da8333a2447e84981bf183219e0a7c53_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

da8333a2447e84981bf183219e0a7c53_JaffaCakes118
Size

185KB
MD5

da8333a2447e84981bf183219e0a7c53
SHA1

a9c7ead5ddefe6622fc6f5531deebc97c44a9fe4
SHA256

e399a8e41991f7403834d96776180165fc9cbd2fdcdc11bb5676b8569b144b3c
SHA512

0806fbddd1f5859fa35d6eaa7947cae5d011dec727107b0ed2b028a0fe162ef720f5e71bfe90ecc60559e025480ac9a051e19eb3c003c37d300d6d1b4faa39fa
SSDEEP

3072:HZn4uwUsdzt26S+j85HEKMCOqgLqGK5qYQlR4GO1yzB/CTYs28wYSJp:94zfpnS+jI9hgWQvLzB7xY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da8333a2447e84981bf183219e0a7c53_JaffaCakes118

Files

da8333a2447e84981bf183219e0a7c53_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a8454da2dee4a518ad58f3423fe6d0ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindow
GetMessageW
PostMessageW
IsDialogMessageW
CreateDialogParamW
LoadIconW
SetWindowTextW
CharToOemBuffA
CharUpperBuffA
BeginPaint
CallNextHookEx
CreateDialogParamA
CreateWindowExA
DefWindowProcA
DestroyIcon
DispatchMessageW
SetWindowsHookExW
MessageBoxW
SetDlgItemTextW
GetKeyboardType
InsertMenuA
InsertMenuW
InvalidateRect
IsClipboardFormatAvailable
IsIconic
IsZoomed
KillTimer
LoadBitmapA
LoadCursorA
LoadCursorFromFileA
MapVirtualKeyA
MessageBeep
UnhookWindowsHookEx
TranslateMessage
SystemParametersInfoA
ShowWindow
SetWindowRgn
SetWindowsHookExA
SetWindowTextA
SetWindowPos
SetWindowLongA
SendMessageTimeoutA
SendMessageA
ReleaseDC
RegisterClassExA
RegisterClassA
RedrawWindow
PostMessageA
PeekMessageA
OffsetRect
OemToCharBuffA
MoveWindow
MessageBoxA
LoadStringA
LoadImageA
LoadIconA
IsWindowVisible
GetWindowRect
GetSystemMetrics
GetParent
GetLastActivePopup
GetDlgItem
GetDC
ExitWindowsEx
EnumWindows
EndPaint
DispatchMessageA
DestroyWindow
SendMessageW

comdlg32

GetFileTitleW

shell32

SHGetFolderPathW
SHCreateDirectoryExW
SHFileOperationW
ShellExecuteW

ole32

CoInitializeEx
OleUninitialize
OleInitialize
CreateItemMoniker
StgOpenStorage
StgIsStorageFile
GetRunningObjectTable
CoSetProxyBlanket
CoTaskMemFree
StringFromCLSID
CoUninitialize
CoInitialize
CoFreeAllLibraries
CoCreateInstance
StringFromGUID2
CoCreateGuid
CreateStreamOnHGlobal

advapi32

FreeSid
RegSetValueExW
RegDeleteValueW
RegQueryInfoKeyW
RegOpenKeyExA
RegCloseKey
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegQueryValueExA
RegQueryValueA
RegEnumValueA
RegCreateKeyExA
RegDeleteValueA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
CheckTokenMembership
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenThreadToken
RegDeleteKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegEnumKeyA
RegEnumKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyW
RegCreateKeyExW
RegQueryValueExW

gdi32

StretchBlt
CreateCompatibleBitmap
GetObjectW
GetWindowExtEx
GetViewportExtEx
MoveToEx
LineTo
SetMapMode
RestoreDC
SaveDC
GetClipBox
GdiAlphaBlend
GetTextMetricsW
SetStretchBltMode
GetCurrentObject
SetDIBitsToDevice
SetICMMode
SetDIBits
GetDIBits
GetTextExtentPoint32W
CreateRoundRectRgn
CreateRectRgn
DeleteDC
SelectObject
RealizePalette
SelectPalette
UnrealizeObject
CreateCompatibleDC
GetObjectA
GetDeviceCaps
StretchDIBits
CreateHalftonePalette
CreatePalette
GetSystemPaletteEntries
GetDIBColorTable
BitBlt
GetTextExtentPointA
SetBkMode
SetTextColor
CreateFontIndirectA
CreateSolidBrush
TranslateCharsetInfo
DeleteObject
GetStockObject
CreateDIBitmap
RemoveFontResourceA
ExtCreateRegion
AddFontResourceA
SetBkColor
CreateBrushIndirect
CreateFontIndirectW

comctl32

ImageList_Destroy
ImageList_AddMasked
ImageList_Create
ord17

version

VerQueryValueA

shlwapi

PathRemoveFileSpecW
SHDeleteKeyW

kernel32

TerminateThread
GetModuleFileNameW
CreateFileW
ResetEvent
GetFileSizeEx
InitializeCriticalSection
WritePrivateProfileStringW
lstrlenA
GetVersionExA
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
FormatMessageW
GetModuleHandleA
CompareStringA
GetFileAttributesW
LCMapStringA
SetConsoleCtrlHandler
GetConsoleOutputCP
WriteConsoleA
VirtualFree
HeapDestroy
GetStartupInfoA
VirtualQuery
VirtualAlloc
VirtualProtect
ExitThread
GetTempPathA
FindNextFileA
GetLocalTime
SystemTimeToFileTime
GetSystemTime
GetCommandLineA
InterlockedIncrement
InterlockedDecrement
GetVersionExW
Sleep
WideCharToMultiByte
OpenProcess
GetUserDefaultLangID
WriteFile
GetCurrentProcess
LoadResource
FindResourceExW
FindFirstFileW
GetFileSize
GetCurrentThreadId
CreateProcessA
DuplicateHandle
MoveFileA
CopyFileA
DeleteFileA
FindFirstFileA
GetLocaleInfoW
IsBadReadPtr
GetStringTypeW
GetStringTypeA
CreateFileA
HeapSize
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
VirtualAllocEx
GetFileTime
GetCurrentDirectoryA
GetFullPathNameA
SetConsoleMode
ReadConsoleInputA
GetDriveTypeA
FlushConsoleInputBuffer
GlobalMemoryStatus
GetVersion
MulDiv
CreateSemaphoreW
OpenSemaphoreW
FreeResource
GetPrivateProfileStringW
LocalAlloc
LoadLibraryExW
GetWindowsDirectoryW
ExpandEnvironmentStringsW
MoveFileExW
GetTempPathW
CreateEventW
lstrcmpA
SetEvent
ReadFile
GetModuleHandleW
MultiByteToWideChar
lstrlenW
GetLastError
GetCurrentDirectoryW
GetLongPathNameW
GetEnvironmentVariableW
HeapAlloc
GetSystemDirectoryW
DeleteFileW
GetProcessHeap
SetEndOfFile
CreatePipe
GetFileAttributesA
GetDateFormatA
GetTimeFormatA
GetFullPathNameW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LockResource
FindResourceW
FormatMessageA
LoadLibraryA
GetModuleFileNameA
LocalFree
SetEnvironmentVariableA
CompareStringW
WriteConsoleW
SetStdHandle
HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
LCMapStringW
FreeLibrary
RtlUnwind
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
ExitProcess
GetStdHandle
IsProcessorFeaturePresent
HeapFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
GetSystemTimeAsFileTime
GetStartupInfoW
HeapSetInformation
GetCommandLineW
EncodePointer
DecodePointer
GetExitCodeProcess
CopyFileW
CreateProcessW
FlushFileBuffers
LoadLibraryW
CreateDirectoryW
GetDriveTypeW
SetFilePointer
CreateThread
ReleaseMutex
WaitForSingleObject
CreateMutexW
SetFileAttributesW
CloseHandle
Module32NextW
CreateToolhelp32Snapshot
FindNextFileW
Process32NextW
GetSystemInfo
Module32FirstW
QueryDosDeviceW
RemoveDirectoryW
Process32FirstW
FindClose
GetProcAddress

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8454da2dee4a518ad58f3423fe6d0ff

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

ole32

advapi32

gdi32

comctl32

version

shlwapi

kernel32

Sections

.text Size: 77KB - Virtual size: 76KB

.rdata Size: 100KB - Virtual size: 99KB

.data Size: 5KB - Virtual size: 33KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 77KB - Virtual size: 76KB

.rdata
Size: 100KB - Virtual size: 99KB

.data
Size: 5KB - Virtual size: 33KB

.rsrc
Size: 2KB - Virtual size: 1KB