2caa9f694c6ce6cb12c384387e9e6e14_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2caa9f694c6ce6cb12c384387e9e6e14_JaffaCakes118
Size

209KB
MD5

2caa9f694c6ce6cb12c384387e9e6e14
SHA1

baab3ea6957332e81cf0278e298d66034ad25d80
SHA256

3c48ff887506825059008079b3d465f60d4e6208902c35c0d757be2c747ea8d7
SHA512

2e6887634d3f0fab6711bbe7826237c66d446df612d9429e1fc0cdc46e76a2360055732af5f85ca0d6830b7302576d469df825c47c89a9a3cbb67b47ddaed8ff
SSDEEP

6144:gWBod5j7uVeHSnh4T+jxoctnUfx1G0lLjgb1SjIxyubz4AT:g70ekhu2ZUfx1bLc1S1m4AT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2caa9f694c6ce6cb12c384387e9e6e14_JaffaCakes118

Files

2caa9f694c6ce6cb12c384387e9e6e14_JaffaCakes118
.dll windows:5 windows x86 arch:x86

ad863e097182fc823f68020a7dd2e5f7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
CreateFileA
GetWindowsDirectoryA
ExitProcess
GetProcAddress
LoadLibraryA
AddAtomW
BackupSeek
BeginUpdateResourceW
BuildCommDCBW
CopyFileA
CopyFileW
CreateDirectoryW
CreateThread
DuplicateHandle
EnumCalendarInfoW
EnumDateFormatsW
EnumLanguageGroupLocalesW
EnumResourceNamesW
FileTimeToDosDateTime
FindFirstVolumeMountPointW
FindFirstVolumeW
FindVolumeMountPointClose
FreeLibrary
FreeResource
GetAtomNameW
GetBinaryTypeA
GetCPInfo
GetCommMask
GetCommProperties
GetCompressedFileSizeW
GetConsoleAliasExesLengthA
GetConsoleAliasesA
GetConsoleFontSize
GetConsoleTitleA
GetCurrencyFormatA
GetDateFormatA
GetEnvironmentStringsA
GetLogicalDriveStringsA
GetLongPathNameW
GetOEMCP
GetPriorityClass
GetPrivateProfileSectionNamesW
GetPrivateProfileStringA
GetPrivateProfileStructW
GetProcessAffinityMask
GetProcessPriorityBoost
GetProcessShutdownParameters
GetShortPathNameA
GetShortPathNameW
GetTempFileNameA
GetVersion
GlobalDeleteAtom
GlobalFree
GlobalWire
Heap32ListNext
HeapDestroy
HeapSize
InitializeCriticalSection
IsBadStringPtrW
IsBadWritePtr
LocalReAlloc
LocalUnlock
LockResource
Module32NextW
OpenMutexA
OutputDebugStringA
Process32Next
QueryPerformanceCounter
QueueUserAPC
ReadFile
ResumeThread
RtlFillMemory
RtlUnwind
SetCommConfig
SetConsoleTitleA
SetConsoleWindowInfo
SetCriticalSectionSpinCount
SetCurrentDirectoryW
SetEnvironmentVariableW
SetLocaleInfoA
SetMailslotInfo
SetProcessPriorityBoost
SetThreadExecutionState
SetThreadIdealProcessor
SetVolumeLabelA
SetVolumeMountPointA
SignalObjectAndWait
SystemTimeToTzSpecificLocalTime
TlsAlloc
TlsGetValue
UnhandledExceptionFilter
UpdateResourceW
VirtualFreeEx
WinExec
WriteFileGather
WriteProcessMemory
_lwrite
lstrcmpA
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent

user32

BroadcastSystemMessageW
BroadcastSystemMessageA
ActivateKeyboardLayout
wvsprintfW
UnpackDDElParam
TranslateAcceleratorA
CallWindowProcW
SwitchToThisWindow
SwitchDesktop
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExA
SetWindowContextHelpId
SetShellWindow
SetScrollPos
SetLastErrorEx
SendMessageA
SendDlgItemMessageW
ScrollWindow
ReleaseCapture
RegisterHotKey
PtInRect
OpenWindowStationW
OpenWindowStationA
OpenInputDesktop
OpenDesktopA
OpenClipboard
MonitorFromRect
MessageBoxW
MessageBoxA
MessageBeep
LoadBitmapW
IsDialogMessageA
InflateRect
IMPSetIMEA
IMPQueryIMEW
IMPGetIMEW
GetWindowThreadProcessId
GetWindowModuleFileName
GetWindow
GetUserObjectSecurity
GetSystemMenu
GetSysColor
GetOpenClipboardWindow
ToUnicode
GetMonitorInfoW
GetMessageA
GetMenuItemID
GetMenuCheckMarkDimensions
GetLastActivePopup
GetKeyboardLayoutNameW
GetKeyboardLayoutNameA
GetForegroundWindow
GetFocus
GetComboBoxInfo
GetClipCursor
GetClassInfoExA
GetAltTabInfoA
FreeDDElParam
EnumWindows
EnumWindowStationsA
EnumDisplaySettingsW
EnumDisplaySettingsExW
EnumDesktopsW
EnumChildWindows
EndPaint
EnableWindow
EmptyClipboard
EditWndProc
DrawStateA
DrawMenuBar
DrawFrameControl
DrawEdge
DragObject
DlgDirListComboBoxA
DlgDirListA
DispatchMessageW
DialogBoxIndirectParamA
DestroyWindow
DeleteMenu
DefMDIChildProcA
DdeImpersonateClient
DdeGetLastError
DdeCreateStringHandleW
CreatePopupMenu
CreateDesktopW
ClientToScreen
CheckMenuItem
CharPrevW
ChangeDisplaySettingsExA

ole32

WriteOleStg
WriteFmtUserTypeStg
WdtpInterfacePointer_UserUnmarshal
WdtpInterfacePointer_UserFree
UtConvertDvtd16toDvtd32
StringFromCLSID
StgPropertyLengthAsVariant
StgIsStorageFile
StgCreateStorageEx
StgCreatePropSetStg
StgConvertVariantToProperty
SNB_UserUnmarshal
ReadOleStg
PropStgNameToFmtId
ProgIDFromCLSID
OleSetContainedObject
OleSetAutoConvert
OleRun
OleRegEnumFormatEtc
OleLockRunning
OleLoad
OleGetIconOfClass
OleDuplicateData
OleDraw
OleCreateStaticFromData
OleCreateLinkEx
OleCreateFromFileEx
OleCreateFromData
OleCreateEx
OleConvertOLESTREAMToIStorage
OleBuildVersion
MonikerRelativePathTo
IsEqualGUID
IIDFromString
HWND_UserFree
HPALETTE_UserUnmarshal
HMETAFILE_UserUnmarshal
HMETAFILEPICT_UserMarshal
HMENU_UserUnmarshal
HICON_UserFree
HGLOBAL_UserSize
HENHMETAFILE_UserFree
HDC_UserSize
HDC_UserFree
HBRUSH_UserFree
HACCEL_UserMarshal
GetRunningObjectTable
GetHookInterface
FmtIdToPropStgName
DoDragDrop
DcomChannelSetHResult
CreateStreamOnHGlobal
CreateObjrefMoniker
CreateFileMoniker
CreateClassMoniker
CreateAntiMoniker
CoUnloadingWOW
CoUninitialize
CoTreatAsClass
CoSuspendClassObjects
CoSetProxyBlanket
CoRegisterSurrogateEx
CoRegisterMessageFilter
CoRegisterMallocSpy
CoRegisterClassObject
CoReactivateObject
CoQueryAuthenticationServices
CoIsHandlerConnected
CoInstall
CoInitializeWOW
CoInitialize
CoImpersonateClient
CoGetTreatAsClass
CoGetStdMarshalEx
CoGetObjectContext
CoGetMalloc
CoGetInterfaceAndReleaseStream
CoGetInstanceFromIStorage
CoEnableCallCancellation
CoDosDateTimeToFileTime
CoDisableCallCancellation
CoCreateObjectInContext
CoBuildVersion
CLSIDFromProgIDEx
CLIPFORMAT_UserUnmarshal
BindMoniker
HMENU_UserMarshal

oleaut32

DosDateTimeToVariantTime
CreateTypeLib2
CreateStdDispatch
CreateDispTypeInfo
LHashValOfNameSys
LPSAFEARRAY_Unmarshal
LPSAFEARRAY_UserMarshal
LoadTypeLi
OleCreatePictureIndirect
OleLoadPictureFileEx
RegisterActiveObject
RevokeActiveObject
SafeArrayCreate
SafeArrayCreateVector
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetRecordInfo
SafeArrayLock
SysAllocStringByteLen
SysReAllocString
SysStringLen
VARIANT_UserSize
VARIANT_UserUnmarshal
VarBoolFromUI1
VarBoolFromUI2
VarBstrCmp
VarBstrFromDate
VarBstrFromDisp
VarBstrFromR8
VarBstrFromUI4
VarCyAdd
VarCyFix
VarCyFromR4
VarCyFromR8
VarCyInt
VarCyRound
VarDateFromBool
VarDateFromI1
VarDateFromStr
VarDateFromUdateEx
VarDecAdd
VarDecDiv
VarDecFromR4
VarDecFromUI1
VarFix
VarFormatCurrency
VarFormatDateTime
VarI1FromDec
VarI1FromI2
VarI2FromBool
VarI2FromCy
VarI2FromDec
VarI2FromI1
VarI2FromI4
VarI2FromR8
VarI2FromStr
VarI2FromUI2
VarI4FromDate
VarI4FromDec
VarI4FromUI1
VarI4FromUI4
VarMod
VarNeg
VarNot
VarR4FromCy
VarR4FromI1
VarR4FromI4
VarR8FromBool
VarR8FromI4
VarR8FromR4
VarR8FromUI4
VarUI1FromBool
VarUI1FromCy
VarUI1FromDec
VarUI1FromI1
VarUI1FromI4
VarUI1FromR4
VarUI2FromDec
VarUI2FromI1
VarUI2FromI2
VarUI2FromI4
VarUI4FromBool
VarUI4FromCy
VarUI4FromI1
VarUI4FromI2
VarUI4FromUI2
VariantInit
GetErrorInfo

Sections

.text
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad863e097182fc823f68020a7dd2e5f7

Headers

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

Sections

.text Size: 191KB - Virtual size: 191KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 4B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 191KB - Virtual size: 191KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 4B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB