6073ad3b4a3ff509f71f5db312860cf5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6073ad3b4a3ff509f71f5db312860cf5_JaffaCakes118
Size

187KB
MD5

6073ad3b4a3ff509f71f5db312860cf5
SHA1

2f96d85f8c313b7ee8e986f2ffe18f4b3fd713ff
SHA256

483e1881d812afe2aff8c11960a105378fc238a638c497b2fc244c0223e662a3
SHA512

59c04e4df1c13b1470f34a14dc2a51a1e8c83a1a16f2decd77ad6a29b72e5d8bf38dbee047a2a8b3aba17c98d1f0e92521945e191f970196352d9568dbec569a
SSDEEP

3072:/QZzCtUu7nCCCs+fYKghjVizygYYeSSMa0cZrtW19OoJtJD/kuU2LwmPZZcBZfXx:/Q4PYYDiTYYiHM9OoJrD/vwmhZ4fTtz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/InsMsgAdmin/InsMsgAdmin.exe

Files

6073ad3b4a3ff509f71f5db312860cf5_JaffaCakes118
.rar
InsMsgAdmin/InsMsgAdmin.exe
.exe windows:4 windows x86 arch:x86

d3ff79c202f4801e562b5bdaadca795e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipLoadImageFromFile
GdipFree
GdipAlloc
GdipCloneImage
GdipGetImageFlags
GdipDisposeImage
GdipCreateImageAttributes
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipGetImageHeight
GdipDeleteGraphics
GdipCreateFromHDC
GdipDrawImageRectRectI
GdiplusStartup
GdiplusShutdown
GdipGetImageWidth

comctl32

_TrackMouseEvent
ImageList_Draw
InitCommonControlsEx
CreateStatusWindowW
ImageList_GetIconSize
ImageList_Destroy

kernel32

SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
SetFilePointer
IsValidCodePage
GetOEMCP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteConsoleA
HeapCreate
HeapDestroy
ExitProcess
HeapSize
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
RtlUnwind
GetStartupInfoW
CreateThread
ExitThread
GetSystemTimeAsFileTime
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersionExA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetProcAddress
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
InterlockedExchange
GetConsoleOutputCP
WriteConsoleW
GetTimeZoneInformation
Sleep
WideCharToMultiByte
WaitForSingleObject
GetVersionExW
GetModuleFileNameW
DeleteCriticalSection
GetLastError
SizeofResource
MultiByteToWideChar
LoadResource
InitializeCriticalSection
InterlockedIncrement
FreeLibrary
GetSystemDefaultLangID
InterlockedDecrement
FindResourceW
GetModuleHandleW
LoadLibraryExW
lstrcmpiW
CompareStringW
lstrlenW
LeaveCriticalSection
SetLastError
SetEndOfFile
GetCurrentProcess
EnterCriticalSection
RaiseException
GetCurrentThreadId
FlushInstructionCache
CreateFileA
CloseHandle
FlushFileBuffers
CompareStringA
SetEnvironmentVariableA
ReadFile
CreateFileW
WriteFile

user32

GetMenuItemCount
AppendMenuW
TranslateAcceleratorW
MessageBeep
SetMenu
CreatePopupMenu
GetSystemMetrics
LoadStringA
TrackPopupMenuEx
RemoveMenu
TranslateMessage
ChildWindowFromPoint
GetMessageW
LoadAcceleratorsW
DispatchMessageW
LoadStringW
PeekMessageW
PostQuitMessage
GetMenuItemInfoW
UnregisterClassA
GetParent
GetWindow
MessageBoxW
SetWindowLongW
SystemParametersInfoW
MapWindowPoints
SetWindowRgn
GetWindowRgnBox
LoadImageW
GetDlgItemTextW
SetWindowPos
GetWindowRect
GetClientRect
GetDlgItem
GetWindowLongW
SendMessageW
SetWindowTextW
EndDialog
SendDlgItemMessageW
IsDlgButtonChecked
CheckDlgButton
SetDlgItemTextW
SetFocus
EnableWindow
CheckRadioButton
CreateWindowExW
PostThreadMessageW
LoadCursorW
DefWindowProcW
PostMessageW
CallWindowProcW
DestroyWindow
MoveWindow
GetClassInfoExW
DialogBoxParamW
ScreenToClient
RegisterClassExW
DrawTextW
InflateRect
GetSysColor
InvalidateRect
GetFocus
SetTimer
KillTimer
IsWindowVisible
FrameRect
GetActiveWindow
GetCapture
DrawFocusRect
SetCapture
IsWindowEnabled
SetRect
GetWindowTextW
GetClassNameW
SetCursor
ReleaseDC
SetRectEmpty
UpdateWindow
ShowWindow
GetDlgCtrlID
CopyRect
PtInRect
GetWindowTextLengthW
IsWindow
OffsetRect
EqualRect
CharNextW
FillRect
ReleaseCapture
GetDC
EndPaint
TrackPopupMenu
LoadMenuW
DestroyMenu
ClientToScreen
BeginPaint
GetMonitorInfoW
EnableMenuItem
GetSubMenu
GetCursorPos
MonitorFromPoint

gdi32

GetObjectW
CreateBrushIndirect
CreateFontIndirectW
LineTo
MoveToEx
GetTextExtentPoint32W
CreateRoundRectRgn
DeleteDC
CreateSolidBrush
RoundRect
ExtTextOutW
SetBkMode
SetBkColor
SetViewportOrgEx
BitBlt
RestoreDC
SaveDC
SetTextColor
SelectObject
CreatePen
CreateCompatibleBitmap
GetStockObject
CreateCompatibleDC
DeleteObject

advapi32

RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW

shell32

ShellExecuteW

ole32

CoInitializeEx
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc

oleaut32

VarUI4FromStr

msimg32

GradientFill

ws2_32

connect
setsockopt
recv
send
ioctlsocket
closesocket
WSAGetLastError
socket
inet_addr
getaddrinfo
freeaddrinfo
select
WSAStartup
__WSAFDIsSet
WSACleanup
ntohl
htonl
htons
ntohs

Sections

.text
Size: 376KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
InsMsgAdmin/InsMsgAdmin.ico
InsMsgAdmin/insmsg_admin.png
.png
InsMsgAdmin/license_cn.txt
InsMsgAdmin/license_en.txt
InsMsgAdmin/license_hk.txt

Sharing

General

Malware Config

Signatures

Files

d3ff79c202f4801e562b5bdaadca795e

Headers

File Characteristics

Imports

gdiplus

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

msimg32

ws2_32

Sections

.text Size: 376KB - Virtual size: 376KB

.rdata Size: 63KB - Virtual size: 62KB

.data Size: 21KB - Virtual size: 44KB

.rsrc Size: 10KB - Virtual size: 10KB

.text
Size: 376KB - Virtual size: 376KB

.rdata
Size: 63KB - Virtual size: 62KB

.data
Size: 21KB - Virtual size: 44KB

.rsrc
Size: 10KB - Virtual size: 10KB