1ac0c92cddbe16b5586beb35e79db9d2_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

1ac0c92cddbe16b5586beb35e79db9d2_JaffaCakes118
Size

394KB
MD5

1ac0c92cddbe16b5586beb35e79db9d2
SHA1

ce399f594ba50337234f26d9b66f9cca37dfe12d
SHA256

647389f47e2ed7bea0de9589ab01779a6272ded4793968bee3133bdc2f9c19b0
SHA512

e39428214087ad4ff915e81583b512a1ef8cf3eba21b49df1e37cf52b58856bba3702d87951e88c613b3d3e55ef5f09882447955e8f4852b62efb13c80a0edf2
SSDEEP

12288:ck0kdVbjk0kmokqkWsqk0kQkM0k0k40k0k0kikckyk0klVa:31gh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ac0c92cddbe16b5586beb35e79db9d2_JaffaCakes118

Files

1ac0c92cddbe16b5586beb35e79db9d2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7039d83d4da8cc9067629bfca6d7902c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
WritePrivateProfileStringA
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAllocEx
UpdateResourceW
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateThread
TerminateProcess
Sleep
SetUnhandledExceptionFilter
SetStdHandle
SetPriorityClass
SetLastError
SetHandleInformation
SetHandleCount
SetFilePointer
SetEvent
SetEnvironmentVariableW
SetEnvironmentVariableA
SetEndOfFile
SetCurrentDirectoryW
SetConsoleCursor
RtlUnwind
RtlMoveMemory
RemoveDirectoryW
RemoveDirectoryA
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
PeekNamedPipe
PeekConsoleInputA
OpenProcess
MoveFileW
MoveFileA
LocalShrink
LocalFree
LocalAlloc
LoadLibraryW
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidCodePage
IsDebuggerPresent
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapLock
HeapFree
HeapDestroy
HeapCreate
CancelIo
HeapAlloc
GlobalAlloc
GetWindowsDirectoryW
GetUserDefaultLangID
GetUserDefaultLCID
GetTimeZoneInformation
GetTickCount
GetSystemWindowsDirectoryA
GetSystemTimeAsFileTime
GetSystemInfo
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProfileIntA
GetProcessShutdownParameters
GetProcAddress
GetPrivateProfileStringA
GetOverlappedResult
GetOEMCP
GetFullPathNameW
GetFullPathNameA
GetFileType
GetFileSize
GetFileInformationByHandle
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
GetDriveTypeW
GetDiskFreeSpaceW
GetDefaultCommConfigW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetConsoleTitleA
GetCommandLineA
GetCommProperties
GetCPInfo
GetACP
FreeUserPhysicalPages
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FormatMessageA
FlushFileBuffers
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitThread
EnumSystemLocalesA
EnumDateFormatsExW
EnterCriticalSection
DeleteVolumeMountPointW
DeleteFileW
DeleteFileA
DeleteCriticalSection
DefineDosDeviceW
CreateThread
CreateTapePartition
CreateProcessA
CreatePipe
CreateMutexW
CreateMutexA
CreateFileW
CreateFileMappingA
CreateEventA
CreateDirectoryW
CreateConsoleScreenBuffer
CompareFileTime

user32

SetForegroundWindow
SetFocus
SetDebugErrorLevel
SetCursor
SetClipboardViewer
SetClipboardData
SetCaretPos
SetCapture
SendMessageW
SendMessageA
ScrollWindowEx
ScreenToClient
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassW
RegisterClassA
PostThreadMessageA
PostMessageW
PostMessageA
PeekMessageW
PeekMessageA
OpenClipboard
MsgWaitForMultipleObjects
MoveWindow
MessageBoxA
MessageBeep
MapVirtualKeyW
MapVirtualKeyA
LoadKeyboardLayoutW
LoadIconW
LoadIconA
LoadCursorW
LoadCursorA
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsRectEmpty
IsIconic
IsChild
InvalidateRect
HideCaret
SetParent
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindowDC
GetUpdateRgn
GetUpdateRect
GetSystemMetrics
GetSystemMenu
GetSysColor
GetParent
GetMessageW
GetMessageA
GetKeyboardLayoutNameA
GetKeyState
GetFocus
GetDoubleClickTime
GetDlgItemInt
GetDesktopWindow
GetDC
GetCursorPos
GetClipboardData
GetClientRect
GetClassLongA
GetCaretBlinkTime
GetActiveWindow
FindWindowExW
ExitWindowsEx
EnumClipboardFormats
EndPaint
EnableMenuItem
EmptyClipboard
DrawIconEx
DrawFocusRect
DlgDirSelectComboBoxExA
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyIcon
DestroyCursor
DefWindowProcW
DefWindowProcA
DdePostAdvise
DdeGetData
CreateWindowExW
CreateWindowExA
CreateIconIndirect
SetRect
SetTimer
SetWindowLongA
SetWindowPos
SetWindowRgn
SetWindowTextA
SetWindowTextW
SetWindowsHookExA
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
TrackPopupMenuEx
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
ValidateRgn
WindowFromPoint
wsprintfA
CharLowerW
GetWindowRgn
CreateCursor
CreateCaret
CopyIcon
CloseWindow
CloseClipboard
ClientToScreen
ChangeClipboardChain
CallNextHookEx
BroadcastSystemMessageW
BeginPaint
PostThreadMessageW

gdi32

CreateEllipticRgn
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CopyMetaFileW
CombineRgn
Chord
BitBlt
BeginPath
Arc
AddFontMemResourceEx
EnableEUDC
EndPath
EngFillPath
EngFreeModule
EngGetDriverName
EngMarkBandingSurface
EngStretchBlt
EngTransparentBlt
EnumFontFamiliesExA
EnumFontFamiliesExW
EnumFontsA
EnumICMProfilesW
EqualRgn
ExtCreatePen
ExtCreateRegion
ExtTextOutW
FONTOBJ_pvTrueTypeFontFile
FillPath
FlattenPath
GdiEntry11
GdiEntry13
GdiFlush
GdiQueryTable
GetBkColor
GetCharABCWidthsA
GetCharABCWidthsFloatW
GetCharABCWidthsW
GetCharWidthFloatA
GetClipRgn
GetCurrentPositionEx
GetDIBits
GetDeviceCaps
GetFontData
GetGlyphIndicesW
GetGlyphOutlineA
GetGlyphOutlineW
GetMetaFileA
GetNearestPaletteIndex
GetObjectA
GetObjectW
GetOutlineTextMetricsA
GetPaletteEntries
GetRandomRgn
GetRegionData
CreateEnhMetaFileW
GetStockObject
GetSystemPaletteEntries
GetTextCharsetInfo
GetTextExtentExPointI
GetTextExtentPoint32W
GetTextMetricsA
GetTextMetricsW
GetWindowExtEx
LineTo
MaskBlt
ModifyWorldTransform
MoveToEx
OffsetRgn
PaintRgn
PatBlt
Pie
PlayEnhMetaFileRecord
PolyBezier
Polygon
Polyline
PtInRegion
RealizePalette
RectInRegion
Rectangle
ResizePalette
RoundRect
ScaleViewportExtEx
SelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetBrushOrgEx
SetDCBrushColor
SetDIBitsToDevice
SetGraphicsMode
SetMetaRgn
SetPaletteEntries
SetPixelV
SetPolyFillMode
SetROP2
SetStretchBltMode
SetSystemPaletteUse
SetTextAlign
SetTextColor
SetWindowOrgEx
SetWorldTransform
StretchBlt
StretchDIBits
StrokePath
TextOutA
TextOutW
UnrealizeObject
WidenPath
cGetTTFFromFOT
CreateFontA
CreateFontIndirectA
CreateFontIndirectW
CreateHalftonePalette
CreateHatchBrush
CreatePalette
CreatePatternBrush
CreatePen
CreatePolygonRgn
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
GetRgnBox
Ellipse

advapi32

RegQueryValueExW
RegOpenKeyA
RegSetValueExW
RegSetValueExA
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegFlushKey
RegCreateKeyExW
RegCreateKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

shell32

SHGetDiskFreeSpaceExW
ShellExecuteW
DragAcceptFiles
DragQueryFileAorW
ExtractIconA
FindExecutableA
SHAddToRecentDocs
SHEmptyRecycleBinW
SHFileOperationW
SHGetDataFromIDListW
Shell_NotifyIcon
SHGetFolderPathA
SHGetIconOverlayIndexA
SHGetIconOverlayIndexW
SHGetPathFromIDList
SHGetPathFromIDListA
SHIsFileAvailableOffline
SHLoadInProc
SHQueryRecycleBinA
ShellExecuteExW

shlwapi

StrCmpNIA
StrRChrIA

imm32

ImmNotifyIME
ImmGetContext
ImmGetCompositionStringW
ImmGetCompositionStringA
ImmAssociateContext
ImmSetCandidateWindow
ImmSetCompositionFontA
ImmSetCompositionFontW
ImmSetCompositionWindow
ImmReleaseContext

Sections

.text
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7039d83d4da8cc9067629bfca6d7902c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

imm32

Sections

.text Size: 210KB - Virtual size: 210KB

.rdata Size: 83KB - Virtual size: 82KB

.data Size: 59KB - Virtual size: 59KB

.rsrc Size: 40KB - Virtual size: 40KB

.text
Size: 210KB - Virtual size: 210KB

.rdata
Size: 83KB - Virtual size: 82KB

.data
Size: 59KB - Virtual size: 59KB

.rsrc
Size: 40KB - Virtual size: 40KB