0ce6b27487a28187dc49d6153d766fa0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0ce6b27487a28187dc49d6153d766fa0_JaffaCakes118
Size

345KB
MD5

0ce6b27487a28187dc49d6153d766fa0
SHA1

dbacf6039d6c8c8c3adc4bf298b5ee2d28938b2f
SHA256

319d9f930782ca1e0e135cc7a80a16f929597a034e03db6b4fd4becdceabf366
SHA512

fb0a7d4be57afc31562d420379b52df937f3c48bea4b2e5dba2fb0b19a4579a8e64b08f6146c08a4fe2fab8a57fe590995d0ac4464e016dd60e5b815e24c0947
SSDEEP

6144:TEoyNUQejBol6yietXzkPd/e8mrk0C4YH3lzzdee:oQyzJRkPd28B0CLXlzdX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ce6b27487a28187dc49d6153d766fa0_JaffaCakes118

Files

0ce6b27487a28187dc49d6153d766fa0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7f1d68f659e3050e6ffe2e14a6ef016e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

QueryServiceLockStatusA
RegSetValueExA
RegSetValueExW
GetSecurityDescriptorGroup
SetSecurityDescriptorOwner
DecryptFileW
FreeSid
ObjectCloseAuditAlarmA
DeregisterEventSource
GetSidSubAuthorityCount
CreateProcessAsUserA
EnumServicesStatusA
RegQueryValueW
ChangeServiceConfig2A
RegUnLoadKeyW
AccessCheck
GetSecurityInfo
RegQueryMultipleValuesW
RegQueryValueA
RegOpenKeyExW
LookupAccountNameA
GetTrusteeNameW
OpenBackupEventLogA
BuildTrusteeWithNameW
AreAnyAccessesGranted
LsaDeleteTrustedDomain
RegNotifyChangeKeyValue
ObjectDeleteAuditAlarmW
OpenServiceA
MapGenericMask
RegEnumKeyA
ObjectPrivilegeAuditAlarmA
GetExplicitEntriesFromAclW
RegSetValueA
RegLoadKeyA
FindFirstFreeAce
SetSecurityDescriptorGroup
SetSecurityInfo
LsaCreateTrustedDomainEx
GetExplicitEntriesFromAclA
RegCreateKeyA
NotifyChangeEventLog
GetServiceDisplayNameW
QueryServiceConfigA
RegSetKeySecurity
LsaEnumerateTrustedDomains
OpenEventLogA
RegSetValueW
BackupEventLogA
RegisterEventSourceA
AllocateAndInitializeSid
RegConnectRegistryA
LogonUserW
OpenSCManagerW
GetAuditedPermissionsFromAclW
AdjustTokenPrivileges
StartServiceCtrlDispatcherW
AddAccessAllowedAce
LsaClose
GetNumberOfEventLogRecords
RegConnectRegistryW
RegEnumValueA
CopySid
GetSidLengthRequired
AccessCheckAndAuditAlarmA
GetSidIdentifierAuthority
LsaSetTrustedDomainInfoByName
InitializeSecurityDescriptor
CloseEventLog
GetServiceKeyNameA
RegDeleteKeyA
RegOpenKeyW
QueryServiceConfig2W
DuplicateToken
ImpersonateLoggedOnUser
GetSecurityDescriptorDacl
CreatePrivateObjectSecurity
GetServiceKeyNameW
RegSaveKeyA
QueryServiceConfig2A
MakeSelfRelativeSD
GetPrivateObjectSecurity
GetAce
RegDeleteValueA
UnlockServiceDatabase
EqualPrefixSid
CreateRestrictedToken
RegOpenKeyA
GetEffectiveRightsFromAclA
LookupPrivilegeValueA
GetSidSubAuthority
SetTokenInformation
QueryServiceObjectSecurity
LookupPrivilegeNameW
RegDeleteValueW
RevertToSelf
GetTrusteeFormA
IsValidSid
LsaEnumerateAccountRights
LookupPrivilegeNameA
RegCreateKeyExA
SetSecurityDescriptorSacl
SetFileSecurityA
LsaRetrievePrivateData
SetServiceObjectSecurity
InitiateSystemShutdownW
RegQueryValueExW
StartServiceA
LockServiceDatabase
QueryServiceLockStatusW
RegQueryValueExA
ObjectOpenAuditAlarmW
LsaQueryInformationPolicy
GetSecurityDescriptorOwner
DeleteService
ReadEventLogW
BuildExplicitAccessWithNameA
GetNamedSecurityInfoW

user32

GetProcessWindowStation
WindowFromPoint
SetParent
LoadAcceleratorsA
ArrangeIconicWindows
VkKeyScanW
CreateMenu
SetUserObjectSecurity
IsDlgButtonChecked
CallNextHookEx
DefDlgProcA
CreateAcceleratorTableA
DdeQueryStringA
CharUpperW
GetWindowTextLengthA
ReplyMessage
DispatchMessageA
GetDlgItemTextA
EnumWindows
IsZoomed
GetKBCodePage
InflateRect
DefDlgProcW
SetRect
CreateWindowStationW
ModifyMenuA
UnregisterClassW
DlgDirSelectComboBoxExW
IsCharLowerA
GetIconInfo
GetDlgCtrlID
LoadMenuIndirectW
DdeAccessData
GetKeyboardType
CheckMenuItem
WINNLSEnableIME
DdeCreateDataHandle
ToAscii
GetMenuCheckMarkDimensions
DdeInitializeA
CharPrevA
DialogBoxIndirectParamW
DlgDirListA
SetWindowsHookExW
GetMessageW
LoadMenuA
DestroyMenu
DdeGetLastError
GetMenuItemInfoW
IsWindow
GetMenuContextHelpId
DlgDirListW
DdePostAdvise
TrackPopupMenuEx
ShowCursor
FreeDDElParam
EnableScrollBar
RegisterClipboardFormatW
GetActiveWindow
LoadImageW
IsRectEmpty
SetPropW
DdeSetUserHandle
GetClipboardData
CharLowerBuffA
ScrollWindowEx
DdeCreateStringHandleA
CheckMenuRadioItem
InsertMenuA
CloseWindowStation
SetMessageQueue
SetDlgItemInt
GetWindowRect
IsWindowEnabled
CreateMDIWindowW
MapVirtualKeyExA
EndDialog
DdeKeepStringHandle
GetMessageA
LoadCursorFromFileA
DrawTextExA
DefMDIChildProcA
GetWindowTextW
LoadImageA
MoveWindow
CharNextExA
FillRect
GetSubMenu
ChangeDisplaySettingsExW
SetScrollPos
OpenClipboard
IsDialogMessageW
GetWindowDC
ExcludeUpdateRgn
RegisterClassExA
SetSysColors
RegisterClassA
wvsprintfW
GetNextDlgTabItem
CheckRadioButton
GetDlgItemInt
GetPropW
ChildWindowFromPoint
SendDlgItemMessageA
DrawEdge
IsIconic
SetRectEmpty
DrawStateA
SetWindowPlacement
RegisterClassExW
MapVirtualKeyA
DestroyCaret
TrackPopupMenu
LoadStringA
CreateIconIndirect
BlockInput
AdjustWindowRectEx
DrawAnimatedRects
CharLowerA
DlgDirListComboBoxW
DrawTextA
PeekMessageW
OemKeyScan
GetUpdateRect
IsDialogMessageA
SetWindowTextA
CreateDialogIndirectParamW
GetClassInfoExA
GetClassWord
GetMenuItemCount
SetDlgItemTextW
WINNLSGetIMEHotkey
SetLastErrorEx
RemoveMenu
PostThreadMessageW
DeferWindowPos
CloseDesktop
RedrawWindow
GetQueueStatus
CreateDialogParamW
CloseClipboard
SetKeyboardState
DialogBoxIndirectParamA
ScrollDC
UpdateWindow
InSendMessage
KillTimer
FlashWindow
MapVirtualKeyW
DlgDirListComboBoxA
MsgWaitForMultipleObjectsEx
DlgDirSelectExA
GetForegroundWindow
ReuseDDElParam
TranslateAcceleratorW
RemovePropA
DrawTextExW
DdeConnectList
CharLowerW
DispatchMessageW
SystemParametersInfoW
DrawIcon
CreateWindowExW
TranslateMessage
SetScrollRange
SetMenu
DrawStateW
CharToOemA
DialogBoxParamA
LoadIconW
GetKeyboardLayout
PostMessageA
GetCursorPos
SetClassLongA
SetWindowsHookExA
CallMsgFilterA
WindowFromDC
GetDCEx
GetAsyncKeyState
GetFocus
SendMessageCallbackA
VkKeyScanExW
GetCaretPos
EmptyClipboard
ToUnicodeEx
GetInputState
PostQuitMessage
UnhookWindowsHookEx
RemovePropW
GetMessageExtraInfo
GetCursor
GetGUIThreadInfo
WaitMessage
DrawIconEx
EndDeferWindowPos
LoadKeyboardLayoutA
SetMenuItemInfoA
LoadCursorW
ScreenToClient
GetMenuItemRect
MessageBoxIndirectA
CallWindowProcA
LockWindowUpdate
SetThreadDesktop
ShowCaret
InsertMenuItemW
LoadBitmapA
CharToOemW
GetPriorityClipboardFormat
DlgDirSelectExW
LoadBitmapW
SetActiveWindow
GetClipboardFormatNameW
SetWindowTextW
SwapMouseButton
CharPrevW
ToUnicode
SendMessageCallbackW
GetUserObjectSecurity
DestroyCursor
SetClipboardViewer
EnumDisplaySettingsW
GetWindowLongW
SetMenuItemBitmaps
VkKeyScanA
OemToCharW
GetClassNameA
DrawFrameControl
GetWindowWord
DefFrameProcA
GetNextDlgGroupItem
wvsprintfA
SendDlgItemMessageW
DrawMenuBar
SendMessageTimeoutA
PostThreadMessageA
LookupIconIdFromDirectoryEx
DdeConnect
MapWindowPoints
TranslateAcceleratorA
RegisterClassW
LoadCursorA
UnregisterClassA
DdeEnableCallback
SetProcessWindowStation
DefWindowProcA
GetClipCursor
MenuItemFromPoint
IsChild
GetDesktopWindow
SetWindowContextHelpId
CharToOemBuffW
FindWindowExW
EnumDesktopWindows
CreateDialogParamA
PaintDesktop
WaitForInputIdle
DdeCmpStringHandles
OemToCharA
SetCursor
NotifyWinEvent
IntersectRect
CreateCaret
CharLowerBuffW
GetMenuDefaultItem
AppendMenuA
GetMessageTime
EnumPropsExA
ChangeMenuA
LoadKeyboardLayoutW
WinHelpA
SetClassLongW
GetMenuState
CharNextA
GetScrollPos
MessageBoxW
DdeUnaccessData
EnumDisplaySettingsA
DestroyIcon
SetTimer
OffsetRect
CreateWindowStationA
GetSystemMetrics
SubtractRect
AppendMenuW
ModifyMenuW
BringWindowToTop
SetPropA
GetUpdateRgn
GetWindowTextLengthW
EnumWindowStationsW
MessageBoxExA
CountClipboardFormats
GetTopWindow
OemToCharBuffW
GetKeyboardLayoutNameA
SetMenuDefaultItem
ChangeDisplaySettingsW
DefMDIChildProcW
SetUserObjectInformationA
SetCapture
DefWindowProcW
GetWindowLongA
ShowOwnedPopups
GetWindowTextA
DdeQueryNextServer
CreateIconFromResourceEx
SwitchDesktop
GetKeyNameTextA
FrameRect
CreateMDIWindowA
DestroyAcceleratorTable
IsMenu
ImpersonateDdeClientWindow
GetCaretBlinkTime
TranslateMDISysAccel
WinHelpW
OpenIcon
IsWindowVisible
IsWindowUnicode
ReleaseDC
EnumPropsExW
GetMessagePos
DrawFocusRect
GetMenuItemID
GetWindowModuleFileNameW
LoadIconA
CreateCursor
GetClassInfoW
PeekMessageA
SystemParametersInfoA
EqualRect
SendMessageA
DdeClientTransaction
DdeUninitialize
CopyAcceleratorTableA
SendNotifyMessageW
GetSysColorBrush
CharUpperBuffW
GetDialogBaseUnits
CreateWindowExA
GetClassInfoExW
CreatePopupMenu
ChildWindowFromPointEx
MapDialogRect
GetKeyboardLayoutNameW
GetWindowModuleFileNameA
EnumDesktopsW
LoadStringW
SetScrollInfo
DestroyWindow
GetMenuStringW
SetCaretBlinkTime
GetMenuStringA
GetClassLongW
SetMenuContextHelpId
LoadMenuW
SetForegroundWindow
ClientToScreen
VkKeyScanExA
GetClassLongA
UnpackDDElParam
SetWindowPos
InsertMenuW
GetKeyState
MessageBeep
CreateIconFromResource
SendMessageW
GetSysColor
CloseWindow
SetDoubleClickTime
UnloadKeyboardLayout
OemToCharBuffA
GetKeyboardState
GetCapture
DdeDisconnectList
CreateDialogIndirectParamA
InvalidateRgn
SetWindowLongA
GetWindow
UnhookWinEvent
SetWindowsHookA
GrayStringA
UnregisterHotKey
SetDlgItemTextA
EnableMenuItem
SetWinEventHook
HideCaret
TileWindows
PackDDElParam
PtInRect
DlgDirSelectComboBoxExA
OpenInputDesktop
IsCharAlphaNumericA

kernel32

GetModuleHandleA
EnumTimeFormatsA
DosDateTimeToFileTime
GetSystemTime
CreateFileA
GetCommMask
GetCPInfo
GetThreadTimes
DeleteCriticalSection
CreateDirectoryExW
Heap32Next
GetStartupInfoA
GetModuleHandleA
EnumTimeFormatsA
DosDateTimeToFileTime
GetSystemTime
CreateFileA
GetCommMask
GetCPInfo
GetThreadTimes
DeleteCriticalSection
CreateDirectoryExW
Heap32Next
GetStartupInfoA

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
GetFileVersionInfoSizeA

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f1d68f659e3050e6ffe2e14a6ef016e

Headers

File Characteristics

Imports

advapi32

user32

kernel32

version

msvcrt

Sections

.text Size: 104KB - Virtual size: 103KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 3.2MB

.rsrc Size: 36KB - Virtual size: 34KB

.text
Size: 104KB - Virtual size: 103KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 3.2MB

.rsrc
Size: 36KB - Virtual size: 34KB