bb166c4f26a70afd7712bb158e68a07d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

bb166c4f26a70afd7712bb158e68a07d_JaffaCakes118
Size

270KB
MD5

bb166c4f26a70afd7712bb158e68a07d
SHA1

9cffe32d6951f98c0ec477562ad6934242afdb2e
SHA256

29541ac9413374e63a4590aaab22b4828b9387060bbed5c359d546b4cb8586ae
SHA512

97a394f8c03ee839334981e8264a13b6182f7ff2f95d973589c09b5e0bddfbb8628a10607a73f7befcc584f53f4157de9601447bce2472206336eca890a7c670
SSDEEP

6144:/yyB5hPIYXXVKh8nZsZJCCbmRAWeUxHvp/wNcpF1S7TK8VVIMCLWCBkUWaqsU7:/9GQtnBCAAWnlBvojQiaqN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb166c4f26a70afd7712bb158e68a07d_JaffaCakes118

Files

bb166c4f26a70afd7712bb158e68a07d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ee7dad6a73631a5058de19bbf2ffbee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcStringFreeW
UuidCreate
NdrConformantArrayMarshall
RpcRaiseException
NdrClientInitializeNew
NdrConformantArrayBufferSize
NdrFreeBuffer
RpcBindingFree
NdrConformantStringBufferSize
NdrConformantArrayUnmarshall
NdrSendReceive
NdrConvert
NdrConformantStringMarshall
RpcBindingServerFromClient
RpcBindingToStringBindingW
RpcStringBindingParseW
I_RpcGetBuffer
NdrAllocate
NdrServerInitializeNew
NdrConformantStringUnmarshall
NdrPointerFree
NdrGetBuffer

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

FindResourceW
FindResourceA
GetTempPathA
TlsAlloc
GetTempFileNameA
GetUserDefaultLCID
TlsSetValue
TlsGetValue
WideCharToMultiByte
SetProcessWorkingSetSize
FreeLibrary
LoadResource
GetSystemDirectoryA
LocalFree
OpenEventW
LCMapStringW
GetThreadLocale
DeleteCriticalSection
CreateEventW
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
GlobalLock
GlobalUnlock
FileTimeToSystemTime
GetTimeFormatW
GetDateFormatW
LeaveCriticalSection
EnterCriticalSection
CreateThread
CloseHandle
GetACP
DeleteFileW
GetTempFileNameW
GetTempPathW
GetPrivateProfileStringW
LoadLibraryExW
GetShortPathNameW
FindFirstFileW
FindNextFileW
FindClose
RaiseException
ExpandEnvironmentStringsA
SetLastError
Process32NextW
Process32FirstW
LocalUnlock
CreateFileMappingA
FlushViewOfFile
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
GetLocalTime
SystemTimeToFileTime
GlobalAlloc
SetThreadLocale
GetCurrencyFormatW
ExitThread
CreateEventA
GetSystemDirectoryW
GetWindowsDirectoryW
WaitForMultipleObjects
TerminateThread
CreateFileW
DeviceIoControl
CreateToolhelp32Snapshot
CreateProcessW
GetExitCodeThread
GetModuleHandleW
OutputDebugStringW
WaitNamedPipeW
WriteFile
ExpandEnvironmentStringsW
OpenProcess
HeapFree
GetProcessHeap
HeapAlloc
GetNumberFormatW
GetCurrentThreadId
GetUserDefaultLangID
CreateIoCompletionPort
CreateNamedPipeW
ConnectNamedPipe
GetQueuedCompletionStatus
ReadFile
DisconnectNamedPipe
FlushFileBuffers
SizeofResource
LockResource
GetFileSize
CreateMutexW
SetFilePointer
CopyFileW
ReleaseMutex
GetDiskFreeSpaceExW
lstrcmpiW
CreateDirectoryW
lstrcmpW
LocalAlloc
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
MulDiv
IsValidLocale
VirtualAllocEx

user32

ValidateRect
DrawTextExW
GrayStringW
SetWindowLongW
MapVirtualKeyW
keybd_event
SetScrollInfo
SetWindowRgn
IsClipboardFormatAvailable
EnumClipboardFormats
EndDeferWindowPos
BeginDeferWindowPos
ScrollWindowEx
SystemParametersInfoA
RegisterClipboardFormatW
CountClipboardFormats
MessageBeep
CharUpperBuffW
CharLowerBuffW
WindowFromPoint
SendMessageA
GetDoubleClickTime
DeferWindowPos
ScrollDC
GetCapture
InflateRect
OffsetRect
GetAsyncKeyState
SendMessageTimeoutA
GetScrollInfo
GetWindowLongA
PeekMessageA
ReleaseDC
IsWindowUnicode
GetActiveWindow
CreateWindowExA
IsChild
AdjustWindowRectEx
DrawFrameControl
CreateIconFromResourceEx
GetIconInfo
DefWindowProcA
InvertRect
SetWindowsHookExA
GetSysColor
DispatchMessageA
DrawTextA
DrawFocusRect
DrawEdge
GetSysColorBrush
UnhookWindowsHookEx
ReleaseCapture
MapWindowPoints
LoadCursorA
LoadCursorFromFileA
RegisterClassExA
RegisterWindowMessageA
RegisterClassW
GetClassLongA
MoveWindow
PostMessageA
GetDesktopWindow
RegisterClassA
GetCaretBlinkTime
ClientToScreen
GetMessageA
SetCapture
TabbedTextOutW
GetFocus
CreateCursor
CallWindowProcW
CallNextHookEx
SetWindowLongA
IsWindowEnabled
SetParent
InsertMenuW
DeleteMenu
SendMessageW
InvalidateRect
GetCursorPos
SetCursor
LoadCursorW
UpdateWindow
RedrawWindow
EnableWindow
GetWindowRect
LoadIconW
GetDC
GetSystemMetrics
GetClientRect
GetScrollPos
SetScrollPos
SetScrollRange
GetParent
IsWindow
PostMessageW
CopyRect
LoadStringW
NotifyWinEvent
SetForegroundWindow
IsWindowVisible
DestroyWindow
SystemParametersInfoW
KillTimer
SetTimer
SetFocus
FindWindowW
GetWindowLongW
GetWindowTextLengthW
GetWindowTextW
DefWindowProcW
GetWindow
GetDlgCtrlID
DrawTextW
LoadBitmapW
LoadImageW
DestroyIcon
OpenClipboard
GetClipboardData
CloseClipboard
ScreenToClient
DrawIconEx
wsprintfW
CreateDesktopW
OpenDesktopW
CloseDesktop
SetClipboardData
SwitchDesktop
SetThreadDesktop
RegisterClassExW
CreateWindowExW
SetWindowPos
SendNotifyMessageW
RegisterWindowMessageW
GetMessageW
TranslateMessage
DispatchMessageW
MessageBoxW
BeginPaint
FillRect
EndPaint
GetClassNameW
EmptyClipboard
GetWindowThreadProcessId
MonitorFromWindow
GetMonitorInfoW
GetWindowDC
ShowWindow
GetWindowPlacement
GetKeyState
IsIconic
DrawIcon
PtInRect
CopyIcon
LoadMenuW
GetSubMenu
SetMenuDefaultItem
TrackPopupMenu
GetMenuItemID
GetMenuItemCount
ModifyMenuW
EnableMenuItem
CheckMenuItem

gdi32

GetTextMetricsA
SetWindowOrgEx
SetLayout
SetViewportOrgEx
LPtoDP
SetWindowExtEx
GetWindowExtEx
SetTextColor
SetBkColor
ExcludeClipRect
CreateRectRgnIndirect
DPtoLP
CombineRgn
SetMapMode
GetMapMode
SaveDC
GetClipBox
SetViewportExtEx
GetViewportExtEx
GetObjectA
RestoreDC
DeleteObject
GetTextExtentPointW
DeleteDC
BitBlt
CreateCompatibleBitmap
CreateSolidBrush
GetStockObject
SetPixel
StretchBlt
CreatePen
GetTextExtentPoint32W
GetObjectW
CreateCompatibleDC
SetTextAlign
GetTextAlign
SelectObject
GetDeviceCaps
TextOutA
TextOutW
GetPixel
IntersectClipRect
RectVisible
CreatePatternBrush
StretchDIBits
GetTextExtentExPointW
Rectangle
SetBkMode
CreateBitmap
SetBrushOrgEx
CreateHatchBrush
GetTextExtentPoint32A
PatBlt
GetWindowOrgEx
EnumFontFamiliesExW
AddFontMemResourceEx
EnumFontFamiliesExA
CreateFontA
SetStretchBltMode
GetDIBits
CreateDIBSection
CreateDIBPatternBrushPt
GetCurrentObject
CreateRoundRectRgn
CreateFontIndirectW
Escape
ExtTextOutW
PtVisible
ExtCreatePen
GetCurrentPositionEx
Polygon

comdlg32

GetOpenFileNameW

advapi32

RegQueryValueExW
RegQueryValueExA
RegEnumKeyExW
EqualSid
FreeSid
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetTokenInformation
OpenProcessToken
OpenThreadToken
RegEnumValueW
RegCloseKey
RegOpenKeyExW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegOpenKeyW
IsTextUnicode
RegOpenKeyExA

shell32

SHBrowseForFolderW
ShellExecuteW
SHGetDesktopFolder
Shell_NotifyIconW
SHGetPathFromIDListW
SHGetFileInfoW
SHGetMalloc
ShellExecuteExW
SHGetSpecialFolderLocation

comctl32

ord17
ImageList_Draw
ImageList_GetImageInfo
ImageList_DrawEx
ImageList_GetIconSize

shlwapi

ColorHLSToRGB
ColorRGBToHLS
PathIsDirectoryW
PathFileExistsW
PathCompactPathW

ole32

CoCreateInstance
StringFromCLSID
CoTaskMemFree
CoCreateGuid
CLSIDFromString

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
SysFreeString
SysAllocStringLen

winmm

PlaySoundA
timeGetDevCaps
timeKillEvent
timeSetEvent
timeGetTime

ws2_32

WSAStartup
inet_ntoa
inet_addr
getservbyname
htons
WSASetLastError
WSAGetLastError
gethostbyaddr
ntohs
getservbyport
gethostbyname
htonl
WSACleanup

psapi

GetModuleFileNameExW
EnumProcessModules

wininet

InternetQueryOptionA
InternetCanonicalizeUrlW
HttpQueryInfoA
InternetConnectA
InternetGetLastResponseInfoA
InternetReadFile
InternetSetOptionA
InternetCombineUrlA
HttpOpenRequestA
HttpSendRequestA
InternetOpenA
InternetCloseHandle

msimg32

GradientFill

urlmon

FindMimeFromData

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

esent

JetCreateInstance

kbdda

KbdLayerDescriptor

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xgiYj
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Bk
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.SYK
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.X
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.emIB
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 213KB - Virtual size: 470KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.f
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ee7dad6a73631a5058de19bbf2ffbee

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

winmm

ws2_32

psapi

wininet

msimg32

urlmon

oleacc

esent

kbdda

Sections

.text Size: 17KB - Virtual size: 17KB

.xgiYj Size: 2KB - Virtual size: 2KB

.Bk Size: 1024B - Virtual size: 1KB

.rdata Size: 12KB - Virtual size: 12KB

.SYK Size: 1KB - Virtual size: 1KB

.X Size: 2KB - Virtual size: 2KB

.emIB Size: 1024B - Virtual size: 944B

.data Size: 213KB - Virtual size: 470KB

.f Size: 2KB - Virtual size: 2KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 17KB - Virtual size: 17KB

.xgiYj
Size: 2KB - Virtual size: 2KB

.Bk
Size: 1024B - Virtual size: 1KB

.rdata
Size: 12KB - Virtual size: 12KB

.SYK
Size: 1KB - Virtual size: 1KB

.X
Size: 2KB - Virtual size: 2KB

.emIB
Size: 1024B - Virtual size: 944B

.data
Size: 213KB - Virtual size: 470KB

.f
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 17KB - Virtual size: 16KB