b063124f3077823f74ecdaf1a2d4739f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b063124f3077823f74ecdaf1a2d4739f_JaffaCakes118
Size

676KB
MD5

b063124f3077823f74ecdaf1a2d4739f
SHA1

d2515570d7c476a12991ab6d25d1b262c7f26331
SHA256

5ff0cced3ca18499821fd42b262865cae525d2ef269c0bb335c255c69461adc7
SHA512

88fa941492b95ed9973e93667c4f0bff4df199f4912f72e29acd23095db322c74d2698ff3fd780cd7092fd77309620773fa42d8ea16bfe3aab1223b0e7c69c4e
SSDEEP

12288:Du3WfwmDpQLywnx3kjGaKyU2Y91hUbhiQG4yEYFzsUSEtoQV3Gks8SOT1KSeRMh:5ImDpUy43kjGaKUY91hUbhVTyEYFzsdT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b063124f3077823f74ecdaf1a2d4739f_JaffaCakes118

Files

b063124f3077823f74ecdaf1a2d4739f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c33b816424d94d37777f5a1a4f789586

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\My Work\Visual Studio 3\Code_upload1484\Release\smtpconnection.pdb

Imports

kernel32

GlobalHandle
EnterCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
lstrcatA
GetCurrentDirectoryA
GlobalFlags
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
FreeResource
SetErrorMode
GetCPInfo
GetOEMCP
HeapAlloc
HeapFree
VirtualProtect
GetSystemInfo
VirtualQuery
RtlUnwind
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetStartupInfoA
GetCommandLineA
TerminateProcess
ExitThread
GlobalReAlloc
HeapReAlloc
HeapSize
FatalAppExitA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetConsoleCtrlHandler
SetStdHandle
SetEnvironmentVariableA
GetLocaleInfoW
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
InterlockedDecrement
GetFileTime
GetFileAttributesA
SetFileAttributesA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetShortPathNameA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
CloseHandle
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetModuleFileNameA
GetModuleHandleA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadLibraryA
GlobalFree
CopyFileA
MulDiv
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
GetTimeZoneInformation
GetTickCount
Sleep
SetLastError
GetModuleFileNameW
CopyFileW
ExitProcess
VirtualAlloc
GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
GetEnvironmentVariableA
CompareStringW
CompareStringA
LoadLibraryW
GetProcAddress
lstrlenA
lstrcmpiW
lstrlenW
lstrcmpiA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
CreateThread
InterlockedExchange

user32

GetDialogBaseUnits
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
IsWindow
IsChild
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetClientRect
GetMenu
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
SetWindowPlacement
DefWindowProcA
CallWindowProcA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
CopyRect
GetWindowTextLengthA
SetWindowPos
ScrollWindowEx
SetFocus
ShowWindow
CreateDialogIndirectParamA
SetWindowLongA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
SendDlgItemMessageA
GetDlgItemTextA
GetDlgItemInt
GetDlgItem
CheckRadioButton
CheckDlgButton
EndPaint
BeginPaint
GetWindowDC
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetDesktopWindow
GetWindowTextA
SetWindowTextA
GetClassNameA
DeleteMenu
CharLowerA
CharLowerW
CharUpperA
CharUpperW
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuA
UnhookWindowsHookEx
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
wsprintfA
GetSystemMetrics
UnregisterClassA
SetTimer
KillTimer
WaitMessage
SetMenuItemBitmaps
GetNextDlgTabItem
EndDialog
DestroyMenu
GetMenuItemInfoA
GetFocus
ModifyMenuA
InflateRect
DestroyIcon
RegisterWindowMessageA
WinHelpA
MoveWindow
GetCapture
GetMenuItemID
AppendMenuA
GetMenuStringA
GetMenuState
PostQuitMessage
PostMessageA
SetCursor
SendMessageA
ShowOwnedPopups
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
MessageBoxA
ValidateRect
GetCursorPos
PeekMessageA
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
CallNextHookEx
SetWindowsHookExA
LoadBitmapA
GetMenuCheckMarkDimensions
CheckMenuItem
EnableMenuItem
GetWindowPlacement

gdi32

PolyBezierTo
ExtSelectClipRgn
DeleteDC
CreateDIBPatternBrushPt
CreatePatternBrush
CreateCompatibleDC
GetStockObject
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
PolylineTo
CreateSolidBrush
CreateHatchBrush
GetDCOrgEx
CreateFontIndirectA
GetTextExtentPoint32A
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
GetTextMetricsA
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
ExtTextOutA
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
ExtCreatePen
GetDeviceCaps
TextOutA
RectVisible
PtVisible
StartDocA
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
GetObjectA
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
DeleteObject
CreateBitmap
CreateDCA
CopyMetaFileA
Escape

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegEnumKeyA
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegSetValueA

shell32

SHGetFileInfoA
ExtractIconA
ShellExecuteW

comctl32

ord17

shlwapi

PathFindExtensionA
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA

ws2_32

socket
connect
send
recv
closesocket
select
WSASetLastError
gethostbyname
inet_addr
htons
gethostname
WSAAsyncSelect
recvfrom
ntohs
inet_ntoa
WSAStartup
WSACleanup
accept
htonl
bind
WSAGetLastError
getsockname
getpeername
sendto

ole32

OleRegGetUserType
CLSIDFromString
StringFromGUID2
CoCreateInstance
CoDisconnectObject
WriteClassStg
ReleaseStgMedium
CoTaskMemAlloc
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
WriteFmtUserTypeStg
SetConvertStg
OleDuplicateData
CoTaskMemFree
ReadFmtUserTypeStg

oleaut32

SysFreeString
SysStringLen
SysAllocStringByteLen
SysStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
SysReAllocStringLen
VarDateFromStr
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate

Sections

.text
Size: 236KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c33b816424d94d37777f5a1a4f789586

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ws2_32

ole32

oleaut32

Sections

.text Size: 236KB - Virtual size: 232KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 8KB - Virtual size: 21KB

.rsrc Size: 364KB - Virtual size: 363KB

.text
Size: 236KB - Virtual size: 232KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 8KB - Virtual size: 21KB

.rsrc
Size: 364KB - Virtual size: 363KB