4c06c73afea6b5d43822ad33215979e6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4c06c73afea6b5d43822ad33215979e6_JaffaCakes118
Size

9.6MB
MD5

4c06c73afea6b5d43822ad33215979e6
SHA1

cb4f2728b20223f0cdefe6d8a81b9bb51050cd69
SHA256

47b64d51501bc4e3e3077fa159017fbc23fcd9a8cee45aece2208ad1f085b4ce
SHA512

b6075e8483de458959d268cf12315e99805f34e629a760b18fe7e46307284646b397933dbbd42ed27975cdf4181f418cf8102a1bbea6d7c21d4d9533219094c9
SSDEEP

98304:sNPqr1l/Oy5fUaUFhmwFHDW5faqCv8WbuTDtggo9gf17r/wL00R37mR2OfsPgrqX:sNmfEh11WAKTEgK7qps1MkwBmH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c06c73afea6b5d43822ad33215979e6_JaffaCakes118

Files

4c06c73afea6b5d43822ad33215979e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee10ee26ba23f98a762bd1af1256ab26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetUserNameA
OpenProcessToken
GetTokenInformation
EqualSid
RegCloseKey
RegSetValueExA
RegCreateKeyExA
FreeSid
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
AllocateAndInitializeSid

ddraw

DirectDrawCreateEx

dsound

DirectSoundCreate8

gdi32

RemoveFontResourceA
AddFontResourceA
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextMetricsA
CreateFontIndirectA
CreateCompatibleDC
SetBkMode
SetPixel
GetPixel
DeleteObject
CreatePalette
RealizePalette
SelectPalette
SetPaletteEntries
CreateDIBSection
GetDeviceGammaRamp
CreateFontA
DeleteDC
GetDIBits
SetBkColor
CreateSolidBrush
GetObjectA
CreateDIBitmap
SetDIBColorTable
BitBlt
SetDeviceGammaRamp
SelectObject
SetTextColor
GetGlyphOutlineW
GetStockObject

imm32

ImmGetCandidateWindow
ImmSetConversionStatus
ImmGetConversionStatus
ImmNotifyIME
ImmSetCandidateWindow
ImmGetCompositionStringW
ImmGetContext
ImmReleaseContext
ImmGetProperty
ImmAssociateContext

kernel32

IsValidCodePage
GetOEMCP
GetCPInfo
HeapSize
GetTimeZoneInformation
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
SetConsoleCtrlHandler
FreeEnvironmentStringsA
GetEnvironmentStrings
GetCurrentThread
InterlockedExchange
Sleep
CloseHandle
WriteFile
CreateFileW
ReadFile
GetFileSize
CreateFileA
lstrlenA
GetLastError
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetFilePointer
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
ResetEvent
CreateEventA
DeleteFileA
CreateDirectoryA
SetCurrentDirectoryA
MultiByteToWideChar
SetEvent
WaitForSingleObject
CreateThread
OutputDebugStringA
GetTickCount
GetModuleFileNameA
GetCurrentThreadId
GetEnvironmentStringsW
GetVersion
GlobalUnlock
GlobalLock
Beep
GetProcAddress
GetModuleHandleA
CreateMutexA
WinExec
GetCurrentProcess
GetCurrentProcessId
GetLocalTime
SetUnhandledExceptionFilter
CompareStringA
FindClose
FindFirstFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
GetSystemDirectoryA
GetCommandLineA
FreeLibrary
LoadLibraryA
GetLocaleInfoA
GetThreadLocale
GetVersionExA
lstrcmpA
lstrcmpW
GetSystemInfo
IsProcessorFeaturePresent
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
LockResource
LoadResource
SizeofResource
FindResourceA
FindResourceW
GetFullPathNameA
lstrcmpiA
HeapAlloc
GetProcessHeap
HeapFree
HeapCreate
HeapDestroy
HeapReAlloc
VirtualAlloc
VirtualFree
FatalAppExitA
IsDebuggerPresent
TerminateProcess
GetStartupInfoA
UnhandledExceptionFilter
ExitProcess
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
CopyFileA
SetFileAttributesA
GetFileAttributesA
GetCurrentDirectoryA
GlobalMemoryStatus
SetLastError
GlobalAlloc
GlobalFree
Process32First
Process32Next
CreateToolhelp32Snapshot
Module32First
Module32Next
FreeEnvironmentStringsW
QueryPerformanceCounter
VirtualQuery
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
GetLocaleInfoW
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
CompareStringW
SetEnvironmentVariableA
_lwrite
QueryPerformanceFrequency
ExitThread
MulDiv
lstrcpyA
lstrcatA
lstrcpynA
TerminateThread
GetExitCodeThread
ResumeThread
SetThreadPriority
GetWindowsDirectoryA
SuspendThread
FlushViewOfFile
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatus
ReleaseSemaphore
SleepEx
FlushInstructionCache
FindNextFileA
GetACP
_hwrite
lstrlen

shell32

ShellExecuteW
ShellExecuteA
SHGetSpecialFolderPathA
ExtractIconExA
ExtractIconEx

user32

IsClipboardFormatAvailable
CreateWindowExA
IsCharAlphaW
IsCharAlphaNumericW
PostMessageA
GetWindowThreadProcessId
EndDialog
SetWindowPos
GetWindowRect
GetActiveWindow
SetRect
MessageBoxA
AdjustWindowRect
GetClientRect
GetDesktopWindow
RegisterClassExA
OpenClipboard
GetKeyState
SendMessageA
GetWindow
IsWindow
FindWindowA
SetFocus
CallNextHookEx
GetWindowTextA
KillTimer
SetWindowTextA
SetTimer
MapDialogRect
DefWindowProcA
CreateDialogIndirectParamA
EndPaint
BeginPaint
PostQuitMessage
wsprintfA
SetCursor
ChangeDisplaySettingsA
SystemParametersInfoA
EnumDisplaySettingsA
GetClipboardData
GetClassLongA
GetMenu
SetMenu
DestroyAcceleratorTable
LoadMenuA
RegisterClassA
DestroyMenu
GetIconInfo
EnableWindow
CheckRadioButton
AppendMenuA
CreatePopupMenu
CreateMenu
CharNextExA
CallWindowProcA
UnhookWindowsHookEx
SetWindowLongA
GetWindowLongA
SetWindowsHookExA
DestroyWindow
GetFocus
GetKeyboardLayout
ShowCaret
LoadCursorA
LoadIconA
ShowWindow
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
PeekMessageA
RegisterHotKey
LoadAcceleratorsA
SetForegroundWindow
LoadStringA
MoveWindow
GetSystemMetrics
SetWindowTextW
GetDlgItem
IsDlgButtonChecked
CloseClipboard
HideCaret
ClipCursor
UpdateWindow
GetDC
ReleaseDC
DialogBoxParamA
MessageBoxW
GetCursorPos
ScreenToClient
CharNextA
CharNextW

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

wininet

InternetCloseHandle
InternetGetLastResponseInfoA
FtpSetCurrentDirectoryA
FtpCreateDirectoryA
FtpRemoveDirectoryA
FtpDeleteFileA
FtpRenameFileA
InternetOpenA
FtpOpenFileA
FtpPutFileA
FtpGetFileA
FtpGetCurrentDirectoryA
InternetFindNextFileA
FtpFindFirstFileA
InternetCrackUrlA
InternetConnectA
InternetWriteFile

winmm

timeGetTime
mmioAscend
mmioRead
mmioGetInfo
mmioCreateChunk
mmioSeek
mmioSetInfo
mmioAdvance
mmioWrite
mmioClose
mmioOpenA
timeSetEvent
timeKillEvent
mmioDescend

ws2_32

WSAWaitForMultipleEvents
gethostname
gethostbyaddr
ntohs
WSACloseEvent
WSASetEvent
inet_addr
WSACleanup
closesocket
bind
htonl
htons
socket
WSAStartup
WSAGetOverlappedResult
WSAResetEvent
ioctlsocket
WSARecvFrom
inet_ntoa
gethostbyname
sendto
recvfrom
WSAGetLastError
shutdown
WSAIoctl
WSARecv
setsockopt
WSACreateEvent
getsockname
connect
accept
getpeername
getsockopt
WSASend
listen
WSASocketA
WSASendTo

d3d9

Direct3DCreate9

iphlpapi

GetTcpTable
GetAdaptersInfo

ole32

CoCreateGuid
CoInitialize
CoUninitialize

urlmon

URLDownloadToFileA

Sections

.text
Size: 8.3MB - Virtual size: 8.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 181KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.poly
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ee10ee26ba23f98a762bd1af1256ab26

Headers

File Characteristics

Imports

advapi32

ddraw

dsound

gdi32

imm32

kernel32

shell32

user32

version

wininet

winmm

ws2_32

d3d9

iphlpapi

ole32

urlmon

Sections

.text Size: 8.3MB - Virtual size: 8.3MB

.data Size: 1.0MB - Virtual size: 1.0MB

Size: 181KB - Virtual size: 2.6MB

.rsrc Size: 39KB - Virtual size: 40KB

Size: 512B - Virtual size: 4KB

.poly Size: 512B - Virtual size: 4KB

.idata Size: 9KB - Virtual size: 12KB

.text
Size: 8.3MB - Virtual size: 8.3MB

.data
Size: 1.0MB - Virtual size: 1.0MB

.rsrc
Size: 39KB - Virtual size: 40KB

.poly
Size: 512B - Virtual size: 4KB

.idata
Size: 9KB - Virtual size: 12KB