102feb22767fb4aa1e2c63b79257b9eb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

102feb22767fb4aa1e2c63b79257b9eb_JaffaCakes118
Size

713KB
MD5

102feb22767fb4aa1e2c63b79257b9eb
SHA1

c9d8224e95b525287fbb68e47c6e6129cb48e4fc
SHA256

3c71ed5e18e6472572fe0719605cb736f2ecb3d384d8d74908c72456a1b54a14
SHA512

141ef14a165cde894181c089847654a7928f5a36d3bd560413416fc1fbd513e6da490e9682796fbf2e9fd304f8ab1ee54b65c7528438cdb7c1c0a5f5b161252e
SSDEEP

12288:Rpe78TgcfiyLLFhn8QAhcrFxbeziNQpNA1ej4GruFvCwQFs8:dgcv96pNA1e45CRFs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
102feb22767fb4aa1e2c63b79257b9eb_JaffaCakes118

Files

102feb22767fb4aa1e2c63b79257b9eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a09bbf057ab1456b77f3965fddd7c57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wpcap

pcap_dump_open
pcap_sendpacket
pcap_lookupdev
pcap_dump_close
pcap_open_live
pcap_close
pcap_setbuff
pcap_lookupnet
pcap_compile
pcap_freecode
pcap_setfilter
pcap_datalink
pcap_loop
pcap_dump

packet

PacketInitPacket
PacketSendPacket
PacketFreePacket
PacketAllocatePacket
PacketSetNumWrites
PacketCloseAdapter
PacketOpenAdapter

ws2_32

select
recv
WSACleanup
WSAStartup
gethostbyname
ntohs
closesocket
connect
inet_addr
htonl
ntohl
htons
socket
recvfrom
sendto
bind
WSAGetLastError
setsockopt

iphlpapi

DeleteIpNetEntry
CreateIpNetEntry
GetIpNetTable
GetBestRoute
GetPerAdapterInfo
GetBestInterface
GetAdaptersInfo

kernel32

GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
TlsFree
GetCurrentDirectoryA
GetProcessVersion
GetThreadLocale
GetCPInfo
GetOEMCP
DuplicateHandle
GetCurrentProcess
CreateFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
DeleteFileA
FindClose
FindFirstFileA
GetVolumeInformationA
GetStringTypeExA
GetShortPathNameA
GetFileSize
LocalFileTimeToFileTime
TlsAlloc
GlobalSize
lstrlenW
CopyFileA
SetErrorMode
RtlUnwind
HeapFree
HeapReAlloc
HeapAlloc
EnterCriticalSection
GlobalHandle
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetACP
SetStdHandle
GetFileType
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetVersionExA
SetEnvironmentVariableA
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalLock
GetProfileIntA
LocalAlloc
GetFileTime
LocalUnlock
GetDiskFreeSpaceA
GetTempFileNameA
SetFileTime
GetFullPathNameA
SetLastError
GetFileAttributesA
MulDiv
GlobalFindAtomA
lstrcatA
GlobalGetAtomNameA
GetTickCount
lstrcpyA
GetModuleHandleA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GlobalAddAtomA
GetModuleFileNameA
GetCurrentThread
GlobalDeleteAtom
lstrcmpiA
FindResourceA
GetCurrentThreadId
LockResource
MultiByteToWideChar
LoadResource
lstrcmpA
InterlockedIncrement
lstrlenA
InterlockedDecrement
lstrcpynA
GetWindowsDirectoryA
FormatMessageA
SetThreadPriority
LocalFree
WideCharToMultiByte
FreeLibrary
LoadLibraryA
GetProcAddress
WaitForSingleObject
CreateWaitableTimerA
SetWaitableTimer
Sleep
CreateThread
TerminateThread
GlobalUnlock
GlobalAlloc
GlobalLock
CreateMutexA
GlobalFree
CloseHandle
RaiseException
GetLastError
GetVersion
SystemTimeToFileTime
GetTimeZoneInformation

user32

GetScrollPos
SetScrollPos
SetScrollInfo
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
GetSysColor
MapWindowPoints
ClientToScreen
GetDC
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
wvsprintfA
GetTabbedTextExtentA
IsClipboardFormatAvailable
DestroyMenu
ReleaseCapture
PtInRect
SetCapture
InflateRect
IsRectEmpty
WindowFromPoint
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
GetDesktopWindow
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
IsZoomed
SetCursorPos
DestroyCursor
GetAsyncKeyState
GetClassNameA
InsertMenuA
DeleteMenu
GetMenuStringA
DestroyIcon
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
PostThreadMessageA
CharUpperA
AppendMenuA
RemoveMenu
GetDCEx
LockWindowUpdate
FindWindowA
FillRect
SetParent
GetSystemMenu
InvertRect
GetWindowRect
RegisterClipboardFormatA
MapDialogRect
GetWindow
SetWindowContextHelpId
wsprintfA
LoadStringA
SetFocus
ShowWindow
SetWindowPos
GetCapture
IsChild
GetTopWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetMessageA
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
SetWindowsHookExA
GetLastActivePopup
MessageBoxA
ShowOwnedPopups
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindowEnabled
SetMenuDefaultItem
SetForegroundWindow
TrackPopupMenu
GetMenuItemID
IsWindow
DrawTextA
PostMessageA
GetWindowDC
ReleaseDC
LoadBitmapA
CopyRect
RedrawWindow
GetSysColorBrush
SetRect
LoadCursorA
CopyIcon
SetCursor
InvalidateRect
MessageBeep
GetClientRect
GetSystemMetrics
SetTimer
KillTimer
LoadIconA
HideCaret
PeekMessageA
LoadMenuA
GetSubMenu
GetCursorPos
GetWindowLongA
SetWindowLongA
SendMessageA
SystemParametersInfoA
EnableWindow
UpdateWindow
DefWindowProcA
CreateWindowExA
GetClassLongA
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetWindowTextLengthA
GetWindowTextA
GetPropA
SetPropA
UnhookWindowsHookEx
GetMessageTime
CallWindowProcA
RemovePropA
RegisterWindowMessageA
GetMessagePos
GetForegroundWindow
IsIconic
OffsetRect
IntersectRect
MoveWindow
GetWindowPlacement
GetDlgCtrlID
TranslateMessage
GetDlgItem
GetParent
GetMenuItemCount
CreatePopupMenu
EmptyClipboard
IsMenu
CreateCaret
UnregisterClassA
DrawMenuBar
TranslateMDISysAccel
DefFrameProcA
TrackPopupMenuEx
DrawIconEx
DrawFrameControl
EnableScrollBar
UnionRect
CloseWindow
DestroyCaret
SetCaretPos
ShowCaret
DragDetect

gdi32

StretchDIBits
CreateCompatibleBitmap
SetBoundsRect
SetPixel
OffsetRgn
EnumFontFamiliesA
SetBkMode
CreateFontA
GetStockObject
GetObjectA
DeleteObject
CombineRgn
CreateRectRgn
CopyMetaFileA
BitBlt
CreateCompatibleDC
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
DeleteDC
StartDocA
SaveDC
RestoreDC
SelectObject
CreateFontIndirectA
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
ExcludeClipRect
IntersectClipRect
SelectClipRgn
MoveToEx
LineTo
SetTextAlign
CreateDIBitmap
ExtSelectClipRgn
GetDeviceCaps
GetWindowExtEx
CreatePen
GetViewportExtEx
CreateSolidBrush
PtVisible
CreatePatternBrush
TextOutA
ExtTextOutA
RectVisible
GetTextMetricsA
DPtoLP
Escape
PatBlt
CreateRectRgnIndirect
GetCharWidthA
GetMapMode
SetRectRgn
GetTextExtentPoint32A
GetBkColor
LPtoDP
GetTextColor
EndDoc
EndPage
AbortDoc
SetAbortProc
CreateDCA
StartPage

comdlg32

CommDlgExtendedError
PrintDlgA
FindTextA
ReplaceTextA
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegDeleteValueA
RegCreateKeyExA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegEnumKeyA
RegSetValueA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA
RegQueryValueA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryInfoKeyA

shell32

ShellExecuteA
DragFinish
DragQueryFileA
ExtractIconA
SHGetFileInfoA
Shell_NotifyIconA

comctl32

DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Destroy
_TrackMouseEvent
ord17
PropertySheetA

oledlg

ord8

ole32

OleDuplicateData
CreateStreamOnHGlobal
CoRevokeClassObject
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
OleGetClipboard
OleUninitialize
ReleaseStgMedium
CoTaskMemFree
OleInitialize
CLSIDFromString
CLSIDFromProgID

olepro32

ord253

oleaut32

SysAllocStringByteLen
SysAllocString
SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysStringLen

Sections

.text
Size: 476KB - Virtual size: 476KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5a09bbf057ab1456b77f3965fddd7c57

Headers

File Characteristics

Imports

wpcap

packet

ws2_32

iphlpapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 476KB - Virtual size: 476KB

.rdata Size: 108KB - Virtual size: 108KB

.data Size: 28KB - Virtual size: 48KB

.rsrc Size: 100KB - Virtual size: 100KB

.text
Size: 476KB - Virtual size: 476KB

.rdata
Size: 108KB - Virtual size: 108KB

.data
Size: 28KB - Virtual size: 48KB

.rsrc
Size: 100KB - Virtual size: 100KB