c1d2ed904489a571fce7a10ff8f253a6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c1d2ed904489a571fce7a10ff8f253a6_JaffaCakes118
Size

538KB
MD5

c1d2ed904489a571fce7a10ff8f253a6
SHA1

ea64247d979cdbbaf609ca2f5073a9169ddd65ca
SHA256

6ffd187d7004f9a560e3beb16405c5e53bb5154b350d373e9b2c03f6efa39cbb
SHA512

a2158dd88d308c4d2f943d80e1c8eee1aa22c1a942addec7552cf044a7b58b9221fbd598e69a55e0da1dbafb56853ba56983efdb197cd1e3d0460e2ae099cc01
SSDEEP

12288:2MMnMMMMMRBsleWWIJ29xu8U2irCZZhlw157zi8:2MMnMMMMM8WIIxnU4ZZrw5C8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1d2ed904489a571fce7a10ff8f253a6_JaffaCakes118

Files

c1d2ed904489a571fce7a10ff8f253a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c2ab86e9bd56ca5e2aa05fa9377d9aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

GetProcessImageFileNameW

advapi32

RegQueryInfoKeyW
RegEnumKeyW
RegOpenKeyExW
RegQueryValueW
IsTextUnicode
CryptHashData
CreateProcessAsUserW
RegOpenKeyW
ImpersonateSelf
CryptAcquireContextW
TraceEvent
OpenThreadToken
ConvertStringSidToSidW
TraceMessage
RegDeleteKeyA
UnregisterTraceGuids
GetTraceEnableFlags
RegCloseKey
RegSetValueExA
RegDeleteKeyW
GetLengthSid
ConvertSidToStringSidW
SetThreadToken
GetTokenInformation
GetUserNameW
RegEnumKeyExW
RegDeleteValueA
RegCreateKeyExA
RegOpenCurrentUser
CryptReleaseContext
RegEnumValueA
RegCreateKeyA
RegSetValueExW
DuplicateTokenEx
RegOpenKeyExA
CryptGetHashParam
RegDeleteValueW
RegCreateKeyExW
RegEnumValueW
RegQueryValueExA
CryptCreateHash
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueExW
CryptDestroyHash
RegisterTraceGuidsW
SetTokenInformation
GetTraceEnableLevel
OpenProcessToken
GetTraceLoggerHandle

rtutils

TraceDumpExA

shell32

SHGetPathFromIDListA
SHFileOperationW
ExtractIconExW
ShellExecuteExW
SHGetFolderPathW
SHSetLocalizedName
SHGetFileInfoW
SHGetFolderPathAndSubDirW
SHBrowseForFolderW
Shell_NotifyIconA
SHGetInstanceExplorer
SHGetDataFromIDListW
SHCreateShellItem
ShellExecuteA
SHChangeNotify
SHGetFolderLocation
ExtractIconW
ShellAboutW
SHAppBarMessage
ShellExecuteW
SHPathPrepareForWriteW
Shell_NotifyIconW
SHGetSpecialFolderPathW
SHGetDesktopFolder
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ExtractAssociatedIconExW
DragQueryFileW
SHBindToParent

gdi32

CreateFontW
CreateDCW
CreateRectRgn
OffsetWindowOrgEx
SetBkColor
LPtoDP
GetDCOrgEx
SetBkMode
GetPixel
GetTextExtentExPointI
TextOutW
PatBlt
SetDCPenColor
DeleteDC
SetWindowExtEx
CreatePen
MoveToEx
SetWindowOrgEx
GetObjectA
GetBkMode
StretchBlt
SetTextColor
DeleteEnhMetaFile
CreateCompatibleBitmap
GetRgnBox
CreateDCA
ExtCreateRegion
SaveDC
CreateEnhMetaFileA
CreateBitmap
GetTextExtentPoint32W
GetTextMetricsW
SelectPalette
EqualRgn
GetBrushOrgEx
GetTextExtentPoint32A
SetRectRgn
BitBlt
TextOutA
DeleteObject
GetBkColor
CreateCompatibleDC
LineTo
GetGlyphIndicesW
CloseEnhMetaFile
SelectObject
ExtTextOutW
StretchDIBits
SetBrushOrgEx
CreateDIBSection
CreateHalftonePalette
GetSystemPaletteEntries
GetDeviceCaps
CreateFontIndirectA
SetPaletteEntries
RestoreDC
SetLayout
CreatePatternBrush
RectVisible
GetStockObject
CreatePolygonRgn
GetTextAlign
GetPaletteEntries
SetTextAlign
CombineRgn
CreateFontIndirectW
SetViewportExtEx
SetMapMode
CreateSolidBrush
CloseMetaFile
SetStretchBltMode
CreateRectRgnIndirect
OffsetRgn
SetViewportOrgEx
GetClipBox
CreateMetaFileW
GetTextExtentPointW
GetLayout
GetRegionData
Rectangle
IntersectClipRect
GetTextColor
CreateDIBPatternBrushPt
CreatePalette
GetDIBits
PlayEnhMetaFile
GetObjectW
RealizePalette
GetTextCharset

ddraw

DirectDrawCreate

ntdll

NtQueryTimerResolution
NtQuerySemaphore
RtlAddAccessAllowedObjectAce
RtlAdjustPrivilege

user32

KillTimer
LoadStringA
DialogBoxParamA
GetWindowPlacement
GetMenuItemCount
GetWindowLongW
GetCapture
EnableMenuItem
MessageBeep
DdeFreeStringHandle
GetClientRect
SetTimer
MessageBoxIndirectW
IsIconic
ChildWindowFromPoint
IntersectRect
WaitForInputIdle
SystemParametersInfoA
SetClipboardData
SetDlgItemInt
RemovePropW
PeekMessageA
GetMessageW
CallMsgFilterW
GetClipboardData
InvalidateRect
DefWindowProcW
SetWindowLongW
CallNextHookEx
CreateWindowExW
DrawEdge
DeleteMenu
GetSysColorBrush
GetForegroundWindow
IsMenu
DrawFocusRect
SetCursor
DestroyIcon
GetMenuStringW
GetWindow
SendDlgItemMessageW
DrawIconEx
MapWindowPoints
EqualRect
DialogBoxParamW
GetAsyncKeyState
GetComboBoxInfo
UpdateLayeredWindow
CopyRect
SetClipboardViewer
DdeDisconnect
GetMessagePos
WinHelpW
SetWindowPlacement
UpdateWindow
DdeNameService
GetWindowDC
LoadBitmapW
MonitorFromPoint
SendMessageA
EnableWindow
PostMessageW
CopyImage
RemoveMenu
GetShellWindow
SetMenuItemInfoW
BeginPaint
GetSystemMenu
CharPrevW
GetMonitorInfoW
GetMessageTime
LockSetForegroundWindow
MessageBoxW
DdeCreateStringHandleW
ReleaseDC
RedrawWindow
CharPrevA
EndPaint
DialogBoxIndirectParamW
SetWindowRgn
MsgWaitForMultipleObjectsEx
CharUpperW
PostQuitMessage
EnumWindows
LoadIconW
GetAncestor
GetClipboardFormatNameW
EndDeferWindowPos
IsDlgButtonChecked
AdjustWindowRect
CreateIconIndirect
LoadImageW
TrackPopupMenuEx
SetMenu
TranslateAcceleratorW
CallWindowProcW
GetMessageA
CharNextA
GetWindowLongA
MapVirtualKeyW
SetScrollPos
GetDC
CreatePopupMenu
IsCharAlphaNumericW
SetPropA
DestroyAcceleratorTable
LoadAcceleratorsW
DeferWindowPos
DdeQueryStringW
GetKeyboardLayout
GetDlgItemTextW
GetCursorPos
GetParent
InflateRect
ShowOwnedPopups
WaitMessage
GetDialogBaseUnits
HideCaret
GetMenuItemInfoA
GetWindowTextW
CloseClipboard
GetWindowTextLengthW
GetFocus
DdeFreeDataHandle
GetClassNameW
AdjustWindowRectEx
MsgWaitForMultipleObjects
RegisterClassExW
GetScrollInfo
LoadCursorW
GetClassInfoW
CopyIcon
GetWindowThreadProcessId
MonitorFromRect
GetClassLongW
DdeConnect
LoadMenuW
RegisterWindowMessageW
SendMessageTimeoutW
EnumChildWindows
IsWindowUnicode
BeginDeferWindowPos
IsRectEmpty
GetDlgCtrlID
MessageBoxExA
UnionRect
DrawTextExW
FindWindowExW
CharLowerBuffW
GetNextDlgTabItem
GetLastActivePopup
CharLowerW
SetWindowTextW
GetTopWindow
GetMenuItemInfoW
GetWindowInfo
GetMenuItemID
DispatchMessageA
CheckMenuRadioItem
PeekMessageW
ShowWindow
EndDialog
IsDialogMessageW
UnhookWindowsHookEx
PostMessageA
FillRect
SendMessageTimeoutA
GetSubMenu
SetMenuItemBitmaps
UnregisterClassW
SetDlgItemTextW
MoveWindow
GetClassInfoExW
ShowScrollBar
AllowSetForegroundWindow
GetPropW
SetMenuDefaultItem
FindWindowA
SetWindowPos
SetScrollInfo
DialogBoxIndirectParamA
RegisterClassW
DefWindowProcA
OpenClipboard
GetWindowRgnBox
ReleaseCapture
CheckRadioButton
CharNextW
ChangeClipboardChain
GetDoubleClickTime
SetRectEmpty
wsprintfW
SetCursorPos
AnimateWindow
RemovePropA
SetPropW
SetFocus
MessageBoxExW
OffsetRect
EnumThreadWindows
ScreenToClient
CreateMenu
DispatchMessageW
CheckDlgButton
CheckMenuItem
CreateDialogParamW
SetForegroundWindow
IsWindow
DdeClientTransaction
DdeInitializeW
DdeCreateDataHandle
GetCursor
LoadStringW
SystemParametersInfoW
IsHungAppWindow
VkKeyScanExW
EnumDesktopWindows
PostThreadMessageW
DrawTextW
SetWindowsHookExW
LoadCursorA
RegisterClipboardFormatA
GetKeyNameTextW
SetCapture
GetSystemMetrics
EmptyClipboard
RegisterWindowMessageA
GetDesktopWindow
SendMessageW
SetWindowLongA
GetProcessWindowStation
SetActiveWindow
EnumDisplaySettingsW
GetMenuState
PtInRect
IsChild
TrackPopupMenu
GetWindowRect
SetRect
DestroyMenu
GetDlgItem
GetActiveWindow
SetParent
WindowFromPoint
InsertMenuW
MonitorFromWindow
TranslateMessage
GetPropA
DdeGetData
ShowCaret
PostThreadMessageA
GetSysColor
DrawFrameControl
RegisterClipboardFormatW
MessageBoxIndirectA
GetClassWord
GetLastInputInfo
EndMenu
DestroyWindow
MapDialogRect
GetKeyState
IsWindowEnabled
GetIconInfo
IsWindowVisible
NotifyWinEvent
AppendMenuW
InsertMenuItemW
GetMenuDefaultItem
TrackMouseEvent
FindWindowW
DdeUninitialize
AttachThreadInput
ClientToScreen
SendNotifyMessageW

uxtheme

GetThemeFont
GetThemeBackgroundContentRect
SetWindowTheme
DrawThemeParentBackground
DrawThemeBackground
GetThemeBackgroundExtent
GetThemeMetric
CloseThemeData
OpenThemeData
GetThemePartSize
IsAppThemed
IsThemeActive
GetThemeMargins
GetThemeColor
GetThemeAppProperties

kernel32

VirtualAlloc

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 488KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8c2ab86e9bd56ca5e2aa05fa9377d9aa

Headers

File Characteristics

Imports

psapi

advapi32

rtutils

shell32

gdi32

ddraw

ntdll

user32

uxtheme

kernel32

Sections

.text Size: 6KB - Virtual size: 5KB

.rsrc Size: 488KB - Virtual size: 488KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 25KB - Virtual size: 2.0MB

.idata Size: 12KB - Virtual size: 12KB

.text
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 488KB - Virtual size: 488KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 25KB - Virtual size: 2.0MB

.idata
Size: 12KB - Virtual size: 12KB