33480b4ee56a53fbc28c4d51d307f32e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

33480b4ee56a53fbc28c4d51d307f32e_JaffaCakes118
Size

1.2MB
MD5

33480b4ee56a53fbc28c4d51d307f32e
SHA1

592205e4b80722bfc1bfa6c7800821d91e3ee50d
SHA256

59bbaa01d83433a1df2b2bdc56b77721ce6aa6775abd2fe7bd0a073e31890e0f
SHA512

f8f1f89ec42a3baa8b433faf3c2c8459d6923d9a2f325f3574e390dc648904061819c7873b42dc83d6265f92a8b2e2c3bb3d8f5a911bf80d7a6743fdd623be7e
SSDEEP

12288:ki/8kklgbnc3XF9rsrJFv47GK4B0+txfgC+Zqq5aAOE8hEaKw096yHFW+HzdIWtt:kIvoGKMfX+Zq5Bx1K7oyHFdKWtsz2b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33480b4ee56a53fbc28c4d51d307f32e_JaffaCakes118

Files

33480b4ee56a53fbc28c4d51d307f32e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fb5a9b7c4413efc955cb8eef3571fac3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wpcap

pcap_close
pcap_open_live
pcap_setbuff
pcap_sendpacket
pcap_next_ex

ws2_32

gethostbyaddr
ntohs
inet_addr
inet_ntoa
ntohl

iphlpapi

GetAdaptersInfo
SendARP

netapi32

NetMessageBufferSend

msimg32

GradientFill

dbdll

?OpenDB@@YAHPAD@Z
?SaveData@@YAHPAUtagFlowStruct@@H@Z
?ReadData@@YAHPAUtagFlowStruct@@H@Z
?CloseDB@@YAHXZ

kernel32

GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
HeapSize
HeapReAlloc
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
ExitThread
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
lstrlenA
DeleteFileA
Sleep
GetVersionExA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GlobalUnlock
GlobalLock
CreateThread
RaiseException
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
TerminateProcess
ExitProcess
RtlUnwind
SizeofResource
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcpyA
GlobalAlloc
GetTickCount
MultiByteToWideChar
TerminateThread
WaitForSingleObject
CopyFileA
WinExec
GetModuleFileNameA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetProcAddress
GetModuleHandleA
FormatMessageA
LocalFree
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GlobalFree
FindFirstFileA
FindClose
lstrcpynA
GetFileTime
GetFileSize
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
GetVersion
SetEvent
lstrcmpA
GetCurrentThread
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
DeviceIoControl
CreateFileA
GetLastError
GetFileAttributesA
GetWindowsDirectoryA
CloseHandle

user32

CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
GetActiveWindow
ValidateRect
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
SetFocus
AdjustWindowRectEx
IsWindowVisible
GetScrollInfo
SetScrollInfo
SetScrollRange
GetTopWindow
MessageBoxA
IsChild
wsprintfA
RegisterClassA
GetDlgItem
GetWindowTextLengthA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
IntersectRect
GetWindowPlacement
SetActiveWindow
SystemParametersInfoA
GetClassNameA
SetMenuDefaultItem
RegisterWindowMessageA
GetDC
SetWindowRgn
GetSysColorBrush
RegisterClassExA
SetRect
OffsetRect
UpdateWindow
GetFocus
GetKeyState
GrayStringA
DrawTextA
TabbedTextOutA
WindowFromPoint
GetCapture
GetMessageA
ClientToScreen
GetDlgCtrlID
KillTimer
SetTimer
TrackPopupMenu
PostMessageA
TranslateMessage
DispatchMessageA
LoadMenuA
RedrawWindow
FillRect
GetSysColor
DrawFocusRect
EmptyClipboard
SetClipboardData
OpenClipboard
CloseClipboard
UnregisterHotKey
SetForegroundWindow
SetWindowPos
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
IsIconic
GetSystemMetrics
GetDesktopWindow
InflateRect
DestroyMenu
LoadStringA
CharUpperA
WinHelpA
wvsprintfA
DrawIcon
GetSystemMenu
AppendMenuA
RegisterHotKey
GetCursorPos
ScreenToClient
PtInRect
IsWindow
GetClassInfoA
DefWindowProcA
GetClientRect
EnableWindow
SendMessageA
SetCursor
InvalidateRect
CopyRect
GetWindowTextA
GetWindowRect
GetParent
DrawIconEx
DrawStateA
LoadCursorA
LoadBitmapA
LoadImageA
LoadIconA
IsWindowUnicode
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
SetPropA

gdi32

GetWindowExtEx
CombineRgn
SetTextColor
SetBkColor
CreateBitmap
SaveDC
RestoreDC
SetBkMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetBkColor
GetViewportExtEx
PatBlt
DPtoLP
GetTextColor
LPtoDP
GetDeviceCaps
SetMapMode
DeleteDC
DeleteObject
Escape
ExtTextOutA
CreateRectRgn
GetWindowOrgEx
GetViewportOrgEx
GetMapMode
TextOutA
RectVisible
PtVisible
GetPixel
CreateFontIndirectA
GetStockObject
CreateSolidBrush
GetObjectA
GetClipBox
SelectObject
CreatePen
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontA
GetTextExtentPoint32A
GetTextExtentPointA
CreateDIBitmap
BitBlt

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyA
RegDeleteValueA
CloseServiceHandle
OpenServiceA
CreateServiceA
OpenSCManagerA
DeleteService
StartServiceA
ControlService
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA

shell32

Shell_NotifyIconA
ShellExecuteA

comctl32

_TrackMouseEvent
ord17
ImageList_AddMasked
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy
ImageList_Create

oledlg

ord8

ole32

CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
StgCreateDocfileOnILockBytes

olepro32

ord253

oleaut32

VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantCopy
VariantClear
VariantTimeToSystemTime
SysStringLen
SysAllocStringLen
SysFreeString

Sections

.text
Size: 324KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 8.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 708KB - Virtual size: 705KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb5a9b7c4413efc955cb8eef3571fac3

Headers

File Characteristics

Imports

wpcap

ws2_32

iphlpapi

netapi32

msimg32

dbdll

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 324KB - Virtual size: 322KB

.rdata Size: 76KB - Virtual size: 75KB

.data Size: 88KB - Virtual size: 8.9MB

.rsrc Size: 708KB - Virtual size: 705KB

.text
Size: 324KB - Virtual size: 322KB

.rdata
Size: 76KB - Virtual size: 75KB

.data
Size: 88KB - Virtual size: 8.9MB

.rsrc
Size: 708KB - Virtual size: 705KB