4290bd26dc292582fd892bd96dc34451_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

4290bd26dc292582fd892bd96dc34451_JaffaCakes118
Size

878KB
MD5

4290bd26dc292582fd892bd96dc34451
SHA1

2ad50945d66f8fb2f1ba49d7e568a2141f298bac
SHA256

ddf16072fcb183f0d728ae138bc34e28c84637374aab5ef6b0e641469ea4fa1b
SHA512

5c713940b5ab2e31d01e09d1b7d9b951cf31ff735aa64d13888bc36272a45cc4601425d4623f06b1a119cf04e801813268246748121ab217701acf1337855caf
SSDEEP

24576:1mG4MCDg4wskP2Y+er89uTcuBGFZOJq8IZmWCISMr6DNFq:C5YhKu4uUFZWbWCISMr6DNw

Score

1^/10

Malware Config

Signatures

Files

4290bd26dc292582fd892bd96dc34451_JaffaCakes118
.exe windows:5 windows x86 arch:x86

591160a16165b3fc0d3dd2075d91860e

Code Sign

fb:81:08:09:b7:0f:c1:5d:2d:79:5e:05:d7:dd:25:6c:7d:e9:28:62
Signer

Actual PE Digest

fb:81:08:09:b7:0f:c1:5d:2d:79:5e:05:d7:dd:25:6c:7d:e9:28:62

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Out\Bin\4399AlliGsLoginer3\Zt67055.pdb

Imports

kernel32

TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
lstrlenA
SetErrorMode
GetStartupInfoW
ExitProcess
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
HeapReAlloc
RtlUnwind
VirtualProtect
VirtualAlloc
VirtualQuery
HeapSize
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
GlobalReAlloc
QueryPerformanceCounter
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
LCMapStringA
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetProcessHeap
SetEnvironmentVariableA
EnterCriticalSection
TlsGetValue
GetThreadContext
SetThreadContext
FlushInstructionCache
InterlockedCompareExchange
LeaveCriticalSection
InitializeCriticalSection
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
MoveFileW
GetFileTime
GetFileSizeEx
InterlockedIncrement
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GetModuleHandleA
GlobalAddAtomW
SuspendThread
ResumeThread
GlobalDeleteAtom
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
FormatMessageW
MulDiv
InterlockedDecrement
CreateMutexW
GlobalHandle
GlobalFree
TerminateThread
VirtualProtectEx
GetCurrentThread
GlobalUnlock
GlobalLock
GlobalAlloc
LoadLibraryExW
LocalFree
GetSystemInfo
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
SetFileAttributesW
FindNextFileW
FindClose
ReadFile
GetFileAttributesW
CreateDirectoryW
FreeResource
FindFirstFileW
lstrcmpW
GetTickCount
GetVersionExW
ReadProcessMemory
WriteProcessMemory
VirtualFreeEx
VirtualAllocEx
OpenProcess
DeviceIoControl
CreateProcessW
MoveFileExW
Sleep
lstrcpyW
lstrcpynW
WideCharToMultiByte
WriteFile
SetLastError
SetFilePointer
CreateFileA
SetThreadPriority
CreateProcessA
GetModuleFileNameA
GetTempFileNameA
GetTempPathA
RemoveDirectoryW
GetPrivateProfileIntW
DeleteFileW
WritePrivateProfileStringW
CopyFileW
ResetEvent
CreateEventW
GetPrivateProfileStringW
LockResource
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
RaiseException
LoadLibraryW
CreateFileW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
GetLastError
GetModuleFileNameW
lstrlenW
GetProcAddress
GetModuleHandleW
WaitForSingleObject
SetEvent
CreateThread
VirtualFree
CloseHandle

user32

IsChild
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
UpdateWindow
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CallWindowProcW
GetMenu
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GrayStringW
DrawTextExW
TabbedTextOutW
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SendDlgItemMessageW
GetDlgItemTextW
GetWindowTextLengthW
GetLastActivePopup
GetMessageW
TranslateMessage
DispatchMessageW
WinHelpW
ValidateRect
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
WindowFromPoint
CopyRect
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetWindowContextHelpId
MapDialogRect
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
EndPaint
BeginPaint
FindWindowW
FindWindowExW
PostMessageW
GetWindow
DefWindowProcW
EqualRect
CreateWindowExW
RegisterClassExW
LoadImageW
GetWindowDC
GetWindowTextW
DestroyWindow
SetLayeredWindowAttributes
UpdateLayeredWindow
SetWindowLongW
GetWindowLongW
SetFocus
GetFocus
DrawIconEx
GetSysColor
GetParent
LoadCursorW
SetCursor
SetWindowRgn
SendDlgItemMessageA
RegisterWindowMessageW
IsRectEmpty
SetRect
InvalidateRgn
CharUpperW
GetSysColorBrush
CharNextW
GetNextDlgGroupItem
MessageBeep
CloseClipboard
SetClipboardData
EmptyClipboard
UnregisterClassW
RegisterClipboardFormatW
PostThreadMessageW
PeekMessageW
GetClassNameW
SendMessageW
CopyAcceleratorTableW
GetWindowThreadProcessId
SetMenuItemBitmaps
GetDC
DrawTextW
ReleaseDC
GetKeyState
CallNextHookEx
LoadIconW
SetWindowsHookExW
SetTimer
GetDesktopWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
InvalidateRect
IsWindowVisible
MoveWindow
GetWindowRect
RedrawWindow
CreatePopupMenu
AppendMenuW
TrackPopupMenu
DestroyMenu
IsWindow
ShowWindow
SetForegroundWindow
GetCursorPos
KillTimer
ScreenToClient
ClientToScreen
OpenClipboard
MessageBoxW
FillRect
LoadBitmapW
SetCapture
PtInRect
ReleaseCapture
GetCapture
EnableWindow
SetWindowPos
AttachThreadInput
GetForegroundWindow
SystemParametersInfoW
SetParent
PostQuitMessage
UnhookWindowsHookEx

gdi32

CreatePen
GetRgnBox
GetMapMode
GetBkColor
GetTextColor
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetClipBox
SetMapMode
SetBkColor
RestoreDC
SaveDC
CreateBitmap
CreateRectRgnIndirect
GetDeviceCaps
TextOutW
SetTextColor
SetBkMode
Rectangle
CreateSolidBrush
GetDIBits
LineTo
MoveToEx
CombineRgn
GetPixel
CreateRectRgn
StretchBlt
DeleteDC
CreateDIBSection
SelectObject
GetStockObject
DeleteObject
BitBlt
CreateFontIndirectW
GetObjectW
CreateCompatibleBitmap
CreateCompatibleDC

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW
GetSaveFileNameW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW

shell32

SHChangeNotify
Shell_NotifyIconW
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderPathW
ShellExecuteW
SHGetFolderPathW

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

SHDeleteKeyW
SHDeleteValueW
UrlUnescapeA
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject
CoTaskMemFree
OleDraw
OleSetContainedObject
OleCreate
OleUninitialize
OleInitialize
CoCreateGuid
CreateStreamOnHGlobal
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoGetClassObject
CoInitialize

oleaut32

VariantClear
VariantInit
SysAllocStringLen
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysStringLen
VariantChangeType
VariantCopy
DispCallFunc
LoadRegTypeLi
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SysFreeString
SafeArrayCreate
OleCreateFontIndirect
GetErrorInfo

gdiplus

GdipGetImageWidth
GdipReleaseDC
GdipDrawImagePointsI
GdipLoadImageFromStream
GdipBitmapLockBits
GdipCreateFromHDC
GdipCreateHBITMAPFromBitmap
GdipDisposeImage
GdipAlloc
GdipBitmapUnlockBits
GdipCloneImage
GdipDeleteGraphics
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipFree
GdiplusShutdown
GdiplusStartup

ws2_32

connect
WSAStartup
htons
shutdown
setsockopt
WSACleanup
recv
socket
closesocket
gethostbyname
send
getprotobyname

wininet

InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoW
InternetReadFile
InternetSetFilePointer
InternetCloseHandle
DeleteUrlCacheEntryW
FindNextUrlCacheEntryW
FindFirstUrlCacheEntryW
InternetGetCookieW
InternetCheckConnectionW

iphlpapi

GetAdaptersInfo

winmm

mixerGetLineControlsW
mixerOpen
mixerGetControlDetailsW
mixerClose
mixerGetLineInfoW
mixerGetNumDevs
mixerSetControlDetails
midiStreamOut
waveOutWrite

dsound

ord1

Sections

.text
Size: 426KB - Virtual size: 426KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

591160a16165b3fc0d3dd2075d91860e

Code Sign

fb:81:08:09:b7:0f:c1:5d:2d:79:5e:05:d7:dd:25:6c:7d:e9:28:62Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

ws2_32

wininet

iphlpapi

winmm

dsound

Sections

.text Size: 426KB - Virtual size: 426KB

.rdata Size: 120KB - Virtual size: 120KB

.data Size: 14KB - Virtual size: 34KB

.rsrc Size: 253KB - Virtual size: 252KB

.reloc Size: 56KB - Virtual size: 56KB

fb:81:08:09:b7:0f:c1:5d:2d:79:5e:05:d7:dd:25:6c:7d:e9:28:62
Signer

.text
Size: 426KB - Virtual size: 426KB

.rdata
Size: 120KB - Virtual size: 120KB

.data
Size: 14KB - Virtual size: 34KB

.rsrc
Size: 253KB - Virtual size: 252KB

.reloc
Size: 56KB - Virtual size: 56KB