60dc2d3ccff996a0283c3518988becdc_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

60dc2d3ccff996a0283c3518988becdc_JaffaCakes118
Size

484KB
MD5

60dc2d3ccff996a0283c3518988becdc
SHA1

01ce144d72b2339b5ece5a650e309848d584654a
SHA256

81e20ea6dc9b85a475bee0ec89779b5c402ba99f0d928659c04d4b4821a8edfa
SHA512

f7724e7e6e59b5f25f754bf19e1edb101f1352c00c9ad806e69df85e45e65f5778087be173c098ca60c7c6fa749394d51bdf79c09c74edb52a614cd49acc001c
SSDEEP

6144:UWHXILULrrPSVcDQH5ToAy5zijIm9c573VvAb2sbcwQ+V9wdx:UWHXILULrrPSKG5ToAAzAe53ekwQ7v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60dc2d3ccff996a0283c3518988becdc_JaffaCakes118

Files

60dc2d3ccff996a0283c3518988becdc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

441f776a4c74c0d11c0a5c8236cc0c9f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeSetEvent
mciSendStringA
waveOutGetDevCapsA
timeKillEvent
waveOutGetNumDevs

kernel32

RtlMoveMemory
GlobalUnlock
GlobalFree
MulDiv
ExitProcess
HeapReAlloc
IsBadReadPtr
GetCommandLineA
TlsFree
QueryPerformanceFrequency
QueryPerformanceCounter
FreeLibrary
GetCurrentProcess
GetProcAddress
LoadLibraryA
GetVersionExA
GetVersion
lstrlenA
CloseHandle
DeviceIoControl
CreateFileA
GetModuleFileNameA
GetTimeZoneInformation
GetSystemDefaultLangID
GetLocaleInfoA
SetFilePointer
ReadFile
GlobalLock
GlobalAlloc
HeapFree
HeapAlloc
GetProcessHeap
GetModuleHandleA
SetProcessWorkingSetSize
WriteProcessMemory
ReadProcessMemory
WriteFile
Process32Next
Process32First
CreateToolhelp32Snapshot
VerLanguageNameA
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
DuplicateHandle
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
lstrcpynA
GetFullPathNameA
GetFileTime
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
SetErrorMode
GlobalFlags
GetCurrentDirectoryA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetProcessVersion
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCPInfo
GetOEMCP
RtlUnwind
RaiseException
GetSystemTime
GetLocalTime
HeapSize
GetACP
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadCodePtr
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCurrentThreadId
LocalFree
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
WinExec
lstrcatA
WriteProfileStringA
SetLastError
GetProfileStringA
CreateDirectoryA
GetSystemDirectoryA
EnumResourceNamesA
CopyFileA
Sleep
GetWindowsDirectoryA
GetTempPathA
GlobalMemoryStatus
Module32First
Module32Next
OpenProcess
InterlockedExchange
TerminateProcess
GetDriveTypeA
GetVolumeInformationA
GlobalSize
GetFileSize
FindFirstFileA
GetFileAttributesA
SetFileAttributesA
RemoveDirectoryA
FindNextFileA
FindClose
DeleteFileA
MultiByteToWideChar
LoadLibraryExA
FindResourceA
LoadResource
LockResource
SizeofResource
lstrcpyA
GetLastError

user32

GetAsyncKeyState
GetSysColor
GetForegroundWindow
GetDC
SetWindowLongA
CallWindowProcA
MessageBeep
GetClassNameA
IsDialogMessageA
SetWindowPos
SetFocus
GetWindowPlacement
IsIconic
RegisterWindowMessageA
SetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
GetPropA
SetPropA
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
AdjustWindowRectEx
MapWindowPoints
LoadIconA
LoadCursorA
GetSysColorBrush
DestroyMenu
CharUpperA
UnhookWindowsHookEx
GrayStringA
DrawTextA
TabbedTextOutA
ClientToScreen
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetActiveWindow
GetKeyState
CallNextHookEx
SetWindowsHookExA
GetLastActivePopup
PostMessageA
WindowFromPoint
GetParent
GetWindow
PtInRect
IsWindowVisible
GetWindowLongA
EnumWindows
FindWindowExA
IsRectEmpty
GetCursorPos
GetDlgItem
SystemParametersInfoA
ChangeDisplaySettingsA
EnumDisplaySettingsA
SendMessageTimeoutA
FindWindowA
GetWindowThreadProcessId
SetCursorPos
mouse_event
keybd_event
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
ReleaseCapture
SetCapture
GetSystemMetrics
LoadImageA
VkKeyScanExA
GetKeyboardLayout
SendDlgItemMessageA
GetMenuItemCount
GetDlgCtrlID
LoadStringA
UnregisterClassA
EndDialog
SetActiveWindow
LoadBitmapA
GetKeyboardState
ReleaseDC
PeekMessageA
wsprintfA
MessageBoxA
DispatchMessageA
TranslateMessage
TranslateMDISysAccel
IsDialogMessage
TranslateAcceleratorA
GetMessageA
CreateWindowExA
IsWindowEnabled
EnableWindow
PostQuitMessage
DefWindowProcA
CreateDialogIndirectParamA
GetClientRect
GetWindowTextA
GetWindowTextLengthA
SetWindowTextA
DrawMenuBar
SetMenu
MoveWindow
GetWindowRect
GetDesktopWindow
UpdateWindow
ShowWindow
SetClassLongA
GetClassLongA
SendMessageA
DestroyWindow
IsWindow

gdi32

Escape
SetBkColor
GetObjectA
DeleteDC
GetDeviceCaps
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
RestoreDC
SaveDC
CreateBitmap
SelectPalette
RealizePalette
GetDIBits
CreateCompatibleBitmap
CreateDCA
RemoveFontResourceA
AddFontResourceA
EnumFontFamiliesExA
CreateCompatibleDC
SelectObject
BitBlt
GetStockObject
CreateRectRgn
CreateSolidBrush
FrameRgn
FillRgn
DeleteObject
SetTextColor
GetPixel

comctl32

ord17
InitCommonControlsEx

ole32

CoCreateInstance
CoCreateGuid
CreateStreamOnHGlobal

olepro32

ord251

iphlpapi

SendARP
GetAdaptersInfo

shlwapi

PathAppendA
PathFileExistsA
SHDeleteKeyA
SHDeleteValueA

mpr

WNetAddConnection2A
WNetOpenEnumA
WNetEnumResourceA
WNetCloseEnum
WNetCancelConnection2A

ws2_32

htons
connect
closesocket
WSACleanup
gethostbyaddr
socket
inet_addr
gethostbyname
gethostname
inet_ntoa
sendto
WSAStartup

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

comdlg32

GetFileTitleA
PrintDlgA

winspool.drv

ClosePrinter
SetPrinterA
OpenPrinterA
EnumPrintersA
GetPrinterA
DocumentPropertiesA

advapi32

RegSetKeySecurity
RegQueryInfoKeyA
RegEnumKeyA
AllocateAndInitializeSid
RegGetKeySecurity
RegSetValueExA
RegCreateKeyExA
GetUserNameA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
FreeSid
InitializeAcl
AddAce
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
GetTokenInformation
GetLengthSid
CopySid
RegOpenKeyA
RegQueryValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCloseKey
RegOpenKeyExA

shell32

SHEmptyRecycleBinA
SHGetSpecialFolderPathA
ShellExecuteA
SHChangeNotify

wininet

FindFirstUrlCacheEntryA
DeleteUrlCacheEntry
FindNextUrlCacheEntryA
InternetOpenUrlA
InternetCloseHandle
InternetGetConnectedState
InternetOpenA

Exports

Exports

A_st2326533966666315232323232323
_��ӳ��
sdadsad23sad23sad23w232w3e2332as3d2sa3dsa3d23��ȫ��ȫ232232ʮ��
��˹�ٰ�ʲ��3qw23asd231d32wq1d313a1sd231321��32sa13
��ǧ��ȫǧ��53as2d3��2sa3d2s3ad23sa2d3��İ��
��˹��ȫ��ȫ��ȫ��ϵ�
��ȫ��Ȥζ��ȫ��ȫ��

Sections

.text
Size: 256KB - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 156KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

441f776a4c74c0d11c0a5c8236cc0c9f

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

comctl32

ole32

olepro32

iphlpapi

shlwapi

mpr

ws2_32

version

comdlg32

winspool.drv

advapi32

shell32

wininet

Exports

Exports

Sections

.text Size: 256KB - Virtual size: 254KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 156KB - Virtual size: 203KB

.reloc Size: 24KB - Virtual size: 21KB

.text
Size: 256KB - Virtual size: 254KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 156KB - Virtual size: 203KB

.reloc
Size: 24KB - Virtual size: 21KB