d05405526a2bf70635cd621ca4a3c4f9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d05405526a2bf70635cd621ca4a3c4f9_JaffaCakes118
Size

170KB
MD5

d05405526a2bf70635cd621ca4a3c4f9
SHA1

e69de5152d5a6099160b5bc2f8b4cac7561ba61a
SHA256

7f63612cc2675d72bbc7b82ea3b6ceda6864ce32e811d7ac2031567c6fab6173
SHA512

a0011679c1de0b4dd8d340a8fa1a8baa9a713ce73754091054b0f91604025271813974b69d73b93b777a9a1e32d23b1b42ec56f38120510981f6208029410b99
SSDEEP

3072:Wt/AEbb4tj2D8J7UA6bQZRBuNaR0XIdATAQ6a4fY:WRAkPIUA0Yuk04iNsY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d05405526a2bf70635cd621ca4a3c4f9_JaffaCakes118

Files

d05405526a2bf70635cd621ca4a3c4f9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c848f831b51d0d3136c0b6c822d5dfcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetProcAddress
LoadLibraryA
AllocateUserPhysicalPages
Beep
CloseHandle
CommConfigDialogW
CompareFileTime
CopyFileW
CreateFileMappingA
CreateFileW
CreateMutexW
CreateProcessW
CreateSemaphoreW
DeleteCriticalSection
DeleteFileA
DisconnectNamedPipe
EnterCriticalSection
EnumCalendarInfoA
EnumLanguageGroupLocalesW
ExitProcess
ExitThread
ExpandEnvironmentStringsA
FindClose
FindFirstFileW
FindNextFileW
FindResourceW
FlushConsoleInputBuffer
FormatMessageA
FormatMessageW
FreeLibrary
GetACP
GetCPInfo
GetConsoleCP
GetCurrentProcess
GetCurrentProcessId
lstrcmpiW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
VirtualQuery
UnmapViewOfFile
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateProcess
SuspendThread
SleepEx
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetThreadPriority
SetThreadLocale
SetTapeParameters
SetLastError
SetErrorMode
SetCurrentDirectoryW
RtlUnwind
ResumeThread
ReleaseSemaphore
ReleaseMutex
ReadFile
QueueUserWorkItem
QueueUserAPC
QueryPerformanceFrequency
QueryPerformanceCounter
PeekNamedPipe
OutputDebugStringW
MultiByteToWideChar
MulDiv
MoveFileExW
MapViewOfFile
LockResource
LockFile
LocalFree
LoadResource
LoadLibraryW
LeaveCriticalSection
LCMapStringW
IsValidLocale
IsValidCodePage
IsDebuggerPresent
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
GetModuleHandleA
GlobalMemoryStatus
GlobalGetAtomNameW
GetVersionExW
GetVersionExA
GetVersion
GetUserDefaultLCID
GetTickCount
GetTempPathW
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemTimeAdjustment
GetSystemTime
GetStdHandle
GetModuleFileNameW
GetLogicalDriveStringsW
GetLocaleInfoW
GetFileType
GetFileTime
GetFileSize
GetFileAttributesW
GetEnvironmentVariableW
GetCurrentThreadId
GetCurrentThread

user32

TrackPopupMenu
TranslateAcceleratorW
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassW
UnregisterHotKey
UpdateLayeredWindow
UpdateWindow
ValidateRect
ValidateRgn
VkKeyScanW
WindowFromPoint
keybd_event
wsprintfW
SetFocus
SetDlgItemTextA
SetCursorPos
SetCursor
SetCapture
SetActiveWindow
SendMessageW
SendMessageTimeoutW
SendMessageA
ScrollWindow
ScreenToClient
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterHotKey
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostThreadMessageW
PostQuitMessage
PostMessageW
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MoveWindow
ModifyMenuW
MessageBoxW
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsClipboardFormatAvailable
InvalidateRect
InsertMenuW
InsertMenuItemW
InflateRect
InSendMessageEx
HideCaret
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetWindow
GetUserObjectInformationW
ToUnicodeEx
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollInfo
GetQueueStatus
GetProcessWindowStation
GetParent
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemInfoW
GetMenuItemCount
GetKeyState
GetIconInfo
GetFocus
GetDoubleClickTime
GetDlgItem
GetDialogBaseUnits
GetDesktopWindow
GetDC
GetCursorPos
GetClipboardFormatNameW
GetClientRect
GetClassNameW
GetCapture
GetAsyncKeyState
GetActiveWindow
FlashWindow
FindWindowW
FindWindowExW
FindWindowA
FillRect
EnumDisplaySettingsW
EndPaint
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextW
DrawStateW
DrawMenuBar
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyAcceleratorTable
DeferWindowPos
DefWindowProcW
DdeUninitialize
DdeQueryStringW
DdeQueryNextServer
DdePostAdvise
DdeNameService
DdeInitializeW
DdeGetLastError
DdeGetData
DdeFreeStringHandle
DdeFreeDataHandle
DdeDisconnect
DdeCreateStringHandleW
DdeCreateDataHandle
DdeConnect
DdeClientTransaction
CreateWindowExW
CreatePopupMenu
CreateMenu
CreateIconIndirect
CreateDialogParamW
CreateDialogIndirectParamW
SystemParametersInfoW
ShowWindow
ShowCursor
SetWindowsHookExW
SetWindowTextW
SetWindowRgn
SetWindowPos
SetWindowLongW
SetTimer
SetScrollInfo
SetRectEmpty
SetRect
SetParent
SetMenuItemInfoW
SetMenu
GetUpdateRgn
SetForegroundWindow
LoadIconA
AdjustWindowRectEx
AppendMenuW
BeginDeferWindowPos
BeginPaint
BringWindowToTop
CallNextHookEx
CallWindowProcW
ChangeDisplaySettingsW
CheckMenuItem
CheckMenuRadioItem
ChildWindowFromPoint
ChildWindowFromPointEx
ClientToScreen
CopyRect
CreateAcceleratorTableW
PeekMessageW

gdi32

AbortPath
GdiFlush
CreatePatternBrush
CancelDC
CreateCompatibleDC
GdiGetBatchLimit
EndPage
AbortDoc
BeginPath
DeleteColorSpace
CreateHalftonePalette
CloseMetaFile
DeleteObject
FillPath
DeleteEnhMetaFile
EndDoc
Arc
BitBlt
Chord
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateDCW
CreateDIBSection
CreateDIBitmap
CreateEnhMetaFileW
CreateFontIndirectW
CreateHatchBrush
CreateICW
CreatePalette
CreatePen
CreateRectRgn
CreateRectRgnIndirect
Ellipse
EnumFontFamiliesExW
EqualRgn
ExcludeClipRect
ExtCreatePen
ExtCreateRegion
ExtFloodFill
ExtSelectClipRgn
ExtTextOutW
GetBkColor
GetCharABCWidthsW
GetClipBox
GetColorAdjustment
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetEnhMetaFileHeader
GetEnhMetaFileW
GetNearestPaletteIndex
CreateSolidBrush
GetObjectW
GetOutlineTextMetricsW
GetPaletteEntries
GetPixel
GetRegionData
GetRgnBox
GetStockObject
GetStretchBltMode
GetSystemPaletteEntries
GetTextExtentExPointW
GetTextExtentPoint32W
GetTextMetricsW
LineTo
MaskBlt
MoveToEx
OffsetRgn
Pie
PlayEnhMetaFile
PolyBezier
PolyPolygon
Polygon
Polyline
PtInRegion
RealizePalette
RectInRegion
Rectangle
RoundRect
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetBkColor
SetBkMode
SetBrushOrgEx
SetFontEnumeration
SetMapMode
SetPixel
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StartDocW
StartPage
StretchBlt
StretchDIBits
EndPath
CloseFigure
DeleteDC
DeleteMetaFile
CloseEnhMetaFile
CreateMetaFileA
GetObjectType

comdlg32

GetSaveFileNameW
PageSetupDlgW
PrintDlgW
CommDlgExtendedError
ChooseFontW
GetOpenFileNameW

advapi32

RegSetValueExW
RegQueryValueExW
AllocateAndInitializeSid
CheckTokenMembership
DeregisterEventSource
FreeSid
GetUserNameW
ImpersonateSelf
OpenThreadToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegEnumValueW
RegOpenKeyExW
RevertToSelf
RegisterEventSourceA
ReportEventA

shell32

DragFinish
DragQueryFileA
DragQueryFileW
DragQueryPoint
ExtractAssociatedIconA
ExtractIconExW
ExtractIconW
SHFileOperation
SHFileOperationW
SHGetFileInfoW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHPathPrepareForWriteW
ShellExecuteExW
DragAcceptFiles

ole32

RevokeDragDrop
ReleaseStgMedium
RegisterDragDrop
OleUninitialize
OleSetContainedObject
OleSetClipboard
OleRun
OleLockRunning
OleIsCurrentClipboard
OleInitialize
OleGetClipboard
OleFlushClipboard
CoTaskMemAlloc
CoLockObjectExternal
CoCreateInstance
CoCreateGuid

comctl32

ImageList_Add
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_Draw
ImageList_EndDrag
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetDragCursorImage

Sections

.text
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c848f831b51d0d3136c0b6c822d5dfcb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

comctl32

Sections

.text Size: 137KB - Virtual size: 137KB

.rdata Size: 29KB - Virtual size: 28KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 16B

.text
Size: 137KB - Virtual size: 137KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 16B