0b709afe1e0b798a9d26ca51dfdfa716_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0b709afe1e0b798a9d26ca51dfdfa716_JaffaCakes118
Size

2.1MB
MD5

0b709afe1e0b798a9d26ca51dfdfa716
SHA1

7af199cd474e588628ba75d2b2cb1002ee50d64c
SHA256

c9838c8e17daecb480fce9f8f77c3b19b1dd6272e09bd0a5131be37a56f5b8af
SHA512

2512ac01a6763f655672760a56f7d470ccd03b79300008e746516d73710b2163ca4026911cc55c49f314320d26e60782e9c3a78ac7cbcd0c78c571ea5d9da7f0
SSDEEP

49152:n9PhEpPi2Si6G3Csx0EXKXraMuZC1uSwiPSCmDS+5uSlcQ:bEpiGysx0MKXraVC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b709afe1e0b798a9d26ca51dfdfa716_JaffaCakes118

Files

0b709afe1e0b798a9d26ca51dfdfa716_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c3a6685a9c87444c842c3199d13d888a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
_controlfp
__set_app_type
__p__fmode
memset
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3

winmm

PlaySoundW

msimg32

TransparentBlt
AlphaBlend

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

kernel32

InterlockedDecrement
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
lstrcmpA
HeapAlloc
lstrcmpW
lstrcpyW
MulDiv
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
PeekNamedPipe
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ResumeThread
SearchPathW
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetFilePointer
SetLastError
SetPriorityClass
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
SleepEx
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
WritePrivateProfileStringW
GetCommandLineA
GetStartupInfoA
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalGetAtomNameW
GlobalFree
GlobalFlags
InitializeCriticalSection
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetWindowsDirectoryW
GetVolumeInformationW
GetTimeZoneInformation
GetTickCount
GetThreadLocale
GetTempPathW
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemInfo
GetSystemDirectoryW
GetStringTypeW
GetStdHandle
GetStartupInfoW
GetProfileIntW
GetProcessHeap
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileStringA
GetPrivateProfileIntW
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileInformationByHandle
GetFileAttributesW
GetFileAttributesExW
GetEnvironmentStringsW
GetDriveTypeW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentDirectoryW
GetCPInfo
GetConsoleMode
GetConsoleCP
GetCommandLineW
GetACP
FreeResource
FreeEnvironmentStringsW
FormatMessageW
FormatMessageA
FlushFileBuffers
FindResourceW
FindResourceExW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsA
ExitThread
EnterCriticalSection
DuplicateHandle
DeleteFileW
DeleteCriticalSection
CreateThread
CreateFileW
CopyFileW
CompareStringW
CloseHandle
AreFileApisANSI
ExitProcess
HeapSize
HeapReAlloc
GlobalFindAtomW
HeapFree
lstrcmpiW

user32

IsCharLowerW
IsChild
IsClipboardFormatAvailable
IsDialogMessageW
IsIconic
IsMenu
IsRectEmpty
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadAcceleratorsW
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
LoadMenuW
LockWindowUpdate
MapDialogRect
MapVirtualKeyExW
MapVirtualKeyW
MapWindowPoints
MessageBeep
MessageBoxW
ModifyMenuW
MoveWindow
OffsetRect
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PtInRect
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendMessageW
SetActiveWindow
SetCapture
SetClassLongW
SetClipboardData
SetCursorPos
SetFocus
SetForegroundWindow
SetMenuDefaultItem
SetMenuItemBitmaps
SetMenuItemInfoW
SetParent
SetPropW
SetRectEmpty
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowContextHelpId
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
ShowOwnedPopups
ShowScrollBar
ShowWindow
SubtractRect
SystemParametersInfoW
TabbedTextOutW
ToUnicodeEx
TrackPopupMenu
TranslateAcceleratorW
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassW
UpdateWindow
ValidateRect
WaitMessage
WindowFromPoint
WinHelpW
wsprintfW
GetWindowTextLengthW
GetWindowRgn
GetWindowRect
GetWindowPlacement
GetWindowDC
GetUpdateRect
InvertRect
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
GetMenuCheckMarkDimensions
GetKeyNameTextW
GetKeyboardState
GetKeyboardLayout
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDlgCtrlID
UnpackDDElParam
ReuseDDElParam
GetDesktopWindow
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowExW
FillRect
EqualRect
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextW
DrawTextExW
DrawStateW
DrawMenuBar
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyAcceleratorTable
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreateWindowExW
CreatePopupMenu
CreateMenu
CreateDialogIndirectParamW
CreateAcceleratorTableW
CopyRect
CopyImage
CopyIcon
CopyAcceleratorTableW
CloseClipboard
ClientToScreen
CheckMenuItem
CheckDlgButton
CharUpperW
CharUpperBuffW
CharNextW
CallWindowProcW
InvalidateRgn
InvalidateRect
IntersectRect
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
AppendMenuW
AdjustWindowRectEx
GetDC
EmptyClipboard
GetKeyState
GetWindowLongW
InsertMenuW
InflateRect
InsertMenuItemW
HideCaret
GrayStringW
GetWindowThreadProcessId
GetTopWindow
GetWindowTextW
GetLastActivePopup

gdi32

CreateHatchBrush
CreatePalette
CreatePatternBrush
CreatePen
CreatePolygonRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateFontIndirectW
CreateEllipticRgn
CreateSolidBrush
DeleteDC
DeleteObject
EnumFontFamiliesW
Escape
ExcludeClipRect
ExtFloodFill
Ellipse
ExtSelectClipRgn
ExtTextOutW
FillRgn
FrameRgn
GetBkColor
GetBoundsRect
GetClipBox
GetDeviceCaps
GetMapMode
GetNearestPaletteIndex
GetObjectType
GetObjectW
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextCharsetInfo
GetTextColor
GetTextExtentPoint32W
GetTextFaceW
GetTextMetricsW
GetViewportExtEx
CreateDIBSection
GetWindowExtEx
GetWindowOrgEx
IntersectClipRect
LineTo
LPtoDP
MoveToEx
OffsetRgn
OffsetViewportOrgEx
OffsetWindowOrgEx
PatBlt
Polygon
Polyline
PtInRegion
PtVisible
RealizePalette
Rectangle
RectVisible
RestoreDC
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetDIBColorTable
SetMapMode
SetPaletteEntries
SetPixel
SetPixelV
SetPolyFillMode
SetRectRgn
SetROP2
SetTextAlign
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StretchBlt
TextOutW
DPtoLP
CreateDIBitmap
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CopyMetaFileW
CombineRgn
GetViewportOrgEx
BitBlt
EnumFontFamiliesExW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegQueryValueExW
RegEnumValueW
RegEnumKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegQueryValueW
RegSetValueExW

shell32

ShellExecuteW
DragQueryFileW
DragFinish
SHGetFileInfoW

ole32

CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
DoDragDrop
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleDuplicateData
OleFlushClipboard
CoRegisterMessageFilter
OleInitialize
OleIsCurrentClipboard
OleLockRunning
OleTranslateAccelerator
OleUninitialize
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CLSIDFromProgID
CoLockObjectExternal
CoInitialize
CoFreeUnusedLibraries
CoGetClassObject
CoCreateInstance
CoDisconnectObject
CoCreateGuid
OleGetClipboard
CLSIDFromString

oleaut32

GetErrorInfo

shlwapi

PathRemoveFileSpecW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lzma2
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 644KB - Virtual size: 641KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3a6685a9c87444c842c3199d13d888a

Headers

File Characteristics

Imports

msvcrt

winmm

msimg32

imm32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 12.1MB

.tls Size: 4KB - Virtual size: 12B

.data1 Size: 4KB - Virtual size: 648B

.lzma2 Size: 8KB - Virtual size: 5KB

.rsrc Size: 644KB - Virtual size: 641KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 12.1MB

.tls
Size: 4KB - Virtual size: 12B

.data1
Size: 4KB - Virtual size: 648B

.lzma2
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 644KB - Virtual size: 641KB