8d27be04da817b5fabd65f735d298c62_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8d27be04da817b5fabd65f735d298c62_JaffaCakes118
Size

3.2MB
MD5

8d27be04da817b5fabd65f735d298c62
SHA1

a28e7f3037a5e0385689787547fef794dd84b10b
SHA256

bdb79b0914257c1b12f38d9142e1121522dfbd117b0e829a6689ceef5c945747
SHA512

16fcbdb58ee53f5269c03e3a4681681d6aa868336f204f827668899e9c2adbe1a0451562783b014d7b45d96be4dac94751e7fab6f087ed8996c78e1c000f103b
SSDEEP

49152:iRROBU6vUqnUezUqUUVs6PSoWrLcYT9tAFSYr+f1:UkU6vUqnUezUqUUVsCozYr+N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d27be04da817b5fabd65f735d298c62_JaffaCakes118

Files

8d27be04da817b5fabd65f735d298c62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3eee5b65e4c7c9633f0bd6d7471a08a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

send
WSAStartup
accept
inet_addr
setsockopt
htonl
htons
bind
WSAGetLastError
closesocket
listen
recv
connect
recvfrom
WSAAsyncSelect
socket
ioctlsocket
gethostname
gethostbyname
shutdown
WSACleanup
sendto

ws2_32

WSAAccept
WSARecv
WSASocketA
WSASendTo
WSASend

mumsg

??1CMsg@@QAE@XZ
??0CMsg@@QAE@XZ
?Get@CMsg@@QAEPADH@Z
?LoadWTF@CMsg@@QAEXPAD@Z

comctl32

ord17

dbghelp

SymLoadModule
SymGetOptions
SymSetOptions
SymInitialize
SymFunctionTableAccess
SymGetLineFromAddr
SymGetSymFromAddr
SymGetModuleInfo
StackWalk

kernel32

GetThreadContext
GetCurrentThread
GetCurrentProcess
GetModuleFileNameA
VirtualQueryEx
OutputDebugStringA
GetPrivateProfileStringA
FindFirstFileA
CreateMutexA
InterlockedExchange
InterlockedDecrement
InterlockedExchangeAdd
FreeLibrary
GetProcAddress
LoadLibraryA
WriteFile
lstrlenA
LocalFree
FileTimeToSystemTime
FileTimeToLocalFileTime
SetLastError
lstrcpynA
lstrcmpA
LocalAlloc
TlsAlloc
GlobalUnlock
GlobalHandle
TlsFree
GlobalLock
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetVersion
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThreadId
SuspendThread
CreateEventA
CreateFileA
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
lstrcatA
LockResource
LoadResource
FindResourceA
GetProcessVersion
MulDiv
GlobalFlags
GetCPInfo
GetOEMCP
WritePrivateProfileStringA
GetCurrentDirectoryA
SetErrorMode
DuplicateHandle
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
DeleteFileA
FindClose
GetVolumeInformationA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
GetFileAttributesA
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
RtlUnwind
ExitThread
GetTimeZoneInformation
GetSystemTime
GetStartupInfoA
GetCommandLineA
ExitProcess
GetACP
RaiseException
HeapSize
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
FatalAppExitA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
CreateDirectoryA
GlobalAlloc
GlobalFree
GetProcessHeap
HeapAlloc
HeapFree
InitializeCriticalSectionAndSpinCount
GetQueuedCompletionStatus
GetSystemInfo
CreateIoCompletionPort
PostQueuedCompletionStatus
GetLastError
FormatMessageA
TerminateThread
OpenFile
GetFileSize
_lclose
ReadFile
GetPrivateProfileIntA
GetLocalTime
InterlockedIncrement
Sleep
WideCharToMultiByte
MultiByteToWideChar
WaitForSingleObject
CloseHandle
CreateThread
GetTickCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcpyA

user32

EnableWindow
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
GetParent
UnhookWindowsHookEx
SetWindowsHookExA
GetCursorPos
PeekMessageA
IsWindowVisible
ValidateRect
CallNextHookEx
GetKeyState
GetActiveWindow
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
RegisterWindowMessageA
SetWindowPos
GetWindow
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
GetPropA
SetPropA
GetClassLongA
GetDlgCtrlID
GetWindowTextA
GetWindowTextLengthA
SetWindowPlacement
TrackPopupMenu
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
IsChild
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
DeferWindowPos
OemToCharA
ScreenToClient
AdjustWindowRectEx
SetFocus
SetActiveWindow
GetSysColor
MapWindowPoints
SendDlgItemMessageA
PostMessageA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
MoveWindow
GetSysColorBrush
GetClassNameA
PtInRect
ClientToScreen
GetDesktopWindow
DestroyMenu
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
ShowOwnedPopups
SetCursor
InsertMenuA
DeleteMenu
GetMenuStringA
CharUpperA
DefWindowProcA
KillTimer
DestroyWindow
PostQuitMessage
CreateWindowExA
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
SetTimer
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
SetWindowTextA
GetClientRect
FillRect
CallWindowProcA
SetWindowLongA
GetDC
ReleaseDC
SetRect
MessageBoxA
IsWindow
CreateDialogParamA
ShowWindow
GetDlgItem
EndDialog
SetDlgItemTextA
SendMessageA
wsprintfA
CharToOemA
EqualRect
DialogBoxParamA

gdi32

IntersectClipRect
Escape
ExtTextOutA
RectVisible
PtVisible
OffsetClipRgn
CreatePatternBrush
CreateHatchBrush
ExtCreatePen
CreatePen
GetWindowExtEx
GetViewportExtEx
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
PolyBezierTo
SetColorAdjustment
CreateDIBPatternBrushPt
MoveToEx
PolylineTo
PolyDraw
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
SetTextColor
CreateSolidBrush
CreateFontA
DeleteObject
SelectObject
SetBkMode
GetStockObject
CreateBitmap
GetDCOrgEx
GetClipBox
SetBkColor
GetObjectA
GetDeviceCaps
DeleteDC
StartDocA
SaveDC
RestoreDC
SelectPalette
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
TextOutA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegOpenKeyA
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA

shell32

DragAcceptFiles
SHGetFileInfoA

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 191.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 432KB - Virtual size: 429KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3eee5b65e4c7c9633f0bd6d7471a08a4

Headers

File Characteristics

Imports

wsock32

ws2_32

mumsg

comctl32

dbghelp

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 144KB - Virtual size: 141KB

.data Size: 48KB - Virtual size: 191.7MB

.idata Size: 16KB - Virtual size: 12KB

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 432KB - Virtual size: 429KB

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 144KB - Virtual size: 141KB

.data
Size: 48KB - Virtual size: 191.7MB

.idata
Size: 16KB - Virtual size: 12KB

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 432KB - Virtual size: 429KB