83873eb279064fb54069585e035041b9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

83873eb279064fb54069585e035041b9_JaffaCakes118
Size

328KB
MD5

83873eb279064fb54069585e035041b9
SHA1

d4aefaaf38368e4c810243829fd8a5db118843ef
SHA256

eaa8e36cb7a3f864ee5e962bd955cb71191fdb7e95fdb64139cbf86f87454326
SHA512

706a96776f744b38124c35f82b988183e0d47d1ea72d355f1719a06c708887a005f58cb4bb2676eea432e5ccacf5d8ea6f2dcda0c1df7d0b8d4339523bcd8603
SSDEEP

6144:rb4ThgEbxX8dGCwRXCfvdFqm/kY62RH01Vqmp0h0UjT9JtK/:rchgEbSdGCwlIvXqUkY62RHWVqmihpt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83873eb279064fb54069585e035041b9_JaffaCakes118

Files

83873eb279064fb54069585e035041b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

102d055a144474a2bd5aae021dbbd237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveInPrepareHeader
waveInOpen
waveInGetNumDevs
waveInGetDevCapsW
waveInGetDevCapsA
waveInReset
waveInStart
waveInStop
waveInUnprepareHeader
waveOutClose
waveOutGetDevCapsA
waveOutGetDevCapsW
waveOutGetNumDevs
waveOutGetPosition
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutUnprepareHeader
waveOutWrite
waveInClose
waveInAddBuffer
mmioWrite
mmioSeek
mmioRead
mmioOpenW
mmioOpenA
mmioDescend
mmioCreateChunk
mmioClose
mmioAscend
mixerSetControlDetails
mixerOpen
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetID
mixerGetControlDetailsA
mixerClose

shfolder

SHGetFolderPathW

kernel32

TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFileEx
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcatA
lstrcmpiA
lstrcpyA
MoveFileA
lstrlenW
lstrlenA
CloseHandle
CompareStringA
CompareStringW
CreateDirectoryA
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateIoCompletionPort
CreateMutexA
CreateMutexW
CreateProcessA
CreateSemaphoreA
CreateThread
DeleteCriticalSection
DeleteFileA
DeleteFileW
DuplicateHandle
EnterCriticalSection
ExitProcess
ExitThread
FindResourceA
FindResourceExA
FindResourceExW
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsA
GetEnvironmentStringsW
GetFileAttributesA
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetQueuedCompletionStatus
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetThreadPriority
GetTickCount
GetUserDefaultLangID
GetVersionExA
GlobalLock
GlobalMemoryStatus
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
IsDBCSLeadByte
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
LockFileEx
LockResource
MapViewOfFile
TlsAlloc
MoveFileW
MultiByteToWideChar
OpenEventA
OpenProcess
PostQueuedCompletionStatus
QueryPerformanceCounter
ReadFile
ReleaseMutex
ReleaseSemaphore
ResetEvent
RtlUnwind
SetEndOfFile
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
TerminateProcess
lstrcpynA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

user32

RegisterClassA
wsprintfA
UnregisterClassA
SetWindowTextA
SetWindowLongA
SetTimer
SetFocus
CharNextA
CreateWindowExA
DefWindowProcA
DestroyWindow
DialogBoxParamA
DispatchMessageA
EnableWindow
EndDialog
FindWindowA
GetDlgItem
GetFocus
GetWindowLongA
IsWindow
KillTimer
LoadCursorA
LoadStringA
MsgWaitForMultipleObjects
PeekMessageA
PostMessageA
SetCursor
SendMessageA
SendMessageTimeoutA

advapi32

RegSetValueExW
GetUserNameW
RegCloseKey
RegCreateKeyExA
RegCreateKeyExW
RegDeleteKeyA
RegDeleteKeyW
RegDeleteValueA
RegDeleteValueW
RegEnumKeyExA
RegEnumKeyExW
RegEnumValueA
RegEnumValueW
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyA
RegQueryValueExA
RegQueryValueExW
GetUserNameA
RegSetValueExA

ole32

CLSIDFromString
StringFromIID
CoCreateGuid
StringFromGUID2
StringFromCLSID
IIDFromString
GetHGlobalFromStream
CreateStreamOnHGlobal
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoInitializeEx
CoDisconnectObject
CoCreateInstance
CLSIDFromProgID

oleaut32

LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayRedim
SafeArrayUnaccessData
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
VarDecRound
VarUI4FromStr
VariantChangeType
VariantClear
VariantCopy
VariantInit

Exports

Exports

Breakpad_SteamMiniDumpInit
Breakpad_SteamSetAppID
Breakpad_SteamSetSteamID
Breakpad_SteamWriteMiniDumpSetComment
Breakpad_SteamWriteMiniDumpUsingExceptionInfoWithBuildId
CreateInterface
Steam_BConnected
Steam_BGetCallback
Steam_BLoggedOn
Steam_BReleaseSteamPipe
Steam_ConnectToGlobalUser
Steam_CreateGlobalUser
Steam_CreateLocalUser
Steam_CreateSteamPipe
Steam_FreeLastCallback
Steam_GSBLoggedOn
Steam_GSBSecure
Steam_GSGetSteam2GetEncryptionKeyToSendToNewClient
Steam_GSGetSteamID
Steam_GSLogOff
Steam_GSLogOn
Steam_GSRemoveUserConnect
Steam_GSSendSteam2UserConnect
Steam_GSSendSteam3UserConnect
Steam_GSSendUserDisconnect
Steam_GSSendUserStatusResponse
Steam_GSSetServerType
Steam_GSSetSpawnCount
Steam_GSUpdateStatus
Steam_GetAPICallResult
Steam_GetGSHandle
Steam_InitiateGameConnection
Steam_LogOff
Steam_LogOn
Steam_ReleaseUser
Steam_SetLocalIPBinding
Steam_TerminateGameConnection

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

102d055a144474a2bd5aae021dbbd237

Headers

File Characteristics

Imports

winmm

shfolder

kernel32

version

user32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 116KB - Virtual size: 116KB

.data Size: 80KB - Virtual size: 1.7MB

.idata Size: 8KB - Virtual size: 8KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 116KB - Virtual size: 116KB

.data
Size: 80KB - Virtual size: 1.7MB

.idata
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 20KB - Virtual size: 20KB