3caea3f1028da7ed55951cbd8e117f82_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3caea3f1028da7ed55951cbd8e117f82_JaffaCakes118
Size

796KB
MD5

3caea3f1028da7ed55951cbd8e117f82
SHA1

0df98278560a7e3343002648531f2a59e7ec060b
SHA256

179666322f3b29a8ad1b73dda650c7a4566598f94b6dcf18b51cabc2520209cb
SHA512

98826be248de2cf2e6ab3104ffb800008bccb15e266d5209e46be39509ef7ae9bf1fba3365d368cc88351b7a8b6fac522c6f1daf82822e1ba6e40b37fca436ee
SSDEEP

12288:iYopH3aYvhyGPS+ZPxSlG42V0CIEBNBehLOPA9VRxBmCK7sBMl:iYopH3asq+ZPxSlG4uYhLOPAQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3caea3f1028da7ed55951cbd8e117f82_JaffaCakes118

Files

3caea3f1028da7ed55951cbd8e117f82_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43d03509cdfcb4a0c1e09d602debb576

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pdpengine

Quarantine_Create
Quarantine
QuarantinePow
Repair
AdFailedRepair
Quarantine_Close
GetRestartAVmon
Scan
GetScanCurrentCount
AdRepair
GetScanCurrentPos
Engine2
Init2
SetKeepDay
GetQuarantineKeepDay
Quarantine_RestoreInit
GetRestoreCount
Quarantine_Restore
QuarantineView
ClearCookie
ClearIECache
ClearSiteVisitedLog
ClearAutoForm
ClearHistory
ClearRecycleBin
ClearWinTemp
ClearTemp
ClearRecent
ClearMediaPlayLog
ClearRunList
ClearSearchInternet
ClearSearchPictureAndMusicAndVideo
ClearSearchComputerAndPeople
ClearSearchFileFolder
PowerScan
Release

kernel32

InterlockedIncrement
InterlockedDecrement
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeLibrary
LoadLibraryA
SetLastError
LocalFree
FormatMessageA
DuplicateHandle
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFullPathNameA
GetThreadLocale
GetFileTime
FileTimeToLocalFileTime
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
LeaveCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
SetEnvironmentVariableA
GetDriveTypeA
CreateThread
ExitThread
RaiseException
HeapFree
HeapAlloc
GetStartupInfoA
GetTimeZoneInformation
GetSystemTime
GetACP
SetStdHandle
GetFileType
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetEnvironmentVariableA
SetThreadPriority
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
CompareStringA
CompareStringW
GlobalDeleteAtom
GetProfileStringA
InterlockedExchange
ExitProcess
GetLastError
CreateMutexA
lstrcmpiA
GetVersionExA
CloseHandle
WaitForSingleObject
TerminateProcess
GetExitCodeProcess
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
SuspendThread
WinExec
CreateProcessA
GetModuleFileNameA
WritePrivateProfileStringA
GetPrivateProfileIntA
FindClose
FindFirstFileA
GetWindowsDirectoryA
CreateDirectoryA
MultiByteToWideChar
GetFileSize
CreateFileA
GetProcAddress
GetModuleHandleA
Sleep
ResumeThread
InitializeCriticalSection
GetCommandLineA
GetVolumeInformationA
CreateEventA
GlobalFree
MulDiv
GlobalUnlock
HeapDestroy
lstrcmpA
GetCurrentThread
GetCurrentThreadId
GetTickCount
UnmapViewOfFile
FileTimeToSystemTime
WriteFile
SetFileTime
GetFileAttributesA
LocalFileTimeToFileTime
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
SetFilePointer
lstrcatA
lstrlenW
lstrlenA
GetPrivateProfileStringA
lstrcpynA
IsBadReadPtr
IsBadWritePtr
GetVersion
GetLocaleInfoA
SetFileAttributesA
RemoveDirectoryA
GetTempPathA
GlobalReAlloc
lstrcpyA
ReleaseSemaphore
CreateSemaphoreA
GetCurrentProcess
GetLocalTime
EnterCriticalSection
DeleteCriticalSection
WideCharToMultiByte
DeleteFileA
FindNextFileA
SetEvent
ResetEvent
FindResourceA
LoadResource
SizeofResource
LockResource
GlobalAlloc
GlobalLock

user32

CharUpperA
EndPaint
BeginPaint
GetWindowDC
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
IntersectRect
GetWindowPlacement
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
EnableMenuItem
GetNextDlgTabItem
GetMessageA
GetActiveWindow
CallNextHookEx
ValidateRect
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
PostQuitMessage
EnableWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
LoadIconA
LoadBitmapA
GetDesktopWindow
ReleaseCapture
SetCapture
GrayStringA
DrawTextA
TabbedTextOutA
GetFocus
PtInRect
DrawFrameControl
DrawFocusRect
GetKeyState
UpdateWindow
RedrawWindow
SetActiveWindow
SystemParametersInfoA
GetSysColorBrush
WindowFromPoint
LoadStringA
PostThreadMessageA
RegisterClipboardFormatA
GetClassNameA
ModifyMenuA
GetMenuItemCount
GetMenuItemID
SetMenuDefaultItem
IsWindow
RegisterWindowMessageA
OffsetRect
SetParent
ClientToScreen
GetParent
TrackPopupMenu
wsprintfA
DestroyMenu
LoadImageA
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
CreateDialogIndirectParamA
DispatchMessageA
TranslateMessage
PeekMessageA
SetTimer
LoadMenuA
SendMessageA
InvalidateRect
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
FindWindowA
SetCursor
LoadCursorA
ScreenToClient
GetCursorPos
PostMessageA
GetWindowRect
KillTimer
CheckMenuItem
GetMenuStringA
GetSubMenu
IsWindowVisible
SetForegroundWindow
InsertMenuA
RemoveMenu
MessageBoxA
GetForegroundWindow
SetWindowRgn
SetWindowLongA
ExitWindowsEx
InflateRect
FrameRect
IsRectEmpty
CopyRect
GetSysColor
FillRect
GetDC
ReleaseDC
SetRect
GetWindowLongA
GetClassLongA

gdi32

SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
RestoreDC
GetViewportExtEx
GetWindowExtEx
LPtoDP
DPtoLP
PatBlt
GetMapMode
GetTextColor
GetBkColor
SaveDC
SetBkColor
SetTextColor
GetClipBox
Escape
TextOutA
RectVisible
PtVisible
Rectangle
ExtTextOutA
CreateFontIndirectA
GetStockObject
GetTextExtentPoint32A
CreatePen
RoundRect
CreateFontA
CreateBitmap
StretchBlt
CreateDIBSection
GetObjectA
CreateSolidBrush
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
DeleteObject
GetDeviceCaps
CreateDIBitmap
GetTextExtentPointA
CreateRoundRectRgn

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

shell32

SHGetDesktopFolder
SHGetSpecialFolderPathA
SHGetFileInfoA
SHGetPathFromIDListA
SHGetMalloc
Shell_NotifyIconA
ShellExecuteA

comctl32

ord17
_TrackMouseEvent
FlatSB_EnableScrollBar
InitializeFlatSB
ImageList_GetIconSize
ImageList_Draw
ImageList_DrawEx
ImageList_Destroy
ImageList_LoadImageA

oledlg

ord8

ole32

CoTaskMemAlloc
CoTaskMemFree
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromProgID
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoInitializeEx
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CLSIDFromString

olepro32

ord253
ord251

oleaut32

SysFreeString
SysAllocString
VariantClear
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy
SysAllocStringByteLen
VariantChangeType
VariantTimeToSystemTime
SysStringLen

shlwapi

PathFileExistsA

wininet

HttpOpenRequestA
InternetReadFile
InternetGetConnectedState
HttpSendRequestA
InternetConnectA
InternetOpenA

Sections

.text
Size: 580KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43d03509cdfcb4a0c1e09d602debb576

Headers

File Characteristics

Imports

pdpengine

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

shlwapi

wininet

Sections

.text Size: 580KB - Virtual size: 576KB

.rdata Size: 124KB - Virtual size: 120KB

.data Size: 36KB - Virtual size: 144KB

.rsrc Size: 52KB - Virtual size: 51KB

.text
Size: 580KB - Virtual size: 576KB

.rdata
Size: 124KB - Virtual size: 120KB

.data
Size: 36KB - Virtual size: 144KB

.rsrc
Size: 52KB - Virtual size: 51KB