94f2672061772335d7e60f43156a7939_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

94f2672061772335d7e60f43156a7939_JaffaCakes118
Size

2.5MB
MD5

94f2672061772335d7e60f43156a7939
SHA1

fce5a2d0dfce9b3f192259c26353650d7fa1cc1d
SHA256

f2ad8f3ccceaf7bba187a1d71c66ca42813763e9a527c54c81b14ee874b27346
SHA512

adabc3a467003748053e384a5fdb03a686d1dc43e77ce65782ceb3a24727b7b11e83691c03d4a138d6fa490755070877d447159e3ceb8002e18b79a1139917ee
SSDEEP

49152:msHWpJu5od17MVtsBo+kAKRyABMOaltPcn0Htepq1AmPNwokt4nppXtF:mTJud2Vk71Chqq1fPGgppb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94f2672061772335d7e60f43156a7939_JaffaCakes118

Files

94f2672061772335d7e60f43156a7939_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2cff35276bd2289f664902564a08351e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime
mixerClose
mixerGetDevCapsA
mciSendStringA
mciGetErrorStringA
mciSendCommandA
mixerGetNumDevs
mixerOpen
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetControlDetailsA
mixerSetControlDetails

wsock32

WSAStartup
inet_addr
closesocket
setsockopt
getsockopt
WSAGetLastError
inet_ntoa
listen
shutdown
ntohs
ntohl
accept
select
bind
getsockname
getpeername
WSASetLastError
WSAAsyncSelect
getprotobyname
recvfrom
sendto
gethostname
recv
send
socket
gethostbyname
ioctlsocket
connect
htonl
htons
WSACleanup

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
lstrcmpW
lstrcatA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeResource
FileTimeToLocalFileTime
EnumResourceLanguagesA
ConvertDefaultLocale
InterlockedIncrement
GetProfileIntA
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
SetErrorMode
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
HeapAlloc
HeapFree
RtlUnwind
ExitProcess
TerminateProcess
HeapReAlloc
GetStartupInfoA
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
QueryPerformanceCounter
GetLocaleInfoW
OpenFileMappingA
InterlockedExchange
GetACP
GetLocaleInfoA
InterlockedDecrement
GlobalSize
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
SetFilePointer
WriteFile
ReadFile
SetLastError
GetTickCount
RaiseException
SetComputerNameA
GetComputerNameA
GetCurrentThread
GetPriorityClass
GetThreadPriority
SetPriorityClass
SetThreadPriority
GetCurrentProcess
WaitForSingleObject
GetEnvironmentStrings
FreeEnvironmentStringsA
ExpandEnvironmentStringsA
GetPrivateProfileIntA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
lstrcmpA
SetFileAttributesA
SetFileTime
GetFileTime
MoveFileA
GetDiskFreeSpaceA
GetFileSize
GetFullPathNameA
GetDriveTypeA
GetVolumeInformationA
SetVolumeLabelA
GetLogicalDrives
GetTimeZoneInformation
GetPrivateProfileSectionNamesA
FileTimeToSystemTime
GetCommandLineA
GetUserDefaultLCID
GetTempFileNameA
GetSystemDefaultLangID
GetLastError
FormatMessageA
GetPrivateProfileStringA
GetShortPathNameA
WritePrivateProfileStringA
lstrcpynA
GlobalMemoryStatus
GetSystemDirectoryA
GetThreadLocale
SetEnvironmentVariableA
FindNextFileA
Sleep
WinExec
GlobalAlloc
GlobalFlags
GlobalFree
LocalAlloc
GetVersionExA
LocalHandle
LocalFree
CopyFileA
GetSystemTime
GetModuleHandleA
GetModuleFileNameA
CreateProcessA
GetCurrentProcessId
GetCurrentThreadId
GetWindowsDirectoryA
DeviceIoControl
SystemTimeToFileTime
GetSystemTimeAsFileTime
DeleteFileA
RemoveDirectoryA
CreateFileA
CloseHandle
FreeLibrary
LoadLibraryA
GetProcAddress
CreateDirectoryA
FindFirstFileA
FindClose
GetFileAttributesA
FindResourceA
LoadResource
LockResource
SizeofResource
MulDiv
lstrcpyA
GlobalLock
GlobalUnlock
GetStringTypeExA
GetEnvironmentVariableA
GetProcessVersion
lstrlenA
lstrcmpiA
CompareStringW
lstrlenW
CompareStringA
GetVersion
WideCharToMultiByte
MultiByteToWideChar

user32

EnumThreadWindows
WaitForInputIdle
ExitWindowsEx
EnumDisplaySettingsA
ChangeDisplaySettingsA
PostThreadMessageA
PeekMessageA
TranslateMessage
GetWindowTextLengthA
EnumWindows
EnumChildWindows
SendNotifyMessageA
SetParent
CheckMenuItem
GetUpdateRect
wvsprintfA
GetDesktopWindow
GetWindowDC
ValidateRect
SendDlgItemMessageA
SetDlgItemTextA
IsDialogMessageA
GetLastActivePopup
GetWindowPlacement
UnregisterClassA
GetClassInfoA
SetScrollInfo
GetScrollInfo
DeferWindowPos
AdjustWindowRectEx
ShowScrollBar
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
ScrollWindow
MapWindowPoints
GetMessagePos
GetMessageTime
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
IsChild
GetClassInfoExA
RegisterWindowMessageA
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
BringWindowToTop
InsertMenuItemA
LoadAcceleratorsA
ReuseDDElParam
UnpackDDElParam
PostQuitMessage
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
CharNextA
IsClipboardFormatAvailable
DrawIcon
MessageBeep
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
GetDCEx
LockWindowUpdate
RegisterClipboardFormatA
LoadStringA
SetActiveWindow
MapVirtualKeyA
GetKeyNameTextA
wsprintfA
RemoveMenu
SetMenu
CreateMenu
DestroyMenu
CreateAcceleratorTableA
GetMenuItemID
GetMenuStringA
DestroyAcceleratorTable
TranslateAcceleratorA
InsertMenuA
RegisterClassA
GetWindow
GetClipboardData
LoadCursorFromFileA
DestroyCursor
GetFocus
SetFocus
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetClassLongA
SetClassLongA
IntersectRect
ShowWindow
RegisterClassExA
DefWindowProcA
SetCursor
BeginPaint
GetWindowTextA
EndPaint
SetWindowTextA
MoveWindow
GetDlgItem
SetWindowRgn
GetKeyState
OpenIcon
SetForegroundWindow
IsIconic
LoadMenuA
GetSubMenu
SetMenuDefaultItem
DeleteMenu
DestroyIcon
AppendMenuA
CreatePopupMenu
ShowCursor
FindWindowA
IsWindowEnabled
CreateWindowExA
DestroyWindow
LoadIconA
UpdateWindow
WinHelpA
GetTabbedTextExtentA
SetWindowPos
RedrawWindow
IsMenu
SetMenuItemInfoA
SetWindowsHookExA
GetMenuItemRect
LoadBitmapA
GetClassNameA
GetWindowLongA
CallNextHookEx
CallWindowProcA
UnhookWindowsHookEx
SetWindowLongA
IsWindowVisible
GetPropA
SetPropA
GetForegroundWindow
GetMenu
EqualRect
OffsetRect
InflateRect
SetRectEmpty
GetMenuItemInfoA
DrawStateA
IsWindow
GetActiveWindow
IsZoomed
GetSystemMenu
ModifyMenuA
GetMenuState
GetMenuItemCount
EnableMenuItem
GetClientRect
GetCursorPos
WindowFromPoint
ScreenToClient
PostMessageA
GetMessageA
DispatchMessageA
ReleaseCapture
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowRect
SetCapture
GetCapture
KillTimer
SetTimer
InvalidateRect
ClientToScreen
DrawFrameControl
PtInRect
IsRectEmpty
GetDlgCtrlID
GetParent
SendMessageA
MessageBoxA
LoadImageA
EnableWindow
FillRect
SetRect
CopyRect
LoadCursorA
SystemParametersInfoA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetSystemMetrics
CharUpperA
CharLowerW
DrawIconEx
RemovePropA
TrackPopupMenu

gdi32

GetTextColor
DPtoLP
LPtoDP
Rectangle
GetTextMetricsA
DeleteObject
SelectObject
GetStockObject
ResetDCA
GetMapMode
StretchDIBits
CreatePen
CreateFontIndirectA
DeleteDC
SetTextColor
BitBlt
SetBkColor
GetPixel
StretchBlt
CreateCompatibleBitmap
CreateBitmap
GetObjectA
CreateCompatibleDC
GetCurrentObject
CreateSolidBrush
SetPixel
GetClipBox
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextExtentPoint32A
SetBkMode
PtInRegion
ExtCreateRegion
CreateDIBSection
IntersectClipRect
SelectClipRgn
GetDIBits
CreateRectRgn
EnumFontFamiliesExA
Ellipse
RoundRect
StartDocA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
CreatePenIndirect
CreateBrushIndirect
GetCharWidthA
SetROP2
SetWinMetaFileBits
DeleteEnhMetaFile
GetEnhMetaFileHeader
SetEnhMetaFileBits
PlayEnhMetaFile
RealizePalette
SelectPalette
CreatePalette
GetEnhMetaFilePaletteEntries
CopyMetaFileA
CreateDCA
SaveDC
RestoreDC
SetPolyFillMode
SetStretchBltMode
SetMapMode
ExcludeClipRect
LineTo
MoveToEx
SetTextAlign
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
CreateRectRgnIndirect
SetRectRgn
CombineRgn
PatBlt
GetBkColor
GetViewportOrgEx
CreateEllipticRgn
GetRgnBox
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetWindowOrgEx
GetDeviceCaps

comdlg32

ChooseColorA
GetSaveFileNameA
CommDlgExtendedError
GetOpenFileNameA
GetFileTitleA
PrintDlgA
ChooseFontA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter
EnumPrintersA

advapi32

RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueA
RegEnumValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegDeleteKeyA
AdjustTokenPrivileges
RegEnumKeyA
RegCreateKeyA
RegSetValueA
GetUserNameA
OpenProcessToken
LookupPrivilegeValueA

shell32

Shell_NotifyIconA
ExtractIconA
DragFinish
SHGetFileInfoA
ShellExecuteA
DragQueryFileA
SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA
SHAddToRecentDocs
SHGetSpecialFolderLocation
FindExecutableA

comctl32

ImageList_Destroy
ImageList_GetImageInfo
ord17
PropertySheetA
ImageList_Draw

shlwapi

PathStripToRootA
PathFindFileNameA
PathIsUNCA
PathFindExtensionA

oledlg

ord8

ole32

CoCreateGuid
CLSIDFromString
StringFromGUID2
CoCreateInstance
CoInitialize
OleUninitialize
OleInitialize
MkParseDisplayName
CreateBindCtx
CLSIDFromProgID
CoTaskMemFree
CoTaskMemAlloc
ReleaseStgMedium
OleDuplicateData
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CoFreeUnusedLibraries
CoRevokeClassObject
CoRegisterMessageFilter

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 304KB - Virtual size: 301KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2cff35276bd2289f664902564a08351e

Headers

File Characteristics

Imports

winmm

wsock32

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 304KB - Virtual size: 301KB

.data Size: 28KB - Virtual size: 48KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 304KB - Virtual size: 301KB

.data
Size: 28KB - Virtual size: 48KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB