f5b5a9a6a5918b233b3a50d399c666e4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f5b5a9a6a5918b233b3a50d399c666e4_JaffaCakes118
Size

332KB
MD5

f5b5a9a6a5918b233b3a50d399c666e4
SHA1

95ab4896f78fa9ac84b4a91fd7356be0c0ea17b8
SHA256

a62f14081eef6ec6055eb6914607911098cf2d53047b56847177b0dd7046316c
SHA512

3f0ab29ba7bde4e004eca61b97539b86f9466e72cdb1b01ec085e6a16d8735405fd989883cfa5b0d1f21f9b5ecb7e2212d27eecc20ab9be44ca8fc73eedae4d6
SSDEEP

6144:fnx9JGF/UTrnINYmUj8pK/JZE73GlTtRssmdU3akR55OgN3b558nt3jfQ6yz4W7l:fnJq/eHz8pKBZ83GpQEDr5Ogdb5en5ji

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5b5a9a6a5918b233b3a50d399c666e4_JaffaCakes118

Files

f5b5a9a6a5918b233b3a50d399c666e4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a1efd9a2bec611d4b0588c1f692c5e58

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHFileOperationW
SHSetLocalizedName
SHAppBarMessage
Shell_NotifyIconA
SHGetInstanceExplorer
ExtractIconExW
SHGetDataFromIDListW
ShellAboutW
SHPathPrepareForWriteW
ExtractIconW
SHGetFileInfoW
Shell_NotifyIconW
SHGetSpecialFolderPathW
SHGetFolderPathW
SHGetSpecialFolderLocation
SHGetFolderPathAndSubDirW
SHGetPathFromIDListW
DragQueryFileW
SHBrowseForFolderW
ExtractAssociatedIconExW
ShellExecuteA
SHCreateShellItem
SHGetFolderLocation
ShellExecuteW
ShellExecuteExW
SHBindToParent
SHGetDesktopFolder
SHChangeNotify
SHGetPathFromIDListA

advapi32

CryptReleaseContext
RegEnumKeyExW
SetThreadToken
GetUserNameW
GetTokenInformation
RegQueryValueW
CryptCreateHash
ConvertStringSidToSidW
RegisterTraceGuidsW
GetLengthSid
RegDeleteKeyA
RegSetValueExW
RegEnumValueA
RegDeleteKeyW
RegQueryValueExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptDestroyHash
RegOpenCurrentUser
RegDeleteValueW
RegCreateKeyExA
DuplicateTokenEx
CryptHashData
RegOpenKeyExA
TraceMessage
RegSetValueExA
SetTokenInformation
CreateProcessAsUserW
GetTraceEnableFlags
OpenThreadToken
ImpersonateSelf
RegCreateKeyExW
GetTraceLoggerHandle
GetTraceEnableLevel
RegQueryInfoKeyW
RegEnumKeyW
OpenProcessToken
UnregisterTraceGuids
RegEnumValueW
RegCloseKey
CryptGetHashParam
RegOpenKeyExW
RegOpenKeyW
TraceEvent
RegQueryValueExA
RegCreateKeyA
CryptAcquireContextW
ConvertSidToStringSidW
RegDeleteValueA
IsTextUnicode

gdi32

CreatePen
CreateRectRgnIndirect
SelectObject
SetPaletteEntries
PlayEnhMetaFile
CreateDCA
SetTextAlign
CreateEnhMetaFileA
GetRgnBox
RectVisible
TextOutA
OffsetRgn
GetBkColor
SetMapMode
GetObjectA
CreateCompatibleDC
GetGlyphIndicesW
SetStretchBltMode
SetDCPenColor
CreateDIBSection
SetBkColor
SetTextColor
CreateBitmap
GetTextColor
SetWindowOrgEx
GetLayout
CreateHalftonePalette
MoveToEx
LPtoDP
SaveDC
GetBrushOrgEx
CreateDCW
GetPixel
GetTextMetricsW
SetViewportOrgEx
ExtCreateRegion
CreatePolygonRgn
SetRectRgn
CloseMetaFile
CreateFontIndirectW
Rectangle
CombineRgn
SetBrushOrgEx
CreatePalette
CreateDIBPatternBrushPt
GetTextCharset
CreateMetaFileW
CreateRectRgn
PatBlt
GetTextExtentExPointI
GetDeviceCaps
CreateFontIndirectA
IntersectClipRect
CreatePatternBrush
BitBlt
TextOutW
GetStockObject
StretchDIBits
OffsetWindowOrgEx
EqualRgn
GetTextAlign
RealizePalette
CloseEnhMetaFile
CreateFontW
GetDCOrgEx
GetRegionData
CreateCompatibleBitmap
GetSystemPaletteEntries
GetPaletteEntries
SelectPalette
DeleteObject
GetTextExtentPoint32W
DeleteEnhMetaFile
GetClipBox
SetLayout
SetViewportExtEx
ExtTextOutW
GetDIBits
SetBkMode
RestoreDC
CreateSolidBrush
LineTo
GetTextExtentPointW
SetWindowExtEx
GetObjectW
GetBkMode
GetTextExtentPoint32A
StretchBlt
DeleteDC

uxtheme

GetThemeAppProperties
GetThemeColor
GetThemeFont
GetThemeBackgroundContentRect
GetThemeMetric
GetThemePartSize
GetThemeBackgroundExtent
CloseThemeData
DrawThemeBackground
DrawThemeParentBackground
GetThemeMargins
IsThemeActive
IsAppThemed
OpenThemeData
SetWindowTheme

ntdll

RtlUshortByteSwap
NtAllocateVirtualMemory
LdrGetDllHandle

psapi

GetProcessImageFileNameW

kernel32

ReleaseSemaphore
GetCurrentProcess
GlobalDeleteAtom
GetSystemInfo
DeleteTimerQueueTimer
VirtualAlloc
CreateFileMappingW
GetSystemWow64DirectoryW
GlobalFree
GetLocaleInfoW
TerminateThread
SetThreadExecutionState
CreateActCtxW
ReleaseActCtx
SizeofResource
GetFileSize
GetSystemDefaultUILanguage
IsDBCSLeadByte
HeapReAlloc
DebugBreak
OutputDebugStringA
SuspendThread
CreateMutexW
TlsFree
InitializeCriticalSectionAndSpinCount
CreateFileMappingA
VirtualFree
CreateDirectoryW
WideCharToMultiByte
FindClose
GetTempPathW
GetUserDefaultUILanguage
WaitForSingleObject
GetCurrentThreadId
CompareStringA
HeapAlloc
GetCurrentProcessId
GetSystemTimeAsFileTime
UnlockFileEx
CreateTimerQueueTimer
TerminateProcess
lstrcmpiA
GetLastError
GetModuleFileNameW
LoadLibraryW
GetModuleHandleExW
GetPrivateProfileStringW
GlobalAddAtomW
SetEndOfFile
LocalReAlloc
LoadResource
ActivateActCtx
GlobalAlloc
GetLongPathNameW
CompareStringW
QueryPerformanceCounter
GetFileAttributesA
GetPrivateProfileSectionW
HeapCreate
EnumUILanguagesW
LoadLibraryExW
WaitForSingleObjectEx
GetFileSizeEx
TryEnterCriticalSection
CreateToolhelp32Snapshot
WriteFile
SetFileAttributesW
InterlockedCompareExchange
GetModuleFileNameA
GetACP
CreateMutexA
lstrlenW
SetThreadContext
TlsGetValue
GetVersionExW
LockResource
GetEnvironmentVariableW
WritePrivateProfileStringW
ResumeThread
GetFullPathNameW
ReplaceFileW
lstrcmpA
GetThreadPriority
MoveFileW
GetFileAttributesW
GlobalUnlock
FileTimeToSystemTime
SetCurrentDirectoryA
DisableThreadLibraryCalls
GetThreadLocale
ReadFile
GetNumberFormatW
FindAtomW
GetSystemTime
FormatMessageW
GetLogicalDriveStringsW
FindNextFileW
LocalAlloc
SetErrorMode
DeleteFileW
Process32FirstW
FlushInstructionCache
GetProcessHeap
HeapDestroy
FileTimeToLocalFileTime
Process32NextW
SetFileTime
FindResourceW
GlobalSize
ExpandEnvironmentStringsW
OpenMutexA
SetUnhandledExceptionFilter
QueryDosDeviceW
AddAtomW
FindResourceExW
ResetEvent
CreateSemaphoreW
GetTickCount
SetCurrentDirectoryW
WritePrivateProfileSectionW
DeleteCriticalSection
LocalFileTimeToFileTime
LCMapStringW
lstrcmpiW
CreateFileW
GetLocalTime
GetVersion
ReleaseMutex
CompareFileTime
UnmapViewOfFile
GetTempFileNameW
GetTimeFormatW
OpenMutexW
SetFilePointer
RaiseException
FreeLibraryAndExitThread
lstrcmpW
TlsSetValue
GlobalReAlloc
GetSystemDirectoryW
CloseHandle
TlsAlloc
OpenProcess
SystemTimeToFileTime
CreateDirectoryA
CopyFileW
GlobalLock
CreateEventW
InterlockedIncrement
SetEvent
UnhandledExceptionFilter
InterlockedDecrement
GetShortPathNameW
SearchPathW
ExitProcess
SetEnvironmentVariableW
FindFirstFileW
GetPrivateProfileSectionNamesW
LockFileEx
FreeLibrary
RemoveDirectoryW
GetThreadContext
GetWindowsDirectoryW
LocalFree
DuplicateHandle
GetProcAddress
OpenEventW
SetProcessShutdownParameters
ExpandEnvironmentStringsA
SetFilePointerEx
GlobalFlags
CreateEventA
EnterCriticalSection
GetFileAttributesExW
DeleteAtom
IsWow64Process
MulDiv
GetPrivateProfileStringA
VirtualQuery
DeactivateActCtx
MultiByteToWideChar
GetCPInfo
GetExitCodeThread
GetModuleHandleExA
GlobalAddAtomA
QueueUserWorkItem
CreateProcessW
GetDateFormatW
SetLastError
lstrlenA
GetSystemDefaultLCID
LeaveCriticalSection
WaitForMultipleObjects
GetCurrentDirectoryW
Sleep
LoadLibraryA
GetModuleHandleW
GetCurrentThread
GetFileInformationByHandle
GetUserDefaultLCID
SetThreadPriority
InitializeCriticalSection
GetModuleHandleA
GetSystemDirectoryA
LocalSize
GetVersionExA
GetAtomNameW
QueryPerformanceFrequency
SetProcessWorkingSetSize
CreateThread
VirtualProtect
CreateFileA
InterlockedExchange
HeapFree
MoveFileExW
MapViewOfFile

user32

IsDialogMessageW
GetWindowPlacement
DdeConnect
GetKeyState
VkKeyScanExW
CopyRect
GetWindowTextLengthW
GetMenuDefaultItem
ShowScrollBar
GetForegroundWindow
DeleteMenu
TranslateAcceleratorW
GetDlgItem
GetAsyncKeyState
IsWindow
GetSystemMetrics
PostThreadMessageW
OpenClipboard
SetDlgItemTextW
MessageBeep
PostQuitMessage
LoadCursorA
SetMenuDefaultItem
GetWindow
GetActiveWindow
GetDesktopWindow
DialogBoxIndirectParamA
EndMenu
MapVirtualKeyW
GetClipboardData
CheckRadioButton
PeekMessageA
ReleaseDC
LoadCursorW
SetCapture
GetMessageTime
ChildWindowFromPoint
RegisterWindowMessageA
GetDlgItemTextW
IsMenu
GetFocus
DdeCreateDataHandle
MessageBoxW
SendMessageTimeoutW
UnregisterClassW
LoadStringA
GetPropW
SetClipboardData
IsCharAlphaNumericW
SetMenuItemInfoW
SetPropW
AttachThreadInput
CreateMenu
GetSubMenu
GetProcessWindowStation
SetClipboardViewer
IsIconic
WindowFromPoint
AdjustWindowRect
SetParent
DrawTextW
EndDialog
DrawIconEx
HideCaret
DeferWindowPos
DdeNameService
DestroyMenu
DrawTextExW
SendMessageTimeoutA
CallNextHookEx
GetComboBoxInfo
PostMessageA
SetActiveWindow
InvalidateRect
GetKeyNameTextW
wsprintfW
RedrawWindow
GetClassNameW
UnionRect
MessageBoxIndirectW
DestroyIcon
GetMenuStringW
ReleaseCapture
CreateWindowExW
OffsetRect
SystemParametersInfoA
CreatePopupMenu
GetWindowTextW
IsChild
GetDC
DdeClientTransaction
WaitForInputIdle
GetClassLongW
EnumWindows
FillRect
IsDlgButtonChecked
CallMsgFilterW
EnumDisplaySettingsW
DdeCreateStringHandleW
SetWindowPos
MoveWindow
RemoveMenu
IsWindowUnicode
GetWindowRect
SendMessageA
CopyIcon
EndPaint
MessageBoxExA
AdjustWindowRectEx
DdeQueryStringW
DdeFreeStringHandle
SetWindowsHookExW
RegisterClipboardFormatA
SetWindowLongA
FindWindowExW
SetForegroundWindow
MapDialogRect
RegisterClipboardFormatW
IsWindowEnabled
SetCursor
DrawEdge
DispatchMessageA
SetWindowRgn
DdeUninitialize
RegisterClassExW
EndDeferWindowPos
DrawFrameControl
LockSetForegroundWindow
ClientToScreen
GetClipboardFormatNameW
PostMessageW
GetParent
InflateRect
DrawFocusRect
SetMenu
LoadMenuW
CloseClipboard
EnableWindow
GetKeyboardLayout
GetMessageW
GetMenuState
TrackPopupMenu
CheckDlgButton
SetCursorPos
WaitMessage
SendNotifyMessageW
GetShellWindow
WinHelpW
SendDlgItemMessageW
LoadStringW
GetPropA
GetSysColor
SystemParametersInfoW
EnumDesktopWindows
SetWindowPlacement
GetMenuItemID
GetWindowThreadProcessId
GetWindowInfo
GetClientRect
GetWindowLongW
MapWindowPoints
CharLowerW
DdeGetData
GetDialogBaseUnits
SetPropA
ScreenToClient
GetSystemMenu
DefWindowProcA
SetDlgItemInt
CharPrevA
ChangeClipboardChain
GetLastInputInfo
DdeInitializeW
AnimateWindow
ShowCaret
BeginPaint
SetScrollPos
LoadIconW
TrackPopupMenuEx
MsgWaitForMultipleObjectsEx
PostThreadMessageA
EqualRect
IsWindowVisible
BeginDeferWindowPos
GetCursorPos
IsRectEmpty
CharNextA
GetCapture
MessageBoxIndirectA
CheckMenuRadioItem
GetNextDlgTabItem
GetMessageA
GetDoubleClickTime
InsertMenuW
GetScrollInfo
GetClassWord
CharPrevW
GetMonitorInfoW
GetLastActivePopup
AppendMenuW
AllowSetForegroundWindow
UnhookWindowsHookEx
MonitorFromWindow
FindWindowW
GetWindowRgnBox
NotifyWinEvent
SetFocus
GetClassInfoExW
GetCursor
GetMenuItemInfoA
IsHungAppWindow
MonitorFromRect
MsgWaitForMultipleObjects
LoadBitmapW
SetWindowLongW
GetIconInfo
EnumThreadWindows
GetMessagePos
GetDlgCtrlID
SetWindowTextW
EnumChildWindows
SetTimer
SetMenuItemBitmaps
CallWindowProcW
MonitorFromPoint
UpdateWindow
InsertMenuItemW
GetTopWindow
DdeFreeDataHandle
RemovePropW
LoadAcceleratorsW
CheckMenuItem
DialogBoxIndirectParamW
GetClassInfoW
SetRect
RemovePropA
CopyImage
GetMenuItemInfoW
GetWindowDC
TranslateMessage
SetRectEmpty
EnableMenuItem
MessageBoxExW
CreateIconIndirect
RegisterWindowMessageW
TrackMouseEvent
GetSysColorBrush
CharUpperW
PtInRect
UpdateLayeredWindow
KillTimer
CreateDialogParamW
DestroyAcceleratorTable
GetMenuItemCount
DialogBoxParamA
EmptyClipboard
IntersectRect
SetScrollInfo
SendMessageW
GetAncestor
LoadImageW
ShowOwnedPopups
GetWindowLongA
DialogBoxParamW
RegisterClassW
CharLowerBuffW
DdeDisconnect
CharNextW
DefWindowProcW
DispatchMessageW
DestroyWindow
FindWindowA
ShowWindow
PeekMessageW

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a1efd9a2bec611d4b0588c1f692c5e58

Headers

DLL Characteristics

File Characteristics

Imports

shell32

advapi32

gdi32

uxtheme

ntdll

psapi

kernel32

user32

Sections

.text Size: 183KB - Virtual size: 183KB

.rdata Size: 88KB - Virtual size: 88KB

.rsrc Size: 21KB - Virtual size: 21KB

.data Size: 37KB - Virtual size: 1.4MB

.tls Size: 512B - Virtual size: 4KB

.text
Size: 183KB - Virtual size: 183KB

.rdata
Size: 88KB - Virtual size: 88KB

.rsrc
Size: 21KB - Virtual size: 21KB

.data
Size: 37KB - Virtual size: 1.4MB

.tls
Size: 512B - Virtual size: 4KB