen
AngleArc

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegEnumKeyExW
DuplicateTokenEx
LockServiceDatabase
RegEnumValueW
RegCreateKeyExW
AddAce
OpenSCManagerW
LookupPrivilegeValueW
InitializeSecurityDescriptor
RegDeleteValueW
OpenProcessToken
CloseServiceHandle
RegQueryValueExW
OpenThreadToken
GetSecurityDescriptorDacl
CreateProcessWithLogonW
InitializeAcl
UnlockServiceDatabase
AdjustTokenPrivileges
GetLengthSid
InitiateSystemShutdownExW
RegCloseKey
RegOpenKeyExW
GetTokenInformation
SetSecurityDescriptorDacl
RegConnectRegistryW
GetAce
LogonUserW
CreateProcessAsUserW
RegDeleteKeyW
CopySid
GetUserNameW
GetAclInformation
RegSetValueExW

shell32

SHEmptyRecycleBinW
SHGetFolderPathW
SHGetSpecialFolderLocation
Shell_NotifyIconW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetMalloc
SHGetPathFromIDListW
DragQueryPoint
DragQueryFileW
ExtractIconExW
ShellExecuteW
SHFileOperationW
ShellExecuteExW
DragFinish

ole32

CoTaskMemAlloc
OleSetContainedObject
OleUninitialize
IIDFromString
CoCreateInstanceEx
OleInitialize
OleSetMenuDescriptor
CoSetProxyBlanket
CreateBindCtx
CLSIDFromString
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoInitializeSecurity
CreateStreamOnHGlobal
MkParseDisplayName
CLSIDFromProgID
StringFromCLSID
CoInitialize
StringFromIID

oleaut32

VariantInit
SysAllocString
OleLoadPicture
LoadRegTypeLi
VariantClear
VariantTimeToSystemTime
SafeArrayAllocData
OACreateTypeLib2
SafeArrayUnaccessData
VariantCopy
SafeArrayAllocDescriptorEx
GetActiveObject
VarR8FromDec
SafeArrayDestroyDescriptor
SafeArrayGetVartype
SafeArrayAccessData

comctl32

InitCommonControlsEx
ImageList_DragEnter
ImageList_DragMove
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Create
ImageList_Remove
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_SetDragCursorImage
ImageList_DragLeave

shlwapi

SHQueryInfoKeyA

winmm

timeGetTime
mciSendStringW
waveOutSetVolume

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

wininet

InternetQueryDataAvailable
InternetCloseHandle
HttpQueryInfoW
InternetSetOptionW
FtpOpenFileW
HttpOpenRequestW
InternetReadFile
InternetConnectW
HttpSendRequestW
InternetOpenUrlW
InternetOpenW
InternetCrackUrlW
InternetQueryOptionW
FtpGetFileSize

wsock32

accept
gethostbyname
recv
setsockopt
ntohs
select
send
connect
WSAGetLastError
gethostname
listen
inet_addr
WSAStartup
WSACleanup
__WSAFDIsSet
closesocket
htons
socket
sendto
bind
recvfrom
ioctlsocket

mpr

WNetCancelConnection2W
WNetGetConnectionW
WNetAddConnection2W
WNetUseConnectionW

psapi

EnumProcessModules
GetModuleBaseNameW
GetProcessMemoryInfo
EnumProcesses

userenv

UnloadUserProfile
DestroyEnvironmentBlock
LoadUserProfileW
CreateEnvironmentBlock

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kyup
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ryuw
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kyupl
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kuyul
Size: 499KB - Virtual size: 499KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e62b875ff8a78c39611064201209a8e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

version

wininet

wsock32

mpr

psapi

userenv

Sections

.text Size: 30KB - Virtual size: 30KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 512B - Virtual size: 180KB

.kyup Size: 303KB - Virtual size: 303KB

.ryuw Size: 12KB - Virtual size: 11KB

.kyupl Size: 512B - Virtual size: 410B

.kuyul Size: 499KB - Virtual size: 499KB

.rsrc Size: 1024B - Virtual size: 640B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 30KB - Virtual size: 30KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 512B - Virtual size: 180KB

.kyup
Size: 303KB - Virtual size: 303KB

.ryuw
Size: 12KB - Virtual size: 11KB

.kyupl
Size: 512B - Virtual size: 410B

.kuyul
Size: 499KB - Virtual size: 499KB

.rsrc
Size: 1024B - Virtual size: 640B

.reloc
Size: 5KB - Virtual size: 4KB