44aaeccf1b05d3d0cfbb2ab77a0dc441_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

44aaeccf1b05d3d0cfbb2ab77a0dc441_JaffaCakes118
Size

960KB
MD5

44aaeccf1b05d3d0cfbb2ab77a0dc441
SHA1

8b8dd39dcf2d721853976baee4b0fc3e4ac02fa1
SHA256

558b50090689164c014f9c4f5e0a70c9bc12d8ad96c5e16ea6738c6ae48e375b
SHA512

d49f58f0f5128af880c8987f55833ebff75024587abf5386b884137aecf1b264635b536da5bb5a39f7c73be48bf4cfa6f0ac3a87d64cb7c5701e9c2e5641c393
SSDEEP

12288:cXuwI9ai/V8GRcUJr46C507rnHhZwpfHT7xk:3HI88GRcUJ4arnBZw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44aaeccf1b05d3d0cfbb2ab77a0dc441_JaffaCakes118

Files

44aaeccf1b05d3d0cfbb2ab77a0dc441_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e3a9d55d13de0c62a23186ef34e0542d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

ximage32

XBMP_GetFileInfo
XBMP_DrawFile
XBMP_DrawMemFile

imcs

GetProcName
SetUserDict32
SetProfDictID32
SetChnEngMenu32
GetCode32
SetTransFlag32
InitHooks32
ClearHooks32
CancelComptrans32
SetCode32

kernel32

GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
GetEnvironmentStrings
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetACP
GetFileType
SetStdHandle
HeapReAlloc
HeapSize
ExitThread
CreateThread
FreeEnvironmentStringsA
GetCPInfo
HeapAlloc
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
HeapFree
RtlUnwind
GetModuleHandleA
GetPrivateProfileIntA
GetVersion
CreateFileA
UnhandledExceptionFilter
FreeEnvironmentStringsW
IsBadReadPtr
GetProcAddress
lstrcatA
WinExec
GetWindowsDirectoryA
SetEvent
GetLocalTime
GetSystemTime
GetTimeZoneInformation
GetTickCount
TerminateThread
CreateFileW
DeviceIoControl
LoadLibraryW
lstrlenW
LoadLibraryA
FreeLibrary
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
FindResourceExA
GetOEMCP
GlobalAlloc
GlobalReAlloc
FindResourceA
LoadResource
LockResource
FreeResource
GlobalFree
Sleep
lstrcpyA
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
VirtualAlloc
IsBadWritePtr
CloseHandle
VirtualFree
GetPrivateProfileStringA
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
InterlockedExchange
GetFileTime
GetFileAttributesA
GetCurrentThread
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
DuplicateHandle
WritePrivateProfileStringA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalFlags
SuspendThread
SetThreadPriority
ResumeThread
FormatMessageA
LocalFree
lstrcpynA
MulDiv
SetLastError
InterlockedDecrement
InterlockedIncrement
lstrcmpA
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GlobalLock
GlobalUnlock
GetFileSize
ReadFile
GetCurrentProcess
TerminateProcess
WaitForSingleObject
GetCurrentThreadId
CopyFileA
ReleaseMutex
CreateMutexA
GetLastError
GetModuleFileNameA
OutputDebugStringA
WaitForMultipleObjects
OpenFile
GetCurrentProcessId
CreateEventA

user32

LoadAcceleratorsA
InvertRect
CharUpperA
TranslateAcceleratorA
MapDialogRect
GetAsyncKeyState
SetRectEmpty
ValidateRect
LoadStringA
EndPaint
BeginPaint
wvsprintfA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
MoveWindow
SetWindowTextA
IsDialogMessageA
LoadIconA
SendDlgItemMessageA
MapWindowPoints
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
TrackPopupMenu
GetWindowTextLengthA
GetDlgCtrlID
UnpackDDElParam
SetMenu
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GrayStringA
TabbedTextOutA
GetSystemMenu
DrawFocusRect
SetWindowRgn
EqualRect
wsprintfA
GetWindowDC
IsZoomed
PeekMessageA
ShowWindow
RedrawWindow
IsWindowVisible
ReuseDDElParam
EnableMenuItem
CheckMenuItem
EmptyClipboard
CloseClipboard
SetForegroundWindow
keybd_event
IsClipboardFormatAvailable
GetClassNameA
GetDesktopWindow
FindWindowA
EnumThreadWindows
DrawMenuBar
UnregisterHotKey
GetWindowThreadProcessId
RegisterHotKey
DestroyCursor
GetCursorPos
UnregisterClassA
RegisterWindowMessageA
DrawEdge
ShowOwnedPopups
BringWindowToTop
PostQuitMessage
GetDCEx
LockWindowUpdate
SetParent
GetKeyState
DefWindowProcA
OpenClipboard
GetForegroundWindow
SetActiveWindow
RemoveMenu
InsertMenuA
AppendMenuA
DeleteMenu
GetMenuItemInfoA
SetMenuItemInfoA
TranslateMessage
IntersectRect
SetWindowLongA
IsMenu
LoadMenuIndirectA
LoadMenuA
DestroyMenu
CreatePopupMenu
CreateMenu
DestroyIcon
CallWindowProcA
mouse_event
WindowFromPoint
ClientToScreen
ReleaseDC
GetDC
GetWindowRect
MessageBeep
CopyIcon
IsWindow
GetWindowLongA
GetSysColorBrush
ModifyMenuA
GetSubMenu
GetMenuStringA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetTabbedTextExtentA
DrawStateA
SystemParametersInfoA
IsChild
GetFocus
CharNextA
SetWindowContextHelpId
CopyAcceleratorTableA
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
SetCapture
InvalidateRect
UpdateWindow
ScreenToClient
DrawFrameControl
OffsetRect
InflateRect
SetRect
PtInRect
CopyRect
GetCapture
GetMessageA
DispatchMessageA
ReleaseCapture
GetCursor
GetWindow
GetSystemMetrics
GetMessagePos
GetSysColor
GetParent
PostMessageA
LoadCursorA
FrameRect
FillRect
SetCursor
KillTimer
SetTimer
GetClientRect
ScrollDC
DrawTextA
LoadBitmapA
LoadImageA
EnableWindow
GetWindowTextA
SetFocus
SendMessageA
IsIconic
SetWindowPos

gdi32

CreateBitmap
GetDIBColorTable
CreateRectRgnIndirect
RestoreDC
SelectPalette
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
CreateRectRgn
GetObjectA
SaveDC
GetViewportExtEx
GetWindowExtEx
CreatePen
CreatePatternBrush
GetMapMode
PatBlt
SetRectRgn
CombineRgn
DPtoLP
StretchDIBits
GetCharWidthA
GetTextMetricsA
EnumFontFamiliesExA
DeleteDC
GetClipBox
SetBkColor
SetBkMode
SetTextColor
Escape
ExtTextOutA
RectVisible
PtVisible
SetPixel
RoundRect
GetTextExtentPointA
CreateSolidBrush
GetCharABCWidthsA
SelectObject
GetNearestColor
TextOutA
GetCurrentObject
FloodFill
CreateRoundRectRgn
LPtoDP
Rectangle
GetCurrentPositionEx
GetTextColor
CreatePalette
StretchBlt
DeleteObject
CreateFontIndirectA
CreateFontA
CreateCompatibleBitmap
GetStockObject
GetTextExtentPoint32A
BitBlt
GetBkColor
RealizePalette
GetDeviceCaps
CreateCompatibleDC
CreateHalftonePalette

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegQueryValueA
RegOpenKeyA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

DragQueryFileA
DragFinish
SHAppBarMessage
Shell_NotifyIconA
SHGetFileInfoA
SHGetMalloc
DuplicateIcon
SHGetDesktopFolder
ShellExecuteA
SHGetSpecialFolderLocation

comctl32

ImageList_LoadImageA
CreatePropertySheetPageA
ImageList_Create
DestroyPropertySheetPage
ImageList_SetBkColor
ord17
ImageList_GetImageInfo
ImageList_GetIcon
ImageList_AddMasked
ImageList_Draw
PropertySheetA
ImageList_Destroy

ole32

CoUninitialize
CoCreateInstance
CoInitialize
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateStreamOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter

oleaut32

SysStringLen
VariantTimeToSystemTime
VariantClear
GetActiveObject
SysAllocStringByteLen
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayUnaccessData
VariantInit
CreateErrorInfo
VariantChangeType
SysAllocString
SysAllocStringLen
SysFreeString
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound

accountactivate

ord1

oledlg

ord8

olepro32

ord253

iphlpapi

GetNetworkParams
GetAdaptersInfo

wsock32

ntohs
inet_addr
htonl
select
__WSAFDIsSet
ioctlsocket
sendto
socket
htons
bind
inet_ntoa
setsockopt
closesocket
WSACleanup
WSAStartup
recvfrom

Exports

Exports

?GetAdvertiseTaskBar@@YAPAVI_AdvertiseTaskbar@@PBD@Z

Sections

.text
Size: 524KB - Virtual size: 521KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WYCao
Size: 288KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e3a9d55d13de0c62a23186ef34e0542d

Headers

File Characteristics

Imports

version

ximage32

imcs

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

accountactivate

oledlg

olepro32

iphlpapi

wsock32

Exports

Exports

Sections

.text Size: 524KB - Virtual size: 521KB

.rdata Size: 104KB - Virtual size: 101KB

.data Size: 36KB - Virtual size: 72KB

.WYCao Size: 288KB - Virtual size: 308KB

.text
Size: 524KB - Virtual size: 521KB

.rdata
Size: 104KB - Virtual size: 101KB

.data
Size: 36KB - Virtual size: 72KB

.WYCao
Size: 288KB - Virtual size: 308KB