JaffaCakes118_027c0b0c1f62291ae125bde8efd8844a

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_027c0b0c1f62291ae125bde8efd8844a
Size

257KB
MD5

027c0b0c1f62291ae125bde8efd8844a
SHA1

4aaf81a6f220aa0306641ac2d2152af72bdcfd2d
SHA256

b4a07e3cdde2ceb9ea4a3e5eeb362cb2670791b4dfeb03a41c969321cde68a19
SHA512

78d9cb491c72492668493d3c5434b81a8b554555394aaae4b139ee72f25550196c99a8b99f1850edcf6dd61e1de46efc381cac3762617ce823fd996640677b10
SSDEEP

6144:wnhPrfhPgYxuaMVmaho0+tq/pTNfXwysBVe+xMXQyWIf8kPZ33yMuZixwU8:L8ptqrXwy2/MXQ/EnZnBuZfL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_027c0b0c1f62291ae125bde8efd8844a

Files

JaffaCakes118_027c0b0c1f62291ae125bde8efd8844a
.exe windows:4 windows x86 arch:x86

cab98fea258228e44e251eb0910fdfc3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListW
Shell_NotifyIconW
SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteW
SHGetFileInfoW
ShellExecuteExW

msimg32

GradientFill

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

wininet

InternetReadFile
InternetGetLastResponseInfoA
InternetCanonicalizeUrlW
InternetSetOptionA
HttpSendRequestA
InternetConnectA
InternetCloseHandle
InternetCombineUrlA
InternetQueryOptionA
HttpQueryInfoA
InternetOpenA
HttpOpenRequestA

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

oleaut32

SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString

user32

DestroyIcon
SetScrollRange
GetDlgCtrlID
LoadCursorW
TabbedTextOutW
GetSysColorBrush
PostMessageA
GetClassLongA
SetTimer
CreateWindowExW
GetParent
GetDC
SetFocus
GetActiveWindow
CharLowerBuffW
GetMenuItemID
DestroyWindow
IsWindowVisible
CallNextHookEx
GetAsyncKeyState
DrawEdge
ScreenToClient
MessageBeep
SendMessageTimeoutA
SendNotifyMessageW
FindWindowW
CheckMenuItem
RegisterWindowMessageW
GetWindowPlacement
EmptyClipboard
UpdateWindow
RegisterClipboardFormatW
LoadImageW
RegisterClassA
keybd_event
GetDesktopWindow
TrackPopupMenu
ClientToScreen
SetWindowRgn
EnableWindow
GetMenuItemCount
SendMessageW
IsChild
GetMessageA
SetParent
InsertMenuW
OpenDesktopW
ScrollWindowEx
IsWindow
CloseClipboard
PostMessageW
TranslateMessage
wsprintfW
DefWindowProcA
LoadIconW
MapVirtualKeyW
BeginPaint
DefWindowProcW
GetMessageW
GetCursorPos
RegisterClassExW
GetIconInfo
MapWindowPoints
SetMenuDefaultItem
GetSubMenu
CreateCursor
GetSysColor
LoadBitmapW
GetWindowTextW
GetWindowLongA
SetScrollInfo
SwitchDesktop
CopyIcon
OpenClipboard
DrawFocusRect
NotifyWinEvent
FillRect
ShowWindow
LoadCursorA
GetSystemMetrics
SendMessageA
DrawFrameControl
EnumClipboardFormats
IsClipboardFormatAvailable
EnableMenuItem
PtInRect
CopyRect
SetWindowsHookExA
ModifyMenuW
GrayStringW
GetMonitorInfoW
SetWindowLongW
DrawIconEx
GetClipboardData
SetWindowLongA
DrawTextW
LoadStringW
CountClipboardFormats
SetThreadDesktop
DrawIcon
AdjustWindowRectEx
GetDoubleClickTime
InflateRect
CallWindowProcW
CreateWindowExA
RegisterClassExA
OffsetRect
MonitorFromWindow
ScrollDC
GetWindow
GetWindowTextLengthW
SetClipboardData
EndPaint
CreateDesktopW
IsIconic
DispatchMessageW
SetForegroundWindow
CloseDesktop
GetWindowThreadProcessId
GetWindowRect
PeekMessageA
IsWindowEnabled
KillTimer
DeferWindowPos
InvertRect
LoadMenuW
MessageBoxW
GetScrollPos
ReleaseDC
SetCapture
GetCapture
GetWindowLongW
WindowFromPoint
DrawTextExW
DispatchMessageA
MoveWindow
GetKeyState
RegisterClassW
CreateIconFromResourceEx
IsWindowUnicode
GetClassNameW
LoadCursorFromFileA
GetScrollInfo
SetCursor
SystemParametersInfoA
GetClientRect
SystemParametersInfoW
RegisterWindowMessageA
InvalidateRect
GetFocus
DrawTextA
GetCaretBlinkTime
UnhookWindowsHookEx
DeleteMenu
GetWindowDC
RedrawWindow
EndDeferWindowPos
SetWindowPos
CharUpperBuffW
BeginDeferWindowPos
ValidateRect
SetScrollPos
ReleaseCapture

urlmon

FindMimeFromData

rpcrt4

NdrConformantArrayUnmarshall
RpcStringBindingParseW
I_RpcGetBuffer
NdrSendReceive
RpcBindingServerFromClient
NdrConformantStringMarshall
RpcStringBindingComposeW
RpcRaiseException
NdrFreeBuffer
UuidCreate
NdrConformantArrayBufferSize
NdrAllocate
RpcStringFreeW
RpcBindingFree
NdrConformantStringUnmarshall
RpcBindingToStringBindingW
NdrGetBuffer
NdrConformantStringBufferSize
RpcBindingFromStringBindingW
NdrServerInitializeNew
NdrConformantArrayMarshall
NdrPointerFree
NdrConvert
NdrClientInitializeNew

psapi

EnumProcessModules
GetModuleFileNameExW

kernel32

FindClose
CloseHandle
WaitNamedPipeW
LoadResource
InitializeCriticalSectionAndSpinCount
OpenEventW
ReadFile
SetThreadLocale
TlsGetValue
HeapFree
SetUnhandledExceptionFilter
lstrcmpiW
DeviceIoControl
GetCurrencyFormatW
LockResource
ReleaseMutex
TerminateThread
EnterCriticalSection
GetNumberFormatW
CreateNamedPipeW
CreateThread
LocalAlloc
GetTempPathA
GetTempFileNameW
ExpandEnvironmentStringsA
FlushFileBuffers
Process32FirstW
OutputDebugStringW
CreateFileW
CreateToolhelp32Snapshot
IsDebuggerPresent
GetPrivateProfileStringW
SystemTimeToFileTime
LeaveCriticalSection
TlsAlloc
ExpandEnvironmentStringsW
GetModuleHandleW
DeleteCriticalSection
WriteFile
lstrcmpW
GetACP
MapViewOfFile
CreateIoCompletionPort
UnhandledExceptionFilter
SetFilePointer
UnmapViewOfFile
GetSystemDirectoryW
GetExitCodeThread
LoadLibraryExW
WaitForMultipleObjects
GetUserDefaultLangID
SetEndOfFile
CreateProcessW
GlobalUnlock
DeleteFileW
SizeofResource
GlobalLock
GetCurrentThreadId
GlobalAlloc
CreateEventA
LocalUnlock
SetLastError
GetUserDefaultLCID
GetWindowsDirectoryW
GetQueuedCompletionStatus
GetDateFormatW
SetProcessWorkingSetSize
GetProcessHeap
DisconnectNamedPipe
LocalFree
CreateFileMappingA
CreateEventW
FindNextFileW
GetSystemTimeAsFileTime
CreateMutexW
MulDiv
GetDiskFreeSpaceExW
FreeLibrary
GetSystemDirectoryA
FindResourceW
WideCharToMultiByte
OpenProcess
ConnectNamedPipe
GetTempPathW
FindResourceA
GetThreadLocale
FileTimeToSystemTime
HeapAlloc
CreateDirectoryW
CopyFileW
WaitForSingleObject
LCMapStringW
GetTimeFormatW
ExitThread
GetFileSize
RaiseException
GetLocalTime
TlsSetValue
FlushViewOfFile
FindFirstFileW
GetShortPathNameW
GetTempFileNameA
Process32NextW
VirtualAllocEx

ole32

StringFromCLSID
CLSIDFromString
CoTaskMemFree
CoCreateGuid
CoCreateInstance

winmm

PlaySoundA
timeSetEvent
timeGetTime
timeKillEvent
timeGetDevCaps

comctl32

ImageList_Draw
ImageList_GetIconSize
ord17
ImageList_GetImageInfo
ImageList_DrawEx

ws2_32

gethostbyname
getservbyname
WSAStartup
inet_addr
getservbyport
inet_ntoa
htons
ntohs
WSAGetLastError
gethostbyaddr
htonl
WSASetLastError
WSACleanup

comdlg32

GetOpenFileNameW

shlwapi

ColorHLSToRGB
PathIsDirectoryW
ColorRGBToHLS
PathCompactPathW
PathFileExistsW

gdi32

GetTextExtentPoint32W
SetPixel
GetWindowOrgEx
SetViewportExtEx
CreateCompatibleBitmap
SaveDC
IntersectClipRect
GetCurrentPositionEx
TextOutW
Polygon
PtVisible
SetWindowExtEx
CreateDIBPatternBrushPt
GetObjectW
CreateBitmap
CreateDIBSection
GetTextAlign
CombineRgn
SetBrushOrgEx
DPtoLP
RectVisible
GetTextExtentPointW
GetTextExtentPoint32A
GetClipBox
CreateHatchBrush
StretchDIBits
SetViewportOrgEx
Rectangle
SetLayout
LPtoDP
StretchBlt
SetWindowOrgEx
CreatePen
SetMapMode
GetPixel
CreateFontA
CreateRectRgnIndirect
SetStretchBltMode
SetTextAlign
DeleteDC
GetCurrentObject
GetTextExtentExPointW
PatBlt
CreateFontIndirectW
CreateSolidBrush
EnumFontFamiliesExA
SetTextColor
ExtTextOutW
GetStockObject
GetMapMode
EnumFontFamiliesExW
CreateCompatibleDC
AddFontMemResourceEx
SetBkMode
Escape
BitBlt
CreatePatternBrush
SelectObject
ExcludeClipRect
DeleteObject
ExtCreatePen
RestoreDC
GetDeviceCaps
GetDIBits
GetWindowExtEx
GetObjectA
SetBkColor
TextOutA
GetTextMetricsA
GetViewportExtEx
CreateRoundRectRgn

advapi32

RegOpenKeyExA
RegOpenKeyW
FreeSid
RegOpenKeyExW
SetSecurityDescriptorDacl
RegQueryValueExW
GetLengthSid
InitializeSecurityDescriptor
AllocateAndInitializeSid
RegQueryValueExA
AddAccessAllowedAce
RegEnumValueW
InitializeAcl
GetTokenInformation
RegCloseKey
IsTextUnicode
OpenSCManagerW
OpenProcessToken
CloseServiceHandle
EqualSid
OpenThreadToken
OpenServiceW
RegEnumKeyExW

mscms

CreateProfileFromLogColorSpaceW
UnregisterCMMW
GetColorProfileElementTag
InternalSetDeviceConfig
GetNamedProfileInfo
UnregisterCMMA
GetCountColorProfileElements

sendmail

DllCanUnloadNow

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.V
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qydy
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zlAs
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Wchmki
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vKqb
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.i
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.OCSmsA
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jgi
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 212KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RWGB
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apjK
Size: 512B - Virtual size: 611B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cab98fea258228e44e251eb0910fdfc3

Headers

DLL Characteristics

File Characteristics

Imports

shell32

msimg32

version

wininet

oleacc

oleaut32

user32

urlmon

rpcrt4

psapi

kernel32

ole32

winmm

comctl32

ws2_32

comdlg32

shlwapi

gdi32

advapi32

mscms

sendmail

Sections

.text Size: 16KB - Virtual size: 15KB

.V Size: 2KB - Virtual size: 2KB

.qydy Size: 1024B - Virtual size: 1KB

.zlAs Size: 1KB - Virtual size: 1KB

.Wchmki Size: 1KB - Virtual size: 2KB

.rdata Size: 12KB - Virtual size: 12KB

.vKqb Size: 2KB - Virtual size: 2KB

.i Size: 1KB - Virtual size: 2KB

.OCSmsA Size: 1024B - Virtual size: 1KB

.jgi Size: 2KB - Virtual size: 2KB

.data Size: 212KB - Virtual size: 246KB

.RWGB Size: 2KB - Virtual size: 2KB

.apjK Size: 512B - Virtual size: 611B

.rsrc Size: 512B - Virtual size: 476B

.text
Size: 16KB - Virtual size: 15KB

.V
Size: 2KB - Virtual size: 2KB

.qydy
Size: 1024B - Virtual size: 1KB

.zlAs
Size: 1KB - Virtual size: 1KB

.Wchmki
Size: 1KB - Virtual size: 2KB

.rdata
Size: 12KB - Virtual size: 12KB

.vKqb
Size: 2KB - Virtual size: 2KB

.i
Size: 1KB - Virtual size: 2KB

.OCSmsA
Size: 1024B - Virtual size: 1KB

.jgi
Size: 2KB - Virtual size: 2KB

.data
Size: 212KB - Virtual size: 246KB

.RWGB
Size: 2KB - Virtual size: 2KB

.apjK
Size: 512B - Virtual size: 611B

.rsrc
Size: 512B - Virtual size: 476B