37a9d99eb54a33871fd06a679daacf7c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

37a9d99eb54a33871fd06a679daacf7c_JaffaCakes118
Size

1.1MB
MD5

37a9d99eb54a33871fd06a679daacf7c
SHA1

f00fafde458735c890d2f9ae9bc3f1c431cfb85f
SHA256

5af6715bf5566a1df55f8b94136e3284e0ae026517b1ead7575d86ef903025b5
SHA512

cad8c59d180982651cd192ff8a39e68aa62247345a7432c4f448511010be827618a13603da3f6b1952ac87610383c96710500dfa028707974d3962279547a576
SSDEEP

24576:+fbTjx3QqeuhnxZq7Klb/99cRIVUea5OyNbyJFI00feezK:+fbTjxguhxU0c6Vba/NboR0nzK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37a9d99eb54a33871fd06a679daacf7c_JaffaCakes118

Files

37a9d99eb54a33871fd06a679daacf7c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

242328437085cd256503cee872c5de59

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

msmsgs.pdb

Imports

kernel32

HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
GetStartupInfoA
GetModuleHandleA
HeapSize
GetProcessHeap
GlobalAlloc
IsDBCSLeadByteEx
LocalAlloc
MoveFileW
SetFileAttributesW
CopyFileW
ReleaseMutex
CreateProcessW
DuplicateHandle
CreateMutexA
CreateFileMappingA
GlobalUnlock
GlobalLock
SetErrorMode
lstrcmpA
lstrcmpiA
IsValidLanguageGroup
FlushInstructionCache
SetLastError
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
IsValidLocale
GetSystemDefaultLCID
FindResourceA
VirtualAlloc
VirtualFree
WaitForMultipleObjects
TerminateThread
ResumeThread
IsBadWritePtr
IsBadStringPtrA
IsBadStringPtrW
FormatMessageA
GetLocaleInfoW
CompareStringA
GetSystemTime
CompareFileTime
DeleteFileA
SetFilePointer
CreateFileA
FileTimeToSystemTime
CopyFileA
GetFileAttributesA
LoadLibraryA
GetCurrentProcessId
GetUserDefaultLCID
GetCurrentDirectoryW
GetWindowsDirectoryW
SetCurrentDirectoryW
FindFirstFileW
GetDateFormatW
GetTimeFormatW
GetTempPathA
SearchPathA
ExpandEnvironmentStringsA
GetWindowsDirectoryA
GetTempFileNameA
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
GetLocalTime
SystemTimeToFileTime
GetTempPathW
GetTempFileNameW
GetModuleFileNameW
FindResourceExW
FindResourceW
InterlockedExchange
LoadResource
LockResource
SizeofResource
FormatMessageW
GetSystemDefaultUILanguage
GlobalMemoryStatus
CreateDirectoryW
GlobalFree
GetFileAttributesW
MulDiv
CreateEventA
GetUserDefaultUILanguage
GetCommandLineW
SetUnhandledExceptionFilter
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
SetEvent
GetModuleHandleW
WideCharToMultiByte
SetThreadLocale
LocalFree
OpenEventW
ResetEvent
CompareStringW
DeleteFileW
lstrlenA
WriteFile
lstrcpynW
ReadFile
lstrcmpW
lstrlenW
lstrcmpiW
CreateFileW
GetLastError
GetFileSize
MultiByteToWideChar
LoadLibraryW
GetProcAddress
FreeLibrary
GetTickCount
lstrcpynA
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
Sleep
CreateEventW
CreateThread
InterlockedDecrement
InterlockedIncrement
WaitForSingleObject
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
HeapReAlloc
lstrcpyW

msvcr71

_strlwr
wcscmp
_wcsicmp
_wcsnicmp
_CIpow
strtod
_iob
fprintf
longjmp
strncpy
fread
_setjmp3
sprintf
?terminate@@YAXXZ
??1type_info@@UAE@XZ
time
_controlfp
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
abort
_wtoi
wcsncpy
_except_handler3
free
??3@YAXPAX@Z
strtok
_purecall
malloc
_resetstkoflw
__CxxFrameHandler
_CxxThrowException
tolower
realloc
memset
_wcslwr
_vsnwprintf
wcslen
memmove
??2@YAPAXI@Z

advapi32

RegCreateKeyExW
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegDeleteValueW
RegDeleteValueA
RegQueryInfoKeyW
RegEnumKeyW
RegDeleteKeyW
DeregisterEventSource
ReportEventW
RegisterEventSourceW
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey
RegOpenKeyExW
RegFlushKey
RegNotifyChangeKeyValue

gdi32

SetMapMode
GetViewportExtEx
GetWindowExtEx
CreateRectRgnIndirect
RestoreDC
SetViewportOrgEx
CreatePen
SaveDC
GetMapMode
CreateDCW
SelectClipRgn
CreateRectRgn
GetClipRgn
MoveToEx
Rectangle
ExcludeClipRect
GetTextAlign
SetTextAlign
GetClipBox
IntersectClipRect
SetDIBits
CreateBitmap
Polygon
GetTextMetricsW
CreatePolygonRgn
FillRgn
GetTextExtentPoint32W
SetBkMode
DPtoLP
CreateFontIndirectW
EnumFontFamiliesExW
GetPaletteEntries
CreatePalette
GetSystemPaletteEntries
GetDIBits
LPtoDP
GetStockObject
GetLayout
SetLayout
StretchBlt
GetDIBColorTable
SetTextColor
SetBkColor
CreateHalftonePalette
SelectPalette
RealizePalette
CreateSolidBrush
DeleteObject
GetDeviceCaps
CreateDIBSection
GetObjectW
SetDIBColorTable
SelectObject
DeleteDC
CreateCompatibleDC
LineTo
CreateCompatibleBitmap
BitBlt
SetWindowOrgEx
Ellipse

user32

InvalidateRgn
PostQuitMessage
FindWindowW
CloseDesktop
GetUserObjectInformationW
OpenInputDesktop
SetFocus
ReleaseDC
GetDC
GetClientRect
FillRect
GetSysColorBrush
InvalidateRect
SetForegroundWindow
RemovePropA
CallWindowProcW
GetPropA
SetPropA
GetWindowPlacement
IsWindowVisible
ShowWindow
IsWindow
IsZoomed
DrawAnimatedRects
GetWindowRect
FindWindowExW
GetParent
DestroyMenu
GetMenuItemInfoW
IsMenu
GetSubMenu
RegisterClassExW
CreateWindowExW
DestroyWindow
DefWindowProcW
LoadStringW
GetWindowLongW
SetWindowLongW
KillTimer
SetTimer
PostMessageW
PostThreadMessageW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
MsgWaitForMultipleObjects
CharNextA
GetWindowTextW
SetWindowTextW
SetDlgItemTextW
ScreenToClient
LoadStringA
ModifyMenuW
SetCursorPos
MessageBoxW
IsDialogMessageW
CharLowerW
MessageBeep
SetWindowPos
SetRectEmpty
LoadBitmapA
CreatePopupMenu
BeginDeferWindowPos
EndDeferWindowPos
RegisterClassW
RegisterWindowMessageW
GetDoubleClickTime
SetMenuDefaultItem
MoveWindow
GetForegroundWindow
TrackPopupMenuEx
DestroyIcon
LoadImageA
TrackPopupMenu
GetSysColor
DrawTextW
GetSystemMetrics
SetParent
LoadIconA
LoadMenuA
SetMenu
SetWindowPlacement
UpdateWindow
AdjustWindowRect
LoadCursorA
SetCursor
RedrawWindow
DialogBoxParamW
GetDlgItemTextW
GetDlgItem
EndDialog
EnableWindow
SendMessageW
GetKeyState
GetFocus
GetNextDlgTabItem
CheckMenuItem
GetMenuItemID
GetMenuItemCount
EnableMenuItem
RemoveMenu
InsertMenuItemW
CheckMenuRadioItem
DeleteMenu
SetMenuItemInfoW
GetCursorPos
GetMenu
wvsprintfW
IsWindowEnabled
EnumChildWindows
MessageBoxIndirectW
EndPaint
BeginPaint
SystemParametersInfoW
CharPrevW
LoadCursorW
GetWindowDC
DrawFocusRect
InflateRect
OffsetRect
DeferWindowPos
GetUpdateRect
LoadImageW
GetWindow
PtInRect
GetWindowTextLengthW
GetDesktopWindow
UnhookWindowsHookEx
GetLastInputInfo
CallNextHookEx
SetWindowsHookExW
MapWindowPoints
ClientToScreen
SetRect
AdjustWindowRectEx
GetMessageTime
IntersectRect
WindowFromDC
ValidateRect
UnionRect
SetWindowRgn
EqualRect
IsChild
wsprintfW
GetMenuState
FlashWindow
IsIconic
DrawMenuBar
GetDialogBaseUnits
IsClipboardFormatAvailable
ReleaseCapture
SetCapture
WaitMessage
DestroyAcceleratorTable
GetClassNameW
CharNextW
CreateAcceleratorTableW
GetScrollInfo
GetAsyncKeyState
GetLastActivePopup
DrawEdge
GetDlgCtrlID
SendDlgItemMessageW
CloseWindow
IsDlgButtonChecked
SetWindowLongA
GetWindowLongA
CreateDialogParamW
LoadBitmapW
CheckDlgButton
LoadIconW
CheckRadioButton
SetDlgItemInt
GetDlgItemInt
LoadMenuW
CreateWindowExA
RegisterClassExA
GetClassInfoExA
CharUpperA
UnregisterClassW
GetClassInfoExW

wsock32

inet_addr
ioctlsocket
closesocket
WSAAsyncSelect
accept
recv
WSAStartup
gethostname
gethostbyname
WSAGetLastError
WSAAsyncGetHostByName
htons
recvfrom
htonl
setsockopt
ntohl
sendto
select
bind
ntohs
WSACleanup
getsockname
connect
listen
WSACancelAsyncRequest
socket
send

ole32

StgOpenStorageOnILockBytes
IIDFromString
CoInitialize
CoUninitialize
StringFromCLSID
CoGetClassObject
OleLockRunning
CoTaskMemAlloc
OleFlushClipboard
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
OleSaveToStream
WriteClassStm
OleLoadFromStream
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleCreateStaticFromData
OleRun
DoDragDrop
CoCreateGuid
StringFromGUID2
CoTaskMemFree
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CoRevokeClassObject
CoRegisterClassObject
CoCreateInstance
RevokeDragDrop
RegisterDragDrop
CLSIDFromProgID
CLSIDFromString
GetHGlobalFromILockBytes

oleaut32

CreateStdDispatch
SysFreeString
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
OleCreateFontIndirect
SafeArrayDestroy
VarCmp
VariantCopy
VariantClear
SysStringByteLen
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
LoadRegTypeLi
SysAllocStringLen
SysStringLen
SysAllocString
VariantInit
VariantChangeType
SysAllocStringByteLen
OleCreatePropertyFrame
LoadTypeLi

comctl32

ord17
CreateToolbarEx
PropertySheetW
CreateStatusWindowW
ImageList_DragLeave
ImageList_DragMove
ImageList_DragEnter
ImageList_BeginDrag
ImageList_EndDrag
ImageList_Draw
ImageList_Add
ImageList_Create
ImageList_AddMasked
ImageList_Remove
ImageList_Destroy
ImageList_GetIcon
ImageList_DrawEx
ord8

comdlg32

GetSaveFileNameW
GetOpenFileNameW
ChooseFontW

shell32

SHGetFolderPathW
Shell_NotifyIconW
Shell_NotifyIconA
ShellExecuteW
ShellExecuteExW
SHAppBarMessage
DragFinish
DragAcceptFiles
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
DragQueryFileW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueW

winmm

PlaySoundW
waveOutGetNumDevs
waveInGetNumDevs

shlwapi

StrCmpNIW
StrCmpNW
wnsprintfA
StrChrA
StrStrA
SHGetValueW
StrCmpIW
StrStrW
PathAddBackslashW
StrToIntExW
StrStrIW
StrCatBuffW
StrPBrkW
wnsprintfW
StrCpyNW
StrStrIA
SHGetInverseCMAP
StrRChrA
StrCmpNA
StrTrimA
StrTrimW
StrCatBuffA
StrChrW

gdiplus

GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdipGetImagePaletteSize
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDrawImageI
GdipAlloc
GdipCloneImage
GdiplusShutdown
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipFree
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipDisposeImage

msimg32

TransparentBlt
AlphaBlend

netapi32

NetGetJoinInformation
NetApiBufferFree

msi

ord131
ord141

wininet

InternetSetOptionW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetOpenA
InternetConnectW
HttpOpenRequestW
InternetSetOptionA
HttpQueryInfoW
InternetReadFile
GetUrlCacheEntryInfoW
HttpSendRequestW
InternetSetStatusCallbackW
ResumeSuspendedDownload
InternetCloseHandle

cryptdll

MD5Init
MD5Update
MD5Final

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 572KB - Virtual size: 571KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

242328437085cd256503cee872c5de59

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcr71

advapi32

gdi32

user32

wsock32

ole32

oleaut32

comctl32

comdlg32

shell32

version

winmm

shlwapi

gdiplus

msimg32

netapi32

msi

wininet

cryptdll

iphlpapi

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.data Size: 6KB - Virtual size: 15KB

.rsrc Size: 572KB - Virtual size: 571KB

.text
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 6KB - Virtual size: 15KB

.rsrc
Size: 572KB - Virtual size: 571KB