8038658b8d000a4a7ab6a1c3eef13e8b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8038658b8d000a4a7ab6a1c3eef13e8b_JaffaCakes118
Size

1.9MB
MD5

8038658b8d000a4a7ab6a1c3eef13e8b
SHA1

5c85d65a00dd69e5cc445db975620c2e3190141f
SHA256

17d5ebc453d33388f1e5eecffd48605265b53577f7c4ebf9551fafca26e822af
SHA512

25cc24421d121842066d33c70f5f64c068c8c43bd3a5e8bc98a7919752b222f63425cd5e2849b4377da4831ceb7781712948d314fecd23734aa49f772ca9165a
SSDEEP

24576:Yam5upSxntg40rgqWFlhGl67OIJWWLFnl5iTHR65G1q/DnpNfndpkP5mHaTHR60n:tDWHbfFniD6GsVFLaDN1At9xq0IK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8038658b8d000a4a7ab6a1c3eef13e8b_JaffaCakes118

Files

8038658b8d000a4a7ab6a1c3eef13e8b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

45cb6d8912b674f686fd08be7a77796a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

socket
getservbyname
WSASetLastError
closesocket
gethostbyaddr
gethostbyname
send
WSAAsyncSelect
recv
gethostname
inet_ntoa
connect
inet_addr
WSAStartup
ioctlsocket
htonl
WSAGetLastError
htons
ntohs
shutdown
getservbyport
WSACleanup

winmm

mixerGetLineControlsW
mixerGetLineInfoW
mixerSetControlDetails
waveOutGetVolume
mixerGetDevCapsW
mixerOpen
mixerGetControlDetailsW
mixerClose
mciSendStringW
joyGetDevCapsW
waveOutSetVolume
joyGetPosEx

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

comctl32

ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_Create
CreateStatusWindowW
InitCommonControlsEx
ImageList_AddMasked
ImageList_Destroy

shlwapi

HashData

crypt32

CryptBinaryToStringA
CryptStringToBinaryW
CryptStringToBinaryA

psapi

GetModuleFileNameExW
GetModuleBaseNameW

kernel32

SetErrorMode
GetCurrentDirectoryW
LoadLibraryW
AddVectoredExceptionHandler
GlobalLock
GlobalUnlock
GetEnvironmentVariableW
FreeLibrary
OutputDebugStringW
WideCharToMultiByte
GetSystemDirectoryA
LoadLibraryA
GetCurrentThreadId
SuspendThread
ResumeThread
EnterCriticalSection
LeaveCriticalSection
OpenThread
lstrcmpiW
GetStringTypeExW
CreateThread
SetThreadPriority
GetExitCodeThread
CloseHandle
CreateMutexW
GetLastError
GetModuleHandleW
MultiByteToWideChar
SystemTimeToFileTime
SetFilePointerEx
ReadFile
SetFilePointer
GlobalSize
lstrcpyA
lstrlenA
lstrcmpiA
lstrcmpA
LocalFileTimeToFileTime
CreateDirectoryA
CreateDirectoryW
IsBadReadPtr
CreateFileW
CreateFileA
WriteFile
InitializeCriticalSection
DuplicateHandle
LoadResource
LockResource
SizeofResource
GetCurrentDirectoryA
FileTimeToSystemTime
GetLocalTime
GetFileInformationByHandle
GetFileSize
lstrlenW
FindFirstFileW
FindNextFileW
FindClose
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
SetLastError
VirtualAlloc
VirtualFree
GetTempPathA
GetNativeSystemInfo
HeapAlloc
GetProcessHeap
HeapFree
HeapDestroy
GetCommandLineW
WaitForSingleObject
GetThreadLocale
VirtualQuery
HeapCreate
FlushInstructionCache
GetVersionExW
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
GetFileAttributesW
OpenProcess
GetCurrentProcessId
GetFullPathNameW
LocalFree
FileTimeToLocalFileTime
SetEnvironmentVariableW
Beep
MoveFileW
CreateProcessW
GetExitCodeProcess
WriteProcessMemory
ReadProcessMemory
TerminateProcess
SetPriorityClass
GetDateFormatW
GetTimeFormatW
GetDiskFreeSpaceW
SetVolumeLabelW
DeviceIoControl
GetDriveTypeW
GetVolumeInformationW
DeleteFileW
CopyFileW
SetFileAttributesW
GetFileSizeEx
GetSystemTime
GetSystemDefaultUILanguage
GetComputerNameW
GetWindowsDirectoryW
GetTempPathW
GetShortPathNameW
TryEnterCriticalSection
QueryDosDeviceW
CompareStringW
RemoveDirectoryW
FormatMessageW
GetPrivateProfileStringW
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
WritePrivateProfileSectionW
SetEndOfFile
GetACP
GetFileType
GetStdHandle
VirtualAllocEx
VirtualFreeEx
EnumResourceNamesW
LoadLibraryExW
RemoveVectoredExceptionHandler
ExitProcess
ExitThread
VirtualProtect
GetSystemTimeAsFileTime
GetProcessTimes
GetCurrentProcess
CheckRemoteDebuggerPresent
GetCurrentThread
GetProcAddress
GlobalFree
_lclose
_lopen
_lread
GetModuleFileNameA
GlobalAlloc
GetModuleHandleA
FindResourceW
GetCPInfo
SetCurrentDirectoryW
Sleep
GetTickCount
MulDiv
InterlockedExchange
InterlockedCompareExchange
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
SetFileTime
IsProcessorFeaturePresent

user32

SetMenu
ScrollWindow
SetScrollInfo
ExitWindowsEx
GetMenuStringW
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetSystemMenu
GetLastInputInfo
GetCursor
ClientToScreen
MessageBeep
SetDlgItemTextW
GetDlgItem
SendDlgItemMessageW
DialogBoxParamW
SetForegroundWindow
DefWindowProcW
FillRect
DrawIconEx
GetSysColorBrush
GetSysColor
RegisterWindowMessageW
IsIconic
IsZoomed
EnumWindows
GetWindowTextLengthW
EnableWindow
InvalidateRect
SetLayeredWindowAttributes
SetWindowPos
SetWindowRgn
SetFocus
SetActiveWindow
EnumChildWindows
MoveWindow
GetQueueStatus
GetWindowRect
GetClientRect
SystemParametersInfoW
AdjustWindowRectEx
DrawTextW
SetRect
GetIconInfo
SetWindowTextW
IsWindowVisible
GetMenu
CheckMenuItem
CharLowerA
LoadImageW
ChangeClipboardChain
SetClipboardViewer
LoadAcceleratorsW
SetPropW
RemovePropW
MapWindowPoints
RedrawWindow
SetParent
GetClassInfoExW
GetAncestor
UpdateWindow
GetMessagePos
GetTopWindow
GetClassLongW
BringWindowToTop
GetWindow
EnumClipboardFormats
CreateWindowExW
RegisterClassExW
LoadCursorW
DestroyAcceleratorTable
UnregisterClassW
DestroyWindow
IsCharAlphaW
MapVirtualKeyW
VkKeyScanExW
CreateIconFromResourceEx
CreateIconIndirect
CopyImage
GetDesktopWindow
TrackPopupMenuEx
FlashWindow
AppendMenuW
SetMenuInfo
CreatePopupMenu
CreateMenu
GetMenuItemInfoW
IsMenu
SetMenuItemInfoW
RemoveMenu
SetMenuDefaultItem
InsertMenuItemW
CreateAcceleratorTableW
CreateDialogIndirectParamW
PtInRect
GetUpdateRect
IntersectRect
MapVirtualKeyExW
GetKeyboardLayoutNameW
ActivateKeyboardLayout
GetGUIThreadInfo
GetWindowTextW
mouse_event
GetSystemMetrics
keybd_event
SetKeyboardState
GetKeyboardState
GetCursorPos
GetAsyncKeyState
AttachThreadInput
SendInput
UnregisterHotKey
RegisterHotKey
PostQuitMessage
SendMessageTimeoutW
UnhookWindowsHookEx
SetWindowsHookExW
PostThreadMessageW
IsCharAlphaNumericW
IsCharUpperW
IsCharLowerW
ToUnicodeEx
GetKeyboardLayout
CallNextHookEx
CharLowerW
ReleaseDC
GetDC
MessageBoxW
OpenClipboard
GetClipboardData
GetClipboardFormatNameW
CloseClipboard
SetClipboardData
EmptyClipboard
PostMessageW
FindWindowW
EndDialog
IsWindow
DispatchMessageW
TranslateMessage
ShowWindow
CountClipboardFormats
SetWindowLongW
ScreenToClient
IsDialogMessageW
WindowFromPoint
SendMessageW
IsWindowEnabled
GetWindowLongW
GetKeyState
TranslateAcceleratorW
KillTimer
PeekMessageW
GetFocus
GetClassNameW
GetWindowThreadProcessId
GetForegroundWindow
GetMessageW
SetTimer
GetScrollInfo
GetParent
GetDlgCtrlID
CharUpperW
IsClipboardFormatAvailable
CheckRadioButton
CallWindowProcW
DefDlgProcW
DestroyMenu
GetPropW
DestroyIcon

gdi32

GetClipBox
FillRgn
GetClipRgn
GetCharABCWidthsW
SetTextColor
CreateDIBSection
GdiFlush
SetBkMode
CreatePatternBrush
ExcludeClipRect
EnumFontFamiliesExW
SetBkColor
GetPixel
BitBlt
CreateCompatibleBitmap
GetSystemPaletteEntries
GetDIBits
CreateCompatibleDC
CreatePolygonRgn
CreateRectRgn
CreateRoundRectRgn
CreateEllipticRgn
DeleteDC
GetObjectW
GetTextMetricsW
GetTextFaceW
SelectObject
GetStockObject
CreateDCW
CreateSolidBrush
CreateFontW
DeleteObject
SetBrushOrgEx
GetDeviceCaps

comdlg32

GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError

advapi32

RegDeleteKeyW
RegConnectRegistryW
RegCloseKey
RegOpenKeyExW
RegQueryInfoKeyW
CryptReleaseContext
CryptDestroyKey
CryptDestroyHash
CryptDeriveKey
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegDeleteValueW
RegEnumValueW
RegEnumKeyExW
GetUserNameW
OpenSCManagerW
LockServiceDatabase
UnlockServiceDatabase
CloseServiceHandle
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW

shell32

SHEmptyRecycleBinW
ExtractIconW
DragQueryPoint
SHFileOperationW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
SHGetMalloc
SHGetFolderPathW
ShellExecuteExW
CommandLineToArgvW
Shell_NotifyIconW
DragFinish
DragQueryFileW

ole32

OleInitialize
CoInitialize
CoCreateInstance
CoUninitialize
CLSIDFromString
CoGetObject
StringFromGUID2
CreateStreamOnHGlobal

oleaut32

SafeArrayGetDim
GetActiveObject
SysStringLen
SysFreeString
OleLoadPicture
SafeArrayUnaccessData
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnlock
SafeArrayPtrOfIndex
SafeArrayLock
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetUBound
VariantCopyInd
SafeArrayCopy
SysAllocString
VariantChangeType
VariantClear
SafeArrayCreate

msvcr100

strcpy_s
fread
fgets
strtol
_wfopen
atoi
strchr
strstr
calloc
_wtoi
strncmp
memmove
_atoi64
sprintf_s
_itoa
_strnicmp
sprintf
_stricmp
wcschr
_purecall
__iob_func
setvbuf
wcsrchr
??2@YAPAXI@Z
_swprintf
__wargv
__argc
_wcsnicmp
realloc
free
??3@YAXPAX@Z
malloc
_wtoi64
_wcstoi64
isxdigit
_wcsicmp
_i64tow
_wcsupr
_scwprintf
wcstombs
fwrite
towupper
_wsplitpath
wcstod
wcscspn
_msize
ftell
strtoul
strcat_s
fseek
atof
_isctype
fclose
strncpy_s
wcsstr
??_U@YAPAXI@Z
qsort
??_V@YAXPAX@Z
_itow
exit
_wcsdup
wcstol
toupper
isdigit
wcstoul
rand
_beginthreadex
wcsncpy
_snwprintf
iswspace
_wtof
iswdigit
wcsncmp
tolower
iswxdigit
fwprintf
fputws
_vsnwprintf
_wcstoui64
_ultow
_expand
_vsnprintf
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
memcpy
memset
__RTDynamicCast
__CxxFrameHandler3
_except_handler3
_ultoa

Exports

Exports

ADDFILE
ADDSCRIPT
AHKASSIGN
AHKEXEC
AHKEXECUTELINE
AHKFINDFUNC
AHKFINDLABEL
AHKFUNCTION
AHKGETVAR
AHKISUNICODE
AHKLABEL
AHKPAUSE
AHKPOSTFUNCTION
AddFile
AddScript
Addfile
Addscript
AhkAssign
AhkExec
AhkExecuteLine
AhkExecuteline
AhkFindFunc
AhkFindLabel
AhkFindfunc
AhkFindlabel
AhkFunction
AhkGetVar
AhkGetvar
AhkIsUnicode
AhkIsunicode
AhkLabel
AhkPause
AhkPostFunction
AhkPostfunction
Ahkassign
Ahkexec
AhkexecuteLine
Ahkexecuteline
AhkfindFunc
AhkfindLabel
Ahkfindfunc
Ahkfindlabel
Ahkfunction
AhkgetVar
Ahkgetvar
AhkisUnicode
Ahkisunicode
Ahklabel
Ahkpause
AhkpostFunction
Ahkpostfunction
addFile
addScript
addfile
addscript
ahkAssign
ahkExec
ahkExecuteLine
ahkExecuteline
ahkFindFunc
ahkFindLabel
ahkFindfunc
ahkFindlabel
ahkFunction
ahkGetVar
ahkGetvar
ahkIsUnicode
ahkIsunicode
ahkLabel
ahkPause
ahkPostFunction
ahkPostfunction
ahkassign
ahkexec
ahkexecuteLine
ahkexecuteline
ahkfindFunc
ahkfindLabel
ahkfindfunc
ahkfindlabel
ahkfunction
ahkgetVar
ahkgetvar
ahkisUnicode
ahkisunicode
ahklabel
ahkpause
ahkpostFunction
ahkpostfunction

Sections

.text
Size: 741KB - Virtual size: 741KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45cb6d8912b674f686fd08be7a77796a

Headers

File Characteristics

Imports

wsock32

winmm

version

comctl32

shlwapi

crypt32

psapi

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

msvcr100

Exports

Exports

Sections

.text Size: 741KB - Virtual size: 741KB

.rdata Size: 162KB - Virtual size: 161KB

.data Size: 9KB - Virtual size: 33KB

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 1.0MB - Virtual size: 1.0MB

.text
Size: 741KB - Virtual size: 741KB

.rdata
Size: 162KB - Virtual size: 161KB

.data
Size: 9KB - Virtual size: 33KB

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 1.0MB - Virtual size: 1.0MB