63197bc8594e4d187df4f92b7f94f47a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

63197bc8594e4d187df4f92b7f94f47a_JaffaCakes118
Size

640KB
MD5

63197bc8594e4d187df4f92b7f94f47a
SHA1

9b2d2b59237ceb7f1a211f6f52a04ef37377b463
SHA256

5dce9da927385d8775c8236037218fe1eacbe50cb3328575d212a331898391ac
SHA512

07b710b0beb2569c7474355c9025374af484cec6cd9f6a3a051874af9d7d6760fd79a739b4fec3b6a87eb827704a3d824b13c3320235c11f19bf3132b626928b
SSDEEP

12288:Qd7Oifq8LwKIJ3rEW2iTynzLmJHqm2K8BcLrmd8Xq6XnI:yFLqL2K8Bcfkq9I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63197bc8594e4d187df4f92b7f94f47a_JaffaCakes118

Files

63197bc8594e4d187df4f92b7f94f47a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a6769784b86dfab2a4edfa9469e243c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\data\work\SpywareProVer2\Source\SSEngine\Release\SSEngine.pdb

Imports

wininet

InternetConnectA
InternetGetConnectedState
InternetQueryDataAvailable
InternetReadFile
InternetCloseHandle
InternetOpenA
FtpOpenFileA

kernel32

SystemTimeToFileTime
InterlockedIncrement
GetVersionExA
lstrcmpW
GlobalFindAtomA
FreeResource
GlobalFlags
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetCurrentDirectoryA
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileAttributesA
GetFileTime
GetCPInfo
GetOEMCP
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapAlloc
HeapFree
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetProcessHeap
RaiseException
RtlUnwind
GetAtomNameA
SetStdHandle
GetFileType
HeapSize
GetACP
IsValidCodePage
FatalAppExitA
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
Sleep
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
GetTimeZoneInformation
GetDriveTypeA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetCurrentDirectoryA
SetEnvironmentVariableA
GlobalGetAtomNameA
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedDecrement
GetModuleFileNameW
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetThreadLocale
MoveFileA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GetModuleHandleA
GetCurrentThreadId
GetCurrentProcessId
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
SetLastError
LoadLibraryA
GetModuleFileNameA
RemoveDirectoryA
FreeLibrary
DeleteFileA
GetProcAddress
GetWindowsDirectoryA
GetSystemDirectoryA
ExitThread
ResetEvent
EnterCriticalSection
LeaveCriticalSection
CreateThread
WaitForSingleObject
GetThreadPriority
SetThreadPriority
CreateEventA
ResumeThread
SuspendThread
TerminateThread
WaitForMultipleObjects
InitializeCriticalSection
SetEvent
GetTempFileNameA
CompareStringW
GetEnvironmentVariableA
WideCharToMultiByte
lstrcmpiW
CloseHandle
lstrcmpiA
GetStringTypeExA
InterlockedExchange
CreateFileA
GetStringTypeExW
SizeofResource
lstrlenW
FindResourceA
LockResource
GetLastError
LoadResource
MultiByteToWideChar
WriteFile
lstrlenA
GetEnvironmentVariableW
GetTempPathA
MoveFileExA
CompareStringA
GetVersion
ExitProcess

user32

BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
DeleteMenu
GetDesktopWindow
ClientToScreen
ScrollWindowEx
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
SetFocus
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
EndPaint
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
CopyRect
GetScrollInfo
SetScrollInfo
PtInRect
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowRect
GetWindow
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetWindowTextLengthA
GetWindowTextA
UnregisterClassA
UnhookWindowsHookEx
GetSystemMetrics
ShowOwnedPopups
SetCursor
PostMessageA
PostQuitMessage
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
DestroyIcon
InflateRect
GetMenuItemInfoA
DestroyMenu
GetDialogBaseUnits
CreateDialogIndirectParamA
GetNextDlgTabItem
UpdateWindow
EndDialog
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
CharUpperA
CharLowerA
CharUpperW
CharLowerW
GetWindowPlacement

gdi32

PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
DeleteDC
CreateDIBPatternBrushPt
CreatePatternBrush
CreateCompatibleDC
GetStockObject
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
CreateSolidBrush
ArcTo
CreateFontIndirectA
GetTextExtentPoint32A
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
GetTextMetricsA
BitBlt
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
StartDocA
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CreateBitmap
CreateDCA
CopyMetaFileA
CreateHatchBrush
GetDeviceCaps
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
DeleteObject
GetObjectA
GetPixel

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegQueryValueA
RegSetValueA
RegQueryValueExA
RegEnumKeyA
CryptDestroyKey
CryptEncrypt
CryptReleaseContext
CryptCreateHash
CryptDestroyHash
CryptHashData
CryptDeriveKey
CryptAcquireContextA
CryptDecrypt
RegQueryInfoKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
RegOpenKeyA
RegEnumValueA
RegEnumKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA

shell32

SHGetFileInfoA
ExtractIconA
SHGetFolderPathA

shlwapi

PathFindExtensionA
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA

ole32

WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
WriteClassStg
CoCreateInstance
CoInitialize
CoTreatAsClass
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoUninitialize
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
StringFromGUID2
CLSIDFromString
CoDisconnectObject
CoTaskMemFree

oleaut32

SysFreeString
SystemTimeToVariantTime
SysAllocStringLen
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
VariantChangeType
SafeArrayRedim
VariantClear
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysStringByteLen
SysAllocStringByteLen
VarDateFromStr
VariantTimeToSystemTime
SysStringLen
SysReAllocStringLen
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromDate
VariantInit

Exports

Exports

CreateSSEngineInterface
ReleaseSSEngineInterface

Sections

.text
Size: 500KB - Virtual size: 498KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a6769784b86dfab2a4edfa9469e243c9

Headers

File Characteristics

PDB Paths

Imports

wininet

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

Exports

Exports

Sections

.text Size: 500KB - Virtual size: 498KB

.rdata Size: 92KB - Virtual size: 91KB

.data Size: 12KB - Virtual size: 25KB

.rsrc Size: 4KB - Virtual size: 176B

.reloc Size: 28KB - Virtual size: 26KB

.text
Size: 500KB - Virtual size: 498KB

.rdata
Size: 92KB - Virtual size: 91KB

.data
Size: 12KB - Virtual size: 25KB

.rsrc
Size: 4KB - Virtual size: 176B

.reloc
Size: 28KB - Virtual size: 26KB