301ef48df4874f7f88f60491139c1749_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

301ef48df4874f7f88f60491139c1749_JaffaCakes118
Size

3.5MB
MD5

301ef48df4874f7f88f60491139c1749
SHA1

d2dd3d0e7d36ee904c959651b991db4698866b0b
SHA256

c0e28747cd0666a086520c91e93c67f9aef00e982c17494e62b1487d60777de8
SHA512

36c47e8c7e3878418b2de76e562f70b0832d94b52d2bb06613df6e5eee6228bbd0d5525d388d08b50a4b736e8637f52cc3fe8fde5db5a4ad297136f5e1dcd865
SSDEEP

24576:84b1qI0CD2PRSnrm3keBZEyZa63RpUsB31QFdQgGsBmJCrCCJNUJY:VT0srm3keEMa63RpUsf2dQgGspNaY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
301ef48df4874f7f88f60491139c1749_JaffaCakes118

Files

301ef48df4874f7f88f60491139c1749_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c63fee250e131e562e57aca4ce19265d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mciSendCommandA
mixerOpen
mixerGetDevCapsA
mixerGetLineInfoA
mixerGetNumDevs
mixerSetControlDetails
mixerGetLineControlsA
mixerGetControlDetailsA
mixerClose

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInstanceIdA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA

dsound

ord1
ord2

kernel32

RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapAlloc
HeapFree
RaiseException
TerminateProcess
HeapReAlloc
HeapSize
GetACP
GetOEMCP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetLocaleInfoA
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTickCount
SetErrorMode
GetFileTime
GetFileAttributesA
GetCurrentDirectoryA
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalFlags
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetShortPathNameA
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
lstrcmpiA
GetCurrentThread
MulDiv
FindNextFileA
FindFirstFileA
FindClose
GetThreadLocale
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalLock
FormatMessageA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
lstrcpynA
SetLastError
DeviceIoControl
LocalAlloc
WinExec
LocalFree
GetModuleFileNameA
GetDriveTypeA
WritePrivateProfileStringA
GetWindowsDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetVersionExA
GetProcAddress
lstrlenA
lstrcmpA
LoadLibraryA
FindResourceA
LoadResource
SizeofResource
LockResource
FreeLibrary
lstrcpyA
OutputDebugStringA
UnmapViewOfFile
CloseHandle
GlobalUnlock
GlobalFree
CreateFileA
GetFileSize
GetLastError
GetProfileStringA
GetCPInfo

user32

GetClassNameA
FindWindowA
CopyAcceleratorTableA
SetRect
InsertMenuA
DeleteMenu
MessageBeep
GetNextDlgGroupItem
IntersectRect
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
PostQuitMessage
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
CharNextA
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
IsDialogMessageA
LoadIconA
SendDlgItemMessageA
SystemParametersInfoA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
EqualRect
DeferWindowPos
UnregisterClassA
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
SetScrollInfo
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
LoadStringA
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
ReuseDDElParam
DefWindowProcA
CreateWindowExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
GetWindowRect
SetWindowLongA
RegisterWindowMessageA
GetNextDlgTabItem
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetKeyState
SetWindowPos
WindowFromPoint
GetParent
ScreenToClient
IsWindowEnabled
SetCursor
ShowOwnedPopups
MessageBoxA
GetDlgItem
SetFocus
CheckRadioButton
SetWindowTextA
SetDlgItemTextA
EndDialog
DialogBoxParamA
GetDlgItemTextA
GetMenuStringA
RemoveMenu
TrackPopupMenu
CharUpperA
PtInRect
KillTimer
SetTimer
UpdateWindow
InvalidateRgn
OffsetRect
LoadBitmapA
GetSysColorBrush
LoadCursorA
BringWindowToTop
IsIconic
GetTopWindow
UnpackDDElParam
ReleaseCapture
SetCapture
GetDC
ReleaseDC
LoadImageA
GetMenu
AdjustWindowRectEx
EnableWindow
SetWindowRgn
wsprintfA
InvalidateRect
ClientToScreen
LoadMenuA
GetSubMenu
ModifyMenuA
AppendMenuA
GetMenuItemCount
CheckMenuRadioItem
DestroyMenu
PostMessageA
SendMessageA
SetMenu
GetDesktopWindow
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
GetDlgCtrlID
MapDialogRect
IsWindowUnicode
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
SetWindowsHookExA
GetClientRect

gdi32

IntersectClipRect
GetViewportExtEx
SetWindowExtEx
CreateSolidBrush
SelectClipRgn
PtVisible
RectVisible
TextOutA
Escape
GetTextExtentPointA
LPtoDP
DPtoLP
PatBlt
GetMapMode
SetBkMode
SelectObject
RestoreDC
SaveDC
DeleteDC
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
GetClipBox
ScaleWindowExtEx
BitBlt
GetObjectA
CreateRectRgn
CombineRgn
CreateFontA
GetRgnBox
CreateDIBitmap
GetDeviceCaps
SetViewportOrgEx
DeleteObject
CreatePalette
GetWindowExtEx
GetStockObject
GetBkColor
GetTextColor
CreateBitmap
SetBkColor
SetTextColor
OffsetRgn
ExtTextOutA
PtInRegion
CreateRectRgnIndirect
CreateCompatibleDC
SetMapMode

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA

shell32

DragQueryFileA
DragFinish

comctl32

ord17
ImageList_Destroy

oledlg

ord8

ole32

CoTaskMemAlloc
CoTaskMemFree
CoGetClassObject
OleUninitialize
StgOpenStorageOnILockBytes
CLSIDFromString
CLSIDFromProgID
StgCreateDocfileOnILockBytes
OleInitialize
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries

oleaut32

SysFreeString
SysAllocStringByteLen
SysStringLen
SysAllocString
VariantClear
VariantChangeType
SysAllocStringLen
OleCreateFontIndirect

Sections

.text
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 29KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c63fee250e131e562e57aca4ce19265d

Headers

File Characteristics

Imports

winmm

setupapi

dsound

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

Sections

.text Size: 229KB - Virtual size: 228KB

.rdata Size: 53KB - Virtual size: 53KB

.data Size: 29KB - Virtual size: 48KB

.rsrc Size: 3.2MB - Virtual size: 3.2MB

.text
Size: 229KB - Virtual size: 228KB

.rdata
Size: 53KB - Virtual size: 53KB

.data
Size: 29KB - Virtual size: 48KB

.rsrc
Size: 3.2MB - Virtual size: 3.2MB