255f7842c6f07a6a1500a30fb4d27d54_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

255f7842c6f07a6a1500a30fb4d27d54_JaffaCakes118
Size

2.4MB
MD5

255f7842c6f07a6a1500a30fb4d27d54
SHA1

12d460fe918b581d56c9360e117b45589b29c790
SHA256

6640c3cf1b37bafcc1d3b3accb0b3552a966e2265ca4adbb0b3e2bdb888e67ff
SHA512

c17afeeea45543cb32ef84aa1f1e33af88fe21b81e03d1fe71e3da5f66b4eb1c1ea10e2a54cfa9d1d7d181378bd8e536e5a0cb0cb782d0bb861a164f8160fcb1
SSDEEP

49152:SLRI+LAgo2kphE8AYANBSqp8eCQEGGKJeTDxeq7uWYqYwTytOuyF:S5AZXeCQyKsDxeKuOYdOuyF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
255f7842c6f07a6a1500a30fb4d27d54_JaffaCakes118

Files

255f7842c6f07a6a1500a30fb4d27d54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

83d05f3211b305396e0ae37d301e55a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDIBSection
CreatePalette
DeleteDC
DeleteObject
GetDIBits
GetDeviceCaps
GetDeviceGammaRamp
GetObjectA
GetSystemPaletteEntries
GetSystemPaletteUse
RealizePalette
SelectObject
SelectPalette
SetDIBColorTable
SetDeviceGammaRamp
SetPaletteEntries
SetSystemPaletteUse
UnrealizeObject

iphlpapi

GetNetworkParams

kernel32

ChangeTimerQueueTimer
ClearCommError
CloseHandle
CommConfigDialogA
ConnectNamedPipe
CreateEventA
CreateFileA
CreateFileMappingA
CreateMutexA
CreateNamedPipeA
CreateProcessA
CreateSemaphoreA
CreateThread
CreateTimerQueueTimer
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileA
DeleteTimerQueueTimer
DeviceIoControl
EnterCriticalSection
ExitProcess
FlushFileBuffers
FreeLibrary
GetACP
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDefaultCommConfigA
GetDiskFreeSpaceExA
GetDriveTypeA
GetEnvironmentVariableA
GetFileAttributesA
GetFileSize
GetFileSizeEx
GetLastError
GetLocaleInfoA
GetLogicalDriveStringsA
GetModuleFileNameA
GetModuleHandleA
GetOverlappedResult
GetProcAddress
GetProcessAffinityMask
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetVersion
GetVersionExA
GlobalAlloc
GlobalFree
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MapViewOfFile
MultiByteToWideChar
PeekNamedPipe
Process32First
Process32Next
QueryPerformanceCounter
QueryPerformanceFrequency
ReadFile
ReleaseMutex
ReleaseSemaphore
SetCommMask
SetCommState
SetCommTimeouts
SetConsoleCtrlHandler
SetEndOfFile
SetEnvironmentVariableA
SetFilePointer
SetLastError
SetProcessAffinityMask
SetUnhandledExceptionFilter
SetupComm
Sleep
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
WriteFileEx
lstrlenA

msvcrt

_access
_close
_creat
_dup2
_fdopen
_getpid
_lseek
_mkdir
_open
_pclose
_popen
_putenv
_read
_rmdir
_stat
_strdup
_stricmp
_tzset
_unlink
_write
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_beginthreadex
_cexit
_chmod
_close
_commit
_creat
_dup
_dup2
_endthreadex
_errno
_findclose
_findfirst
_findnext
_ftime
_fullpath
_get_osfhandle
_iob
_isctype
_lseeki64
_mkdir
_onexit
_open
_pctype
_setjmp
_setmode
_stricmp
_unlink
abort
atexit
atoi
bsearch
calloc
ceil
clearerr
cos
exit
fclose
fflush
fgetc
fgets
fopen
fputc
fputs
fread
free
freopen
fseek
ftell
fwrite
getenv
gmtime
localeconv
localtime
longjmp
malloc
memchr
memcpy
memmove
memset
mktime
modf
perror
pow
puts
qsort
raise
rand
realloc
remove
rename
setbuf
setvbuf
signal
sin
sqrt
srand
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strftime
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtok
strtol
strtoul
time
tolower
toupper
wcslen

shell32

SHGetFolderPathA

user32

AdjustWindowRect
AdjustWindowRectEx
BeginPaint
CallWindowProcA
ChangeDisplaySettingsA
ClientToScreen
ClipCursor
CloseClipboard
CreateCursor
CreateIconFromResourceEx
CreateWindowExA
DefWindowProcA
DestroyCursor
DestroyIcon
DestroyWindow
DispatchMessageA
EmptyClipboard
EndPaint
EnumDisplayMonitors
EnumDisplaySettingsA
GetClassInfoA
GetClientRect
GetClipboardData
GetCursor
GetCursorPos
GetDC
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutNameA
GetKeyboardState
GetMenu
GetMessageA
GetParent
GetSystemMetrics
GetWindowLongA
GetWindowRect
InvalidateRect
IsWindow
IsZoomed
KillTimer
LoadIconA
LoadImageA
LoadKeyboardLayoutA
MapVirtualKeyExA
MapWindowPoints
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
PtInRect
RegisterClassA
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageA
SetCapture
SetClassLongA
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
ToAsciiEx
ToUnicode
TranslateMessage
UnregisterClassA
WindowFromPoint

avicap32

capCreateCaptureWindowA

winmm

timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeGetTime
timeKillEvent
timeSetEvent
waveInAddBuffer
waveInClose
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInStop
waveInUnprepareHeader
waveOutClose
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutUnprepareHeader
waveOutWrite

ws2_32

WSACleanup
WSAGetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostname
getnameinfo
getpeername
getsockname
getsockopt
htonl
htons
inet_addr
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

Exports

Exports

SDL_AddTimer
SDL_ClearError
SDL_ConvertSurface
SDL_CreateCursor
SDL_CreateMutex
SDL_CreateRGBSurface
SDL_CreateRGBSurfaceFrom
SDL_CreateSemaphore
SDL_CreateThread
SDL_Delay
SDL_DestroyMutex
SDL_DestroySemaphore
SDL_DisplayFormat
SDL_DisplayFormatAlpha
SDL_EnableKeyRepeat
SDL_EnableUNICODE
SDL_Error
SDL_EventState
SDL_FillRect
SDL_Flip
SDL_FreeCursor
SDL_FreeSurface
SDL_GL_GetAttribute
SDL_GL_GetProcAddress
SDL_GL_LoadLibrary
SDL_GL_Lock
SDL_GL_SetAttribute
SDL_GL_SwapBuffers
SDL_GL_Unlock
SDL_GL_UpdateRects
SDL_GetAppState
SDL_GetClipRect
SDL_GetCursor
SDL_GetError
SDL_GetEventFilter
SDL_GetKeyName
SDL_GetKeyRepeat
SDL_GetKeyState
SDL_GetModState
SDL_GetMouseState
SDL_GetRGB
SDL_GetRGBA
SDL_GetRelativeMouseState
SDL_GetThreadID
SDL_GetTicks
SDL_GetVideoInfo
SDL_GetVideoSurface
SDL_GetWMInfo
SDL_Has3DNow
SDL_Has3DNowExt
SDL_HasAltiVec
SDL_HasMMX
SDL_HasMMXExt
SDL_HasRDTSC
SDL_HasSSE
SDL_HasSSE2
SDL_Init
SDL_InitSubSystem
SDL_KillThread
SDL_Linked_Version
SDL_ListModes
SDL_LockSurface
SDL_LowerBlit
SDL_MapRGB
SDL_MapRGBA
SDL_PeepEvents
SDL_PollEvent
SDL_PumpEvents
SDL_PushEvent
SDL_Quit
SDL_QuitSubSystem
SDL_RegisterApp
SDL_RemoveTimer
SDL_SemPost
SDL_SemTryWait
SDL_SemValue
SDL_SemWait
SDL_SemWaitTimeout
SDL_SetAlpha
SDL_SetClipRect
SDL_SetColorKey
SDL_SetColors
SDL_SetCursor
SDL_SetError
SDL_SetEventFilter
SDL_SetModState
SDL_SetModuleHandle
SDL_SetPalette
SDL_SetTimer
SDL_SetVideoMode
SDL_ShowCursor
SDL_ThreadID
SDL_UnlockSurface
SDL_UnregisterApp
SDL_UpdateRect
SDL_UpdateRects
SDL_UpperBlit
SDL_VideoDriverName
SDL_VideoInit
SDL_VideoModeOK
SDL_VideoQuit
SDL_WM_GetCaption
SDL_WM_GetMonitorDPI
SDL_WM_GetMonitorRect
SDL_WM_GetPos
SDL_WM_GrabInput
SDL_WM_IconifyWindow
SDL_WM_IsFullyVisible
SDL_WM_SetCaption
SDL_WM_SetIcon
SDL_WM_SetPos
SDL_WM_ToggleFullScreen
SDL_WaitEvent
SDL_WaitThread
SDL_WarpMouse
SDL_WasInit
SDL_getenv
SDL_iconv
SDL_iconv_close
SDL_iconv_open
SDL_iconv_string
SDL_mutexP
SDL_mutexV
SDL_putenv
SDL_snprintf
SDL_sscanf
SDL_strlcat
SDL_strlcpy
SDL_strstr

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 581KB - Virtual size: 584KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 93KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rdat
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

83d05f3211b305396e0ae37d301e55a5

Headers

File Characteristics

Imports

advapi32

gdi32

iphlpapi

kernel32

msvcrt

shell32

user32

avicap32

winmm

ws2_32

Exports

Exports

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.data Size: 26KB - Virtual size: 28KB

.rdata Size: 581KB - Virtual size: 584KB

.bss Size: - Virtual size: 2.3MB

.edata Size: 3KB - Virtual size: 4KB

.idata Size: 10KB - Virtual size: 12KB

.rsrc Size: 55KB - Virtual size: 56KB

.reloc Size: 93KB - Virtual size: 96KB

.rdat Size: 5KB - Virtual size: 5KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 26KB - Virtual size: 28KB

.rdata
Size: 581KB - Virtual size: 584KB

.bss
Size: - Virtual size: 2.3MB

.edata
Size: 3KB - Virtual size: 4KB

.idata
Size: 10KB - Virtual size: 12KB

.rsrc
Size: 55KB - Virtual size: 56KB

.reloc
Size: 93KB - Virtual size: 96KB

.rdat
Size: 5KB - Virtual size: 5KB