880cc872985343875ab297521abe05ee_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

880cc872985343875ab297521abe05ee_JaffaCakes118
Size

3.2MB
MD5

880cc872985343875ab297521abe05ee
SHA1

6cbabb11631347a851158cfcb69539d7b165186c
SHA256

ecd4365190d915f72d3ba21e7422d1ead2c6c249fad2b6b3e2295211da40105b
SHA512

4b63ebbd40adc3c12198cc72a9040d42c0054769e97573d6d339c5aa3cb95d4979cc4ac8af19c9094f72554f658e03d8cdc04343ca2df02e739278722698af20
SSDEEP

98304:lOpcks2hhCBKivpPiHZl28tgLgQLqFHnq3KdubSxnPgakHNWdlMy:ahh/iBP7bSxngEL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
880cc872985343875ab297521abe05ee_JaffaCakes118

Files

880cc872985343875ab297521abe05ee_JaffaCakes118
.dll windows:5 windows x86 arch:x86

c701f90a67448a3defcbc4b36997ff90

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Ryokko\Documents\Visual Studio 2008\Projects\riuTrainer\Release\RiPE.pdb

Imports

kernel32

FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
SetHandleCount
GetOEMCP
HeapDestroy
HeapCreate
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetFullPathNameW
GetEnvironmentStringsW
MoveFileW
DeleteFileW
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetDateFormatW
GetTimeFormatW
HeapReAlloc
HeapAlloc
RtlUnwind
GetCommandLineA
GetTimeZoneInformation
GetSystemTimeAsFileTime
HeapFree
DecodePointer
EncodePointer
InterlockedExchange
QueryPerformanceCounter
GetTickCount
GetStringTypeW
GetCurrentDirectoryW
GetDriveTypeW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetLocaleInfoA
EnumSystemLocalesA
LocalAlloc
CreateFileA
SetFilePointer
RaiseException
FindNextFileW
SetEvent
WaitForMultipleObjects
WriteFile
ReadFile
ExpandEnvironmentStringsW
OutputDebugStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
GetACP
TerminateProcess
GetComputerNameW
IsValidCodePage
GetCPInfo
GetEnvironmentVariableW
GetModuleFileNameW
GetModuleHandleW
CopyFileW
SetCurrentDirectoryW
GetFileType
GetFileTime
GetTempFileNameW
FindFirstFileW
FindClose
GetTempPathW
CreateFileW
GetFileAttributesW
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageW
LocalFree
TlsAlloc
TlsSetValue
TlsGetValue
GetCurrentProcess
TlsFree
InterlockedDecrement
InterlockedIncrement
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
GlobalSize
GetProcessHeap
HeapSize
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetCommandLineW
SetErrorMode
GetStdHandle
ReadConsoleOutputCharacterA
FreeConsole
SetEndOfFile
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
FillConsoleOutputCharacterW
WriteConsoleW
WriteConsoleA
GetVersionExW
SetLastError
GetLastError
MulDiv
GetVolumeInformationW
GetSystemInfo
Sleep
CreateThread
DisableThreadLibraryCalls
ExitProcess
VirtualProtect
GetCurrentProcessId
CloseHandle
GetCurrentThreadId
GetProcAddress
LoadLibraryW
FreeLibrary

user32

IsClipboardFormatAvailable
ShowCursor
FindWindowExW
ChildWindowFromPoint
EndPaint
BeginPaint
GetWindowDC
PostThreadMessageW
ValidateRect
GetMessageW
TranslateAcceleratorW
CreateAcceleratorTableW
DestroyAcceleratorTable
ValidateRgn
GetMenuStringW
DefMDIChildProcW
TranslateMDISysAccel
DefFrameProcW
DestroyCursor
GetDoubleClickTime
DrawIconEx
GetWindowTextW
GetDialogBaseUnits
UnionRect
ModifyMenuW
InsertMenuItemW
CreatePopupMenu
InsertMenuW
CreateMenu
AppendMenuW
ChangeDisplaySettingsW
GetSubMenu
DestroyMenu
SetMenu
DrawEdge
DrawStateW
SetMenuItemInfoW
SetRect
DrawFrameControl
GetSysColorBrush
CheckMenuRadioItem
CheckMenuItem
GetMenuState
keybd_event
GetWindowTextLengthW
HideCaret
DdeGetData
MapWindowPoints
LoadCursorW
PostMessageW
MessageBoxW
MsgWaitForMultipleObjects
SetForegroundWindow
DrawFocusRect
OffsetRect
CopyRect
DrawTextW
DestroyIcon
LoadImageW
LoadBitmapW
LoadIconW
GetDlgItem
CreateDialogParamW
InflateRect
GetSysColor
IsWindow
GetWindow
GetClassNameW
EnumDisplaySettingsW
MessageBeep
KillTimer
SetTimer
DdeFreeStringHandle
DdeUninitialize
DdeQueryStringW
RemoveMenu
DdeFreeDataHandle
GetMenuItemCount
GetMenuItemInfoW
GetUpdateRgn
BeginDeferWindowPos
EndDeferWindowPos
FillRect
InvalidateRect
IsDialogMessageW
TrackPopupMenu
GetCapture
UnregisterHotKey
RegisterHotKey
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
GetActiveWindow
GetMessageTime
IsWindowEnabled
IsWindowVisible
CallWindowProcW
DeferWindowPos
SystemParametersInfoW
GetDC
ReleaseDC
GetIconInfo
CreateIconIndirect
GetWindowRect
GetSystemMetrics
SendMessageW
CreateWindowExW
BringWindowToTop
ShowWindow
IsZoomed
DdeCreateDataHandle
DdeGetLastError
DdeInitializeW
DdeDisconnect
DdeClientTransaction
DdeCreateStringHandleW
DdeNameService
DdeConnect
DdePostAdvise
MessageBoxA
GetMessagePos
ClientToScreen
ScreenToClient
UpdateWindow
RedrawWindow
SetParent
WindowFromPoint
GetParent
ScrollWindow
EnableScrollBar
SetScrollInfo
GetScrollInfo
SetCursorPos
GetCursorPos
PtInRect
SetCursor
IsIconic
GetWindowPlacement
DrawMenuBar
EnableMenuItem
GetSystemMenu
AdjustWindowRectEx
GetMenu
GetClientRect
GetWindowLongW
SetWindowRgn
UnregisterClassW
DestroyWindow
RegisterClassW
DefWindowProcW
SetWindowPos
GetDesktopWindow
SetWindowLongW
FlashWindow
SetWindowTextW
MoveWindow
CreateDialogIndirectParamW
PostQuitMessage
TranslateMessage
DispatchMessageW
PeekMessageW
VkKeyScanW
GetAsyncKeyState
GetKeyState
GetFocus
SetFocus
EnableWindow
SetCapture
ReleaseCapture

gdi32

Arc
Pie
Polygon
SetPolyFillMode
PolyPolygon
Rectangle
RoundRect
Ellipse
GetStockObject
SetBrushOrgEx
GetCharABCWidthsW
ExtTextOutW
GetTextExtentExPointW
MaskBlt
StretchDIBits
StretchBlt
CreatePatternBrush
CreateHatchBrush
ExtCreatePen
GetRgnBox
EqualRgn
PtInRegion
RectInRegion
CombineRgn
CreateDIBSection
GetDIBits
CreateDIBitmap
SelectClipRgn
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
CreateRectRgnIndirect
SetTextAlign
SaveDC
RestoreDC
CreateICW
EnumFontFamiliesExW
GetSystemPaletteEntries
SetAbortProc
EndDoc
StartPage
EndPage
StartDocW
CreateDCW
DeleteEnhMetaFile
GetEnhMetaFileHeader
PlayEnhMetaFile
CreateEnhMetaFileW
GetEnhMetaFileW
CloseEnhMetaFile
PolyBezier
SetPixel
GetPixel
ExtFloodFill
GetBkColor
ExtSelectClipRgn
SetMapMode
SetStretchBltMode
SetViewportExtEx
SetWindowExtEx
SetViewportOrgEx
SetWindowOrgEx
SetROP2
Polyline
GetClipBox
MoveToEx
LineTo
CreatePen
CreateSolidBrush
GetOutlineTextMetricsW
GetDeviceCaps
CreateFontIndirectW
ExcludeClipRect
CreateRectRgn
GetTextExtentPoint32W
SelectPalette
RealizePalette
GetTextMetricsW
GdiFlush
GetRegionData
ExtCreateRegion
OffsetRgn
SetTextColor
SetBkMode
PatBlt
GetObjectW
CreateCompatibleDC
DeleteDC
SelectObject
DeleteObject
BitBlt
CreateCompatibleBitmap
GetDIBColorTable
SetBkColor
CreateBitmap

comdlg32

PrintDlgW
ChooseFontW
ChooseColorW
GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
PageSetupDlgW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

shell32

SHGetPathFromIDListW
SHGetMalloc
ShellExecuteExW
ExtractIconExW
ExtractIconW
DragQueryFileW
DragQueryPoint
DragFinish
DragAcceptFiles
SHGetSpecialFolderLocation

comctl32

ImageList_DragEnter
ImageList_DragMove
ImageList_EndDrag
ImageList_BeginDrag
ImageList_SetDragCursorImage
ImageList_Replace
ImageList_SetBkColor
ImageList_Draw
ImageList_Remove
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Create
ImageList_GetIconSize
ImageList_GetImageCount
ord16
ImageList_Add
ord17
ImageList_DragLeave

ole32

CoLockObjectExternal
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
CoTaskMemAlloc
CoCreateInstance
OleInitialize
OleUninitialize
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
OleSetClipboard

advapi32

RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegEnumKeyW
RegEnumValueW
RegCreateKeyW
RegOpenKeyExW
RegCloseKey
GetUserNameW
RegDeleteKeyW

wsock32

accept
recvfrom
connect
socket
bind
listen
getsockname
select
__WSAFDIsSet
getsockopt
sendto
recv
shutdown
setsockopt
ioctlsocket
ntohs
htonl
ntohl
getservbyname
gethostbyaddr
gethostbyname
WSAGetLastError
WSACleanup
closesocket
send
WSAStartup
htons

wininet

InternetCloseHandle
InternetReadFile
InternetOpenUrlW
InternetOpenW

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 655KB - Virtual size: 654KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c701f90a67448a3defcbc4b36997ff90

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

shell32

comctl32

ole32

advapi32

wsock32

wininet

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 655KB - Virtual size: 654KB

.data Size: 58KB - Virtual size: 256KB

.tls Size: 512B - Virtual size: 13B

.rsrc Size: 159KB - Virtual size: 158KB

.reloc Size: 244KB - Virtual size: 243KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 655KB - Virtual size: 654KB

.data
Size: 58KB - Virtual size: 256KB

.tls
Size: 512B - Virtual size: 13B

.rsrc
Size: 159KB - Virtual size: 158KB

.reloc
Size: 244KB - Virtual size: 243KB