cefe781427ed418c20fbcd96839b9168_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

cefe781427ed418c20fbcd96839b9168_JaffaCakes118
Size

344KB
MD5

cefe781427ed418c20fbcd96839b9168
SHA1

279ec5dbd83c0f82707bf5fa32726f9176dbc98e
SHA256

ecb7bce06f6880d385f3e1d31eb296f244f5fe30dff6590d3f58dd5e45fba20c
SHA512

859e1b641c525b478d6717dd7c323cba135cb36288629b1011f4e28905bffc62b83e7051ad5fbc5d4d6407b98e2b5f8d84eaba806cc820523350f31132b42f1f
SSDEEP

6144:qL58Lgze2XMxVcjRYW7H7HCCrnryPHNjRsJzdnxsdsbVS/5jpU:qLyczePxqh7e4uPtjeJBny6c1pU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cefe781427ed418c20fbcd96839b9168_JaffaCakes118

Files

cefe781427ed418c20fbcd96839b9168_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e82991d88e8dfd0c577417dafe8b5b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumKeyW
RegEnumValueW
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
RegSetValueExW

kernel32

GetVolumeNameForVolumeMountPointW
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalSize
GlobalUnlock
HeapAlloc
HeapDestroy
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
IsBadWritePtr
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LockResource
MapViewOfFile
MapViewOfFileEx
MoveFileW
MulDiv
MultiByteToWideChar
OpenFileMappingA
OutputDebugStringW
PostQueuedCompletionStatus
QueryPerformanceCounter
ReadDirectoryChangesW
ReadFile
ReleaseMutex
RemoveDirectoryW
GetVolumeInformationW
SetEndOfFile
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesW
ExpandEnvironmentStringsW
SetFilePointerEx
SetLastError
SetThreadExecutionState
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SleepEx
SystemTimeToTzSpecificLocalTime
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WinExec
WriteFile
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynA
lstrcpynW
lstrlenA
lstrlenW
GetVersionExW
GetVersion
GetUserDefaultUILanguage
GetUserDefaultLCID
GetTimeFormatW
GetTickCount
GetThreadLocale
GetTempPathW
GetTempFileNameW
GetSystemTimeAsFileTime
GetStartupInfoA
GetShortPathNameW
GetQueuedCompletionStatus
GetProfileIntW
GetProcessHeap
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileIntW
GetOverlappedResult
GetNumberFormatW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLongPathNameW
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileSizeEx
GetFileSize
GetFileAttributesW
GetFileAttributesExW
GetExitCodeThread
GetDriveTypeW
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCommandLineW
GetACP
FreeResource
FreeLibrary
FormatMessageW
FlushInstructionCache
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
ResetEvent
FileTimeToSystemTime
CloseHandle
CompareFileTime
CompareStringW
CopyFileW
CreateDirectoryW
CreateEventW
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateIoCompletionPort
CreateMutexW
CreateThread
DebugBreak
DeleteCriticalSection
DeleteFileW
DeviceIoControl
EnterCriticalSection
EnumResourceLanguagesW
EnumUILanguagesW
SetFilePointer

gdi32

StretchBlt
SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetRectRgn
SetROP2
SetMapMode
SetBrushOrgEx
SetBkMode
SetBkColor
SelectObject
SelectClipRgn
SaveDC
RestoreDC
Rectangle
Polygon
PatBlt
MoveToEx
LineTo
LPtoDP
GetTextMetricsW
GetTextExtentPoint32W
GetStockObject
GetObjectW
GetObjectA
GetNearestColor
GetLayout
GetDeviceCaps
GetDIBits
GetCurrentObject
GetClipBox
ExtTextOutW
ExcludeClipRect
DeleteObject
DeleteDC
DPtoLP
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePen
CreatePatternBrush
CreateFontIndirectW
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CombineRgn
BitBlt
TextOutW

user32

GetProcessDefaultLayout
GetScrollInfo
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetWindow
GetWindowDC
GetWindowLongA
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
InflateRect
InsertMenuW
IntersectRect
InvalidateRect
InvalidateRgn
IsChild
IsDialogMessageW
IsDlgButtonChecked
IsIconic
IsMenu
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
KillTimer
LoadAcceleratorsW
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
LoadMenuW
LoadStringA
LoadStringW
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxW
ModifyMenuW
MonitorFromWindow
MoveWindow
MsgWaitForMultipleObjects
NotifyWinEvent
OffsetRect
PeekMessageW
GetParent
PostQuitMessage
PostThreadMessageW
PtInRect
RedrawWindow
RegisterClassExW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
ScreenToClient
ScrollWindowEx
SendMessageA
SendMessageW
SetActiveWindow
SetCapture
SetClassLongW
SetCursor
SetDlgItemInt
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenu
SetMenuDefaultItem
SetMenuItemInfoW
SetProcessDefaultLayout
SetRect
SetRectEmpty
SetScrollInfo
SetScrollPos
SetTimer
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoW
TrackMouseEvent
TrackPopupMenu
TrackPopupMenuEx
TranslateAcceleratorW
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassW
UpdateLayeredWindow
UpdateWindow
WindowFromPoint
wsprintfW
GetNextDlgTabItem
GetMonitorInfoW
GetMessageW
GetMessageTime
GetMessagePos
GetMenuStringW
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyState
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItemInt
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassNameA
GetClassLongW
GetClassInfoExW
GetCapture
GetAsyncKeyState
GetAncestor
GetActiveWindow
FrameRect
FindWindowW
PostMessageW
FindWindowExW
FillRect
EqualRect
EndPaint
EndMenu
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawTextExW
DrawTextA
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DragDetect
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyAcceleratorTable
DeleteMenu
DefWindowProcW
CreateWindowExW
CreatePopupMenu
CreateDialogParamW
CreateDialogIndirectParamW
CreateAcceleratorTableW
CopyRect
CopyImage
CopyIcon
ClipCursor
ClientToScreen
CheckDlgButton
CharUpperW
CharUpperBuffW
CharNextW
CharLowerW
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
AppendMenuW
AdjustWindowRectEx
DialogBoxParamW

comdlg32

GetSaveFileNameW
ChooseColorW
GetOpenFileNameW

shell32

SHPathPrepareForWriteW
DragQueryFileW
SHAddToRecentDocs
SHBrowseForFolderW
SHFileOperationW
SHGetDesktopFolder
SHGetDiskFreeSpaceExW
SHGetFileInfoW
SHGetFolderLocation
SHGetFolderPathW
SHGetMalloc
ShellExecuteW
ShellExecuteExW
ShellAboutW
CommandLineToArgvW
SHGetSpecialFolderPathW
SHGetSettings
SHGetPathFromIDListW

ole32

CoTaskMemAlloc
CoRevokeClassObject
CoResumeClassObjects
CoRegisterClassObject
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoTaskMemFree
CoFreeUnusedLibraries
CoCreateInstance
CoCreateGuid
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CreateOleAdviseHolder
CreateStreamOnHGlobal
DoDragDrop
FreePropVariantArray
GetRunningObjectTable
OleFlushClipboard
OleGetClipboard
OleInitialize
OleIsCurrentClipboard
OleLoadFromStream
OleLockRunning
OleRegEnumVerbs
OleRegGetUserType
OleSaveToStream
OleSetClipboard
OleUninitialize
PropVariantClear
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
StgCreateDocfile
StgCreatePropStg
StgIsStorageFile
StgOpenPropStg
StgOpenStorage
StringFromCLSID
StringFromGUID2
WriteClassStm
CoGetInterfaceAndReleaseStream

oleaut32

VariantClear
VariantCopy
VariantInit
VariantChangeType
SysStringLen
SysStringByteLen
SysFreeString
SysAllocString
SysAllocStringLen
SysAllocStringByteLen
DispCallFunc
LoadRegTypeLi
LoadTypeLi
OleCreateFontIndirect
OleCreatePropertyFrame
RegisterTypeLi
RevokeActiveObject
SafeArrayCopy
SafeArrayCreateVector
SafeArrayDestroy
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayPutElement
VariantChangeTypeEx

comctl32

_TrackMouseEvent
PropertySheetW
InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_Remove
ImageList_LoadImageW
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_GetIcon
ImageList_DrawIndirect
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
ImageList_Add
DestroyPropertySheetPage
CreateStatusWindowW
CreatePropertySheetPageW
ord8

shlwapi

SHAutoComplete
PathStripToRootW
PathSkipRootW
PathRemoveFileSpecW
PathIsURLW
PathIsRelativeW
PathFindNextComponentW
PathFindFileNameW
PathFindExtensionW
PathCompactPathExW
PathAddBackslashW
StrRetToStrW
UrlGetPartW
UrlIsW
PathCanonicalizeW

winmm

waveOutOpen
waveOutGetNumDevs
waveOutClose
timeGetTime
mixerSetControlDetails
mixerOpen
mixerGetNumDevs
mixerGetLineInfoW
mixerGetLineControlsW
mixerGetID
mixerGetDevCapsW
mixerClose
mixerGetControlDetailsW

rpcrt4

UuidToStringW
UuidToStringA
UuidFromStringW
UuidEqual
UuidCreate
RpcStringFreeW
RpcStringFreeA

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

crypt32

CryptUnprotectData
CryptProtectData

wininet

InternetWriteFile
InternetReadFile
FtpCreateDirectoryW
FtpSetCurrentDirectoryW
HttpAddRequestHeadersW
HttpEndRequestW
HttpOpenRequestW
HttpSendRequestExW
HttpSendRequestW
InternetAttemptConnect
InternetAutodial
InternetCheckConnectionW
InternetCloseHandle
InternetConnectW
InternetGetConnectedState
InternetGetLastResponseInfoW
InternetGoOnlineW
InternetOpenUrlW
InternetOpenW

Exports

Exports

av_free
av_log_get_callback
av_log_get_level
av_log_set_callback
av_log_set_level
av_parser_close
av_parser_init
av_parser_parse
avcodec_alloc_context
avcodec_alloc_frame
avcodec_close
avcodec_decode_audio2
avcodec_decode_video
avcodec_default_get_buffer
avcodec_default_reget_buffer
avcodec_default_release_buffer
avcodec_encode_audio
avcodec_encode_video
avcodec_find_decoder
avcodec_find_encoder
avcodec_flush_buffers
avcodec_get_current_idct
avcodec_get_encoder_info
avcodec_h264_decode_init_is_avc
avcodec_h264_search_recovery_point
avcodec_init
avcodec_open
avcodec_register_all
avcodec_thread_free
avcodec_thread_init
dsputil_init
getVersion

Sections

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6e82991d88e8dfd0c577417dafe8b5b4

Headers

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

comdlg32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

rpcrt4

version

crypt32

wininet

Exports

Exports

Sections

.text Size: 232KB - Virtual size: 232KB

.rdata Size: 48KB - Virtual size: 48KB

.data Size: 20KB - Virtual size: 1.7MB

.idata Size: 16KB - Virtual size: 16KB

.rsrc Size: 24KB - Virtual size: 48KB

.text
Size: 232KB - Virtual size: 232KB

.rdata
Size: 48KB - Virtual size: 48KB

.data
Size: 20KB - Virtual size: 1.7MB

.idata
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 24KB - Virtual size: 48KB