30c7e1562e8fb08f9257ebe814e6b941_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

30c7e1562e8fb08f9257ebe814e6b941_JaffaCakes118
Size

320KB
MD5

30c7e1562e8fb08f9257ebe814e6b941
SHA1

5c177a8c5ade040b018b1ab54c851eec71b9ed1c
SHA256

99695c9d3e91de5dcfabf24ae37fedea554bbc151a420601033388460bb76851
SHA512

4b970368c68604df4e0edac0f97453a53832a6ab40e229c2c4b8a32afad93d49485a7c58f54f5dd6f8bf7319fc6a725bc206ec633a7832784244091183c2708d
SSDEEP

6144:a+LN3ELE37yhlZG6xuOHVt86p18nOOdl+uXVim5T5TLb:a++A3+vZG6gO1K6HCOqVfX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30c7e1562e8fb08f9257ebe814e6b941_JaffaCakes118

Files

30c7e1562e8fb08f9257ebe814e6b941_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc75a4a3103b88cd9d4d494a563cb877

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

ExcludeClipRect
FillRgn
GetClipBox
GetClipRgn
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetLayout
GetMapMode
GetObjectW
GetPaletteEntries
GetStockObject
GetSystemPaletteEntries
GetTextAlign
GetTextExtentPoint32W
GetTextMetricsW
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LPtoDP
EnumFontFamiliesExW
MoveToEx
Polygon
RealizePalette
Rectangle
RestoreDC
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetDIBColorTable
SetDIBits
SetLayout
SetMapMode
SetTextAlign
SetTextColor
SetViewportOrgEx
SetWindowOrgEx
StretchBlt
Ellipse
DeleteObject
DeleteDC
DPtoLP
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePolygonRgn
CreatePen
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
LineTo
BitBlt

netapi32

NetApiBufferFree
NetGetJoinInformation

comctl32

ImageList_EndDrag
ImageList_DrawEx
ImageList_Draw
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_Destroy
ImageList_Create
ImageList_BeginDrag
ImageList_AddMasked
ImageList_Add
CreateToolbarEx
CreateStatusWindowW
ord8
ImageList_Remove
ord17
PropertySheetW
ImageList_GetIcon

wininet

InternetOpenA
HttpOpenRequestW
InternetOpenUrlW
InternetCrackUrlW
InternetReadFile
InternetSetOptionA
InternetSetOptionW
InternetSetStatusCallbackW
InternetConnectW
InternetCloseHandle
GetUrlCacheEntryInfoW
InternetCanonicalizeUrlW
HttpSendRequestW
HttpQueryInfoW
InternetOpenW
ResumeSuspendedDownload

version

GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueA
VerQueryValueW
GetFileVersionInfoA

ole32

CLSIDFromProgID
CoRegisterClassObject
OleUninitialize
OleSaveToStream
OleRun
OleRegGetUserType
OleRegGetMiscStatus
OleRegEnumVerbs
OleLockRunning
OleLoadFromStream
OleInitialize
OleFlushClipboard
OleCreateStaticFromData
RevokeDragDrop
GetHGlobalFromILockBytes
DoDragDrop
CreateStreamOnHGlobal
CreateOleAdviseHolder
CoInitialize
CoGetClassObject
CoCreateInstance
CoCreateGuid
CLSIDFromString
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
StringFromCLSID
StringFromGUID2
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
IIDFromString
WriteClassStm
RegisterDragDrop
CreateILockBytesOnHGlobal

user32

SendMessageW
SetCapture
SetCursor
SetCursorPos
SetDlgItemInt
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenu
SetMenuDefaultItem
SetMenuItemInfoW
SetParent
SetPropA
SetRect
SetRectEmpty
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TrackPopupMenuEx
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassW
UpdateWindow
ValidateRect
WindowFromDC
wsprintfW
LoadStringW
LoadStringA
LoadMenuW
LoadMenuA
LoadImageW
LoadImageA
LoadIconW
LoadIconA
LoadCursorW
LoadCursorA
LoadBitmapW
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsWindow
IsMenu
IsIconic
IsDlgButtonChecked
IsDialogMessageW
IsClipboardFormatAvailable
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
InsertMenuItemW
InflateRect
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetWindow
GetUserObjectInformationW
GetUpdateRect
GetSystemMetrics
GetSysColorBrush
SendDlgItemMessageW
GetSubMenu
GetScrollInfo
GetPropA
GetParent
GetNextDlgTabItem
GetMessageW
GetMessageTime
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastInputInfo
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItemTextW
GetDlgItemInt
GetDlgItem
GetDlgCtrlID
GetDialogBaseUnits
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassInfoExW
GetClassInfoExA
GetAsyncKeyState
FlashWindow
FindWindowW
FindWindowExW
FillRect
EqualRect
EnumChildWindows
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableMenuItem
DrawTextW
DrawMenuBar
DrawFocusRect
DrawEdge
DrawAnimatedRects
DispatchMessageW
DialogBoxParamW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyAcceleratorTable
DeleteMenu
DeferWindowPos
DefWindowProcW
CreateWindowExW
CreateWindowExA
CreatePopupMenu
CreateDialogParamW
CreateAcceleratorTableW
CloseWindow
CloseDesktop
ClientToScreen
CheckRadioButton
CheckMenuRadioItem
CheckMenuItem
CheckDlgButton
CharUpperA
CharPrevW
CharNextW
CallWindowProcW
CallNextHookEx
BeginPaint
BeginDeferWindowPos
AdjustWindowRectEx
AdjustWindowRect
ScreenToClient
RemovePropA
MapWindowPoints
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClassW
RegisterClassExW
RegisterClassExA
RedrawWindow
PtInRect
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageW
OpenInputDesktop
OffsetRect
MsgWaitForMultipleObjects
MoveWindow
ModifyMenuW
MessageBoxW
MessageBoxIndirectW
GetSysColor
MessageBeep
RemoveMenu

kernel32

CompareFileTime
CompareStringA
CompareStringW
CopyFileA
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateMutexA
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileA
DeleteFileW
DuplicateHandle
EnterCriticalSection
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindFirstFileW
FindResourceA
FindResourceExW
FindResourceW
FlushInstructionCache
FormatMessageA
FormatMessageW
FreeLibrary
GetACP
GetCommandLineW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
lstrlenW
lstrlenA
lstrcpynW
lstrcpynA
lstrcpyW
lstrcmpiW
lstrcmpiA
lstrcmpW
lstrcmpA
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TerminateThread
TerminateProcess
SystemTimeToFileTime
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetThreadLocale
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetCurrentDirectoryW
SearchPathA
ResumeThread
ResetEvent
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceCounter
OpenFileMappingW
OpenEventW
MultiByteToWideChar
MulDiv
MoveFileW
MoveFileExW
MapViewOfFile
LockResource
LocalFree
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
IsValidLocale
IsDBCSLeadByteEx
IsBadWritePtr
IsBadStringPtrW
IsBadStringPtrA
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapAlloc
GlobalUnlock
GlobalMemoryStatus
GlobalLock
GlobalFree
GlobalAlloc
GetWindowsDirectoryW
GetWindowsDirectoryA
GetVersionExW
GetVersionExA
GetVersion
GetUserDefaultLCID
GetTimeFormatW
GetTickCount
GetThreadLocale
GetTempPathW
GetTempPathA
GetTempFileNameW
GetTempFileNameA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDefaultUILanguage
GetSystemDefaultLCID
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLocaleInfoW
GetLocaleInfoA
GetLocalTime
GetLastError
GetFileSize
GetFileAttributesW
GetFileAttributesA
GetDateFormatW
CloseHandle

winmm

waveInGetNumDevs
PlaySoundW
waveOutGetNumDevs

oleaut32

LoadRegTypeLi
LoadTypeLi
OleCreateFontIndirect
OleCreatePropertyFrame
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetElement
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
SysAllocString
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
SysStringByteLen
SysStringLen
VarCmp
VariantChangeType
VariantClear
VariantCopy
VariantInit
CreateStdDispatch

shlwapi

SHGetInverseCMAP
StrCatBuffA
StrCatBuffW
StrChrA
StrChrW
StrCmpIW
StrCmpNA
StrCmpNIW
StrCmpNW
StrCpyNW
StrPBrkW
StrRChrA
StrRChrW
StrStrA
StrStrIA
StrStrIW
StrStrW
StrToIntExW
StrTrimA
StrTrimW
wnsprintfA
wnsprintfW
SHGetValueW

wsock32

WSAStartup
socket
setsockopt
sendto
send
select
recvfrom
recv
ntohs
ntohl
listen
inet_addr
ioctlsocket
htons
htonl
getsockname
gethostname
gethostbyname
connect
closesocket
bind
accept
WSAGetLastError
WSACleanup
WSACancelAsyncRequest
WSAAsyncSelect
WSAAsyncGetHostByName

comdlg32

GetOpenFileNameW
GetSaveFileNameW
ChooseFontW

shell32

DragFinish
DragQueryFileW
SHAppBarMessage
SHBrowseForFolderW
SHGetFolderPathW
SHGetMalloc
SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconA
Shell_NotifyIconW
DragAcceptFiles

Exports

Exports

PL_Base64Decode
PL_Base64Encode
PL_CreateLongOptState
PL_CreateOptState
PL_DestroyOptState
PL_FPrintError
PL_GetNextOpt
PL_PrintError
PL_strcasecmp
PL_strcaserstr
PL_strcasestr
PL_strcat
PL_strcatn
PL_strchr
PL_strcmp
PL_strcpy
PL_strdup
PL_strfree
PL_strlen
PL_strncasecmp
PL_strncaserstr
PL_strncasestr
PL_strncat
PL_strnchr
PL_strncmp
PL_strncpy
PL_strncpyz
PL_strndup
PL_strnlen
PL_strnpbrk
PL_strnprbrk
PL_strnrchr
PL_strnrstr
PL_strnstr
PL_strpbrk
PL_strprbrk
PL_strrchr
PL_strrstr
PL_strstr
PL_strtok_r
libVersionPoint

Sections

.text
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc75a4a3103b88cd9d4d494a563cb877

Headers

File Characteristics

Imports

gdi32

netapi32

comctl32

wininet

version

ole32

user32

kernel32

winmm

oleaut32

shlwapi

wsock32

comdlg32

shell32

Exports

Exports

Sections

.text Size: 224KB - Virtual size: 224KB

.rdata Size: 48KB - Virtual size: 48KB

.data Size: 20KB - Virtual size: 1.7MB

.idata Size: 16KB - Virtual size: 16KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 224KB - Virtual size: 224KB

.rdata
Size: 48KB - Virtual size: 48KB

.data
Size: 20KB - Virtual size: 1.7MB

.idata
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 8KB - Virtual size: 8KB