ddf1d41e16b1c8a014ffafab22863698_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ddf1d41e16b1c8a014ffafab22863698_JaffaCakes118
Size

332KB
MD5

ddf1d41e16b1c8a014ffafab22863698
SHA1

b7fc80ee654f46ba0fb719d3b148b83d7c3296fd
SHA256

8f2e058506d915584b735d650de56ec0f9b4d3b1187e5794c87fe729f53f63b5
SHA512

268137c50dee1df4a09c65bc8bc78dac610f64394af09d045576e1ecea1a8397584b27ff25ccb24e89ac9ecde3f8fbc8334f027719fdfa0bcb44caa62a897619
SSDEEP

6144:f8nfCUJFh0unxWKr4Duo+BTXKiIlGh2WIUUuTkmfoJe0rBHKEcG05L:fLUx0sxW5sBjNG5xEkyodn0V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddf1d41e16b1c8a014ffafab22863698_JaffaCakes118

Files

ddf1d41e16b1c8a014ffafab22863698_JaffaCakes118
.exe windows:5 windows x86 arch:x86

98180e1a35cdaa3377d89ae4ccea19a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyW
RegOpenKeyExA
RegEnumValueW
RegOpenKeyW
CryptGetHashParam
RegEnumValueA
GetTraceEnableLevel
CryptCreateHash
RegSetValueExA
GetUserNameW
CreateProcessAsUserW
RegDeleteKeyA
CryptAcquireContextW
RegisterTraceGuidsW
RegOpenCurrentUser
GetTraceEnableFlags
RegQueryValueW
GetLengthSid
IsTextUnicode
CryptDestroyHash
RegQueryValueExA
CryptHashData
UnregisterTraceGuids
RegQueryInfoKeyW
RegCloseKey
SetTokenInformation
SetThreadToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueExW
GetTokenInformation
CryptReleaseContext
RegDeleteValueA
OpenThreadToken
RegSetValueExW
RegDeleteKeyW
RegOpenKeyExW
ConvertSidToStringSidW
GetTraceLoggerHandle
RegCreateKeyExA
RegDeleteValueW
RegCreateKeyA
ConvertStringSidToSidW
TraceEvent
ImpersonateSelf
TraceMessage
RegCreateKeyExW
OpenProcessToken
DuplicateTokenEx
RegEnumKeyExW

uxtheme

SetWindowTheme
GetThemeMetric
GetThemeFont
GetThemeColor
GetThemePartSize
CloseThemeData
GetThemeBackgroundContentRect
GetThemeBackgroundExtent
GetThemeMargins
IsThemeActive
DrawThemeBackground
DrawThemeParentBackground
GetThemeAppProperties
IsAppThemed
OpenThemeData

shell32

ShellExecuteA
SHGetFolderPathAndSubDirW
SHCreateShellItem
SHPathPrepareForWriteW
ExtractAssociatedIconExW
SHGetPathFromIDListW
SHGetFolderPathW
ShellAboutW
SHFileOperationW
SHChangeNotify
SHGetSpecialFolderLocation
ShellExecuteW
SHAppBarMessage
SHGetDesktopFolder
SHGetPathFromIDListA
ExtractIconExW
SHGetSpecialFolderPathW
ExtractIconW
SHSetLocalizedName
SHGetInstanceExplorer
Shell_NotifyIconA
Shell_NotifyIconW
SHGetFolderLocation
SHBrowseForFolderW
DragQueryFileW
SHGetFileInfoW
SHGetDataFromIDListW
ShellExecuteExW
SHBindToParent

kernel32

LCMapStringW
GlobalFlags
SetUnhandledExceptionFilter
GetModuleHandleExW
TryEnterCriticalSection
GetModuleHandleA
SetFilePointer
GetFileInformationByHandle
GetFileAttributesA
SetProcessWorkingSetSize
LoadLibraryExW
ReleaseActCtx
RaiseException
GetProcAddress
GetSystemTimeAsFileTime
CreateFileMappingW
GetLastError
SetThreadContext
WritePrivateProfileSectionW
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
GlobalFree
FormatMessageW
DebugBreak
TerminateThread
CreateSemaphoreW
SetThreadPriority
lstrcmpiW
lstrcmpiA
LocalFree
LoadLibraryA
GetLocalTime
Sleep
GetUserDefaultUILanguage
LockResource
CreateThread
InterlockedExchange
LocalReAlloc
SetFilePointerEx
ReleaseMutex
SystemTimeToFileTime
AddAtomW
CreateFileW
SuspendThread
FreeLibraryAndExitThread
TlsSetValue
LocalSize
GetVersionExW
UnhandledExceptionFilter
ExpandEnvironmentStringsA
QueueUserWorkItem
FindFirstFileW
LoadLibraryW
VirtualQuery
OpenMutexA
GetTickCount
GetShortPathNameW
HeapFree
GetLongPathNameW
CreateToolhelp32Snapshot
ResumeThread
ExpandEnvironmentStringsW
SetCurrentDirectoryW
lstrlenA
CreateProcessW
GetCurrentProcessId
TerminateProcess
GetSystemWow64DirectoryW
EnterCriticalSection
OutputDebugStringA
DuplicateHandle
GetCPInfo
LocalFileTimeToFileTime
GetFileSizeEx
GetThreadLocale
GetEnvironmentVariableW
GetFileAttributesExW
HeapDestroy
QueryDosDeviceW
GetCurrentProcess
SetLastError
FindClose
DisableThreadLibraryCalls
GetTempPathW
InterlockedDecrement
GetSystemDefaultLCID
InterlockedCompareExchange
GetSystemDirectoryW
GetFileSize
SetFileTime
GetPrivateProfileSectionW
MultiByteToWideChar
CreateEventW
GetSystemDirectoryA
FreeLibrary
FileTimeToLocalFileTime
WaitForSingleObjectEx
CreateDirectoryA
GetDateFormatW
GetTempFileNameW
GetThreadPriority
SetEndOfFile
GetThreadContext
GetPrivateProfileSectionNamesW
GetCurrentThreadId
ExitProcess
FlushInstructionCache
GetFullPathNameW
TlsAlloc
FindAtomW
GlobalDeleteAtom
GlobalSize
SetEvent
GetVersionExA
FileTimeToSystemTime
SearchPathW
MapViewOfFile
TlsGetValue
DeleteTimerQueueTimer
GetTimeFormatW
SizeofResource
ReleaseSemaphore
WriteFile
CreateMutexW
GetCurrentDirectoryW
GlobalLock
CreateMutexA
GetSystemDefaultUILanguage
GetSystemTime
SetThreadExecutionState
GlobalReAlloc
GlobalAlloc
GetFileAttributesW
DeleteAtom
SetErrorMode
QueryPerformanceCounter
WritePrivateProfileStringW
ReplaceFileW
GetModuleFileNameW
RemoveDirectoryW
MoveFileW
ActivateActCtx
OpenProcess
CopyFileW
GetWindowsDirectoryW
CompareStringA
IsDBCSLeadByte
OpenMutexW
IsWow64Process
GetVersion
SetCurrentDirectoryA
MoveFileExW
GetLocaleInfoW
CreateEventA
VirtualAlloc
DeleteCriticalSection
GetModuleHandleW
HeapReAlloc
GlobalAddAtomW
CompareStringW
GetPrivateProfileStringA
LocalAlloc
HeapCreate
WaitForMultipleObjects
VirtualProtect
GetCurrentThread
SetEnvironmentVariableW
QueryPerformanceFrequency
GlobalUnlock
GetNumberFormatW
DeleteFileW
UnmapViewOfFile
Process32FirstW
WaitForSingleObject
SetProcessShutdownParameters
CreateFileMappingA
UnlockFileEx
lstrlenW
CreateActCtxW
InitializeCriticalSection
LoadResource
EnumUILanguagesW
Process32NextW
InterlockedIncrement
DeactivateActCtx
GetACP
CloseHandle
GlobalAddAtomA
CreateTimerQueueTimer
FindNextFileW
ReadFile
LockFileEx
GetExitCodeThread
lstrcmpA
GetProcessHeap
lstrcmpW
OpenEventW
CreateFileA
FindResourceExW
GetAtomNameW
GetPrivateProfileStringW
HeapAlloc
GetSystemInfo
GetModuleFileNameA
LeaveCriticalSection
VirtualFree
GetLogicalDriveStringsW
ResetEvent
MulDiv
TlsFree
SetFileAttributesW
WideCharToMultiByte
GetModuleHandleExA
FindResourceW
CreateDirectoryW
CompareFileTime

psapi

GetProcessImageFileNameW

user32

IsDialogMessageW
SetForegroundWindow
MonitorFromPoint
GetDlgItemTextW
IsWindowEnabled
SetCapture
RegisterWindowMessageA
GetMessageW
SetWindowsHookExW
RemoveMenu
DdeClientTransaction
GetComboBoxInfo
WinHelpW
SetMenuDefaultItem
GetMenuItemID
wsprintfW
ShowScrollBar
TranslateAcceleratorW
IsRectEmpty
IsChild
NotifyWinEvent
DrawIconEx
GetClassLongW
ShowCaret
GetClassInfoExW
RedrawWindow
SystemParametersInfoW
SetTimer
CharLowerBuffW
GetShellWindow
SendNotifyMessageW
SetWindowTextW
DdeInitializeW
CharUpperW
FindWindowW
SetWindowRgn
GetSubMenu
LoadIconW
GetMessageA
DrawFocusRect
GetCursor
GetForegroundWindow
UpdateLayeredWindow
GetSystemMenu
GetMessageTime
GetWindowLongA
TranslateMessage
AnimateWindow
CallNextHookEx
GetClassWord
MonitorFromRect
IsIconic
MessageBoxIndirectW
MapWindowPoints
EnumDisplaySettingsW
UpdateWindow
GetIconInfo
SetRectEmpty
PostThreadMessageA
GetAsyncKeyState
RegisterClipboardFormatW
GetScrollInfo
GetMenuItemInfoA
DdeFreeStringHandle
PostThreadMessageW
GetWindowRgnBox
SetMenuItemInfoW
LoadCursorA
CharLowerW
SendMessageTimeoutA
ReleaseDC
CheckDlgButton
OpenClipboard
AdjustWindowRectEx
GetMonitorInfoW
GetMessagePos
UnionRect
GetClassNameW
DispatchMessageA
SetDlgItemInt
LockSetForegroundWindow
DefWindowProcW
DdeFreeDataHandle
DdeGetData
EnumThreadWindows
CreateMenu
LoadMenuW
RegisterWindowMessageW
SetFocus
AttachThreadInput
SystemParametersInfoA
GetMenuDefaultItem
SetActiveWindow
CharNextA
DialogBoxIndirectParamA
RegisterClipboardFormatA
CreateDialogParamW
IsWindow
DialogBoxParamW
SetPropW
GetMenuStringW
RemovePropW
GetLastActivePopup
UnregisterClassW
MapVirtualKeyW
DialogBoxIndirectParamW
IsWindowVisible
GetWindowInfo
GetKeyState
GetKeyNameTextW
GetSystemMetrics
EnumWindows
IsWindowUnicode
ShowWindow
GetCursorPos
DeleteMenu
CreatePopupMenu
GetClassInfoW
GetWindow
GetParent
DdeQueryStringW
CopyRect
DefWindowProcA
LoadStringA
GetWindowTextW
GetWindowTextLengthW
SendMessageA
GetWindowLongW
PeekMessageW
LoadStringW
SetWindowLongW
SetClipboardViewer
FillRect
SetCursorPos
TrackPopupMenuEx
GetMenuItemCount
SetCursor
GetProcessWindowStation
PostMessageA
DestroyAcceleratorTable
DestroyMenu
GetAncestor
SetWindowPlacement
CloseClipboard
DrawTextExW
GetSysColor
ClientToScreen
UnhookWindowsHookEx
MonitorFromWindow
MoveWindow
DdeConnect
EqualRect
PtInRect
ReleaseCapture
EndPaint
CharNextW
RemovePropA
SetPropA
GetCapture
CreateWindowExW
SetParent
VkKeyScanExW
BeginPaint
CallWindowProcW
GetFocus
PeekMessageA
GetDlgItem
SetScrollInfo
MapDialogRect
GetSysColorBrush
DrawEdge
GetNextDlgTabItem
CheckMenuItem
DdeCreateStringHandleW
InsertMenuW
OffsetRect
MsgWaitForMultipleObjects
HideCaret
GetKeyboardLayout
GetLastInputInfo
IsHungAppWindow
AppendMenuW
TrackMouseEvent
AllowSetForegroundWindow
DdeUninitialize
InvalidateRect
SetWindowLongA
GetClipboardData
EnumDesktopWindows
MsgWaitForMultipleObjectsEx
SendMessageTimeoutW
EndDeferWindowPos
ChildWindowFromPoint
CharPrevW
GetDialogBaseUnits
IntersectRect
GetPropW
MessageBoxW
MessageBoxIndirectA
CopyIcon
IsDlgButtonChecked
SetRect
GetPropA
CheckMenuRadioItem
EnumChildWindows
DialogBoxParamA
IsCharAlphaNumericW
MessageBeep
CreateIconIndirect
SendMessageW
LoadBitmapW
ScreenToClient
SetClipboardData
CallMsgFilterW
MessageBoxExW
DeferWindowPos
GetClientRect
LoadAcceleratorsW
GetMenuState
DdeCreateDataHandle
BeginDeferWindowPos
InsertMenuItemW
DrawFrameControl
EmptyClipboard
SetDlgItemTextW
SetMenu
InflateRect
WaitForInputIdle
DestroyWindow
GetDesktopWindow
TrackPopupMenu
GetTopWindow
GetMenuItemInfoW
GetWindowDC
ChangeClipboardChain
MessageBoxExA
KillTimer
EndDialog
WaitMessage
EnableMenuItem
DdeNameService
GetWindowPlacement
FindWindowExW
PostQuitMessage
RegisterClassW
RegisterClassExW
SetMenuItemBitmaps
DestroyIcon
LoadCursorW
FindWindowA
DdeDisconnect
GetDC
PostMessageW
GetWindowRect
SendDlgItemMessageW
GetActiveWindow
SetScrollPos
GetDoubleClickTime
CopyImage
EndMenu
IsMenu
LoadImageW
DispatchMessageW
EnableWindow
SetWindowPos
CharPrevA
DrawTextW
GetDlgCtrlID
AdjustWindowRect
ShowOwnedPopups
CheckRadioButton
WindowFromPoint
GetWindowThreadProcessId
GetClipboardFormatNameW

ntdll

NtAllocateVirtualMemory
LdrGetDllHandle
RtlUshortByteSwap

gdi32

CreateDIBSection
CreatePolygonRgn
GetRegionData
LPtoDP
GetBrushOrgEx
CreateMetaFileW
Rectangle
CreateEnhMetaFileA
GetTextExtentPoint32A
SelectPalette
CreateHalftonePalette
GetDeviceCaps
CreateRectRgn
CombineRgn
RealizePalette
GetObjectA
GetTextCharset
GetTextExtentPointW
CreateBitmap
PlayEnhMetaFile
CreateFontIndirectA
CreateFontW
CreateSolidBrush
SetBkMode
SetRectRgn
OffsetWindowOrgEx
GetDIBits
CreateFontIndirectW
MoveToEx
TextOutA
SetBkColor
GetGlyphIndicesW
GetTextExtentExPointI
SelectObject
StretchDIBits
GetBkColor
ExtTextOutW
DeleteDC
CreateDCA
CreateRectRgnIndirect
CloseEnhMetaFile
GetTextExtentPoint32W
GetTextAlign
SetLayout
SetWindowExtEx
SetViewportOrgEx
ExtCreateRegion
CreateDCW
GetDCOrgEx
GetObjectW
GetClipBox
CloseMetaFile
OffsetRgn
DeleteObject
SetTextAlign
SetDCPenColor
GetBkMode
PatBlt
SetViewportExtEx
SetWindowOrgEx
SetBrushOrgEx
GetPixel
CreatePalette
CreateCompatibleDC
GetStockObject
GetTextMetricsW
GetSystemPaletteEntries
SetStretchBltMode
GetLayout
EqualRgn
GetRgnBox
IntersectClipRect
CreateDIBPatternBrushPt
LineTo
SaveDC
SetMapMode
RestoreDC
CreatePatternBrush
GetTextColor
GetPaletteEntries
CreateCompatibleBitmap
RectVisible
CreatePen
StretchBlt
DeleteEnhMetaFile
BitBlt
TextOutW
SetTextColor
SetPaletteEntries

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

98180e1a35cdaa3377d89ae4ccea19a5

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

uxtheme

shell32

kernel32

psapi

user32

ntdll

gdi32

Sections

.text Size: 183KB - Virtual size: 183KB

.rdata Size: 88KB - Virtual size: 88KB

.rsrc Size: 21KB - Virtual size: 21KB

.data Size: 37KB - Virtual size: 1.4MB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 183KB - Virtual size: 183KB

.rdata
Size: 88KB - Virtual size: 88KB

.rsrc
Size: 21KB - Virtual size: 21KB

.data
Size: 37KB - Virtual size: 1.4MB

.tls
Size: 512B - Virtual size: 4KB