3ee7ff31481b2be69027b083baf0556f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3ee7ff31481b2be69027b083baf0556f_JaffaCakes118
Size

600KB
MD5

3ee7ff31481b2be69027b083baf0556f
SHA1

0da4a38b2e832c9708e0e1eaab28a41129b66fc0
SHA256

843bb805bde60144abfe15c46c21fd36178608f34466fe675e7018a72414a7f2
SHA512

e26cd865a278413f297b3675a42231f73d0286f3c8ffdae2baf959fc7ab3d7790d67dce1e6b47daebe15c01842521faaaab55e7b4c53a58ccff9dcb113caa71d
SSDEEP

12288:rkC3eAM46J6Nq15LVKFRt3+VHX3g7yo0CNePC:TpS6N0GFRtuVnguPqe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ee7ff31481b2be69027b083baf0556f_JaffaCakes118

Files

3ee7ff31481b2be69027b083baf0556f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9739db4768574d007c8283e1656f399a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mixerClose
mixerGetNumDevs
waveOutOpen
mixerGetID
waveOutClose
mixerOpen
mixerGetControlDetailsA
mixerSetControlDetails
mixerGetLineInfoA
mixerGetLineControlsA

imm32

ImmNotifyIME
ImmSetOpenStatus
ImmGetContext
ImmReleaseContext

iphlpapi

GetAdaptersInfo

psapi

EnumProcesses
EnumProcessModules
GetModuleBaseNameA

kernel32

LocalFree
FormatMessageA
MoveFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
FindClose
FindFirstFileA
GetVolumeInformationA
SetLastError
CreateIoCompletionPort
GetQueuedCompletionStatus
ReadDirectoryChangesW
GetCurrentThread
GetThreadPriority
SetThreadPriority
PostQueuedCompletionStatus
InterlockedIncrement
InterlockedDecrement
ReadProcessMemory
GetFileAttributesA
SetFileAttributesA
GetCPInfo
GetComputerNameA
GetSystemDirectoryA
GetCurrentProcess
CreateFileA
DeviceIoControl
GlobalReAlloc
GetLocalTime
CompareStringW
CompareStringA
GlobalGetAtomNameA
lstrlenA
lstrcmpiA
GetVersion
MultiByteToWideChar
lstrlenW
VirtualAllocEx
WriteProcessMemory
SetEnvironmentVariableA
IsBadCodePtr
IsBadReadPtr
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GlobalFindAtomA
CreateRemoteThread
VirtualFreeEx
FreeResource
GlobalLock
GlobalUnlock
MulDiv
GlobalFree
CreateEventA
ResumeThread
GlobalAlloc
SetEvent
WaitForSingleObject
ResetEvent
CreateThread
DeleteFileA
CopyFileA
LoadLibraryA
TerminateThread
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcessId
GetTickCount
GetProcAddress
Sleep
OpenProcess
TerminateProcess
GetWindowsDirectoryA
CreateMutexA
GetModuleFileNameA
OutputDebugStringA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
CreateFileMappingA
GetLastError
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CloseHandle
ReleaseMutex
GetFullPathNameA
RaiseException
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetCurrentThreadId
GlobalDeleteAtom
lstrcmpA
ConvertDefaultLocale
lstrcatA
lstrcmpW
lstrcpynA
SuspendThread
GetModuleHandleA
GlobalFlags
WritePrivateProfileStringA
LocalAlloc
GlobalHandle
TlsGetValue
TlsAlloc
TlsSetValue
GlobalAddAtomA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetTimeZoneInformation
QueryPerformanceCounter
HeapSize
GetFileType
SetStdHandle
HeapReAlloc
GetCommandLineA
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
ExitThread
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
ExitProcess
RtlUnwind
SetErrorMode
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetOEMCP
TlsFree
EnumResourceLanguagesA
lstrcpyA
LocalReAlloc

user32

LoadBitmapA
PostMessageA
GetDesktopWindow
InvalidateRect
EnumWindows
keybd_event
SetForegroundWindow
GetForegroundWindow
IsWindow
CloseWindow
KillTimer
GetWindowLongA
GetWindowRect
GetSystemMetrics
SetWindowPos
GetParent
SetTimer
SendMessageA
MessageBoxA
EnableWindow
SetMenu
DestroyMenu
GetMenu
GetClientRect
SetCapture
RegisterClassExA
ShowWindow
GetMessageA
CreateWindowExA
RegisterClassA
DefWindowProcA
MessageBeep
PeekMessageA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
EndDialog
IsWindowEnabled
GetDlgItem
CreateDialogIndirectParamA
PostQuitMessage
ShowOwnedPopups
GetLastActivePopup
ValidateRect
GetKeyState
IsWindowVisible
CallNextHookEx
SetWindowsHookExA
GetMenuCheckMarkDimensions
CheckMenuItem
EnableMenuItem
GetFocus
SetMenuItemBitmaps
GetWindow
GetWindowPlacement
IsIconic
IntersectRect
SetWindowLongA
CallWindowProcA
GetDlgCtrlID
UnregisterClassA
GetClassInfoA
DeferWindowPos
EqualRect
AdjustWindowRectEx
UpdateWindow
TrackPopupMenu
MapWindowPoints
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
GetWindowTextA
GetWindowTextLengthA
IsChild
SetFocus
SendDlgItemMessageA
RemovePropA
GetPropA
SetPropA
GetClassInfoExA
GetClassLongA
WinHelpA
IsDialogMessageA
SetWindowTextA
GetMenuStringA
GetWindowDC
BeginPaint
EndPaint
TranslateAcceleratorA
BringWindowToTop
SetRectEmpty
InsertMenuItemA
LoadAcceleratorsA
ReuseDDElParam
UnpackDDElParam
LoadCursorA
GetDCEx
LockWindowUpdate
RegisterClipboardFormatA
PostThreadMessageA
DestroyWindow
ReleaseCapture
LoadIconA
GetCapture
PtInRect
GetClassNameA
RegisterWindowMessageA
GetCursorPos
SetParent
FindWindowA
SetActiveWindow
LoadMenuA
GetMessagePos
ScreenToClient
LoadImageA
SetCursor
DestroyCursor
WindowFromPoint
GetNextDlgTabItem
GetActiveWindow
ClientToScreen
DrawFocusRect
FrameRect
OffsetRect
InflateRect
GetIconInfo
CreateIconIndirect
DrawStateA
IsMenu
GetMenuItemInfoA
GetSysColorBrush
DrawIconEx
DestroyIcon
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ModifyMenuA
GetSubMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
AppendMenuA
CreatePopupMenu
CreateMenu
DrawEdge
ExitWindowsEx
SystemParametersInfoA
wsprintfA
CharUpperA
SetRect
CopyRect
GetDC
ReleaseDC
GetSysColor
ClipCursor
FillRect

gdi32

GetTextExtentPoint32W
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetTextExtentPoint32A
SetPixel
GetPixel
PatBlt
Ellipse
GetBkMode
CreateFontIndirectA
GetSystemPaletteEntries
SetDIBitsToDevice
GetStockObject
SelectPalette
GetDIBits
StretchBlt
RealizePalette
CreatePalette
GetObjectA
GetDeviceCaps
DeleteObject
CreateCompatibleBitmap
DeleteDC
SelectObject
BitBlt
Rectangle
CreateCompatibleDC
CreateDIBSection
CreateSolidBrush
CreatePen
GetClipBox
SaveDC
RestoreDC
SetBkMode
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SelectClipRgn
CreateRectRgn
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
CreatePatternBrush
CreateRectRgnIndirect
StretchDIBits
GetCharWidthA
SetRectRgn
CombineRgn
GetBkColor
SetTextColor
SetBkColor
CreateBitmap
MaskBlt
CreateFontA

advapi32

RegOpenKeyA
RegQueryValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

shell32

Shell_NotifyIconA
ShellExecuteExA
SHEmptyRecycleBinA
ShellExecuteA
DragFinish
DragQueryFileA
SHAddToRecentDocs

ole32

CreateStreamOnHGlobal

oleaut32

OleLoadPicture
VarUdateFromDate
SystemTimeToVariantTime
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen

comctl32

ImageList_GetImageCount
ImageList_AddMasked
ImageList_GetIcon
ImageList_Draw
ImageList_GetIconSize
_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_Create
ImageList_GetImageInfo
ImageList_ReplaceIcon

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA

ws2_32

WSAStartup
inet_ntoa
socket
htons
sendto
inet_addr
closesocket
connect
ntohs
accept
select
bind
WSASetLastError
recvfrom
WSAAsyncSelect
gethostname
WSAGetLastError
WSACleanup
recv
gethostbyname
send
setsockopt
htonl

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

oleacc

CreateStdAccessibleObject
LresultFromObject

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

comdlg32

GetFileTitleA

Sections

.text
Size: 360KB - Virtual size: 357KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9739db4768574d007c8283e1656f399a

Headers

File Characteristics

Imports

winmm

imm32

iphlpapi

psapi

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

ws2_32

version

oleacc

winspool.drv

comdlg32

Sections

.text Size: 360KB - Virtual size: 357KB

.rdata Size: 80KB - Virtual size: 78KB

.data Size: 16KB - Virtual size: 29KB

.rsrc Size: 140KB - Virtual size: 136KB

.text
Size: 360KB - Virtual size: 357KB

.rdata
Size: 80KB - Virtual size: 78KB

.data
Size: 16KB - Virtual size: 29KB

.rsrc
Size: 140KB - Virtual size: 136KB