f9a154b4fabb4a3255103aca18120983_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f9a154b4fabb4a3255103aca18120983_JaffaCakes118
Size

233KB
MD5

f9a154b4fabb4a3255103aca18120983
SHA1

e21ee3ecb91c5f5288aaf1daa8a6bcd0515d41aa
SHA256

63819eb8d048de1b8bdc6f63f313ef81fea423f55d4224ff893094b9bf50d39d
SHA512

06cf03b296ea8e1acfeae8b37cf432a849c673aabedf84e74420e6aa5f1e5fb0349010f5e22e73ad41c3a21289b97caeee8f5a81603c36c2428e0e063f5d91b9
SSDEEP

3072:tD5G9O/4JUp7pJRTm7aTO6T8XI7VWC1/H11ISqp55H4c8zw8y:uUwmFJRShQ8XUjjEjHr8zwz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9a154b4fabb4a3255103aca18120983_JaffaCakes118

Files

f9a154b4fabb4a3255103aca18120983_JaffaCakes118
.exe windows:5 windows x86 arch:x86

56865c9e836d8bd299f0cdfebc768009

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextW
LoadIconW
ExitWindowsEx
BringWindowToTop
GetSubMenu
RegisterClassExW
LoadBitmapW
LoadCursorW
CallNextHookEx
GetMenuItemCount
GetMenuItemID
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
SetActiveWindow
GetMessageTime
GetMessagePos
MapWindowPoints
UpdateWindow
GetMenu
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CallWindowProcW
SystemParametersInfoA
IsIconic
GetWindowPlacement
MessageBeep
IsChild
GetTopWindow
GetNextDlgTabItem
GetNextDlgGroupItem
ReleaseCapture
GetDesktopWindow
SetCapture
GetClientRect
GetWindowRect
SetCursor
SetRect
IsRectEmpty
CopyAcceleratorTableW
OffsetRect
PtInRect
CharNextW
GetFocus
SetFocus
MoveWindow
GetDlgCtrlID
IsWindow
IsDialogMessageW
SendDlgItemMessageW
GetDlgItem
CharUpperW
SetWindowsHookExW
CreateWindowExW
GetActiveWindow
GetKeyState
GetCursorPos
GetWindowTextW
GetSysColorBrush
UnhookWindowsHookEx
IntersectRect
CopyRect
GetSysColor
GetWindowDC
GetDC
ClientToScreen
RegisterClipboardFormatW
InvalidateRgn
MessageBoxW
LoadStringW
RedrawWindow
GetSystemMetrics
DrawStateW
PostThreadMessageW
InvalidateRect
SystemParametersInfoW
EndPaint
ReleaseDC
DrawTextW
BeginPaint
SetForegroundWindow
DestroyMenu
EndDialog
CreateDialogIndirectParamW
UnregisterClassA
EqualRect
ShowWindow
SetWindowPos
IsWindowVisible
ValidateRect
DefWindowProcW
GetWindowLongW
DestroyWindow
DispatchMessageW
TranslateMessage
GetMessageW
PostMessageW
PeekMessageW
SetWindowLongW
GrayStringW
DrawTextExW
TabbedTextOutW
PostQuitMessage
GetWindow
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
SendMessageW
GetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetMenuState

comdlg32

GetFileTitleW

shell32

SHGetFolderPathW
ShellExecuteW

ole32

OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
OleInitialize

advapi32

RegCloseKey
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegOpenKeyW
RegEnumKeyW
RegQueryValueW
RegOpenKeyExW
RegCreateKeyExW

gdi32

SetWindowExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
ScaleWindowExtEx
SetMapMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
GetObjectW
SetBkMode
GetStockObject
DeleteObject
SetTextColor
SelectObject
ExtSelectClipRgn
DeleteDC
CreateBitmap
ScaleViewportExtEx
DPtoLP
GetRgnBox
GetTextColor
GetBkColor
GetMapMode
CreateRectRgnIndirect
CreateFontIndirectW
GetClipBox
TextOutW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

VirtualAlloc
GetSystemInfo
VirtualQuery
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
FlushFileBuffers
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
SetEnvironmentVariableW
CreateFileA
GetCurrentDirectoryA
GetDriveTypeA
SetFilePointer
GetExitCodeProcess
CreatePipe
GetFileAttributesA
CreateProcessA
MoveFileA
VirtualProtect
GetLogicalDriveStringsW
ResetEvent
FormatMessageA
GetThreadLocale
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
CompareStringA
lstrcmpW
GlobalDeleteAtom
SetErrorMode
GetModuleHandleW
FreeResource
GetCurrentProcessId
lstrlenA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
MulDiv
SetLastError
GetExitCodeThread
GetDriveTypeW
HeapSize
GetFileType
SetStdHandle
HeapReAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
ExitProcess
GetSystemTimeAsFileTime
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
RaiseException
GetLocaleInfoA
GetACP
GetTickCount
GlobalFlags
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GetFileTime
GetVolumeInformationW
DuplicateHandle
GetFileSize
UnlockFile
LockFile
GetLocalTime
IsDebuggerPresent
InterlockedIncrement
GetCurrentThreadId
GetLastError
InterlockedDecrement
Sleep
WriteFile
InitializeCriticalSectionAndSpinCount
RtlUnwind
MultiByteToWideChar
LCMapStringW
DeleteFileA
WideCharToMultiByte
CreateEventW
SetEvent
GetModuleHandleA
GetProcAddress
GetCurrentProcess

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

56865c9e836d8bd299f0cdfebc768009

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

ole32

advapi32

gdi32

version

kernel32

Sections

.text Size: 86KB - Virtual size: 85KB

.rdata Size: 111KB - Virtual size: 111KB

.data Size: 5KB - Virtual size: 83KB

.rsrc Size: 29KB - Virtual size: 29KB

.text
Size: 86KB - Virtual size: 85KB

.rdata
Size: 111KB - Virtual size: 111KB

.data
Size: 5KB - Virtual size: 83KB

.rsrc
Size: 29KB - Virtual size: 29KB