4b01c7070f2cee8b1bfe47366cf9bcc6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4b01c7070f2cee8b1bfe47366cf9bcc6_JaffaCakes118
Size

3.2MB
MD5

4b01c7070f2cee8b1bfe47366cf9bcc6
SHA1

c6b1c12d4cd9bb01992c34e0391c2ffa2674929b
SHA256

428ed40cca22e127c2b201c74d5d2b4f4495b084478eed42008cb472205ade2d
SHA512

739453380ccf2188120ce192f8885ed647e1cd5c0ace706757d793816ac5c69486491a5de7ba37873f8ef0147267b7565608ef3aeb5384f297f8cfc73421f2f9
SSDEEP

49152:XhPg95YC1yRr5R+jzA66ymAu1Rx48D9d5VGoemckeh7ns3xHzX11w+XYxCjLuWVT:BgXt1yRr8zA6POQVh7n+xb11w+XYxC0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b01c7070f2cee8b1bfe47366cf9bcc6_JaffaCakes118

Files

4b01c7070f2cee8b1bfe47366cf9bcc6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f0c4c4e9ccdddc0a6945805c33623df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\RB\REALbasic\REALbasic Visual Studio\REALbasic\release\X86RunHoudini.pdb

Imports

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoW
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoSizeW

comctl32

ord17
ImageList_Destroy
ImageList_Add
InitCommonControlsEx
ImageList_Create

winmm

midiOutClose
midiOutOpen
mciSendStringA
mciSendStringW
midiOutShortMsg

iphlpapi

GetAdaptersInfo

kernel32

GetLocaleInfoW
LoadResource
lstrcpyA
LockResource
FindResourceA
_lread
_llseek
_lopen
VirtualAlloc
_lclose
OutputDebugStringA
WaitForSingleObject
ExitProcess
ReleaseMutex
LoadLibraryW
CreateMutexA
WideCharToMultiByte
ExpandEnvironmentStringsW
GetEnvironmentVariableA
GetCommandLineA
SetEnvironmentVariableA
SetEnvironmentVariableW
GetCommandLineW
GetEnvironmentVariableW
GetCurrentProcess
GetUserDefaultLangID
CreateEventA
GetACP
IsValidCodePage
GetVersion
MulDiv
GetLogicalDrives
InterlockedIncrement
InterlockedDecrement
CreateDirectoryA
GetCommModemStatus
ResetEvent
ClearCommError
GetCommState
SetCommBreak
GetCommProperties
EscapeCommFunction
ClearCommBreak
SetCommState
SetCommTimeouts
HeapAlloc
VirtualProtect
HeapFree
VirtualFree
GetProcessHeap
IsBadReadPtr
TerminateProcess
GetStartupInfoA
GetSystemTimeAsFileTime
HeapReAlloc
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
RaiseException
GetStdHandle
HeapDestroy
HeapCreate
FindFirstFileW
GetFileAttributesA
DeleteFileA
SetFileAttributesW
GetShortPathNameA
FindNextFileA
FindClose
CopyFileW
SetFileAttributesA
DeleteFileW
GetWindowsDirectoryW
GetSystemDirectoryW
CopyFileA
RemoveDirectoryA
MoveFileW
GetSystemDirectoryA
GetWindowsDirectoryA
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
SetFileTime
GetShortPathNameW
RemoveDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
GetLogicalDriveStringsA
GetFileTime
GetFileAttributesW
FindFirstFileA
MoveFileA
FindNextFileW
SetCurrentDirectoryA
GetCurrentDirectoryA
GlobalSize
GlobalAlloc
GlobalFree
GlobalReAlloc
GetCurrentProcessId
CompareFileTime
FileTimeToSystemTime
GetLocalTime
GetDateFormatA
LocalFileTimeToFileTime
GetSystemTime
FileTimeToLocalFileTime
GetTimeFormatA
SystemTimeToFileTime
GetTimeZoneInformation
SetFilePointer
GetTempFileNameA
GetFileSize
CreateFileA
GetTempPathA
GetTempFileNameW
CloseHandle
GetLastError
WriteFile
GetTempPathW
FlushFileBuffers
CreateFileW
UnhandledExceptionFilter
ReadFile
SetEndOfFile
InitializeCriticalSection
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GlobalUnlock
GlobalLock
GetVersionExA
Sleep
GetProcAddress
MultiByteToWideChar
GetUserDefaultLCID
FreeLibrary
LoadLibraryA
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
CompareStringW
CompareStringA
GetLocaleInfoA
IsDBCSLeadByteEx
GetStringTypeExA
GetModuleHandleA
GetModuleFileNameA
GetModuleHandleW
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
RtlUnwind
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
GetOverlappedResult
WriteConsoleW

user32

DeleteMenu
InsertMenuA
EnableMenuItem
InsertMenuW
DrawEdge
SetScrollPos
GetScrollInfo
GetScrollRange
GetScrollPos
SetScrollRange
SetScrollInfo
GetMenuState
TranslateMDISysAccel
IsIconic
CreateMDIWindowW
RegisterClassW
RegisterWindowMessageA
CreateMDIWindowA
GetFocus
GetClassInfoW
GetClassInfoA
EnumChildWindows
IsZoomed
GetWindow
GetTopWindow
BringWindowToTop
AdjustWindowRect
GetSystemMenu
FrameRect
VkKeyScanA
wsprintfA
CreateIconIndirect
DragDetect
ValidateRect
GetClassNameA
InvalidateRgn
CreateWindowExW
SetParent
BeginPaint
UpdateWindow
EndPaint
ShowCursor
TranslateAcceleratorA
RegisterClassA
SetTimer
KillTimer
DispatchMessageW
GetMessageW
PeekMessageW
SetCapture
MsgWaitForMultipleObjectsEx
PostMessageA
WindowFromPoint
ReleaseCapture
GetMessageA
SystemParametersInfoA
DrawIconEx
DrawFrameControl
ShowWindow
GetActiveWindow
FindWindowW
FindWindowA
GetMenu
CreateWindowExA
DestroyMenu
DestroyWindow
RedrawWindow
DestroyCursor
CreateCursor
LoadImageA
GetWindowTextA
GetMenuItemInfoW
GetWindowTextLengthA
GetMenuItemCount
CreateMenu
SetMenuItemInfoW
MoveWindow
ScreenToClient
GetKeyNameTextA
MapVirtualKeyA
GetKeyNameTextW
SetClipboardData
GetClipboardData
EmptyClipboard
CreateIconFromResource
CreateIconFromResourceEx
LoadIconA
InvertRect
DrawIcon
GetSysColorBrush
GetWindowDC
GetSystemMetrics
DrawFocusRect
DrawTextW
DrawTextA
GetIconInfo
LoadCursorFromFileA
DestroyIcon
SetWindowPos
GetParent
SendMessageW
FillRect
TranslateMessage
SetForegroundWindow
DispatchMessageA
IsWindowVisible
MessageBoxA
EnumWindows
PeekMessageA
GetWindowRect
ClientToScreen
GetClientRect
GetForegroundWindow
TrackPopupMenu
GetCursorPos
CreatePopupMenu
DefFrameProcA
DefFrameProcW
GetWindowLongA
ReleaseDC
SetWindowLongW
DefWindowProcA
GetDC
DefMDIChildProcW
DefMDIChildProcA
CallWindowProcA
SetWindowLongA
CallWindowProcW
GetWindowLongW
DefWindowProcW
GetMenuItemID
CheckMenuItem
DrawMenuBar
CopyRect
InflateRect
GetKeyState
GetPropA
SetWindowTextA
EnableWindow
SetWindowTextW
RemovePropA
GetMessagePos
SetPropA
GetSubMenu
ChildWindowFromPointEx
GetMenuStringW
MessageBeep
GetDoubleClickTime
OffsetRect
SetRect
ScrollWindow
CloseClipboard
InvalidateRect
SetFocus
WindowFromDC
CharUpperBuffA
CharLowerBuffA
GetAsyncKeyState
SendMessageA
LoadCursorA
GetMenuStringA
IsClipboardFormatAvailable
RegisterClipboardFormatA
GetWindowTextW
OpenClipboard
SetCursor
SetMenu
GetMessageTime
GetSysColor
MessageBoxW

gdi32

CreateDIBSection
GetObjectA
CreateDIBitmap
GetSystemPaletteEntries
CreatePalette
GetDIBits
Polygon
SetTextAlign
SetBrushOrgEx
CreateEnhMetaFileA
CreateMetaFileA
CloseMetaFile
CreateEnhMetaFileW
CloseEnhMetaFile
CreateMetaFileW
EnumFontsW
EnumFontsA
EnumFontFamiliesExA
EnumFontFamiliesExW
CombineRgn
CreateRectRgn
RoundRect
GetTextMetricsA
LineTo
CreatePen
SelectClipRgn
CreatePatternBrush
SetDIBitsToDevice
GetTextExtentPoint32A
SetPixelV
CreateBitmap
GetFontLanguageInfo
Ellipse
MoveToEx
CreateSolidBrush
GetClipRgn
SetTextColor
Rectangle
GetPixel
GetTextMetricsW
GetMetaFileA
GetEnhMetaFileA
EnumEnhMetaFile
DeleteEnhMetaFile
GetEnhMetaFileHeader
DeleteMetaFile
CreateFontIndirectA
SetViewportOrgEx
ExcludeClipRect
SetMapMode
CreateFontW
CreateFontA
CreateBrushIndirect
SetViewportExtEx
SetWindowExtEx
EndPage
StartDocA
SetAbortProc
StartPage
EndDoc
CreateICA
DeleteObject
SetStretchBltMode
SelectObject
GetStockObject
CreateDCA
BitBlt
GetTextExtentPoint32W
SelectPalette
CreateCompatibleDC
DeleteDC
CreateCompatibleBitmap
StretchBlt
RealizePalette
StretchDIBits
SetBkMode
GetDeviceCaps
TranslateCharsetInfo

comdlg32

GetSaveFileNameW
PageSetupDlgA
PrintDlgA
ChooseColorA
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA

advapi32

RegSetValueExW
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegEnumValueA
RegQueryValueExW
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegQueryInfoKeyA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA

shell32

DragFinish
DragQueryFileA
DragQueryFileW
Shell_NotifyIconA
Shell_NotifyIconW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListW
SHGetPathFromIDListA
ShellExecuteA
ShellExecuteW
DragAcceptFiles

ole32

CoCreateInstance
CoInitialize
CoUninitialize
CLSIDFromString
CoGetClassObject
CoTaskMemFree
CLSIDFromProgID
OleInitialize
OleUninitialize
CoTaskMemAlloc
RegisterDragDrop
RevokeDragDrop
DoDragDrop

oleaut32

OleCreatePictureIndirect
SysFreeString
SysAllocString
OleLoadPicturePath

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 212KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 260KB - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f0c4c4e9ccdddc0a6945805c33623df

Headers

File Characteristics

PDB Paths

Imports

version

comctl32

winmm

iphlpapi

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 212KB - Virtual size: 210KB

.data Size: 260KB - Virtual size: 382KB

.rsrc Size: 28KB - Virtual size: 26KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 212KB - Virtual size: 210KB

.data
Size: 260KB - Virtual size: 382KB

.rsrc
Size: 28KB - Virtual size: 26KB