bfeac7ff230a30a1ba4716e15049bf18_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bfeac7ff230a30a1ba4716e15049bf18_JaffaCakes118
Size

867KB
MD5

bfeac7ff230a30a1ba4716e15049bf18
SHA1

47b189a20256e88601979adec48b83d294b09684
SHA256

ab5da5867469abbcd688b9e915f3a3ea57d5d721ccb21ed06073ea2441104895
SHA512

2ac89403c6c666174af077de53c7294ceca158a45caa7338a5f58f378ad658e65bb1a1ca6db053f155a9bfc75a432e06364dc9e42f93e3a17a3e376108160151
SSDEEP

24576:EdNoKA6bZAWhstcQkm/fue4A8jRuCdCsQy:EzhZAos9kmunA8jcGB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfeac7ff230a30a1ba4716e15049bf18_JaffaCakes118

Files

bfeac7ff230a30a1ba4716e15049bf18_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d7f30463e4fa93f5c2dc348254b08e96

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
GetUserDefaultUILanguage
LockResource
SearchPathW
LoadLibraryExW
GetTickCount
GetFileTime
lstrlenW
RtlUnwind
WaitForMultipleObjects
WriteConsoleW
FreeResource
CreateNamedPipeW
GlobalUnlock
CompareStringW
TlsGetValue
LocalReAlloc
FormatMessageW
LeaveCriticalSection
VirtualAlloc
WideCharToMultiByte
MultiByteToWideChar
MulDiv
SetEvent
LockFile
HeapSize
GetStdHandle
FreeLibrary
HeapSetInformation
QueryPerformanceCounter
LoadResource
GetEnvironmentStringsW
SetHandleCount
DeleteCriticalSection
CreateThread
GetModuleHandleW
lstrcmpW
GetStringTypeW
GlobalAddAtomW
GetCurrentDirectoryW
GetCPInfo
GetSystemInfo
HeapQueryInformation
GlobalReAlloc
HeapReAlloc
GetSystemDirectoryW
CreateEventW
GlobalHandle
GetNumberFormatW
WaitForSingleObject
GetVolumeInformationW
GetCurrentThread
GetFileAttributesW
GetConsoleMode
CreateFileW
SetEndOfFile
LCMapStringW
FindFirstFileW
GlobalAlloc
SetThreadPriority
OpenEventW
FindClose
IsValidCodePage
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
SetFilePointer
GetFullPathNameW
GetStartupInfoW
HeapCreate
GetTempFileNameW
FileTimeToSystemTime
LocalAlloc
GetSystemTimeAsFileTime
FindResourceW
ExitThread
CloseHandle
FileTimeToLocalFileTime
GetLastError
CreateMutexW
GetFileSize
lstrcmpiW
LocalFree
VirtualQuery
LoadLibraryW
GlobalLock
lstrcpyW
WriteFile
lstrlenA
SetLastError
DisconnectNamedPipe
GlobalDeleteAtom
ReadFile
EnterCriticalSection
GetFileType
InterlockedIncrement
GetModuleFileNameW
TerminateProcess
GlobalFindAtomW
SizeofResource
CopyFileW
RaiseException
GlobalFlags
GlobalGetAtomNameW
GetOEMCP
SetEnvironmentVariableA
FlushFileBuffers
InterlockedDecrement
GetCurrentProcess
ResumeThread
IsDebuggerPresent
GetProfileIntW
TlsAlloc
HeapDestroy
TlsFree
GetACP
GetProcAddress
VirtualProtectEx
GetConsoleCP
GetFileAttributesExW
GlobalSize
GetVersionExW
DuplicateHandle
GlobalFree
FreeEnvironmentStringsW
InterlockedExchange
GetCurrentThreadId
UnlockFile
HeapFree
HeapAlloc
GetProcessHeap
TerminateThread
GetLocaleInfoW
InitializeCriticalSection
SetStdHandle
lstrcmpA
IsProcessorFeaturePresent
GetTimeZoneInformation
Sleep
GetCommandLineW
GetFileSizeEx
FindResourceExW
GetTempPathW
InterlockedCompareExchange
TlsSetValue

user32

RegisterClassW
IsDialogMessageW
GetMenuItemCount
GetWindowLongW
UpdateLayeredWindow
CreatePopupMenu
MapDialogRect
GetMonitorInfoW
CopyAcceleratorTableW
SetCapture
GetWindowRgn
GetAsyncKeyState
TabbedTextOutW
GetKeyState
GetMenuStringW
LoadBitmapW
GetScrollRange
DestroyAcceleratorTable
UnhookWindowsHookEx
IntersectRect
RemoveMenu
WindowFromPoint
GetDlgItem
CreateAcceleratorTableW
RedrawWindow
GetKeyNameTextW
TranslateMessage
DrawMenuBar
SetRectEmpty
GetWindowDC
UnpackDDElParam
DestroyMenu
SetWindowsHookExW
ReleaseDC
KillTimer
BeginDeferWindowPos
CheckDlgButton
EnableMenuItem
GetKeyboardState
GetFocus
GetClientRect
ModifyMenuW
DestroyCursor
GetDesktopWindow
SetLayeredWindowAttributes
GetTopWindow
SendDlgItemMessageW
GrayStringW
FrameRect
InsertMenuW
DrawEdge
IsChild
DefWindowProcW
BringWindowToTop
WaitMessage
GetSystemMenu
ReleaseCapture
EnumDisplayMonitors
PtInRect
GetClassLongW
GetClassNameW
LoadAcceleratorsW
SetRect
SetCursorPos
ScrollWindow
PostThreadMessageW
DestroyIcon
UpdateWindow
IsWindowVisible
EmptyClipboard
EnableScrollBar
GetMenuDefaultItem
CheckMenuItem
SendMessageW
DrawFrameControl
GetPropW
SendDlgItemMessageA
ShowWindow
GetWindowThreadProcessId
LockWindowUpdate
HideCaret
InsertMenuItemW
DefFrameProcW
MessageBeep
SetMenuDefaultItem
CopyRect
MapVirtualKeyW
GetKeyboardLayout
CharUpperW
CharUpperBuffW
GetScrollPos
DefMDIChildProcW
MonitorFromWindow
GetLastActivePopup
GetMessagePos
GetSubMenu
InflateRect
GetSystemMetrics
SetWindowLongW
ReuseDDElParam
IsMenu
PostMessageW
CreateDialogIndirectParamW
IsCharLowerW
OpenClipboard
SetForegroundWindow
TranslateMDISysAccel
DialogBoxParamW
GetCapture
GetWindowTextW
IsRectEmpty
GetClassInfoExW
SetParent
LoadImageW
SubtractRect
MapWindowPoints
CopyIcon
CloseClipboard
GetWindowTextLengthW
UnionRect
GetWindowPlacement
GetDC
EndDeferWindowPos
DestroyWindow
SetWindowPlacement
EqualRect
DrawIconEx
LoadMenuW
SetClassLongW
SetWindowTextW
GetNextDlgTabItem
GetCursorPos
GetDlgCtrlID
SetPropW
GetScrollInfo
IsClipboardFormatAvailable
SetWindowRgn
EnableWindow
DrawTextW
GetMenuCheckMarkDimensions
GetDoubleClickTime
InvertRect
RealChildWindowFromPoint
SetScrollRange
SetCursor
GetMenu
ClientToScreen
DispatchMessageW
GetMenuItemID
AppendMenuW
GetMenuState
InvalidateRect
WinHelpW
OffsetRect
GetNextDlgGroupItem
FillRect
MapVirtualKeyExW
NotifyWinEvent
SetMenuItemBitmaps
DrawTextExW
SetFocus
IsIconic
ToUnicodeEx
EndDialog
ScreenToClient
SetWindowPos
CreateWindowExW
GetMessageTime
TranslateAcceleratorW
IsWindowEnabled
GetSysColorBrush
DeferWindowPos
SetTimer
RegisterClipboardFormatW
EndPaint
DrawIcon
CallWindowProcW
DrawFocusRect
DrawStateW
GetActiveWindow
IsZoomed
LoadCursorW
DeleteMenu
SetScrollPos
ValidateRect
RegisterWindowMessageW
SetActiveWindow
LoadIconW
TrackPopupMenu
SetMenu
CallNextHookEx
CreateMenu
SetScrollInfo
GetMessageW
GetClassInfoW
GetSysColor
PeekMessageW
GetMenuItemInfoW
GetForegroundWindow
MonitorFromPoint
CopyImage
IsWindow
GetIconInfo
BeginPaint
MoveWindow
PostQuitMessage
ShowOwnedPopups
ShowScrollBar
GetWindow
RemovePropW
EnumWindows
SystemParametersInfoW
GetWindowRect
AdjustWindowRectEx
SetClipboardData
GetUpdateRect
MessageBoxW

gdi32

RectVisible
GetWindowExtEx
PatBlt
SelectPalette
CreateSolidBrush
GetClipBox
GetTextCharsetInfo
GetLayout
CreatePalette
GetObjectType
SetViewportOrgEx
SelectClipRgn
SetDIBColorTable
SetPolyFillMode
StretchBlt
Polyline
GetPaletteEntries
GetBoundsRect
SetROP2
EnumFontFamiliesW
SelectObject
GetObjectW
CreateDIBSection
FillRgn
GetDeviceCaps
Polygon
Ellipse
ScaleViewportExtEx
CreateEllipticRgn
SetLayout
GetTextExtentPoint32W
GetBitmapBits
CreateRectRgnIndirect
RestoreDC
DeleteObject
ExcludeClipRect
CreateDCW
SetTextColor
CombineRgn
CreateBitmap
DeleteDC
GetBkColor
ScaleWindowExtEx
CreatePolygonRgn
SetWindowOrgEx
ExtSelectClipRgn
CreatePatternBrush
EnumFontFamiliesExW
BitBlt
CreateRoundRectRgn
CreateHatchBrush
SetPixel
GetWindowOrgEx
SetBkMode
GetTextFaceW
PtVisible
SetBkColor
MoveToEx
CreateDIBitmap
PtInRegion
GetTextMetricsW
GetNearestPaletteIndex
GetSystemPaletteEntries
Rectangle
SetRectRgn
ExtFloodFill
RealizePalette
CreateCompatibleBitmap
GetTextColor
ExtTextOutW
SetPaletteEntries
TextOutW
SetWindowExtEx
CreateCompatibleDC
SaveDC
SetPixelV
SetTextAlign
OffsetViewportOrgEx
SetMapMode
IntersectClipRect
LineTo
CreateRectRgn
CopyMetaFileW
OffsetRgn
Escape
GetViewportOrgEx
GetPixel
GetRgnBox
LPtoDP
GetViewportExtEx
SetViewportExtEx
OffsetWindowOrgEx
CreateFontIndirectW
FrameRgn
CreatePen
DPtoLP

comdlg32

GetOpenFileNameW
GetFileTitleW

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCreateKeyExW
RegOpenKeyExW
OpenThreadToken
GetTokenInformation
RegDeleteKeyW
RegEnumKeyExW
RegSetValueExW
RegCloseKey
SetSecurityDescriptorSacl
InitializeSecurityDescriptor
OpenProcessToken
ConvertSidToStringSidW
RegDeleteValueW
RegQueryValueExW
IsValidSid
GetSecurityDescriptorSacl
SetSecurityDescriptorDacl

shell32

ShellExecuteExW
ShellExecuteW
SHGetDesktopFolder
SHGetFileInfoW
SHGetSpecialFolderLocation
SHAppBarMessage
SHGetPathFromIDListW
DragFinish
SHGetFolderLocation
SHBrowseForFolderW
DragQueryFileW

ole32

CoTaskMemFree
CLSIDFromString
OleCreateMenuDescriptor
RevokeDragDrop
OleDuplicateData
CoLockObjectExternal
CreateStreamOnHGlobal
ReleaseStgMedium
CoUninitialize
CoCreateInstance
CoInitialize
OleDestroyMenuDescriptor
DoDragDrop
IsAccelerator
CoInitializeEx
OleTranslateAccelerator
RegisterDragDrop
CoTaskMemAlloc
OleLockRunning
OleGetClipboard

oleaut32

SysAllocStringByteLen
VariantChangeType
VariantInit
SysFreeString
SysStringLen
VariantClear
VarBstrFromDate
SysStringByteLen
VariantTimeToSystemTime
SysAllocStringLen
SystemTimeToVariantTime
SysAllocString

comctl32

ImageList_GetIconSize

shlwapi

SHDeleteValueW
SHDeleteValueA
PathRemoveFileSpecW
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
SHGetThreadRef
ord345

winmm

PlaySoundW

msimg32

TransparentBlt
AlphaBlend

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

gdiplus

GdipGetImageHeight
GdipGetImagePalette
GdipDisposeImage
GdiplusShutdown
GdipDrawImageI
GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipBitmapLockBits
GdipGetImageWidth
GdipBitmapUnlockBits
GdipCloneImage
GdipFree
GdipSetInterpolationMode
GdipCreateFromHDC
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipGetImagePixelFormat
GdiplusStartup
GdipCreateBitmapFromScan0
GdipGetImagePaletteSize
GdipAlloc
GdipCreateBitmapFromHBITMAP

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

Exports

Exports

MyCopyMemory

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 492KB - Virtual size: 678KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kop
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rew
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.koop
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d7f30463e4fa93f5c2dc348254b08e96

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

msimg32

imm32

gdiplus

oleacc

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 492KB - Virtual size: 678KB

.kop Size: 312KB - Virtual size: 311KB

.rew Size: 8KB - Virtual size: 8KB

.koop Size: 12KB - Virtual size: 11KB

.rsrc Size: 1024B - Virtual size: 712B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 492KB - Virtual size: 678KB

.kop
Size: 312KB - Virtual size: 311KB

.rew
Size: 8KB - Virtual size: 8KB

.koop
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 1024B - Virtual size: 712B

.reloc
Size: 5KB - Virtual size: 4KB