43069fb276d4b39adcb4749ed0d1a12b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

43069fb276d4b39adcb4749ed0d1a12b_JaffaCakes118
Size

6.2MB
MD5

43069fb276d4b39adcb4749ed0d1a12b
SHA1

8ff6e51f86b9a9f89203ca1463a64acdb84ff197
SHA256

8b2b7f500272e523d4109efa8fa25bbf22f7bfce1d6e279531f4e0ad73f13cf7
SHA512

3d48b5ecbbab22b3c0625ae590925345ff1f1ad04a20f95005b513f5889721234a314afe7a11835d24151287d193cfc593a9059a0ee6c97ac6dfa141e7932df9
SSDEEP

196608:18NtOoGbkpmaGDeDwJXCgUGnXCUe1htVdBYAP:CNtOoGbkpEgw4WnXCPhz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43069fb276d4b39adcb4749ed0d1a12b_JaffaCakes118

Files

43069fb276d4b39adcb4749ed0d1a12b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

177fa5189e89142f20f5c868ca87ba1b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

d3d9

Direct3DCreate9

dsound

ord11

winmm

timeGetDevCaps
timeBeginPeriod
timeGetTime
mmioWrite
mmioAdvance
mmioSetInfo
mmioSeek
mmioCreateChunk
mmioGetInfo
mmioDescend
mmioRead
mmioAscend
mmioOpenA
mmioClose

imm32

ImmReleaseContext
ImmGetContext
ImmGetProperty
ImmGetCompositionStringW
ImmGetCandidateListW
ImmNotifyIME
ImmAssociateContext
ImmGetOpenStatus
ImmGetConversionStatus
ImmIsIME
ImmGetIMEFileNameA
ImmSetOpenStatus

ws2_32

socket
WSASetEvent
ntohs
htons
closesocket
shutdown
WSAGetLastError
connect
WSASetLastError
gethostbyname
inet_addr
WSASend
WSARecv
setsockopt
WSAResetEvent
getpeername
WSACloseEvent
WSACreateEvent
WSAStartup
send
gethostname
WSASocketA
htonl
bind
WSAEnumNetworkEvents
WSAAccept
WSAEventSelect
listen
WSAWaitForMultipleEvents
WSACleanup

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

GetOverlappedResult
GetSystemInfo
HeapCreate
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
SetUnhandledExceptionFilter
SetErrorMode
lstrcmpiA
ReleaseMutex
CreateMutexA
OpenMutexA
Process32Next
TerminateProcess
GetExitCodeProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
GetModuleHandleA
GetEnvironmentVariableA
WriteFile
DeleteFileA
ReadFile
GetTempFileNameA
GetTempPathA
GetProfileIntA
DebugBreak
FatalAppExitA
IsProcessorFeaturePresent
LocalFree
OutputDebugStringA
MapViewOfFile
GetFileSize
CreateFileMappingA
CreateFileW
UnmapViewOfFile
FindResourceW
GetLocalTime
InterlockedCompareExchange
GetProcessHeap
OutputDebugStringW
GetCurrentDirectoryA
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
CreateDirectoryA
GetDateFormatA
GlobalAlloc
SetEnvironmentVariableA
CompareStringW
GetLocaleInfoW
IsBadCodePtr
IsBadReadPtr
GetCurrentProcessId
GetUserDefaultLCID
EnumSystemLocalesA
IsValidCodePage
IsValidLocale
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
SetConsoleCtrlHandler
UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
IsBadWritePtr
SetStdHandle
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
HeapSize
GetACP
GetCommandLineA
GetStartupInfoA
ExitThread
CreateThread
GetQueuedCompletionStatus
RaiseException
GetSystemTime
GetTimeZoneInformation
RtlUnwind
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetOEMCP
GetCPInfo
GetCurrentThread
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
CopyFileA
GetVersion
GetProcessVersion
GlobalFlags
GlobalFree
SuspendThread
GetCurrentThreadId
ResumeThread
SetLastError
SetFileAttributesA
SetFileTime
GlobalLock
GlobalSize
GlobalUnlock
CreateProcessA
CompareStringA
GetLocaleInfoA
GetVersionExA
GetSystemDirectoryA
IsDBCSLeadByte
GetFileAttributesA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
FreeLibrary
GetFullPathNameA
CreateFileA
CloseHandle
FindResourceA
LoadResource
SizeofResource
LockResource
lstrcmpA
MulDiv
lstrcpynA
GetTickCount
ExitProcess
Sleep
lstrcpyA
lstrcatA
lstrlenA
QueryPerformanceCounter
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
lstrlenW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
QueryPerformanceFrequency
GetLastError
PostQueuedCompletionStatus
CreateIoCompletionPort
VirtualFree
WaitForMultipleObjects
SetEvent
WaitForSingleObject
CreatePipe
CreateEventA
SetThreadPriority
InterlockedIncrement
DeleteCriticalSection
FindNextFileA
InitializeCriticalSection
InterlockedExchange
GetSystemTimeAsFileTime
FormatMessageA

user32

ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
AdjustWindowRectEx
IsWindow
SetActiveWindow
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
CheckDlgButton
GetDlgItemInt
GetDlgItemTextA
GetScrollRange
SetDlgItemTextA
GetClientRect
GetWindowRect
GetWindowLongA
CreateWindowExA
LoadMenuA
AdjustWindowRect
SetRect
RegisterClassA
LoadIconA
LoadCursorA
DefWindowProcA
DeleteMenu
SetCursor
ShowOwnedPopups
MoveWindow
SetScrollRange
SetDlgItemInt
GetTopWindow
ScrollWindowEx
GetParent
MessageBoxW
UnregisterClassA
GetPropA
SetPropA
RemovePropA
GetClassInfoA
SetRectEmpty
SetFocus
CreateDialogParamA
SetWindowsHookExA
LoadStringA
CallNextHookEx
SystemParametersInfoA
CharNextExA
FindWindowA
GetSystemMetrics
ShowWindow
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
CharNextA
GetKeyboardLayout
ReleaseCapture
SetCapture
EqualRect
OffsetRect
InflateRect
PtInRect
CopyRect
GetAsyncKeyState
GetIconInfo
wsprintfA
IsDlgButtonChecked
EnableWindow
CheckRadioButton
EndDialog
DialogBoxParamA
PostMessageA
GetDlgItem
GetDC
ReleaseDC
EnumDisplaySettingsA
ChangeDisplaySettingsA
MessageBoxA
LoadAcceleratorsA
PeekMessageA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
SendMessageA
DestroyAcceleratorTable
SetWindowLongA
SetMenu
ClipCursor
SetWindowPos
GetCursorPos
ScreenToClient
GetMenu
DestroyMenu
DestroyWindow
PostQuitMessage
CharToOemA
OemToCharA
IsWindowEnabled
GetLastActivePopup
IsChild
IntersectRect
CharUpperA
GetWindowTextA
GetWindowTextLengthA
UnhookWindowsHookEx
IsWindowVisible
ValidateRect
GetKeyState
GetActiveWindow
GetClassNameA
GetDlgCtrlID
GetWindow
ClientToScreen
SetWindowTextA
GetDesktopWindow
GetFocus
GetSysColorBrush
GetSysColor
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
InsertMenuA
GetMenuItemID
AppendMenuA
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemCount
RemoveMenu
wvsprintfA
SetScrollPos
GetScrollPos
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
GetWindowPlacement
IsIconic
RegisterWindowMessageA
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
CallWindowProcA
GetClassLongA
SetWindowPlacement
TrackPopupMenu
WinHelpA
GetCapture
IsDialogMessageA

gdi32

GetDCOrgEx
CreateDCA
CopyMetaFileA
Escape
TextOutA
RectVisible
PtVisible
CreateDIBPatternBrushPt
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
GetViewportExtEx
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetStretchBltMode
SetROP2
SetPolyFillMode
SelectPalette
RestoreDC
SetArcDirection
ExtTextOutW
MoveToEx
CreateFontIndirectW
CreateFontIndirectA
GetFontLanguageInfo
GetTextMetricsW
GetTextMetricsA
SetBkMode
GetCharacterPlacementW
GetCharacterPlacementA
GetObjectW
GetDeviceGammaRamp
SetDeviceGammaRamp
GetObjectA
GetDIBits
EnumFontFamiliesExA
ExtTextOutA
DeleteObject
DeleteDC
CreateCompatibleDC
SetMapMode
SelectObject
CreateDIBSection
SetTextColor
SetBkColor
SetTextAlign
CreateFontA
GetDeviceCaps
GetTextExtentPoint32A
GetStockObject
GetMapMode
CreatePatternBrush
CreateBitmap
PatBlt
SetRectRgn
CombineRgn
CreateRectRgn
CreateRectRgnIndirect
DPtoLP
StartDocA
SaveDC
GetWindowExtEx
CreatePen

neuzd

GetFirstStackTraceString
GetRegisterString
GetFaultReason
GetNextStackTraceString

mss32

_AIL_service_stream@8
_AIL_start_stream@4
_AIL_set_stream_loop_count@8
_AIL_open_stream@12
_AIL_close_digital_driver@4
_AIL_shutdown@0
_AIL_startup@0
_AIL_open_digital_driver@16
_AIL_stream_status@4
_AIL_set_digital_master_volume_level@8
_AIL_pause_stream@8
_AIL_close_stream@4

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

CryptReleaseContext
RegCreateKeyExA
RegSetValueA
RegOpenKeyA
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA

shell32

SHGetFileInfoA
DragAcceptFiles

comctl32

ord17

ole32

CoDisconnectObject
ReleaseStgMedium
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CreateBindCtx
CoTaskMemAlloc
OleDuplicateData
CoInitialize
CLSIDFromString
CoCreateInstance
CoUninitialize
StringFromCLSID
CoTreatAsClass

oleaut32

SysStringLen
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromDate
VarDateFromStr
VarBstrFromCy
VarCyFromStr
SysStringByteLen
VariantChangeType
SysAllocStringByteLen
VariantCopy
VariantClear
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
SysAllocString
VariantInit
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim

Sections

.text
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 860KB - Virtual size: 857KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

177fa5189e89142f20f5c868ca87ba1b

Headers

File Characteristics

Imports

d3d9

dsound

winmm

imm32

ws2_32

version

kernel32

user32

gdi32

neuzd

mss32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

Sections

.text Size: 5.1MB - Virtual size: 5.1MB

.rdata Size: 860KB - Virtual size: 857KB

.data Size: 172KB - Virtual size: 1.8MB

.rsrc Size: 116KB - Virtual size: 113KB

.text
Size: 5.1MB - Virtual size: 5.1MB

.rdata
Size: 860KB - Virtual size: 857KB

.data
Size: 172KB - Virtual size: 1.8MB

.rsrc
Size: 116KB - Virtual size: 113KB