31d10b20b0cbacd048086c3c5cc38c6c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

31d10b20b0cbacd048086c3c5cc38c6c_JaffaCakes118
Size

160KB
MD5

31d10b20b0cbacd048086c3c5cc38c6c
SHA1

87659bb555030d2af4163bfb65e544a9c01630a6
SHA256

152e6d91416ed3e1970b4657a1eefe521ffd88b0431d45cb942129dead0a6554
SHA512

d709662c3c4d7eeb1888bcb2e20d6e83247b6df52234b852ec0c752b8d62a836f57fc0f351d700acadc493b12783ad125f21cc71b620e915ce6d4577afc523ac
SSDEEP

3072:l7H+xgPQiTMAGyhwByYlC2rgMihP4IirxhoEaJPuHYW:ljVxTvOgNhK1Wu4W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31d10b20b0cbacd048086c3c5cc38c6c_JaffaCakes118

Files

31d10b20b0cbacd048086c3c5cc38c6c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

080a1f074c025de4b64423d5798c74e6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

setsockopt
closesocket
connect
WSACleanup
bind
htonl
select
recv
inet_ntoa
ntohs
sendto
recvfrom
WSAStartup
inet_addr
socket
htons
send

kernel32

lstrcmpiA
GlobalGetAtomNameA
FreeLibrary
LoadLibraryA
GetProcessVersion
GlobalFlags
GetCPInfo
GetOEMCP
GetCurrentProcess
CreateFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
RtlUnwind
HeapAlloc
HeapFree
GetCommandLineA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
RaiseException
HeapSize
HeapReAlloc
ExitProcess
TerminateProcess
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalDeleteAtom
MultiByteToWideChar
GetLastError
CreateThread
Sleep
GetTickCount
GetPrivateProfileIntA
GetPrivateProfileStringA
InterlockedIncrement
InterlockedDecrement
lstrlenA
WideCharToMultiByte
GlobalAddAtomA
LocalFree
CreateMutexA
ReleaseMutex
CloseHandle
WaitForSingleObject
GetCurrentThreadId
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalFree
GlobalUnlock
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalLock
GlobalReAlloc
GlobalAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
SetErrorMode
lstrcatA
lstrcpyA
GetModuleFileNameA
GetModuleHandleA
lstrcpynA
GetVersion
SetLastError
lstrcmpA
GetProcAddress
GlobalFindAtomA

user32

GetClassLongA
CreateWindowExA
DestroyWindow
GetDlgCtrlID
GetWindowTextA
GetDlgItem
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
MessageBoxA
GetTopWindow
EnableWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
IsWindowEnabled
LoadCursorA
GetSysColorBrush
GetClassNameA
PtInRect
PostQuitMessage
DestroyMenu
SetPropA
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
ClientToScreen
LoadStringA
UnregisterClassA
UnhookWindowsHookEx
SendMessageA
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
SetForegroundWindow
DispatchMessageA

gdi32

RectVisible
PtVisible
GetObjectA
CreateBitmap
Escape
ExtTextOutA
GetDeviceCaps
DeleteObject
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
TextOutA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

comctl32

ord17

Exports

Exports

AjustLightByTCP
AjustVolumByTCP
ClearAllProgramByTCP
ClearOneProgramByTCP
CloseLEDByTCP
ExitTCPServer
InitTCPServer
OpenLEDByTCP
ReadCardInfoByTCP
ReadNetInfoByTCP
SaveAjustVolumTCPToFile
SaveClearAllProgramTCPToFile
SaveClearOneProgramTCPToFile
SaveCloseLEDTCPToFile
SaveOpenLEDTCPToFile
SaveShowProgramTCPToFile
SendAjustVolumByBuf
SendAjustVolumByCom
SendClearAllProgramByBuf
SendClearAllProgramByCom
SendClearOneProgramByBuf
SendClearOneProgramByCom
SendCloseLEDByBuf
SendCloseLEDByCom
SendHeartByBuf
SendHeartByCom
SendOpenLEDByBuf
SendOpenLEDByCom
SendScanLedTCP
SendShowProgramByBuf
SendShowProgramByCom
SendShowProgramByTCP
SetIPAddrinfo
SetLedParam
TestLEDByTCP
TimeCalibrationByTCP
UpdateFile

Sections

.text
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

080a1f074c025de4b64423d5798c74e6

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

winspool.drv

comctl32

Exports

Exports

Sections

.text Size: 104KB - Virtual size: 100KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 16KB - Virtual size: 1.1MB

.reloc Size: 16KB - Virtual size: 14KB

.text
Size: 104KB - Virtual size: 100KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 16KB - Virtual size: 1.1MB

.reloc
Size: 16KB - Virtual size: 14KB