0f9dfc10c204e072df6edbf23f284a12_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0f9dfc10c204e072df6edbf23f284a12_JaffaCakes118
Size

2.1MB
MD5

0f9dfc10c204e072df6edbf23f284a12
SHA1

1f248867707d2107576dd721df5707cc3a05eabe
SHA256

5d5383ad2f1c6d29dae34b40389aa060cb053bbc527e3b05a55dcb81280f1f29
SHA512

0a1909182377913fcc4b5a9ec2c772b4d0585b8ccffa402b7c716ae9152fb87de7c58417985cd7154a770c3cac1bcb87a070c7ba397b9a61d4697b869cda5ca6
SSDEEP

49152:9vMCEXkOZEZGhXHC36ImKUGXy6aSrhjUCp:pMC4kOVHC36UUAaSN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f9dfc10c204e072df6edbf23f284a12_JaffaCakes118

Files

0f9dfc10c204e072df6edbf23f284a12_JaffaCakes118
.dll windows:5 windows x86 arch:x86

9a5d97ce356e702d107947d26397b559

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Compile\dolphin\Source\Plugins\Plugin_Wiimote\Win32\Release\Plugin_Wiimote.pdb

Imports

sdl

SDL_JoystickNumAxes
SDL_JoystickNumButtons
SDL_JoystickNumBalls
SDL_JoystickNumHats
SDL_JoystickName
SDL_JoystickGetHat
SDL_JoystickGetButton
SDL_GetError
SDL_Init
SDL_JoystickOpened
SDL_NumJoysticks
SDL_JoystickClose
SDL_JoystickOpen
SDL_JoystickUpdate
SDL_JoystickGetAxis
SDL_Quit
SDL_WasInit

wiiuse

wiiuse_poll
wiiuse_init
wiiuse_set_ir_position
wiiuse_io_write
wiiuse_set_accel_threshold
wiiuse_set_leds
wiiuse_rumble
wiiuse_cleanup
wiiuse_motion_sensing
wiiuse_find
wiiuse_set_ir
wiiuse_io_read
wiiuse_read_data

kernel32

GetModuleHandleW
SetEnvironmentVariableW
GlobalMemoryStatus
GetModuleFileNameW
GetExitCodeProcess
TerminateProcess
OpenProcess
LocalFree
FormatMessageW
OutputDebugStringW
CreateFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetFileSize
GetShortPathNameW
FindClose
FindFirstFileW
SetFileTime
GetFileTime
GetTempFileNameW
WriteFile
GetDiskFreeSpaceW
GetFileAttributesW
CopyFileW
SetCurrentDirectoryW
GetWindowsDirectoryW
FreeLibrary
ReadFile
CreatePipe
PeekNamedPipe
SetNamedPipeHandleState
CreateThread
CreateProcessW
DuplicateHandle
FindNextFileW
IsBadReadPtr
IsBadStringPtrA
ExpandEnvironmentStringsW
SetLastError
LocalAlloc
FindResourceW
WriteProfileStringW
WritePrivateProfileStringW
GetPrivateProfileStringW
SizeofResource
LockResource
LoadResource
SetErrorMode
GlobalLock
GlobalUnlock
GlobalAlloc
GlobalSize
GlobalFree
HeapSize
GetProcessHeap
InterlockedExchange
HeapAlloc
HeapFree
GetCommandLineA
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
HeapReAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
DeleteFileW
CreateDirectoryW
RemoveDirectoryW
GetFullPathNameW
MoveFileW
WriteConsoleW
LCMapStringA
LCMapStringW
FatalAppExitA
VirtualFree
VirtualAlloc
HeapCreate
HeapDestroy
GetModuleFileNameA
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetOEMCP
VirtualQuery
GetModuleHandleA
SetConsoleCtrlHandler
LoadLibraryA
GetLocaleInfoA
EnumSystemLocalesA
GetStringTypeA
GetStringTypeW
CreateFileA
GetConsoleOutputCP
GetCurrentDirectoryA
SetCurrentDirectoryA
GetDriveTypeA
GetFullPathNameA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
CompareStringA
GetComputerNameW
IsValidCodePage
GetCPInfo
GetProfileStringW
GetEnvironmentVariableW
SetThreadLocale
IsValidLocale
GetUserDefaultLCID
GetACP
GetExitCodeThread
GetCurrentProcess
GetProcessAffinityMask
GetProcAddress
TlsAlloc
TlsSetValue
TlsFree
TlsGetValue
ResumeThread
SuspendThread
TerminateThread
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
CreateSemaphoreW
ReleaseMutex
CreateMutexW
LoadLibraryW
GetSystemInfo
GetCurrentThreadId
GetThreadLocale
GetLocaleInfoW
GetTimeZoneInformation
GetTempPathW
GetCurrentProcessId
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
GetVersionExW
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterA
FillConsoleOutputAttribute
SetConsoleCursorPosition
SetConsoleTextAttribute
WriteConsoleA
FreeConsole
AllocConsole
GetStdHandle
SetConsoleTitleA
SetConsoleScreenBufferSize
SetConsoleWindowInfo
GetLastError
FormatMessageA
QueryPerformanceFrequency
RaiseException
SetEvent
CreateEventA
GetCurrentThread
SetThreadPriority
SetThreadAffinityMask
WaitForSingleObject
CloseHandle
LeaveCriticalSection
TryEnterCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
CancelIo
Sleep
GetFileType

user32

DestroyIcon
keybd_event
CloseClipboard
IsClipboardFormatAvailable
OpenClipboard
HideCaret
ShowCaret
GetWindowTextLengthW
LoadIconW
LoadBitmapW
LoadImageW
ChildWindowFromPoint
GetClassNameW
GetWindowTextW
LoadAcceleratorsW
DestroyAcceleratorTable
CreateAcceleratorTableW
TranslateAcceleratorW
GetMessagePos
SetMenu
EndPaint
DrawIcon
BeginPaint
GetUpdateRect
GetWindowDC
GetMessageW
ValidateRect
GetMenuState
CheckMenuItem
CheckMenuRadioItem
ModifyMenuW
UnionRect
SetMenuItemInfoW
CreatePopupMenu
DestroyMenu
RemoveMenu
InsertMenuW
AppendMenuW
CreateMenu
GetSubMenu
InsertMenuItemW
RegisterClipboardFormatW
EmptyClipboard
GetClipboardData
EnumClipboardFormats
GetClipboardFormatNameW
SetClipboardData
ShowCursor
DrawEdge
DrawStateW
GetKeyNameTextA
MapVirtualKeyW
OffsetRect
CopyRect
GetDlgItem
CreateDialogParamW
InflateRect
GetUpdateRgn
SetWindowsHookExW
IsDialogMessageW
TrackPopupMenu
IsWindow
PtInRect
GetCapture
UnhookWindowsHookEx
UnregisterHotKey
RegisterHotKey
CallNextHookEx
GetActiveWindow
GetMenuItemCount
GetMenuItemInfoW
SystemParametersInfoW
GetMessageTime
GetWindow
BeginDeferWindowPos
DrawIconEx
InvalidateRect
GetFocus
IsWindowEnabled
IsWindowVisible
CallWindowProcW
DeferWindowPos
ClientToScreen
UpdateWindow
RedrawWindow
SetParent
WindowFromPoint
ScrollWindow
SetScrollInfo
GetScrollInfo
SetCursorPos
ReleaseCapture
SetCapture
EnableWindow
SetFocus
FillRect
GetKeyState
VkKeyScanW
GetDC
ReleaseDC
DispatchMessageW
TranslateMessage
PostQuitMessage
CreateDialogIndirectParamW
MoveWindow
SetWindowTextW
UnregisterClassW
FlashWindow
SetWindowRgn
AdjustWindowRectEx
GetSystemMenu
EnableMenuItem
DrawMenuBar
GetDesktopWindow
SetWindowPos
IsIconic
IsZoomed
ShowWindow
BringWindowToTop
GetWindowRect
GetSysColor
DrawFocusRect
GetWindowLongW
DrawTextW
DestroyWindow
DefWindowProcW
SendMessageW
LoadCursorW
SetCursor
PeekMessageW
MessageBoxW
EnumWindows
PostMessageW
RegisterClassW
ExitWindowsEx
MessageBeep
GetWindowThreadProcessId
CreateWindowExW
PostThreadMessageW
PeekMessageA
DispatchMessageA
MsgWaitForMultipleObjects
MessageBoxA
DrawFrameControl
CreateIconIndirect
GetIconInfo
MapWindowPoints
GetClassInfoW
SetForegroundWindow
GetParent
GetForegroundWindow
GetKeyboardState
GetSystemMetrics
GetAsyncKeyState
ScreenToClient
GetClientRect
GetCursorPos
SetTimer
KillTimer
LoadCursorFromFileW
EndDeferWindowPos
DestroyCursor
SetWindowLongW

xinput9_1_0

XInputGetState

comctl32

ImageList_Create
ImageList_BeginDrag
ImageList_Add
ImageList_AddMasked
ImageList_Remove
ImageList_SetBkColor
ImageList_Replace
ImageList_SetDragCursorImage
ImageList_DragLeave
ImageList_DragEnter
ImageList_GetIcon
CreateStatusWindowW
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_Draw
ImageList_GetImageCount
ord16
ImageList_Destroy
ImageList_EndDrag
ImageList_DragMove
ord17

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime

gdi32

CreateCompatibleDC
GetSystemPaletteEntries
CreateSolidBrush
CreatePen
GetDeviceCaps
DeleteObject
CreateFontIndirectW
ExcludeClipRect
CreateRectRgn
GetTextExtentPoint32W
GetObjectW
CreatePatternBrush
CreateCompatibleBitmap
SelectPalette
RealizePalette
GdiFlush
SelectObject
GetTextMetricsW
GetRegionData
ExtCreateRegion
OffsetRgn
SetBkMode
SetBkColor
SetTextColor
EnumFontFamiliesExW
CreateEnhMetaFileW
GetMetaFileBitsEx
SetWinMetaFileBits
GetPaletteEntries
BitBlt
CreateBitmap
SetStretchBltMode
GetClipBox
ExtSelectClipRgn
ExtFloodFill
GetPixel
SetPixel
Polyline
PolyBezier
TextOutW
SetROP2
GetCharABCWidthsW
GetTextExtentExPointW
SetWindowOrgEx
SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
SetMapMode
GetBkColor
GetTextColor
SelectClipRgn
Arc
Pie
Polygon
SetPolyFillMode
PolyPolygon
Rectangle
RoundRect
Ellipse
GetStockObject
MaskBlt
StretchBlt
StretchDIBits
GetNearestPaletteIndex
CreatePalette
CreateHatchBrush
ExtCreatePen
LineTo
MoveToEx
GetRgnBox
EqualRgn
PtInRegion
RectInRegion
DeleteDC
CreatePolygonRgn
CombineRgn
RestoreDC
SaveDC
CreateRectRgnIndirect
SetTextAlign
PatBlt
CreateICW
CreateDIBSection
GetDIBits
CreateDIBitmap
GetDIBColorTable
CreateBitmapIndirect
GetEnhMetaFileW
CopyEnhMetaFileW
DeleteEnhMetaFile
GetEnhMetaFileHeader
SetMetaFileBitsEx
GetWinMetaFileBits
PlayEnhMetaFile
CloseEnhMetaFile
SetBrushOrgEx

comdlg32

CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW
ChooseFontW
ChooseColorW

advapi32

RegCloseKey
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExW
RegQueryInfoKeyW
RegCreateKeyW
RegEnumValueW
RegEnumKeyW
RegDeleteValueW
RegQueryValueExW
RegDeleteKeyW
RegSetValueExW
GetUserNameW

shell32

SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteExW
DragAcceptFiles
DragFinish
DragQueryPoint
DragQueryFileW
ExtractIconW
ExtractIconExW
SHGetPathFromIDListW

ole32

OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
RevokeDragDrop
ReleaseStgMedium
OleGetClipboard
OleUninitialize
CoLockObjectExternal
RegisterDragDrop
OleInitialize
CoCreateInstance

oleaut32

SysAllocString
SysStringLen

Exports

Exports

DllConfig
DllDebugger
DoState
GetDllInfo
Initialize
SetDllGlobals
Shutdown
Wiimote_ControlChannel
Wiimote_GetAttachedControllers
Wiimote_InterruptChannel
Wiimote_Update

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 430KB - Virtual size: 429KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a5d97ce356e702d107947d26397b559

Headers

File Characteristics

PDB Paths

Imports

sdl

wiiuse

kernel32

user32

xinput9_1_0

comctl32

winmm

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 430KB - Virtual size: 429KB

.data Size: 41KB - Virtual size: 223KB

.reloc Size: 135KB - Virtual size: 135KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 430KB - Virtual size: 429KB

.data
Size: 41KB - Virtual size: 223KB

.reloc
Size: 135KB - Virtual size: 135KB