e9f7d27cec934ffe6fb3ad298f3be4f2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e9f7d27cec934ffe6fb3ad298f3be4f2_JaffaCakes118
Size

848KB
MD5

e9f7d27cec934ffe6fb3ad298f3be4f2
SHA1

7dcbe923cac9f00397fc2d90b84cb12b074fc8ad
SHA256

1f48fcce79cc5b94c180405d98e69acd2935ed6ac34c286a885acfd747a2955d
SHA512

a8e60d0ce4ab96354e63bb32648ba792f3642df626c523cc13042a57626e0e87a31009f2617dc4e33f39a1f6b743c2ea1e2fcd530a0995d2211293bbbcef3f5c
SSDEEP

24576:zpaTLb6LWI+JqS8QyS0H725zghYKyBC6Ew42b:zpMLb6LsJkQl065zJC6p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9f7d27cec934ffe6fb3ad298f3be4f2_JaffaCakes118

Files

e9f7d27cec934ffe6fb3ad298f3be4f2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b65337060ba554906d5d7240b4d98c9c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQuery
GetModuleFileNameW
HeapReAlloc
GetOEMCP
InitializeCriticalSectionAndSpinCount
GetProcessHeap
SizeofResource
VirtualProtect
InitializeCriticalSection
lstrcpyW
GetConsoleMode
CreateNamedPipeW
GetCommandLineW
HeapSize
GetFileAttributesExW
WriteFile
GlobalDeleteAtom
GetConsoleOutputCP
VirtualProtectEx
GetCurrentDirectoryA
CreateFileW
OpenEventW
LeaveCriticalSection
CreateEventW
TlsFree
ResumeThread
InterlockedCompareExchange
SetEvent
GetTimeZoneInformation
CreateThread
DeleteCriticalSection
GetProcAddress
GetStdHandle
SetCurrentDirectoryW
GlobalSize
GlobalAlloc
GetTempPathW
CompareStringW
GetVolumeInformationW
GetNumberFormatW
SetFilePointer
WriteConsoleW
GetStringTypeW
LCMapStringW
GetConsoleCP
GlobalFindAtomW
GetCurrentDirectoryW
HeapQueryInformation
GetCPInfo
UnlockFile
MultiByteToWideChar
SetStdHandle
TerminateProcess
TerminateThread
LocalReAlloc
LockFile
GlobalAddAtomW
TlsAlloc
HeapAlloc
lstrlenA
SetEnvironmentVariableA
TlsGetValue
GetLocaleInfoW
SearchPathW
GetModuleHandleW
FindResourceW
GetEnvironmentStringsW
LoadResource
GlobalLock
MulDiv
InterlockedDecrement
GetCurrentThread
RaiseException
VirtualAlloc
SetThreadPriority
lstrcmpA
GetTempFileNameW
CopyFileW
FileTimeToLocalFileTime
GlobalReAlloc
RtlUnwind
WideCharToMultiByte
FreeLibrary
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
GetSystemInfo
FreeResource
FileTimeToSystemTime
GetOverlappedResult
HeapFree
GetCurrentProcessId
GetACP
FindFirstFileW
CloseHandle
SetHandleCount
DuplicateHandle
CreateMutexW
lstrcmpiW
GlobalFlags
LoadLibraryExW
SetEndOfFile
LoadLibraryW
FreeEnvironmentStringsW
GetFileAttributesW
TlsSetValue
LocalAlloc
IsValidCodePage
GetUserDefaultUILanguage
GetFileTime
GlobalGetAtomNameW
GlobalFree
ExitThread
GetFullPathNameW
FindClose
EnterCriticalSection
GetFileType
lstrlenW
GetFileSizeEx
InterlockedIncrement
WaitForMultipleObjects
HeapCreate
GlobalUnlock
WaitForSingleObject
GetLastError
FormatMessageW
SetUnhandledExceptionFilter
IsDebuggerPresent
LocalFree
Sleep
DisconnectNamedPipe
ReadFile
UnhandledExceptionFilter
GetVersionExW
lstrcmpW
GetCurrentProcess
SetLastError
LockResource
GetStartupInfoW
HeapSetInformation
GlobalHandle
GetCurrentThreadId
ExitProcess
GetSystemDirectoryW
InterlockedExchange
GetFileSize
ConnectNamedPipe
FindResourceExW
GetProfileIntW
FlushFileBuffers

user32

GetKeyboardState
MapWindowPoints
GetWindowDC
GetWindow
LoadImageW
PostQuitMessage
InvalidateRect
ShowOwnedPopups
PeekMessageW
InvertRect
PostThreadMessageW
GetWindowRgn
IsZoomed
GetScrollRange
DefMDIChildProcW
KillTimer
DrawEdge
WaitMessage
EndPaint
CopyImage
EnableMenuItem
CharUpperBuffW
UpdateWindow
DefWindowProcW
GetWindowRect
GetMessageTime
DispatchMessageW
OpenClipboard
SetLayeredWindowAttributes
GetActiveWindow
GetMenuStringW
EnumDisplayMonitors
MapVirtualKeyW
GetMenuItemID
GetScrollInfo
EndDeferWindowPos
RegisterWindowMessageW
ReuseDDElParam
GetSystemMenu
DestroyAcceleratorTable
EqualRect
LoadAcceleratorsW
SetMenu
UnhookWindowsHookEx
SetRect
MapVirtualKeyExW
GetMessageW
DrawTextExW
GetClassNameW
LockWindowUpdate
SubtractRect
GetCursorPos
InsertMenuItemW
GetDoubleClickTime
DrawStateW
GetParent
SetCursor
DestroyCursor
TranslateMDISysAccel
IsChild
FrameRect
RegisterClassW
GetNextDlgTabItem
LoadIconW
CallNextHookEx
SetFocus
ReleaseCapture
CheckDlgButton
IntersectRect
GetAsyncKeyState
GetTopWindow
GetMonitorInfoW
GetSubMenu
SetCursorPos
IsWindowVisible
ToUnicodeEx
AdjustWindowRectEx
GetMenuItemInfoW
SetClassLongW
GetMenu
SetWindowPos
WindowFromPoint
GetSystemMetrics
DrawIcon
ValidateRect
IsWindow
SendDlgItemMessageA
SetScrollInfo
DrawFocusRect
GetMenuState
CreateAcceleratorTableW
CallWindowProcW
SetForegroundWindow
TrackPopupMenu
GetNextDlgGroupItem
DrawMenuBar
GetMenuDefaultItem
GetDesktopWindow
IsIconic
DrawTextW
GetClassInfoExW
GetWindowPlacement
GetWindowLongW
GetKeyNameTextW
GetWindowTextW
GetDC
SetWindowTextW
GetUpdateRect
IsMenu
GetMenuCheckMarkDimensions
RegisterClipboardFormatW
GetLastActivePopup
CreateMenu
SetPropW
TranslateMessage
CreateWindowExW
GetFocus
EnableWindow
TranslateAcceleratorW
LoadMenuW
IsWindowEnabled
MessageBeep
PtInRect
GetDlgCtrlID
UnpackDDElParam
ScreenToClient
CopyRect
BeginPaint
SendMessageW
SetCapture
InsertMenuW
IsDialogMessageW
MoveWindow
GetSysColorBrush
DestroyMenu
EnableScrollBar
DestroyWindow
IsClipboardFormatAvailable
GetClientRect
SetWindowLongW
SetTimer
CreatePopupMenu
GetScrollPos
SetParent
LoadBitmapW
RedrawWindow
DrawFrameControl
FillRect
RealChildWindowFromPoint
CharUpperW
CloseClipboard
GetWindowTextLengthW
GrayStringW
ShowWindow
NotifyWinEvent
MonitorFromWindow
UpdateLayeredWindow
GetClassInfoW
GetKeyState
SetMenuItemBitmaps
SetMenuDefaultItem
MessageBoxW
GetPropW
ScrollWindow
CopyIcon
GetMessagePos
SetClipboardData
RemoveMenu
GetSysColor
DialogBoxParamW
GetDlgItem
TabbedTextOutW
DeleteMenu
ShowScrollBar
UnionRect
SetWindowRgn
GetWindowThreadProcessId
DefFrameProcW
SystemParametersInfoW
EmptyClipboard
GetIconInfo
SetScrollRange
SetScrollPos
SendDlgItemMessageW
EnumWindows
SetWindowsHookExW
AppendMenuW
DeferWindowPos
SetActiveWindow
DrawIconEx
HideCaret
DestroyIcon
GetCapture
MapDialogRect
BringWindowToTop
IsCharLowerW
PostMessageW
IsRectEmpty
ModifyMenuW
CopyAcceleratorTableW
ClientToScreen
BeginDeferWindowPos
InflateRect
SetRectEmpty
GetMenuItemCount
LoadCursorW
EndDialog
MonitorFromPoint
SetWindowPlacement
ReleaseDC
OffsetRect
RemovePropW
CheckMenuItem
GetForegroundWindow
CreateDialogIndirectParamW
GetKeyboardLayout
GetClassLongW
WinHelpW

gdi32

EnumFontFamiliesW
CreatePalette
LineTo
GetPaletteEntries
ExtTextOutW
StretchBlt
GetViewportExtEx
GetObjectW
SetPixel
DeleteDC
SelectClipRgn
GetBkColor
SetPixelV
GetTextColor
GetBitmapBits
OffsetViewportOrgEx
SetViewportExtEx
PtInRegion
GetTextExtentPoint32W
GetNearestPaletteIndex
TextOutW
GetClipBox
SetTextAlign
ExcludeClipRect
CreateHatchBrush
CreateCompatibleBitmap
GetPixel
SetBkColor
SaveDC
CreateDIBSection
ExtSelectClipRgn
IntersectClipRect
PtVisible
Escape
SetWindowOrgEx
Ellipse
ExtFloodFill
DPtoLP
CreateBitmap
Rectangle
SetWindowExtEx
GetViewportOrgEx
SetBkMode
CreateFontIndirectW
Polygon
CreateDIBitmap
FillRgn
RestoreDC
CreatePolygonRgn
OffsetWindowOrgEx
CombineRgn
ScaleViewportExtEx
DeleteObject
CreateRectRgnIndirect
GetStockObject
CreatePen
LPtoDP
GetTextFaceW
Polyline
GetTextMetricsW
SelectPalette
RectVisible
SetDIBColorTable
CreateRectRgn
CreateRoundRectRgn
PatBlt
GetWindowOrgEx
SelectObject
SetPolyFillMode
CreateDCW
GetWindowExtEx
MoveToEx
SetLayout
FrameRgn
GetTextCharsetInfo
GetLayout
CopyMetaFileW
CreateSolidBrush
BitBlt
SetROP2
GetSystemPaletteEntries
CreatePatternBrush
EnumFontFamiliesExW
CreateCompatibleDC
SetMapMode
ScaleWindowExtEx
GetDeviceCaps
SetRectRgn
CreateEllipticRgn
GetBoundsRect
SetPaletteEntries
OffsetRgn
RealizePalette
SetTextColor
SetViewportOrgEx
GetRgnBox
GetObjectType

comdlg32

GetOpenFileNameW
GetFileTitleW

advapi32

OpenProcessToken
GetSecurityDescriptorSacl
RegEnumKeyExW
IsValidSid
RegDeleteKeyW
RegQueryValueExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCreateKeyExW
SetSecurityDescriptorSacl
RegCloseKey
GetTokenInformation
RegSetValueExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
OpenThreadToken
RegDeleteValueW
ConvertSidToStringSidW
RegOpenKeyExW

shell32

ShellExecuteW
SHGetSpecialFolderLocation
SHAppBarMessage
DragFinish
ShellExecuteExW
SHGetFolderLocation
SHGetDesktopFolder
DragQueryFileW
SHGetFileInfoW
SHGetPathFromIDListW
SHBrowseForFolderW

ole32

DoDragDrop
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoTaskMemFree
OleLockRunning
CoInitializeEx
CoLockObjectExternal
IsAccelerator
OleDuplicateData
OleTranslateAccelerator
OleGetClipboard
RegisterDragDrop
CoUninitialize
RevokeDragDrop
CoInitialize
CoTaskMemAlloc
CoCreateInstance
ReleaseStgMedium
CreateStreamOnHGlobal
CLSIDFromString

oleaut32

VariantClear
VariantInit
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
VariantChangeType
SysStringByteLen

comctl32

ImageList_GetIconSize

shlwapi

PathFindExtensionW
PathIsUNCW
PathFindFileNameW
PathStripToRootW
PathRemoveFileSpecW
SHCopyKeyA

winmm

PlaySoundW

msimg32

TransparentBlt
AlphaBlend

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

gdiplus

GdiplusShutdown
GdipBitmapUnlockBits
GdipDrawImageI
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipSetInterpolationMode
GdipGetImagePaletteSize
GdipBitmapLockBits
GdipFree
GdipCreateFromHDC
GdipGetImagePixelFormat
GdipCreateBitmapFromHBITMAP
GdipGetImageWidth
GdipCreateBitmapFromScan0
GdiplusStartup
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipDisposeImage
GdipGetImagePalette
GdipAlloc
GdipCloneImage
GdipGetImageHeight

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

Exports

Exports

MyCopyMemory

Sections

.text
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ffc
Size: - Virtual size: 205KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qqw
Size: 500KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vvw
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b65337060ba554906d5d7240b4d98c9c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

msimg32

imm32

gdiplus

oleacc

Exports

Exports

Sections

.text Size: 165KB - Virtual size: 165KB

.ffc Size: - Virtual size: 205KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 20B

.qqw Size: 500KB - Virtual size: 500KB

.vvw Size: 160KB - Virtual size: 159KB

.rsrc Size: 1024B - Virtual size: 712B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 165KB - Virtual size: 165KB

.ffc
Size: - Virtual size: 205KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 20B

.qqw
Size: 500KB - Virtual size: 500KB

.vvw
Size: 160KB - Virtual size: 159KB

.rsrc
Size: 1024B - Virtual size: 712B

.reloc
Size: 5KB - Virtual size: 4KB