096c702229dac6adf9fbc1f6377674c8_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

096c702229dac6adf9fbc1f6377674c8_JaffaCakes118
Size

271KB
MD5

096c702229dac6adf9fbc1f6377674c8
SHA1

60f61e7f4c7d20bc77dc4b909d2008b6d7e16d17
SHA256

2bb9356c43ab6085370db2cf2a4ae294d0c45f6b0f57d57f49b79525a6168475
SHA512

c971796a05f36c652cb9dddde5a4fea1dbe539f6ce970f7a0b75d9384c105f2095a151a082cd23e6bf7c520b6ba17b47c3e149ae6e5a8c6c5722a66569490ad6
SSDEEP

6144:K9nCfrRprgRihpm7mLNK3NTTiC2YLmdLI:K9Cfr7ERihpm7mL43ACHB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
096c702229dac6adf9fbc1f6377674c8_JaffaCakes118

Files

096c702229dac6adf9fbc1f6377674c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

40aa333890bbe7be9013418432d6e136

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ufddll

??1CUsblib@@UAE@XZ
?Usblib_SPTICMD_Start@CUsblib@@QAEHPAU_Storage_Struct@@@Z
?Usblib_ASPICMD_Stop@CUsblib@@QAEXXZ
?Usblib_ASPICMD_Start@CUsblib@@QAEHPAE@Z
?Usblib_SCSIBusScan@CUsblib@@QAEXPAU_Storage_Struct@@@Z
?Usblib_WriteMailSetting@CUsblib@@QAEHPAU_MailServer_Struct@@EPAD11PAU_Storage_Struct@@@Z
?Usblib_SPTICMD_Stop@CUsblib@@QAEXPAU_Storage_Struct@@@Z
??0CUsblib@@QAE@XZ
?Usblib_ReadMailSetting@CUsblib@@QAEHPAU_MailServer_Struct@@PAEPAD22PAU_Storage_Struct@@@Z

kernel32

GetCPInfo
GetOEMCP
SizeofResource
GetThreadLocale
SetErrorMode
DuplicateHandle
CreateFileA
ReadFile
WriteFile
SetFilePointer
LockFile
UnlockFile
SetEndOfFile
GetFullPathNameA
GetFileAttributesA
GetFileSize
GetFileTime
RtlUnwind
ExitProcess
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
ExitThread
CreateThread
HeapReAlloc
HeapSize
GetACP
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetProcessVersion
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
VirtualQuery
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoA
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
MultiByteToWideChar
lstrlenA
GetEnvironmentVariableA
GetLastError
GetCurrentProcess
GetCurrentThreadId
SetLastError
CreateMutexA
lstrcmpiA
GetVersionExA
GetDriveTypeA
CreateDirectoryA
GetSystemDefaultLCID
lstrcatA
lstrcpyA
FindFirstFileA
CopyFileA
Sleep
FlushFileBuffers
CloseHandle
ResetEvent
WaitForMultipleObjects
CreateProcessA
CreateEventA
GetFileType
WritePrivateProfileStringA
GlobalFlags
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageA
lstrcpynA
GetDiskFreeSpaceA
GetVolumeInformationA
GetLogicalDrives
SetEvent
FindClose
FindNextFileA
GetProfileStringA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
MulDiv
GetTickCount
WideCharToMultiByte
InterlockedIncrement
GlobalUnlock
GlobalFree
FindResourceA
LoadResource
LockResource
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetProcAddress
GetModuleHandleA
SuspendThread
SetThreadPriority
ResumeThread
WaitForSingleObject
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
InterlockedDecrement
LocalFree
LoadLibraryA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary

user32

TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetDesktopWindow
PtInRect
GetSysColorBrush
DestroyMenu
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
InflateRect
InvalidateRect
CharUpperA
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
RegisterClipboardFormatA
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetActiveWindow
SetFocus
EndPaint
ScreenToClient
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
IsWindowUnicode
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
BeginPaint
GetWindowDC
ClientToScreen
GetDC
AdjustWindowRectEx
ReleaseDC
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
PostQuitMessage
PostMessageA
UnhookWindowsHookEx
EnableWindow
GetClassNameA
EnumWindows
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
LoadStringA
KillTimer
SetTimer
LoadIconA
FindWindowA
SetForegroundWindow
IsIconic
ShowWindow
IsWindow
GetThreadDesktop
GetUserObjectInformationA
wsprintfA
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
DestroyWindow

gdi32

DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
PatBlt
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateDIBitmap
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comctl32

ord17

oledlg

ord8

ole32

CoTaskMemAlloc
CoTaskMemFree
StgCreateDocfileOnILockBytes
OleUninitialize
OleInitialize
OleRun
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateInstance
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
CoGetClassObject
CoFreeUnusedLibraries
StgOpenStorageOnILockBytes
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard

olepro32

ord253

oleaut32

VariantTimeToSystemTime
VariantCopy
SysAllocStringByteLen
SysStringLen
SysAllocStringLen
SysAllocString
VariantClear
SysFreeString
VariantChangeType

Sections

.text
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

40aa333890bbe7be9013418432d6e136

Headers

File Characteristics

Imports

ufddll

kernel32

user32

gdi32

comdlg32

winspool.drv

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 164KB - Virtual size: 161KB

.rdata Size: 40KB - Virtual size: 38KB

.data Size: 12KB - Virtual size: 38KB

.rsrc Size: 32KB - Virtual size: 30KB

.lrdata Size: 20KB - Virtual size: 20KB

.text
Size: 164KB - Virtual size: 161KB

.rdata
Size: 40KB - Virtual size: 38KB

.data
Size: 12KB - Virtual size: 38KB

.rsrc
Size: 32KB - Virtual size: 30KB

.lrdata
Size: 20KB - Virtual size: 20KB