0856bc4c9a86f0aa88ff6fafdb0d9eaf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0856bc4c9a86f0aa88ff6fafdb0d9eaf_JaffaCakes118
Size

110KB
MD5

0856bc4c9a86f0aa88ff6fafdb0d9eaf
SHA1

8ae441acd67270f75dfa1addfe36645279c2a9c9
SHA256

153f10ef69a18835953fccf8f78b6d95d135f7399396e9f6a0e225413de50421
SHA512

b111bbc424e3208cf319db0dacd7e8ec71f3466fd5d3b4c86f4df3662e50a6719e51620d3160bc0eab04b712d1a9d0f312d94dc5d9805795c7344c098c62c0cd
SSDEEP

3072:/FTX/RdOBhKUif7Rbs7TPMOCA50KjzSSVXsPiCBYqXCFxf:/ha/iyUOCA+MzSQAxU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0856bc4c9a86f0aa88ff6fafdb0d9eaf_JaffaCakes118

Files

0856bc4c9a86f0aa88ff6fafdb0d9eaf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5cb9aeaa87bb747b9d2d552f4f509c97

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMenuItemCount
CallWindowProcA
EnableScrollBar
SetMenu
GetMessageA
CallNextHookEx
RedrawWindow
DestroyCursor
GetWindowLongA
DefFrameProcA
CharUpperA
EndPaint
GetLastActivePopup
GetScrollRange
GetMenuStringA
CreateIcon
EnableWindow
MsgWaitForMultipleObjects
RegisterClassA
GetSystemMetrics
MapVirtualKeyA
SetWindowsHookExA
SetWindowLongA
InvalidateRect
GetCaretPos
GetWindowTextA
CreatePopupMenu
GetKeyboardState
InsertMenuItemA
BeginPaint
GetTabbedTextExtentA
LoadIconA
ReleaseDC
GetIconInfo
ChildWindowFromPoint
TranslateMessage
GetFocus
DestroyIcon
CheckMenuItem
GetClipboardData
GetMenuItemInfoA
ClientToScreen
IsCharAlphaA
GetDesktopWindow
GetWindowPlacement
ShowWindow
WindowFromPoint
EnableMenuItem
IsWindow
GetMenuState
FindWindowA
GetKeyState
GetUpdateRect
GetKeyboardType
TrackPopupMenu
SetClipboardData
SetWindowPlacement
LoadKeyboardLayoutA
RegisterClipboardFormatA
GetParent
ShowOwnedPopups
SetScrollPos
GetWindowDC
AttachThreadInput
UnregisterClassA
GetKeyboardLayoutList
EnumClipboardFormats
GetScrollInfo
GetMenuItemID
IsWindowVisible
SetCursor
GetWindow
SetTimer
DrawMenuBar
GetKeyboardLayout
TranslateMDISysAccel
DrawEdge
PostMessageA
SetActiveWindow
GetDC
DeleteMenu
IntersectRect
IsWindowEnabled
RegisterDeviceNotificationA
InsertMenuA
DispatchMessageA
GetDCEx
IsCharAlphaNumericA
SetScrollRange
LoadCursorA
GetMenu
GetScrollPos
IsChild
GetWindowRgn
ScrollWindow
GetClassNameA
ReleaseCapture
EqualRect
DrawFocusRect
SetCursorPos
ShowCursor
LoadBitmapA
PeekMessageA
PtInRect
TabbedTextOutA
GetMessagePos
FrameRect
CreateWindowExA
SubtractRect
MessageBoxA
EmptyClipboard
CharLowerA
RegisterWindowMessageA
SetFocus
GetTopWindow
SetMenuItemInfoA
MapWindowPoints
FillRect
CharNextA
WaitMessage
DefWindowProcA
SetPropA
SetCapture
MessageBeep
CreateMenu
DrawTextA
NotifyWinEvent
EnumWindows
GetCapture
ActivateKeyboardLayout
WinHelpA
GetSubMenu
SetWindowRgn
OpenClipboard
GetSysColorBrush
GetClientRect
SendMessageA
SetKeyboardState
SetWindowTextA
GetSysColor
IsDialogMessageA
GetActiveWindow
wsprintfA
CharUpperBuffA
SetForegroundWindow
BroadcastSystemMessageA
GetCursorPos
CloseClipboard
SetScrollInfo
HideCaret
OemToCharA
RemovePropA
GetPropA
UpdateWindow
UnregisterDeviceNotification
DrawFrameControl
EnumThreadWindows
ShowScrollBar
LoadStringA
KillTimer
GetClassInfoA
RemoveMenu
GetWindowThreadProcessId
DefMDIChildProcA
GetSystemMenu
IsZoomed
SetWindowPos
InflateRect
OffsetRect
CopyImage
GetWindowRect
GetKeyNameTextA
DrawIcon
UnhookWindowsHookEx
IsIconic
CharLowerBuffA
SystemParametersInfoA
SetClassLongA
IsRectEmpty
ScreenToClient
AdjustWindowRectEx
DestroyWindow
SetRect
GetForegroundWindow
GetCursor
DestroyMenu
IsClipboardFormatAvailable
PostQuitMessage
DrawIconEx

advapi32

RegOpenKeyExA
RegSetValueExA
RegEnumValueA
RegCreateKeyExA
RegDeleteKeyA
RegCreateKeyA
RegQueryInfoKeyA
RegFlushKey
RegEnumKeyExA
RegOpenKeyA
RegDeleteValueA
RegQueryValueExA
RegCloseKey

comdlg32

ChooseColorA

dsound

DirectSoundEnumerateA
DirectSoundCreate

gdi32

GetCurrentPositionEx
SaveDC
CreateBitmap
GetTextAlign
SetDIBits
EnumFontFamiliesA
SetTextColor
DeleteObject
Ellipse
GetBrushOrgEx
CreateCompatibleDC
MaskBlt
SetViewportOrgEx
GetBitmapBits
GetTextMetricsA
SetDIBColorTable
SetBkMode
GetTextExtentPoint32A
GetWindowOrgEx
StretchDIBits
CreateBrushIndirect
PatBlt
DPtoLP
CreateSolidBrush
DeleteEnhMetaFile
StretchBlt
GetMapMode
SetMapMode
SelectObject
SetWindowOrgEx
CreateFontIndirectA
CreateDIBitmap
SetStretchBltMode
SetPixel
GetPixel
FillRgn
OffsetRgn
CreateDIBSection
PtInRegion
Pie
GetRgnBox
CreatePenIndirect
RealizePalette
Arc
GetEnhMetaFileBits
GetClipBox
SetBrushOrgEx
SetWinMetaFileBits
GetTextExtentPointA
TextOutA
CreatePalette
CreateCompatibleBitmap
GetRegionData
SelectPalette
MoveToEx
StartPage
BitBlt
GdiFlush
SelectClipRgn
Polygon
DeleteDC
GetClipRgn
GetDCOrgEx
GetDIBColorTable
EndPage
SetROP2
CombineRgn
CopyEnhMetaFileA
GetSystemPaletteEntries
RoundRect
Rectangle
GetObjectA
GetPaletteEntries
StartDocA
GetWinMetaFileBits
GetViewportOrgEx
GetDeviceCaps
FrameRgn
RestoreDC
CreatePolygonRgn
CreateDCA
CreateFontA
PlayEnhMetaFile
SetAbortProc
ExcludeClipRect
LineTo
ExtTextOutA
SetDIBitsToDevice
Polyline
UnrealizeObject
CreateRoundRectRgn
CreateICA
EndDoc
ExtCreateRegion
IntersectClipRect
SetTextAlign
SetBkColor
CreateHalftonePalette
RectVisible
CreateEllipticRgn
GetStockObject
GetEnhMetaFileHeader
GetDIBits
CreateRectRgn
SetEnhMetaFileBits
GetEnhMetaFilePaletteEntries

winmm

mmioAdvance
mmioDescend
waveInGetDevCapsA
mmioOpenA
mmioAscend
mmioClose
waveOutMessage
mixerSetControlDetails
mixerGetNumDevs
mixerGetControlDetailsA
mmioSetInfo
mmioSeek
mmioGetInfo
mixerGetDevCapsA
timeEndPeriod
mmioWrite
mixerGetID
waveInGetNumDevs
mixerGetLineInfoA
mmioRead
mixerClose
timeGetTime
waveOutGetNumDevs
mixerOpen
timeBeginPeriod
waveOutGetDevCapsA
mmioCreateChunk
waveInMessage
mixerGetLineControlsA
sndPlaySoundA

kernel32

FreeLibrary
VirtualFree
FileTimeToDosDateTime
GlobalUnlock
TlsGetValue
LCMapStringA
SetThreadPriority
MulDiv
GetTickCount
GetExitCodeThread
FileTimeToLocalFileTime
GetCurrentDirectoryA
GetThreadLocale
GetFullPathNameA
GetDiskFreeSpaceA
SetErrorMode
FormatMessageA
LockResource
WritePrivateProfileStringA
DeviceIoControl
SetThreadLocale
ResumeThread
SizeofResource
FindFirstFileA
InitializeCriticalSection
GetExitCodeProcess
GetCurrentProcess
GlobalLock
GlobalDeleteAtom
InterlockedIncrement
TerminateProcess
GetProcAddress
GetFileType
GetFileAttributesA
GetVersion
GetProcessHeap
QueryPerformanceFrequency
HeapAlloc
GetModuleHandleA
CreateProcessA
GetStartupInfoA
GetWindowsDirectoryA
GetVersionExA
CreateEventA
VirtualAlloc
GetSystemInfo
SetConsoleCtrlHandler
GetModuleFileNameA
GetSystemDefaultLCID
LoadLibraryA
ExitProcess
GetCPInfo
Sleep
FindClose
EnterCriticalSection
GetProfileStringA
GlobalAlloc
SearchPathA
DeleteCriticalSection
lstrcmpiA
GetCommandLineA
EnumCalendarInfoA
ReadFile
GetDateFormatA
ResetEvent
GetLocaleInfoA
SetHandleCount
RaiseException
SetEndOfFile
GetStringTypeW
CreateFileA
RemoveDirectoryA
SetEvent
GetLocalTime
GetThreadPriority
GetSystemDirectoryA
FreeResource
GetLastError
lstrlenA
TlsSetValue
RtlUnwind
InterlockedDecrement
CreateMutexA
LoadLibraryExA
FindResourceA
LocalAlloc
WideCharToMultiByte
CreateDirectoryA
MultiByteToWideChar
lstrcatA
GetFileSize
GlobalFindAtomA
WriteFile
LocalFree
lstrcpynA
GetTempFileNameA
GlobalFree
LoadResource
GetCurrentThread
FindNextFileA
SetCurrentDirectoryA
TlsAlloc
SetFilePointer
GlobalSize
GetSystemTime
GlobalHandle
TlsFree
lstrcpyA
GetTimeZoneInformation
GetEnvironmentStrings
OutputDebugStringA
CloseHandle
QueryPerformanceCounter
HeapFree
WinExec
GetACP
GetOEMCP
GlobalAddAtomA
GetTempPathA
CreateThread
GetPrivateProfileStringA
GetStringTypeExA
WaitForSingleObject
lstrcmpA
GetCurrentThreadId
GetStdHandle
WaitForMultipleObjects
GlobalReAlloc
GetCurrentProcessId
LeaveCriticalSection
VirtualQuery
UnhandledExceptionFilter
CompareStringA
SetLastError
DeleteFileA

mpr

WNetOpenEnumA
WNetCloseEnum
WNetGetUniversalNameA
WNetEnumResourceA

shell32

SHFileOperationA
Shell_NotifyIconA
ShellExecuteExA
ShellExecuteA

ws2_32

WSAGetLastError

setupapi

SetupDiGetDeviceInstanceIdA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo

ole32

CoCreateInstance
StringFromCLSID
CoUninitialize
CoTaskMemFree
CoInitialize

comctl32

ImageList_Destroy
ImageList_ReplaceIcon
ImageList_EndDrag
ImageList_SetBkColor
ImageList_GetIconSize
ImageList_GetIcon
ImageList_GetImageCount
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
ImageList_Draw
ImageList_Replace
ImageList_Create
ImageList_Write
ImageList_DragLeave
ImageList_SetDragCursorImage
ImageList_DrawEx
ImageList_BeginDrag
ImageList_SetIconSize
ImageList_DragEnter
ImageList_GetBkColor
ImageList_Remove
ImageList_Read
GetEffectiveClientRect

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.data
Size: 88KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5cb9aeaa87bb747b9d2d552f4f509c97

Headers

DLL Characteristics

File Characteristics

Imports

user32

advapi32

comdlg32

dsound

gdi32

winmm

kernel32

mpr

shell32

ws2_32

setupapi

ole32

comctl32

version

Sections

.data Size: 88KB - Virtual size: 296KB

.reloc Size: 512B - Virtual size: 24B

.text Size: 512B - Virtual size: 482B

.rsrc Size: 3KB - Virtual size: 3KB

.rdata Size: 15KB - Virtual size: 15KB

.data
Size: 88KB - Virtual size: 296KB

.reloc
Size: 512B - Virtual size: 24B

.text
Size: 512B - Virtual size: 482B

.rsrc
Size: 3KB - Virtual size: 3KB

.rdata
Size: 15KB - Virtual size: 15KB