879fdb38056856fcfb921005425a98fa_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

879fdb38056856fcfb921005425a98fa_JaffaCakes118
Size

3.0MB
MD5

879fdb38056856fcfb921005425a98fa
SHA1

703a3978141c2854e1979fa94aa153471a63f7ad
SHA256

5c4a5496891e660960a324d72eadc678569aa8537044a59c0e45a2aa1815e1f2
SHA512

b982f12f434b05bfe190baee9036c13ef068beca17156f0e597457007ae84ab4992bc944a852a2886d739cb23f449fa01f79d63431e63c25a01801c7059d3867
SSDEEP

98304:ddWJikEUSPDui+U1D+1JVIo3/1u6xqx445LtU6:GA17o3/1u6xqx445Lt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
879fdb38056856fcfb921005425a98fa_JaffaCakes118

Files

879fdb38056856fcfb921005425a98fa_JaffaCakes118
.exe windows:5 windows x86 arch:x86

61391e6b82aebbd0b5b2be8be3394d40

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

K:\fetion\登录器分销工程\LoginDlg\Release\LoginDlg.pdb

Imports

ssleay32

ord42
ord183
ord108
ord61
ord43
ord87
ord75
ord12
ord172
ord74
ord78

libeay32

ord641
ord585
ord657
ord653
ord469

kernel32

GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetVersion
GetVersionExW
GetProcessHeap
LCMapStringW
IsValidCodePage
GetOEMCP
lstrlenA
GetACP
MultiByteToWideChar
GetCPInfo
SetLastError
GetLastError
LoadLibraryW
GetModuleHandleW
GetProcAddress
SizeofResource
LockResource
LoadResource
FindResourceW
FreeResource
lstrlenW
lstrcmpiW
WideCharToMultiByte
Sleep
InterlockedDecrement
GlobalAlloc
GlobalLock
GlobalUnlock
InterlockedIncrement
GetWindowsDirectoryW
FreeLibrary
lstrcpyW
lstrcatW
WinExec
GetModuleFileNameW
MulDiv
LocalFree
FormatMessageW
GlobalSize
CopyFileW
GlobalFree
GetModuleHandleA
GetCurrentProcessId
CloseHandle
SetThreadPriority
ResumeThread
GetCurrentThreadId
WaitForSingleObject
GetVersionExA
QueryPerformanceCounter
VirtualFree
HeapCreate
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
GetFileType
SetStdHandle
HeapSize
ExitProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
CreateThread
ExitThread
RaiseException
RtlUnwind
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetStartupInfoW
FindResourceExW
VirtualProtect
GetProfileIntW
SearchPathW
GetTempPathW
GetTickCount
SetErrorMode
GetCurrentDirectoryW
GetTempFileNameW
GetFileTime
GetFileSizeEx
GetFileAttributesW
CreateFileW
lstrcmpW
LoadLibraryA
CompareStringW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetThreadLocale
GlobalGetAtomNameW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcmpA
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom

user32

GetDoubleClickTime
SubtractRect
CharUpperBuffW
GetUpdateRect
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
IsClipboardFormatAvailable
MapVirtualKeyExW
IsCharLowerW
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
SetCursorPos
DrawFrameControl
UnionRect
GetNextDlgGroupItem
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
OpenClipboard
RegisterClipboardFormatW
EnumChildWindows
LockWindowUpdate
SetClassLongW
NotifyWinEvent
CreateAcceleratorTableW
DestroyAcceleratorTable
GetAsyncKeyState
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
PostThreadMessageW
CharNextW
SetWindowRgn
InvalidateRgn
CopyAcceleratorTableW
CharUpperW
SetParent
GetSystemMenu
IsRectEmpty
UnregisterClassW
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
InsertMenuItemW
BringWindowToTop
TranslateAcceleratorW
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
RedrawWindow
IsZoomed
PostQuitMessage
WaitMessage
CreateDialogIndirectParamW
EndDialog
LoadMenuW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
CopyRect
GetSysColor
FillRect
DrawEdge
SetRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
UnhookWindowsHookEx
IntersectRect
DestroyMenu
MapVirtualKeyW
GetKeyNameTextW
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
MessageBoxW
EndPaint
BeginPaint
GetWindowDC
ScreenToClient
SetWindowLongW
SetRectEmpty
GetMenuStringW
DrawIcon
IsIconic
LoadIconW
MessageBeep
CopyIcon
LoadCursorW
IsWindow
SetCapture
ReleaseCapture
PtInRect
KillTimer
SetTimer
GetMenuItemInfoW
DrawTextW
SystemParametersInfoW
DrawIconEx
DestroyIcon
GetSystemMetrics
GetDesktopWindow
GetDC
ReleaseDC
AppendMenuW
GetMenuItemCount
InsertMenuW
ModifyMenuW
GetMenuState
GetMenuItemID
CreateMenu
CreatePopupMenu
GetSysColorBrush
GetWindowRgn
LoadBitmapW
RemoveMenu
DeleteMenu
GetSubMenu
EnableWindow
TabbedTextOutW
DrawTextExW
GrayStringW
DestroyCursor
GetWindowLongW
SendMessageW
IsMenu
GetNextDlgTabItem
GetParent
SetCursor
InvalidateRect
ClientToScreen
WindowFromPoint
GetActiveWindow
GetWindowRect
PostMessageW
InflateRect
DrawFocusRect
GetClientRect
OffsetRect
DrawStateW
GetIconInfo
LoadImageW
FrameRect

gdi32

SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
SelectPalette
GetObjectType
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetDCOrgEx
GetBkColor
GetTextMetricsW
GetRgnBox
CreateEllipticRgn
LPtoDP
OffsetRgn
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateRoundRectRgn
MoveToEx
GetDIBits
RealizePalette
StretchBlt
CreatePolygonRgn
Polyline
Polygon
CreatePalette
GetPaletteEntries
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
GetTextFaceW
SetPixelV
GetTextColor
SetTextAlign
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreatePen
CopyMetaFileW
CreatePatternBrush
SetTextColor
SetBkColor
CreateBitmap
GetStockObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetBkMode
CreateFontIndirectW
GetTextExtentPoint32W
Ellipse
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
GetObjectW
GetPixel
SetDIBColorTable
SetPixel
Rectangle
CreateHatchBrush
PatBlt
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetDeviceCaps
CreateSolidBrush

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegQueryValueExW
RegCloseKey
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegEnumKeyExW
RegOpenKeyExW
RegOpenKeyW

shell32

ShellExecuteW
DragFinish
DragQueryFileW
SHGetFileInfoW
SHAppBarMessage
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteExW

comctl32

ImageList_GetIconSize
_TrackMouseEvent
InitCommonControlsEx

shlwapi

UrlUnescapeW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW

oledlg

OleUIBusyW

ole32

CoCreateInstance
OleRun
CreateStreamOnHGlobal
CoInitialize
CoTaskMemFree
ReleaseStgMedium
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleLockRunning
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
OleGetClipboard
CoUninitialize
CoInitializeEx
CoRevokeClassObject
CoRegisterMessageFilter
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
IsAccelerator
OleDuplicateData

oleaut32

SysAllocStringByteLen
SysStringLen
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantCopy
OleLoadPicture
SafeArrayDestroy
GetErrorInfo
SysFreeString
SysAllocString
VarUdateFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect

winmm

PlaySoundW

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

gdiplus

GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCloneImage
GdipBitmapLockBits
GdiplusStartup
GdiplusShutdown
GdipFree
GdipAlloc
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipDeleteGraphics

ws2_32

accept
select
bind
WSAGetLastError
WSASetLastError
sendto
recvfrom
WSAAsyncSelect
send
recv
closesocket
connect
htons
inet_addr
socket
WSAStartup
WSACleanup
gethostbyname
htonl

wininet

InternetCrackUrlW
InternetOpenUrlW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
InternetQueryDataAvailable
InternetQueryOptionW
InternetCanonicalizeUrlW

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61391e6b82aebbd0b5b2be8be3394d40

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ssleay32

libeay32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

winmm

imm32

gdiplus

ws2_32

wininet

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 269KB - Virtual size: 268KB

.data Size: 25KB - Virtual size: 53KB

.rsrc Size: 1.5MB - Virtual size: 1.5MB

.reloc Size: 153KB - Virtual size: 153KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 269KB - Virtual size: 268KB

.data
Size: 25KB - Virtual size: 53KB

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

.reloc
Size: 153KB - Virtual size: 153KB