1364074bfe0033e02148f619c7bbd530_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1364074bfe0033e02148f619c7bbd530_JaffaCakes118
Size

308KB
MD5

1364074bfe0033e02148f619c7bbd530
SHA1

7a4435df67e38ba2343b466b7cfb03bde600cec7
SHA256

c58ebdac84073fe13b64c963b42b9ca17717a536920ebc8875461cf5df414c7e
SHA512

0e1b3dd8c2db3cb48ab7f74cbda0c9f48976ce68f335368c5a481b239147476c6730fa865079a1a6941cedd70507440c4c583f2c3e5bd12dbe165392b3939864
SSDEEP

6144:WEYy7YYxFGPYsiaFFOoUfdrFK4vjjHZVY1KkkNdG:hT7tGPYsiKFOoUW4vjLQ8kkTG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1364074bfe0033e02148f619c7bbd530_JaffaCakes118

Files

1364074bfe0033e02148f619c7bbd530_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2203c5be4171a538dc95b17bc6816ab9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMenuState
PaintDesktop
IsWindowVisible
GetDCEx
GetThreadDesktop
WindowFromPoint
WinHelpA
WaitMessage
UnionRect
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoA
ShowWindow
ShowOwnedPopups
ShowCursor
ShowCaret
SetWindowRgn
SetWindowsHookExA
SetPropA
SetParent
SetMenuItemInfoA
SetMenu
SetKeyboardState
SetForegroundWindow
SetFocus
SetCursor
SetClipboardData
SetClassLongA
SetCapture
SetActiveWindow
SendMessageA
SendDlgItemMessageA
ScrollWindowEx
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
PeekMessageA
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MoveWindow
ModifyMenuA
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyA
MapDialogRect
IsIconic
IsDialogMessageA
IsClipboardFormatAvailable
IsChild
IsCharAlphaNumericA
IsCharAlphaA
GetWindowRgn
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindowDC
GetUpdateRect
GetSystemMetrics
GetSystemMenu
GetMenuStringA
DrawCaption
GetMenuItemInfoA
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetCursor
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextExA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreateWindowExA
CreatePopupMenu
CreateMenu
CreateIconFromResourceEx
CreateIconFromResource
CreateIcon
CreateDialogIndirectParamA
CharUpperBuffA
CharUpperA
CharToOemA
AdjustWindowRectEx
ActivateKeyboardLayout
GetClassLongA
wvsprintfW
SetWindowLongW
OpenClipboard
GetMenuItemID
LoadStringW
DialogBoxParamW
IntersectRect
GetScrollPos
FillRect
CopyIcon

ole32

OleCreateMenuDescriptor
CoLockObjectExternal

advapi32

RegQueryInfoKeyA

gdi32

TextOutA
StretchDIBits
StretchBlt
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SelectObject
SelectClipRgn
SaveDC
RoundRect
RestoreDC
Rectangle
RealizePalette
Polyline
PolyPolyline
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetTextExtentPointA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetPixel
GetPaletteEntries
GetObjectType
GetObjectA
GetEnhMetaFileHeader
GetEnhMetaFileBits
ExcludeClipRect
EnumFontsA
EnumFontFamiliesExA
EndPage
EndDoc
DeleteObject
UnrealizeObject
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateICA
CreateHalftonePalette
CreateFontIndirectA
CreateFontA
CreateDIBitmap
CreateDIBSection
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
BitBlt
GetTextMetricsA
GetBitmapBits
SetMapperFlags
InvertRgn
ExtEscape
RemoveFontResourceExA
FillRgn
GetDIBits
GetEnhMetaFilePaletteEntries
RectVisible
GetViewportExtEx
PolyBezier
CheckColorsInGamut
TextOutW
GetRgnBox
GdiSetBatchLimit
Pie
SetBkColor
PlayEnhMetaFile
SelectPalette
GetLogColorSpaceA
CreatePolyPolygonRgn
SetRectRgn
GetCharABCWidthsI
CloseMetaFile
SetLayout
DeleteEnhMetaFile
GetWinMetaFileBits

version

VerQueryValueA

kernel32

FreeResource
FormatMessageA
FlushInstructionCache
FindResourceA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToSystemTime
FileTimeToDosDateTime
ExpandEnvironmentStringsA
EnumCalendarInfoA
DosDateTimeToFileTime
DeleteFileA
CreateMutexA
CreateFileMappingA
CreateDirectoryA
CompareStringA
GetExitCodeThread
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
VirtualQuery
MultiByteToWideChar
lstrcpyA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetFileAttributesA
GetFullPathNameA
GetLocalTime
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetProfileStringA
GetSystemInfo
GetTickCount
GetUserDefaultLangID
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFree
GlobalLock
GlobalHandle
GlobalReAlloc
GlobalSize
HeapCompact
HeapLock
HeapUnlock
LoadLibraryA
LoadResource
LockResource
MapViewOfFile
MoveFileA
MulDiv
OpenMutexA
OpenProcess
PulseEvent
ResumeThread
SearchPathA
SetCurrentDirectoryA
SetErrorMode
SetEvent
SetThreadLocale
SetThreadPriority
WaitForSingleObject
WriteProcessMemory
lstrcmpA
lstrlenW
HeapAlloc
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapSize
DeleteCriticalSection
GetCommandLineA
FreeLibrary
GlobalUnlock
ResetWriteWatch
GetThreadPriority
AssignProcessToJobObject
AreFileApisANSI
SystemTimeToFileTime
CreateProcessW
lstrcpynA
lstrlenA
CreateEventA
GetCurrentProcess
WideCharToMultiByte
FatalAppExitA
FileTimeToLocalFileTime
CloseHandle
CreateFileA
GetFileType
GetSystemTime
GetFileSize
GetStdHandle
RaiseException
ReadFile
RtlUnwind
SetEndOfFile
SetFilePointer
WriteFile
CreateThread
ExitThread
ExitProcess

Sections

.text
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2203c5be4171a538dc95b17bc6816ab9

Headers

DLL Characteristics

File Characteristics

Imports

user32

ole32

advapi32

gdi32

version

kernel32

Sections

.text Size: 162KB - Virtual size: 162KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 24KB - Virtual size: 44KB

.rsrc Size: 103KB - Virtual size: 103KB

.text
Size: 162KB - Virtual size: 162KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 24KB - Virtual size: 44KB

.rsrc
Size: 103KB - Virtual size: 103KB