620fd6d8e0257d7ab4bc50543e60fb25_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

620fd6d8e0257d7ab4bc50543e60fb25_JaffaCakes118
Size

7.2MB
MD5

620fd6d8e0257d7ab4bc50543e60fb25
SHA1

83d30c22a46d87020a3ad5e72cb0bf389e755403
SHA256

a57e890942f9cfe3d314ddbcb3c7f88d95dd44226198d90be3ca796fab61b216
SHA512

a975b48d32d3551a425326e25ec77af43e0f7decbbea4c6425fd0b262ced3adcf4e89d29c0a386a3a3dfda7150a8a0d3d755bc9eb3df2ef7313fdd2bb5998174
SSDEEP

98304:dL7sQqjQ80LN1cfqkG5PsKp9VZZCLlxVcWIq/AhggmfwnvQHFKQ:h7sljUx1cSkAHZZCgq/AhDCHz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
620fd6d8e0257d7ab4bc50543e60fb25_JaffaCakes118

Files

620fd6d8e0257d7ab4bc50543e60fb25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e14a5f9eb56d6e2ed18ec82d0f6291aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Create
ImageList_Add
ImageList_GetImageInfo
ImageList_Replace
InitCommonControlsEx
CreateToolbarEx
ord6
ord17
ImageList_LoadImageA
ImageList_Destroy

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

d3d9

Direct3DCreate9

dsound

ord6
ord7

ssce5432

SSCE_CheckCtrlDlg
SSCE_CloseSession
SSCE_SetKey
SSCE_OpenSession
SSCE_SetMainLexPath
SSCE_SetMainLexFiles
SSCE_SetUserLexFiles
SSCE_SetUserLexPath

winmm

mmioGetInfo
mmioCreateChunk
mmioRead
timeGetTime
PlaySoundA
mmioOpenA
mmioClose
mmioWrite
mmioAdvance
mmioSetInfo
mmioSeek
mmioAscend
mmioDescend

kernel32

InterlockedDecrement
GlobalMemoryStatus
VirtualAlloc
VirtualFree
CreateFileA
CloseHandle
WriteFile
ReadFile
GetFileSize
SetFilePointer
GetCurrentProcessId
DeleteFileA
GetTickCount
GetCurrentThreadId
CopyFileExA
InterlockedIncrement
GetCommandLineA
LockResource
SizeofResource
LoadResource
FindResourceA
CreateEventA
FlushFileBuffers
UnmapViewOfFile
FlushViewOfFile
LocalFree
MapViewOfFile
CreateFileMappingA
FormatMessageA
DeviceIoControl
GetLastError
GetPrivateProfileIntA
CreateDirectoryA
Sleep
GetVersionExA
GetProcAddress
GetModuleHandleA
lstrcpyA
WritePrivateProfileStringA
FreeLibrary
LoadLibraryA
SetCurrentDirectoryA
GetDriveTypeA
GetPrivateProfileStringA
IsDebuggerPresent
HeapAlloc
HeapFree
GetProcessHeap
LeaveCriticalSection
GetFileSizeEx
SetEndOfFile
MultiByteToWideChar
GetCurrentDirectoryA
GetFileAttributesA
FindClose
FindNextFileA
CompareFileTime
FindFirstFileA
CreateSemaphoreA
ReleaseSemaphore
WaitForSingleObject
FileTimeToSystemTime
CreateThread
SuspendThread
ResumeThread
InterlockedCompareExchange
DebugBreak
OutputDebugStringA
TlsSetValue
TlsGetValue
TlsAlloc
TlsFree
QueryPerformanceCounter
QueryPerformanceFrequency
lstrcatA
FileTimeToLocalFileTime
CopyFileA
QueryDosDeviceA
lstrlenA
GetSystemTime
GetSystemTimeAsFileTime
ExitProcess
MoveFileA
GetFileAttributesExA
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoA
GetCPInfo
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
GetStdHandle
GetModuleFileNameA
SetLastError
SetHandleCount
GetFileType
GetACP
GetOEMCP
GetFullPathNameA
GetTimeZoneInformation
TryEnterCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
SetStdHandle
WriteConsoleA
HeapSize
HeapReAlloc
GetLocalTime
RaiseException
GetSystemInfo
InterlockedExchange
WideCharToMultiByte
GetCurrentProcess
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetDiskFreeSpaceExA

user32

GetDlgItemInt
SetForegroundWindow
TrackPopupMenu
GetWindowPlacement
SystemParametersInfoA
IsZoomed
IsWindow
DefFrameProcA
FindWindowA
GetMenuState
GetMessageA
GetActiveWindow
GetWindow
GetClassInfoA
RegisterClassA
ValidateRect
FillRect
GetDlgCtrlID
ChildWindowFromPointEx
SetFocus
GetFocus
GetQueueStatus
EnableMenuItem
GetCapture
CheckRadioButton
GetMenuItemCount
GetSysColor
GetSysColorBrush
MapDialogRect
RedrawWindow
ShowCursor
EndPaint
BeginPaint
InsertMenuItemA
RemoveMenu
GetMenuItemInfoA
GetScrollInfo
AnimateWindow
GetCursorInfo
LoadStringA
DialogBoxParamA
MsgWaitForMultipleObjects
PeekMessageA
IsDialogMessageA
TranslateMessage
IsDlgButtonChecked
PostQuitMessage
GetCursor
wsprintfA
EndDialog
GetWindowTextLengthA
SetWindowsHookExA
CreateDialogParamA
ClientToScreen
CreateWindowExA
InvalidateRect
CallNextHookEx
GetClassNameA
UnhookWindowsHookEx
LoadCursorA
SetCursor
SetCapture
GetCursorPos
WindowFromPoint
ChildWindowFromPoint
ReleaseCapture
EnumThreadWindows
IsWindowEnabled
EnableWindow
EnumWindows
GetParent
IsChild
IsWindowVisible
BringWindowToTop
CallWindowProcA
DefWindowProcA
GetWindowLongA
GetWindowTextA
SetDlgItemInt
CheckDlgButton
GetAsyncKeyState
DestroyMenu
GetMenu
CheckMenuItem
SetRect
BeginDeferWindowPos
DeferWindowPos
SetWindowTextA
SetDlgItemTextA
GetDlgItemTextA
GetDC
ReleaseDC
DestroyWindow
SetWindowLongA
MessageBoxA
KillTimer
ShowWindow
UpdateWindow
SetActiveWindow
MoveWindow
SetTimer
GetSystemMetrics
GetClientRect
GetDlgItem
GetWindowRect
ScreenToClient
SetWindowPos
SendMessageA
EndDeferWindowPos
LoadIconA
SetClassLongA
LoadMenuA
GetSubMenu
InsertMenuA
DeleteMenu
DispatchMessageA
SendDlgItemMessageA
EnumChildWindows

gdi32

GetStockObject
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
Rectangle
SetStretchBltMode
LineTo
MoveToEx
Polyline
CreatePen
GetObjectA
SetTextColor
BitBlt
SetBkColor
CreateFontIndirectA
SelectObject
CreateSolidBrush
DeleteObject
StretchDIBits
GetTextExtentPoint32A

comdlg32

ChooseColorA
GetSaveFileNameA
GetOpenFileNameA

advapi32

RegSetValueExA
RegCreateKeyExA
LookupAccountSidA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
LookupAccountNameA
GetUserNameA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

ShellExecuteA
SHGetFolderPathA
SHGetPathFromIDListA
SHBrowseForFolderA
ord28
SHGetMalloc
SHGetDesktopFolder
DragQueryFileA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

d3dx9_27

D3DXMatrixMultiply
D3DXVec3Normalize
D3DXQuaternionMultiply
D3DXMatrixTranslation
D3DXMatrixOrthoLH
D3DXCreateTextureFromFileExA
D3DXSaveTextureToFileA
D3DXLoadSurfaceFromSurface
D3DXCreateTexture
D3DXMatrixRotationQuaternion
D3DXVec3TransformCoord
D3DXCreateTextureFromFileA
D3DXSaveSurfaceToFileA
D3DXMatrixPerspectiveFovLH
D3DXCreateVolumeTextureFromFileInMemory
D3DXCreateCubeTextureFromFileInMemory
D3DXCreateTextureFromFileInMemory
D3DXGetImageInfoFromFileInMemory
D3DXGetShaderConstantTable
D3DXCompileShaderFromFileA
D3DXCompileShader
D3DXGetVertexShaderProfile
D3DXGetPixelShaderProfile
D3DXAssembleShaderFromFileA
D3DXAssembleShader
D3DXMatrixTranspose
D3DXPlaneNormalize
D3DXPlaneTransform
D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXVec3TransformNormal
D3DXVec4Transform

wsock32

bind
listen
accept
__WSAFDIsSet
select
WSAAsyncSelect
htons
ioctlsocket
gethostbyname
connect
send
recv
WSAGetLastError
socket
closesocket
WSAStartup
setsockopt

Sections

.text
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 792KB - Virtual size: 790KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 128KB - Virtual size: 692KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 441B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e14a5f9eb56d6e2ed18ec82d0f6291aa

Headers

File Characteristics

Imports

comctl32

version

d3d9

dsound

ssce5432

winmm

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

d3dx9_27

wsock32

Sections

.text Size: 5.1MB - Virtual size: 5.1MB

.rdata Size: 792KB - Virtual size: 790KB

.data Size: 128KB - Virtual size: 692KB

.tls Size: 4KB - Virtual size: 441B

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 5.1MB - Virtual size: 5.1MB

.rdata
Size: 792KB - Virtual size: 790KB

.data
Size: 128KB - Virtual size: 692KB

.tls
Size: 4KB - Virtual size: 441B

.rsrc
Size: 1.2MB - Virtual size: 1.2MB