ebb325f5cd68ec4f0eb6974ac1b31c43_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ebb325f5cd68ec4f0eb6974ac1b31c43_JaffaCakes118
Size

376KB
MD5

ebb325f5cd68ec4f0eb6974ac1b31c43
SHA1

e99ec7a63eafcd351613e39e6447d4315c276b10
SHA256

4f3eddceac19f32ba9a89e983f621f28112c5e8d946b3a117e299872777f6665
SHA512

e6e64ab102b4f356f1e6a513b3b01aea6719f4100c71e847b39ecbb36f7036482e9e0339adfc7b21a45f019cfdb37fb0754fc0356a7537527bd7fb95a6d85247
SSDEEP

6144:WVxBg+krowRth6u8YA+XuE8sueiE5fbY8hR1BuiwFnI0waOyxXK0ex0alpa:HPRtwu8W5Pd0XnP8a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebb325f5cd68ec4f0eb6974ac1b31c43_JaffaCakes118

Files

ebb325f5cd68ec4f0eb6974ac1b31c43_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d3c83e8429ab460d389758bbe67790e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shfolder

SHGetFolderPathA

winmm

mixerGetLineInfoA
waveOutOpen
waveOutUnprepareHeader
waveOutClose
waveOutReset
waveOutWrite
waveOutPrepareHeader
waveOutGetPosition
waveOutGetDevCapsA
waveInGetDevCapsA
mixerGetLineControlsA
waveInGetNumDevs
waveOutGetVolume
waveInAddBuffer
waveInPrepareHeader
waveInUnprepareHeader
waveOutSetVolume
waveInClose
waveInStart
waveInOpen
waveInReset
mixerSetControlDetails
mixerClose
mixerOpen
waveOutGetNumDevs

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
SetLastError
MulDiv
CreateSemaphoreA
ReleaseSemaphore
ReleaseMutex
WaitForMultipleObjects
VirtualProtect
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
FindNextFileA
ResumeThread
SetThreadPriority
SuspendThread
lstrcmpA
GetCurrentThread
GetTempFileNameA
SetFileTime
WriteFile
GetDiskFreeSpaceA
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
SetErrorMode
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SetFileAttributesA
FindResourceExA
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetDriveTypeA
HeapFree
HeapAlloc
GetACP
CreateThread
ExitThread
HeapReAlloc
SetStdHandle
GetFileType
ExitProcess
TerminateProcess
HeapSize
FatalAppExitA
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
GetLocaleInfoW
GetCurrentProcess
DuplicateHandle
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
RaiseException
InterlockedExchange
DeviceIoControl
CreateEventA
GlobalMemoryStatus
GetCurrentDirectoryA
SetCurrentDirectoryA
CreateFileA
GetFileSize
ReadFile
lstrcmpiA
IsBadWritePtr
GetVersion
GetModuleHandleA
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
LocalAlloc
LocalFree
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetWindowsDirectoryA
lstrlenW
FormatMessageA
LockResource
WideCharToMultiByte
FindResourceA
SizeofResource
LoadResource
MultiByteToWideChar
GetLocaleInfoA
GetUserDefaultLangID
GetSystemDefaultLangID
CloseHandle
CreateMutexA
GetLastError
GetModuleFileNameA
GetVersionExA
lstrcpynA
CopyFileA
GetTickCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetFileAttributesA
GetTempPathA
GetExitCodeThread
DeleteFileA
GlobalAlloc
GlobalLock
GlobalSize
Sleep
GlobalUnlock
GlobalFree
LoadLibraryA
FreeLibrary
GetProcAddress
SetEvent
WaitForSingleObject
ResetEvent
CreateDirectoryA
GetFileTime
SetEnvironmentVariableW

user32

SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
MoveWindow
IsWindowEnabled
GetNextDlgTabItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
CreateDialogIndirectParamA
GetActiveWindow
EndDialog
wvsprintfA
CharToOemA
OemToCharA
CharUpperA
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
MsgWaitForMultipleObjects
GetAsyncKeyState
CharNextA
ValidateRect
TranslateMessage
GetMessageA
DestroyMenu
WindowFromPoint
WaitMessage
GetWindowThreadProcessId
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
IsZoomed
IsRectEmpty
UnionRect
SetParent
DeleteMenu
GetSystemMenu
ShowOwnedPopups
SetWindowContextHelpId
UnregisterClassA
GetDialogBaseUnits
CopyAcceleratorTableA
GetDCEx
LockWindowUpdate
InvertRect
GetNextDlgGroupItem
RegisterClipboardFormatA
DestroyIcon
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
SetActiveWindow
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
SetDlgItemInt
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
GetCapture
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextLengthA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetWindowPos
IntersectRect
IsIconic
SetWindowTextA
GetWindowTextA
EnumChildWindows
MapDialogRect
GetWindowPlacement
CopyRect
GetCursorPos
GetDesktopWindow
CopyIcon
InflateRect
SetWindowLongA
RedrawWindow
MessageBeep
DestroyCursor
WinHelpA
IsChild
GetWindowLongA
GetWindow
GetClassNameA
LoadStringA
SystemParametersInfoA
SetRect
AdjustWindowRect
GetSysColorBrush
GetMenu
SetMenu
PostThreadMessageA
PtInRect
LoadBitmapA
LoadImageA
GetDC
ReleaseDC
GetDlgCtrlID
FillRect
GetMenuStringA
GetMenuItemCount
RemoveMenu
GetFocus
DrawMenuBar
OffsetRect
PostMessageA
RegisterWindowMessageA
GetKeyState
GetMessagePos
ScreenToClient
IsWindow
GetScrollRange
GetDlgItemTextA
SendMessageA
EnableWindow
LoadIconA
ShowWindow
GetWindowRect
InvalidateRect
LoadMenuA
GetSubMenu
CreatePopupMenu
AppendMenuA
InsertMenuA
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
ClientToScreen
SetForegroundWindow
MessageBoxA
SetTimer
KillTimer
IsWindowVisible
ShowScrollBar
GetParent
IsClipboardFormatAvailable
UpdateWindow
ReleaseCapture
SetCapture
SetCursor
GetClientRect
LoadCursorA
PostQuitMessage
GetSystemMetrics
GetSysColor
DestroyWindow

gdi32

DPtoLP
GetObjectA
CreateBitmap
ExtTextOutA
GetTextExtentPoint32A
GetDeviceCaps
DeleteObject
StretchBlt
GetStockObject
CreateFontIndirectA
GetTextFaceA
TextOutA
SetTextJustification
PatBlt
CreateRectRgnIndirect
GetDCOrgEx
GetClipBox
SetTextColor
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
CreateRectRgn
GetMapMode
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetViewportExtEx
GetWindowExtEx
ExtCreatePen
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
Escape
SetRectRgn
CombineRgn
GetTextColor
GetBkColor
GetTextMetricsA
GetCharWidthA
EnumFontFamiliesExA
LPtoDP
CopyMetaFileA
CreateDCA
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
CreatePalette
SelectPalette
SetStretchBltMode
SetDIBitsToDevice
StretchDIBits
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateSolidBrush
CreatePen
SelectObject
Rectangle
SelectClipPath
CreateFontA
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
StartDocA
DeleteDC
SetBkColor
ExcludeClipRect

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

shell32

SHGetFileInfoA
ExtractIconA
DragQueryFileA
DragFinish
SHGetMalloc
DragAcceptFiles
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA

comctl32

DestroyPropertySheetPage
PropertySheetA
ImageList_Write
ImageList_Read
ImageList_Merge
ImageList_LoadImageA
ImageList_Create
ImageList_Destroy
ord14
ord13
ord17
ImageList_AddMasked
CreatePropertySheetPageA

oledlg

ord8

ole32

CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
CoRegisterClassObject
CoRevokeClassObject
CreateStreamOnHGlobal
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
OleDuplicateData
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoDisconnectObject
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
OleGetClipboard
ReleaseStgMedium
CoTaskMemFree
OleRun
CLSIDFromString
CLSIDFromProgID
CoInitializeEx
CoInitialize
CoCreateInstance
CoUninitialize
OleInitialize

olepro32

ord253

oleaut32

LoadTypeLi
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SysFreeString
SysAllocStringLen
VariantChangeType
VariantClear
SysAllocString
VariantTimeToSystemTime
VariantCopy
SafeArrayAllocData
SysReAllocStringLen
SysStringLen
SysAllocStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
SysStringByteLen
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy

shlwapi

SHDeleteKeyA

Exports

Exports

ConvertToExifTiffeX
CopyClickWBCoefs
CreateBlockReaderInterface
D3D10SetDirect3DDevice
D3D9GetDevice
D3D9ResourceGetMappedArray
EjectLoadCD
EnumDeviceRelease
EnumImageItemPropertyReset
GetDriveMode
GetMyColorDataProps
HostAlloc
Malloc
Memcpy2D

Sections

.text
Size: 86KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3c83e8429ab460d389758bbe67790e5

Headers

File Characteristics

Imports

shfolder

winmm

version

kernel32

user32

gdi32

comdlg32

winspool.drv

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

shlwapi

Exports

Exports

Sections

.text Size: 86KB - Virtual size: 88KB

.rdata Size: 144KB - Virtual size: 144KB

.data Size: 139KB - Virtual size: 140KB

.rsrc Size: 5KB - Virtual size: 8KB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 86KB - Virtual size: 88KB

.rdata
Size: 144KB - Virtual size: 144KB

.data
Size: 139KB - Virtual size: 140KB

.rsrc
Size: 5KB - Virtual size: 8KB

.reloc
Size: 1KB - Virtual size: 4KB