8c87298b75f7c036e2a11a4c41e79262_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8c87298b75f7c036e2a11a4c41e79262_JaffaCakes118
Size

685KB
MD5

8c87298b75f7c036e2a11a4c41e79262
SHA1

40add4d519e43779b2b9b1e6b873e1c632fb323b
SHA256

fd9164570e5bd4d8085329eee5c229800ad40aac8a1b024b0312041c3246bb19
SHA512

3eb9c84c9d41ea07479e1880885ca3d207e3bed1bf0e270fa570c8c07e8318dc0d574a68a582c795cd64652a12b3882df36c0678bf4b91035c5335af9a0cc194
SSDEEP

12288:6LvTwCXi8lwtNCFY5hH1Ygm/Ll4tl+eIO9CVRiMi7xHGhYqRXWHwp2:6khOgyl43AACVRRi74hvRXKwY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c87298b75f7c036e2a11a4c41e79262_JaffaCakes118

Files

8c87298b75f7c036e2a11a4c41e79262_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab7028c689eda741357257b2e53cc729

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipGetImageGraphicsContext
GdipCreateSolidFill
GdipCloneBrush
GdipCreateBitmapFromHBITMAP
GdipSetImageAttributesColorMatrix
GdipCreateBitmapFromScan0
GdipFillEllipseI
GdipCreatePen1
GdipDrawEllipseI
GdipDeletePen
GdipDeleteBrush
GdipGetImageHeight
GdipGetImageWidth
GdiplusStartup
GdipCloneImage
GdipAlloc
GdiplusShutdown
GdipFree
GdipLoadImageFromStream
GdipCreateFromHDC
GdipCreateImageAttributes
GdipSetImageAttributesRemapTable
GdipDrawImageRectRectI
GdipDisposeImageAttributes
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageType
GdipDrawImageRectI

kernel32

lstrcatA
GetPrivateProfileStringA
lstrcpyA
lstrlenA
LocalAlloc
SetEnvironmentVariableA
CreateThread
GetDriveTypeA
LoadLibraryA
SetErrorMode
FreeLibrary
VirtualAlloc
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
CompareStringA
SetEndOfFile
SetFilePointer
CopyFileA
WriteFile
lstrcmpiA
ReadFile
GetFileSize
lstrcpynA
GetModuleFileNameA
DeleteFileA
GetWindowsDirectoryA
QueryPerformanceFrequency
CreateEventA
GetTickCount
GetCurrentThreadId
GetFileAttributesA
IsDBCSLeadByte
FindClose
lstrcmpA
FindFirstFileA
GetProcAddress
GetModuleHandleA
CreateDirectoryA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
LockResource
LoadResource
FindResourceA
GetUserDefaultLCID
GetCurrentDirectoryA
SetCurrentDirectoryA
GetEnvironmentVariableA
VerLanguageNameA
HeapAlloc
HeapFree
HeapDestroy
HeapCreate
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
SetLastError
GetLastError
Sleep
GlobalSize
SizeofResource
GetSystemDirectoryA
GetSystemInfo
GetVersion
GetLocalTime
GetCurrentProcess
WritePrivateProfileStringA
FindResourceExA
CreateProcessA
InterlockedIncrement
InterlockedDecrement
VirtualQuery
VirtualProtect
SearchPathA
WaitForSingleObject
SetEvent
ResetEvent
QueryPerformanceCounter
SystemTimeToFileTime
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
GetStartupInfoA
GetCommandLineA
ExitProcess
RtlUnwind
GetTimeZoneInformation
GetSystemTime
RaiseException
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsSetValue
TlsAlloc
TlsGetValue
VirtualFree
HeapReAlloc
HeapSize
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
IsBadReadPtr
IsBadCodePtr

user32

GetDlgItemTextA
SetForegroundWindow
LoadStringA
PeekMessageA
GetDesktopWindow
ReleaseDC
GetDC
SetWindowLongA
GetClassInfoA
GetWindowLongA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
GetKeyState
ScreenToClient
MessageBeep
MapVirtualKeyA
VkKeyScanA
CharNextA
GetParent
DialogBoxIndirectParamA
SetFocus
IsRectEmpty
SubtractRect
EqualRect
IntersectRect
CopyRect
UnionRect
PtInRect
SendDlgItemMessageA
SetWindowTextA
LoadIconA
ReleaseCapture
SetCursor
LoadCursorA
SetCapture
DestroyCursor
SetClassLongA
LoadCursorFromFileA
GetMessageTime
GetMessagePos
UpdateWindow
WaitForInputIdle
EnableWindow
GetClassInfoExA
SetParent
DrawIcon
ClientToScreen
GetIconInfo
DrawTextA
DrawTextW
InflateRect
DrawFrameControl
IsCharAlphaA
IsCharAlphaNumericA
DestroyCaret
ShowCaret
SetCaretBlinkTime
CreateCaret
CharLowerBuffA
CharUpperBuffA
SetCaretPos
GetScrollPos
ShowWindow
IsWindowVisible
IsIconic
EnumChildWindows
CreateWindowExA
InvalidateRect
SetCursorPos
GetCursorPos
ShowScrollBar
AppendMenuA
GetSystemMenu
UnregisterClassA
TrackPopupMenu
DestroyMenu
SetRectEmpty
GetFocus
GetWindow
GetForegroundWindow
SetScrollPos
GetScrollRange
SetScrollRange
WindowFromPoint
ValidateRect
IsDlgButtonChecked
CheckRadioButton
GetWindowTextA
CreatePopupMenu
SetRect
SystemParametersInfoA
CharLowerA
MsgWaitForMultipleObjects
IsWindow
DestroyWindow
GetMessageA
RegisterClassExA
DrawFocusRect
DispatchMessageA
CharUpperA
RegisterWindowMessageA
EndDialog
LoadBitmapA
SetTimer
FillRect
KillTimer
DialogBoxParamA
GetClientRect
GetWindowRect
SetDlgItemTextA
GetSystemMetrics
MoveWindow
GetDlgItem
SetWindowPos
BeginPaint
EndPaint
PostMessageA
wsprintfA
MessageBoxA
PostQuitMessage
DefWindowProcA
CreateDialogParamA
GetSysColor
FindWindowA
SendMessageA
RegisterClassA
TranslateMessage

gdi32

GetTextExtentPoint32A
GetSystemPaletteEntries
CreatePalette
GetDeviceCaps
CreateEllipticRgnIndirect
CreateDCA
GetTextMetricsA
StretchDIBits
RoundRect
Ellipse
SetTextCharacterExtra
TextOutA
SetTextAlign
ExtTextOutA
Polyline
CreatePolygonRgn
CreateRoundRectRgn
CreateEllipticRgn
GetPixel
SetPixel
CreateDIBitmap
LineTo
CreatePen
SetWinMetaFileBits
SetEnhMetaFileBits
PlayEnhMetaFile
SetStretchBltMode
CreateCompatibleBitmap
CreateBitmap
StretchBlt
DeleteEnhMetaFile
CreateHatchBrush
SetBkColor
Rectangle
DeleteObject
CreateSolidBrush
DeleteDC
BitBlt
SelectObject
RealizePalette
SelectPalette
UnrealizeObject
CreateCompatibleDC
SetTextColor
SetBkMode
GetStockObject
GetObjectA
CreateRectRgn
CreateRectRgnIndirect
MoveToEx
CreateFontIndirectA
EnumFontFamiliesExA
CombineRgn
AddFontResourceA
RemoveFontResourceA
SaveDC
SelectClipRgn
Polygon
EnumFontsA
PatBlt
CreatePatternBrush
RestoreDC

comdlg32

GetOpenFileNameA

ole32

CoInitialize
CoCreateInstance
CreateStreamOnHGlobal
CoUninitialize

oleaut32

SysAllocStringLen
SysFreeString

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

winmm

mixerSetControlDetails
mixerGetLineControlsA
mixerGetLineInfoA
mixerClose
mciSendCommandA
timeGetDevCaps
timeKillEvent
timeBeginPeriod
timeSetEvent
timeGetTime
mixerOpen

atl

ord47
ord40
ord42

Exports

Exports

AppEnumWindows
CaptureHookProc
DemoClosingDialog
DemoMenuDialog
DemoSplashDialog
EnumFontExProc
EventProcDll
JournalPlayHookProc
JournalRecordHookProc
KeyboardHookProc
LaunchAppProc
MouseHookProc
PlayerAbout
ServerWndProc
WinSupBackWndProc
WinSupWndProc

Sections

.text
Size: 384KB - Virtual size: 381KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 32KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab7028c689eda741357257b2e53cc729

Headers

File Characteristics

Imports

gdiplus

kernel32

user32

gdi32

comdlg32

ole32

oleaut32

advapi32

shell32

version

winmm

atl

Exports

Exports

Sections

.text Size: 384KB - Virtual size: 381KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 32KB - Virtual size: 39KB

.rsrc Size: 68KB - Virtual size: 67KB

.text
Size: 384KB - Virtual size: 381KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 32KB - Virtual size: 39KB

.rsrc
Size: 68KB - Virtual size: 67KB