8d0f04d30c6b1711f4fcf154d21eed0b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8d0f04d30c6b1711f4fcf154d21eed0b_JaffaCakes118
Size

484KB
MD5

8d0f04d30c6b1711f4fcf154d21eed0b
SHA1

043c2d4ec6c34fce2acf1966ffa6f5e6325287e6
SHA256

bbcfdde5daf1ea135ad4d949920c97b5dc3588ed8dcb38a36bda89b7d687026a
SHA512

f492a4700dda1a562fa104abda9fe2e954066dc037ac2cb5e01454834d88b5084e78b97506e40f48c6fb21ed7b069c16c34cc485c662445ec03f32b2c30dbd6a
SSDEEP

12288:JX1BN3jkdi1GAs9QARNPNzCuhcHAwQ39:JX1BZLg9QAnQuhcgwQ39

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d0f04d30c6b1711f4fcf154d21eed0b_JaffaCakes118

Files

8d0f04d30c6b1711f4fcf154d21eed0b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2e319d15d262d2a7f0ef84f4c14f3061

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeSetEvent
mciSendStringA
waveOutGetDevCapsA
timeKillEvent
waveOutGetNumDevs

kernel32

RtlMoveMemory
GlobalUnlock
GlobalFree
MulDiv
ExitProcess
HeapReAlloc
IsBadReadPtr
GetCommandLineA
TlsFree
QueryPerformanceFrequency
QueryPerformanceCounter
FreeLibrary
GetCurrentProcess
GetProcAddress
LoadLibraryA
GetVersionExA
GetVersion
lstrlenA
CloseHandle
DeviceIoControl
CreateFileA
GetModuleFileNameA
GetTimeZoneInformation
GetSystemDefaultLangID
GetLocaleInfoA
SetFilePointer
ReadFile
GlobalLock
GlobalAlloc
HeapFree
HeapAlloc
GetProcessHeap
SetProcessWorkingSetSize
WriteProcessMemory
ReadProcessMemory
GetModuleHandleA
WriteFile
Process32Next
Process32First
CreateToolhelp32Snapshot
VerLanguageNameA
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
DuplicateHandle
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
lstrcpynA
GetFullPathNameA
GetFileTime
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
SetErrorMode
GlobalFlags
GetCurrentDirectoryA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetProcessVersion
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCPInfo
GetOEMCP
RtlUnwind
RaiseException
GetSystemTime
GetLocalTime
HeapSize
GetACP
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadCodePtr
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCurrentThreadId
LocalFree
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
WinExec
lstrcatA
WriteProfileStringA
SetLastError
GetProfileStringA
CreateDirectoryA
GetSystemDirectoryA
EnumResourceNamesA
CopyFileA
Sleep
GetWindowsDirectoryA
GetTempPathA
GlobalMemoryStatus
Module32First
Module32Next
OpenProcess
InterlockedExchange
TerminateProcess
GetDriveTypeA
GetVolumeInformationA
GlobalSize
GetFileSize
FindFirstFileA
GetFileAttributesA
SetFileAttributesA
RemoveDirectoryA
FindNextFileA
FindClose
DeleteFileA
MultiByteToWideChar
LoadLibraryExA
FindResourceA
LoadResource
LockResource
SizeofResource
lstrcpyA
GetLastError

user32

MessageBeep
GetDC
GetClassNameA
ReleaseDC
GetForegroundWindow
SetWindowLongA
GetSysColor
GetAsyncKeyState
IsDialogMessageA
SetWindowPos
SetFocus
GetWindowPlacement
IsIconic
RegisterWindowMessageA
SetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
GetPropA
SetPropA
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
AdjustWindowRectEx
MapWindowPoints
LoadIconA
LoadCursorA
GetSysColorBrush
DestroyMenu
CharUpperA
UnhookWindowsHookEx
GrayStringA
DrawTextA
TabbedTextOutA
ClientToScreen
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetActiveWindow
GetKeyState
CallNextHookEx
SetWindowsHookExA
GetLastActivePopup
PostMessageA
WindowFromPoint
GetParent
GetWindow
PtInRect
IsWindowVisible
GetWindowLongA
EnumWindows
FindWindowExA
IsRectEmpty
GetCursorPos
GetDlgItem
SystemParametersInfoA
ChangeDisplaySettingsA
EnumDisplaySettingsA
SendMessageTimeoutA
FindWindowA
GetWindowThreadProcessId
SetCursorPos
mouse_event
keybd_event
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
ReleaseCapture
SetCapture
GetSystemMetrics
LoadImageA
VkKeyScanExA
GetKeyboardLayout
SendDlgItemMessageA
GetMenuItemCount
GetDlgCtrlID
LoadStringA
UnregisterClassA
EndDialog
SetActiveWindow
LoadBitmapA
GetKeyboardState
CallWindowProcA
PeekMessageA
wsprintfA
MessageBoxA
DispatchMessageA
TranslateMessage
TranslateMDISysAccel
IsDialogMessage
TranslateAcceleratorA
GetMessageA
CreateWindowExA
IsWindowEnabled
EnableWindow
PostQuitMessage
DefWindowProcA
CreateDialogIndirectParamA
GetClientRect
GetWindowTextA
GetWindowTextLengthA
SetWindowTextA
DrawMenuBar
SetMenu
MoveWindow
GetWindowRect
GetDesktopWindow
UpdateWindow
ShowWindow
SetClassLongA
GetClassLongA
SendMessageA
DestroyWindow
IsWindow

gdi32

Escape
SetBkColor
GetObjectA
DeleteDC
GetDeviceCaps
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
RestoreDC
SaveDC
CreateBitmap
SelectPalette
RealizePalette
GetDIBits
CreateCompatibleBitmap
CreateDCA
RemoveFontResourceA
AddFontResourceA
EnumFontFamiliesExA
CreateCompatibleDC
SelectObject
BitBlt
GetStockObject
CreateRectRgn
CreateSolidBrush
FrameRgn
FillRgn
DeleteObject
SetTextColor
GetPixel

comctl32

ord17
InitCommonControlsEx

ole32

CoCreateInstance
CoCreateGuid
CreateStreamOnHGlobal

olepro32

ord251

iphlpapi

SendARP
GetAdaptersInfo

shlwapi

PathAppendA
PathFileExistsA
SHDeleteKeyA
SHDeleteValueA

mpr

WNetAddConnection2A
WNetOpenEnumA
WNetEnumResourceA
WNetCloseEnum
WNetCancelConnection2A

ws2_32

htons
connect
closesocket
WSACleanup
gethostbyaddr
socket
inet_addr
gethostbyname
gethostname
inet_ntoa
sendto
WSAStartup

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

comdlg32

GetFileTitleA
PrintDlgA

winspool.drv

ClosePrinter
SetPrinterA
OpenPrinterA
EnumPrintersA
GetPrinterA
DocumentPropertiesA

advapi32

RegSetKeySecurity
RegQueryInfoKeyA
RegEnumKeyA
AllocateAndInitializeSid
RegGetKeySecurity
RegSetValueExA
RegCreateKeyExA
GetUserNameA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
FreeSid
InitializeAcl
AddAce
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
GetTokenInformation
GetLengthSid
CopySid
RegOpenKeyA
RegQueryValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCloseKey
RegOpenKeyExA

shell32

SHEmptyRecycleBinA
SHGetSpecialFolderPathA
ShellExecuteA
SHChangeNotify

wininet

FindFirstUrlCacheEntryA
DeleteUrlCacheEntry
FindNextUrlCacheEntryA
InternetOpenUrlA
InternetCloseHandle
InternetGetConnectedState
InternetOpenA

Exports

Exports

A_st2sfgfgfdgfdgtwerwrewr2ewr2wer222f2sdfdsf
_��ӳ��
asdasdweqewqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
asddddddddddddddddddddddddddddddddddddddddddddddddwwwwwwwwwwwwwd
asdsaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaawwdad
asdsaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaawwwwwwwwwwwwwwwww
wqeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee
��ԵĲ��Ե��ȫ��۹��Ե�Ϊʲô�Ͳ��Ϊʲô�ذ��
�Ҿ��ǲ��ǲ��ǲ��ô�а�

Sections

.text
Size: 256KB - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 156KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e319d15d262d2a7f0ef84f4c14f3061

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

comctl32

ole32

olepro32

iphlpapi

shlwapi

mpr

ws2_32

version

comdlg32

winspool.drv

advapi32

shell32

wininet

Exports

Exports

Sections

.text Size: 256KB - Virtual size: 254KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 156KB - Virtual size: 204KB

.reloc Size: 24KB - Virtual size: 21KB

.text
Size: 256KB - Virtual size: 254KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 156KB - Virtual size: 204KB

.reloc
Size: 24KB - Virtual size: 21KB