e01bcd2e4af49e5a852d9ef9b4fd2260_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e01bcd2e4af49e5a852d9ef9b4fd2260_JaffaCakes118
Size

332KB
MD5

e01bcd2e4af49e5a852d9ef9b4fd2260
SHA1

19572faa0e69e7639c0ace8fa94069122ced5703
SHA256

2a799080d2eec146d9f33bde908f58a110635ef4d0bea0681264b52e7bc753e8
SHA512

fe8310774a83b80172f24d300301f73a9ca4b89053fca5218d15e2c8674b19935eddcac9b1470a8b33609499a6ce9f6e4e3b4d197c65bd9a665e0dea66102d8f
SSDEEP

6144:p3viZxFz4l2GldtW8CZB2VN7lgtKyGtRuK3mJ1JNqoTSY9BCmJaK5BdVFCtmg0+m:JK94sqdtW8C6X1yGtRp84f+rvg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e01bcd2e4af49e5a852d9ef9b4fd2260_JaffaCakes118

Files

e01bcd2e4af49e5a852d9ef9b4fd2260_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8113f1b8dbdfbcbeec5b182ec49a55b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteW
SHGetSpecialFolderLocation
SHFileOperationW
SHCreateShellItem
ShellAboutW
SHGetFolderLocation
SHGetInstanceExplorer
DragQueryFileW
SHGetFileInfoW
SHSetLocalizedName
ExtractAssociatedIconExW
SHGetPathFromIDListW
SHBindToParent
SHGetDataFromIDListW
ExtractIconExW
Shell_NotifyIconA
SHBrowseForFolderW
ExtractIconW
SHPathPrepareForWriteW
ShellExecuteExW
SHChangeNotify
SHGetSpecialFolderPathW
SHGetFolderPathAndSubDirW
SHGetFolderPathW
ShellExecuteA
SHGetPathFromIDListA
SHAppBarMessage
Shell_NotifyIconW
SHGetDesktopFolder

gdi32

StretchDIBits
TextOutW
SetRectRgn
GetObjectA
GetSystemPaletteEntries
CreateMetaFileW
CloseEnhMetaFile
CreatePen
CreateBitmap
PatBlt
SetWindowOrgEx
OffsetWindowOrgEx
GetLayout
GetPaletteEntries
GetBrushOrgEx
SetTextColor
GetBkColor
PlayEnhMetaFile
SetWindowExtEx
GetGlyphIndicesW
GetStockObject
GetRgnBox
EqualRgn
GetTextExtentPointW
CreateSolidBrush
TextOutA
RealizePalette
CreateFontIndirectA
SetStretchBltMode
GetPixel
OffsetRgn
CreateDCW
SelectObject
GetDeviceCaps
SetLayout
LPtoDP
CreatePolygonRgn
RestoreDC
GetTextCharset
GetClipBox
SetBkMode
GetRegionData
GetObjectW
BitBlt
CreateEnhMetaFileA
IntersectClipRect
SetViewportOrgEx
GetTextAlign
SetBrushOrgEx
CreateDIBSection
LineTo
GetTextColor
SelectPalette
CloseMetaFile
DeleteEnhMetaFile
CreateRectRgn
CreateCompatibleDC
GetTextExtentExPointI
SetViewportExtEx
CreatePatternBrush
CreatePalette
StretchBlt
CreateCompatibleBitmap
SetMapMode
RectVisible
SetDCPenColor
SaveDC
GetBkMode
ExtCreateRegion
GetDIBits
CreateFontW
Rectangle
GetTextExtentPoint32W
GetTextExtentPoint32A
CombineRgn
CreateHalftonePalette
SetTextAlign
SetBkColor
ExtTextOutW
GetDCOrgEx
DeleteObject
CreateRectRgnIndirect
CreateFontIndirectW
SetPaletteEntries
DeleteDC
CreateDIBPatternBrushPt
CreateDCA
GetTextMetricsW
MoveToEx

ntdll

RtlUshortByteSwap
LdrGetDllHandle
NtAllocateVirtualMemory

user32

SetMenu
ShowOwnedPopups
DrawTextExW
CopyIcon
DestroyAcceleratorTable
DdeNameService
FindWindowExW
CloseClipboard
ClientToScreen
MessageBoxIndirectA
SetWindowTextW
CharLowerBuffW
GetWindowTextW
SetClipboardData
UnregisterClassW
BeginDeferWindowPos
SetPropA
IsChild
SetWindowsHookExW
MessageBoxW
GetClassNameW
DestroyIcon
AdjustWindowRect
GetAsyncKeyState
EnumThreadWindows
PostThreadMessageA
GetFocus
AnimateWindow
InsertMenuItemW
SetScrollPos
SetFocus
CheckMenuRadioItem
EndDeferWindowPos
GetClipboardFormatNameW
DdeFreeStringHandle
TranslateAcceleratorW
RegisterWindowMessageW
SendMessageW
UpdateWindow
EnumWindows
LoadStringA
GetMenuItemID
GetDC
GetMessagePos
GetForegroundWindow
CharPrevW
LoadStringW
GetDlgCtrlID
AllowSetForegroundWindow
VkKeyScanExW
MonitorFromPoint
IsMenu
DdeCreateDataHandle
RedrawWindow
DrawEdge
EnableWindow
DestroyWindow
FindWindowW
MapVirtualKeyW
SetMenuDefaultItem
GetDesktopWindow
SetCursorPos
MapDialogRect
ShowScrollBar
SetDlgItemTextW
EnumDisplaySettingsW
DrawIconEx
wsprintfW
SetMenuItemInfoW
DialogBoxIndirectParamW
MonitorFromWindow
PeekMessageW
SetCapture
SendMessageA
NotifyWinEvent
AdjustWindowRectEx
SetActiveWindow
SetMenuItemBitmaps
RegisterClipboardFormatA
GetNextDlgTabItem
DdeInitializeW
GetKeyboardLayout
PeekMessageA
GetSystemMenu
GetMonitorInfoW
GetClassInfoW
EmptyClipboard
CopyRect
CreateDialogParamW
CreateMenu
IsDlgButtonChecked
RegisterClassW
DefWindowProcA
DdeDisconnect
TranslateMessage
CallWindowProcW
DdeFreeDataHandle
MsgWaitForMultipleObjects
LoadCursorW
TrackPopupMenu
GetWindowThreadProcessId
LoadCursorA
DrawFrameControl
CallNextHookEx
GetScrollInfo
GetMessageA
CheckRadioButton
LoadBitmapW
DdeCreateStringHandleW
ReleaseCapture
SetForegroundWindow
CharPrevA
DeleteMenu
UnionRect
SetWindowLongW
GetMenuDefaultItem
GetAncestor
GetClassInfoExW
DdeUninitialize
IsIconic
GetMenuItemInfoA
PostQuitMessage
GetKeyState
IsCharAlphaNumericW
DispatchMessageW
MessageBoxIndirectW
GetComboBoxInfo
SetDlgItemInt
SetRectEmpty
DestroyMenu
ScreenToClient
DefWindowProcW
SetWindowLongA
CharNextA
DispatchMessageA
GetDlgItem
LoadImageW
GetSysColorBrush
DrawFocusRect
EnableMenuItem
DialogBoxParamA
CharUpperW
IntersectRect
GetClassWord
LockSetForegroundWindow
GetClipboardData
UpdateLayeredWindow
GetSystemMetrics
SetClipboardViewer
FillRect
PtInRect
WindowFromPoint
DrawTextW
GetWindowTextLengthW
CreateIconIndirect
EnumChildWindows
GetIconInfo
GetCursor
GetCursorPos
SendNotifyMessageW
WinHelpW
ShowWindow
CharNextW
SetWindowPos
PostMessageW
CheckDlgButton
DdeClientTransaction
SetCursor
OpenClipboard
GetMenuItemInfoW
EnumDesktopWindows
IsWindowVisible
MonitorFromRect
GetParent
ChangeClipboardChain
ShowCaret
WaitMessage
SetScrollInfo
PostThreadMessageW
LoadMenuW
OffsetRect
FindWindowA
KillTimer
CharLowerW
GetMenuItemCount
SetTimer
InsertMenuW
GetMenuState
DdeConnect
GetWindowRgnBox
EndMenu
RemovePropA
HideCaret
LoadIconW
EqualRect
GetMessageW
ReleaseDC
GetProcessWindowStation
GetClientRect
GetShellWindow
IsDialogMessageW
SendMessageTimeoutW
RemovePropW
BeginPaint
GetSysColor
IsRectEmpty
MessageBeep
DdeGetData
DdeQueryStringW
GetWindow
DialogBoxIndirectParamA
GetTopWindow
GetDlgItemTextW
GetClassLongW
IsWindowEnabled
MsgWaitForMultipleObjectsEx
GetLastActivePopup
GetWindowLongA
SendMessageTimeoutA
DeferWindowPos
IsWindow
CallMsgFilterW
RegisterClipboardFormatW
GetWindowPlacement
MoveWindow
GetPropA
InflateRect
GetMenuStringW
CheckMenuItem
SetParent
TrackMouseEvent
MessageBoxExW
DialogBoxParamW
CopyImage
GetLastInputInfo
UnhookWindowsHookEx
RegisterWindowMessageA
SetWindowPlacement
EndPaint
GetMessageTime
TrackPopupMenuEx
IsHungAppWindow
GetWindowInfo
CreatePopupMenu
InvalidateRect
GetDialogBaseUnits
IsWindowUnicode
GetActiveWindow
GetCapture
ChildWindowFromPoint
EndDialog
GetDoubleClickTime
SetRect
GetKeyNameTextW
CreateWindowExW
MapWindowPoints
SystemParametersInfoW
RegisterClassExW
GetSubMenu
GetWindowDC
WaitForInputIdle
SendDlgItemMessageW
PostMessageA
AppendMenuW
SetWindowRgn
GetWindowLongW
MessageBoxExA
SetPropW
SystemParametersInfoA
LoadAcceleratorsW
RemoveMenu
GetPropW
GetWindowRect
AttachThreadInput

uxtheme

GetThemeBackgroundExtent
IsThemeActive
GetThemeAppProperties
GetThemeMetric
DrawThemeBackground
OpenThemeData
GetThemeMargins
CloseThemeData
GetThemeFont
IsAppThemed
GetThemeColor
DrawThemeParentBackground
SetWindowTheme
GetThemePartSize
GetThemeBackgroundContentRect

psapi

GetProcessImageFileNameW

advapi32

GetUserNameW
CryptGetHashParam
TraceEvent
RegCreateKeyExW
TraceMessage
CryptDestroyHash
RegEnumKeyW
RegDeleteKeyW
RegOpenCurrentUser
ConvertStringSidToSidW
RegCreateKeyExA
SetThreadToken
RegOpenKeyExA
RegQueryInfoKeyW
RegCreateKeyA
CryptCreateHash
RegQueryValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
UnregisterTraceGuids
RegSetValueExW
RegOpenKeyExW
RegEnumValueA
RegDeleteValueW
DuplicateTokenEx
RegEnumValueW
RegOpenKeyW
CryptAcquireContextW
RegSetValueExA
CryptReleaseContext
SetTokenInformation
GetTokenInformation
OpenProcessToken
RegQueryValueExA
RegisterTraceGuidsW
CryptHashData
GetTraceLoggerHandle
GetLengthSid
GetTraceEnableLevel
IsTextUnicode
RegCloseKey
OpenThreadToken
RegDeleteKeyA
RegEnumKeyExW
RegDeleteValueA
GetTraceEnableFlags
RegQueryValueExW
ImpersonateSelf
CreateProcessAsUserW
ConvertSidToStringSidW

kernel32

MultiByteToWideChar
GetThreadContext
ResetEvent
GlobalFlags
FindResourceExW
GlobalDeleteAtom
LeaveCriticalSection
CreateFileMappingW
GetTempFileNameW
GetPrivateProfileSectionNamesW
CreateEventA
IsDBCSLeadByte
SearchPathW
GetShortPathNameW
CreateEventW
GetPrivateProfileStringA
WaitForSingleObject
GlobalAddAtomA
SetLastError
GlobalAddAtomW
GetFileInformationByHandle
GetCurrentThreadId
GetUserDefaultLCID
EnterCriticalSection
VirtualFree
GetFileAttributesA
MulDiv
DisableThreadLibraryCalls
ExpandEnvironmentStringsA
RaiseException
AddAtomW
LocalFree
FindClose
GetSystemDirectoryA
Process32FirstW
GetThreadLocale
FileTimeToSystemTime
SetFileTime
Process32NextW
ReleaseActCtx
SetThreadPriority
lstrcmpW
CreateFileA
IsWow64Process
GetLogicalDriveStringsW
LoadLibraryW
CreateDirectoryW
CopyFileW
TlsGetValue
ExitProcess
QueryDosDeviceW
OpenProcess
GlobalReAlloc
CreateFileW
lstrcmpA
GetCurrentThread
InitializeCriticalSection
GetSystemDirectoryW
FlushInstructionCache
GlobalLock
WideCharToMultiByte
CreateMutexW
QueryPerformanceCounter
OutputDebugStringA
UnhandledExceptionFilter
EnumUILanguagesW
GetLastError
RemoveDirectoryW
FindAtomW
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
CreateSemaphoreW
DeleteAtom
InitializeCriticalSectionAndSpinCount
TerminateThread
FindNextFileW
InterlockedExchange
SystemTimeToFileTime
CreateToolhelp32Snapshot
SetThreadExecutionState
GetLocalTime
GetLocaleInfoW
DeactivateActCtx
SetCurrentDirectoryW
GetNumberFormatW
SuspendThread
GetDateFormatW
SizeofResource
LocalReAlloc
CreateFileMappingA
GetFileAttributesW
GetSystemDefaultLCID
lstrcmpiW
GetTempPathW
GetCurrentProcess
GetSystemTime
VirtualProtect
WritePrivateProfileStringW
WaitForSingleObjectEx
GetVersionExA
GlobalUnlock
FindFirstFileW
UnmapViewOfFile
ReleaseSemaphore
lstrlenW
ReleaseMutex
CreateTimerQueueTimer
GetSystemInfo
SetUnhandledExceptionFilter
TlsAlloc
GetFileSize
CloseHandle
GetCurrentDirectoryW
GetEnvironmentVariableW
GetModuleHandleExW
ReadFile
CreateMutexA
FreeLibraryAndExitThread
GetProcAddress
GetSystemWow64DirectoryW
UnlockFileEx
CreateDirectoryA
CompareStringA
LockFileEx
ResumeThread
InterlockedCompareExchange
LoadLibraryExW
GetPrivateProfileSectionW
GetUserDefaultUILanguage
GetFileSizeEx
CreateThread
InterlockedIncrement
LocalAlloc
TlsSetValue
GetModuleHandleW
WriteFile
GetTimeFormatW
LockResource
GetFullPathNameW
OpenMutexW
HeapDestroy
CompareStringW
GetModuleFileNameW
DeleteFileW
DeleteTimerQueueTimer
LoadLibraryA
DeleteCriticalSection
GetCPInfo
lstrcmpiA
GetModuleHandleExA
CreateActCtxW
SetErrorMode
HeapReAlloc
lstrlenA
SetFileAttributesW
LCMapStringW
GetVersion
GetExitCodeThread
HeapFree
Sleep
VirtualQuery
GetCurrentProcessId
CompareFileTime
FindResourceW
GetThreadPriority
OpenEventW
GetSystemDefaultUILanguage
ActivateActCtx
WaitForMultipleObjects
ExpandEnvironmentStringsW
TryEnterCriticalSection
TlsFree
GetModuleHandleA
OpenMutexA
MoveFileExW
GetTickCount
FreeLibrary
MoveFileW
GetACP
SetProcessShutdownParameters
GetWindowsDirectoryW
InterlockedDecrement
LocalSize
SetFilePointer
QueryPerformanceFrequency
HeapCreate
LoadResource
HeapAlloc
GetPrivateProfileStringW
GlobalFree
GetFileAttributesExW
DuplicateHandle
SetFilePointerEx
GetLongPathNameW
DebugBreak
GetProcessHeap
CreateProcessW
ReplaceFileW
FileTimeToLocalFileTime
GlobalSize
SetThreadContext
SetProcessWorkingSetSize
SetEnvironmentVariableW
FormatMessageW
VirtualAlloc
SetEndOfFile
WritePrivateProfileSectionW
GlobalAlloc
SetCurrentDirectoryA
TerminateProcess
GetVersionExW
MapViewOfFile
SetEvent
QueueUserWorkItem
GetAtomNameW
GetModuleFileNameA

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8113f1b8dbdfbcbeec5b182ec49a55b2

Headers

DLL Characteristics

File Characteristics

Imports

shell32

gdi32

ntdll

user32

uxtheme

psapi

advapi32

kernel32

Sections

.text Size: 183KB - Virtual size: 183KB

.rdata Size: 88KB - Virtual size: 88KB

.rsrc Size: 21KB - Virtual size: 21KB

.data Size: 37KB - Virtual size: 1.4MB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 183KB - Virtual size: 183KB

.rdata
Size: 88KB - Virtual size: 88KB

.rsrc
Size: 21KB - Virtual size: 21KB

.data
Size: 37KB - Virtual size: 1.4MB

.tls
Size: 512B - Virtual size: 4KB