94d26332e14db0a4de9066bdddbb738b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

94d26332e14db0a4de9066bdddbb738b_JaffaCakes118
Size

329KB
MD5

94d26332e14db0a4de9066bdddbb738b
SHA1

636bcd58b2724cb81b7084a65bfecf8045916f3a
SHA256

11b0a0fa5268f4d2b7b98e78c3ad7914bf01fe236ad9d15c8ddc009c973c85c7
SHA512

04aae05015fdf321786086ba7ef7a76d620ec89cb4a5520b6e5f10de856a6cf40996c6bc09e531569b856d8f2df72cdbba033b9f925e794f69b57271cf39bddc
SSDEEP

6144:6QU0WohslFm48yvoRxz+rWPLMeONUke552Nv547cOcnp/D:40g445sBfge0M5YQ7CnZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94d26332e14db0a4de9066bdddbb738b_JaffaCakes118

Files

94d26332e14db0a4de9066bdddbb738b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d70fc7d7b1ceb28e3317780317e30674

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Shell_NotifyIconW
Shell_NotifyIconA
ShellExecuteW
ShellExecuteExW
SHGetPathFromIDListW
SHGetMalloc
SHGetFolderPathW
SHBrowseForFolderW
SHAppBarMessage
DragQueryFileW
DragFinish
DragAcceptFiles

comdlg32

GetOpenFileNameW
GetSaveFileNameW
ChooseFontW

netapi32

NetApiBufferFree
NetGetJoinInformation

winmm

waveOutGetNumDevs
waveInGetNumDevs
PlaySoundW

wininet

HttpQueryInfoW
ResumeSuspendedDownload
InternetSetStatusCallbackW
InternetSetOptionW
InternetSetOptionA
InternetReadFile
InternetOpenW
InternetOpenUrlW
InternetOpenA
InternetCrackUrlW
InternetConnectW
InternetCloseHandle
InternetCanonicalizeUrlW
HttpSendRequestW
HttpOpenRequestW
GetUrlCacheEntryInfoW

advapi32

AccessCheck
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RevertToSelf
ReportEventW
RegisterEventSourceW
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyW
RegOpenKeyExW
RegOpenKeyExA
RegFlushKey
RegEnumKeyW
RegEnumKeyA
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW
RegCreateKeyExA
RegCloseKey
OpenThreadToken
OpenProcessToken
IsValidSecurityDescriptor
InitializeSecurityDescriptor
InitializeAcl
ImpersonateSelf
GetLengthSid
FreeSid
DeregisterEventSource
CryptReleaseContext
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptCreateHash
CryptAcquireContextW
AllocateAndInitializeSid
AddAccessAllowedAce

version

VerQueryValueW
VerQueryValueA
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoA

gdi32

SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetTextAlign
SetMapMode
SetLayout
SetDIBits
SetDIBColorTable
SetBkMode
SetBkColor
SelectPalette
SelectObject
SelectClipRgn
SaveDC
RestoreDC
Rectangle
RealizePalette
Polygon
MoveToEx
StretchBlt
LineTo
LPtoDP
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetTextMetricsW
GetTextExtentPoint32W
GetTextAlign
BitBlt
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateFontIndirectW
CreateHalftonePalette
CreatePalette
CreatePen
CreatePolygonRgn
CreateRectRgn
CreateRectRgnIndirect
CreateSolidBrush
DPtoLP
DeleteDC
DeleteObject
Ellipse
EnumFontFamiliesExW
ExcludeClipRect
FillRgn
GetClipBox
GetClipRgn
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetLayout
GetMapMode
GetObjectW
GetPaletteEntries
GetStockObject
GetSystemPaletteEntries

ole32

CoCreateInstance
CoCreateGuid
CLSIDFromString
CLSIDFromProgID
CreateILockBytesOnHGlobal
CreateOleAdviseHolder
DoDragDrop
GetHGlobalFromILockBytes
IIDFromString
OleCreateStaticFromData
OleFlushClipboard
OleInitialize
OleLoadFromStream
CoGetClassObject
OleRegEnumVerbs
OleRegGetMiscStatus
OleRegGetUserType
OleRun
OleSaveToStream
OleUninitialize
RegisterDragDrop
RevokeDragDrop
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
StringFromCLSID
StringFromGUID2
WriteClassStm
CoInitialize
CoRegisterClassObject
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
OleLockRunning
CoUninitialize
CreateStreamOnHGlobal

wsock32

WSACancelAsyncRequest
WSACleanup
WSAAsyncGetHostByName
WSAGetLastError
WSAStartup
ntohs
accept
bind
closesocket
connect
gethostbyname
gethostname
getsockname
htonl
htons
ioctlsocket
inet_addr
listen
ntohl
recv
recvfrom
select
send
sendto
setsockopt
socket
WSAAsyncSelect

comctl32

ord17
ImageList_Remove
ImageList_GetIcon
ImageList_EndDrag
ImageList_DrawEx
ImageList_Draw
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_Destroy
ImageList_Create
ImageList_BeginDrag
ImageList_AddMasked
ImageList_Add
CreateToolbarEx
CreateStatusWindowW
ord8
PropertySheetW

oleaut32

VariantInit
VariantCopy
VariantClear
VariantChangeType
VarCmp
SysStringLen
SysStringByteLen
SysFreeString
SysAllocStringLen
SysAllocStringByteLen
SysAllocString
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetElement
SafeArrayGetDim
SafeArrayDestroy
SafeArrayCreateVector
SafeArrayAccessData
OleCreatePropertyFrame
OleCreateFontIndirect
LoadTypeLi
LoadRegTypeLi
CreateStdDispatch

user32

GetMenuItemInfoW
GetMenuState
GetMessageTime
GetMessageW
GetNextDlgTabItem
GetParent
GetPropA
GetScrollInfo
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMetrics
GetUpdateRect
GetUserObjectInformationW
GetWindow
GetWindowDC
GetWindowLongA
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
InflateRect
InsertMenuItemW
IntersectRect
InvalidateRect
InvalidateRgn
IsChild
IsClipboardFormatAvailable
IsDialogMessageW
IsDlgButtonChecked
IsIconic
IsMenu
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapA
LoadBitmapW
LoadCursorA
LoadCursorW
LoadIconA
LoadIconW
LoadImageA
LoadImageW
LoadMenuA
LoadMenuW
LoadStringA
LoadStringW
MapWindowPoints
MessageBeep
MessageBoxIndirectW
MessageBoxW
ModifyMenuW
GetMenuItemID
MsgWaitForMultipleObjects
OffsetRect
OpenInputDesktop
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PtInRect
RedrawWindow
RegisterClassExA
RegisterClassExW
RegisterClassW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ScreenToClient
SendDlgItemMessageW
SendMessageW
SetCapture
SetCursor
SetCursorPos
SetDlgItemInt
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenu
SetMenuDefaultItem
SetMenuItemInfoW
SetParent
SetPropA
SetRect
SetRectEmpty
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TrackPopupMenuEx
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassW
UpdateWindow
ValidateRect
WindowFromDC
wsprintfW
GetMenuItemCount
GetMenu
GetLastInputInfo
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItemTextW
GetDlgItemInt
GetDlgItem
GetDlgCtrlID
GetDialogBaseUnits
GetDesktopWindow
GetDC
GetCursorPos
FindWindowW
GetClientRect
GetClassNameW
GetClassInfoExW
GetClassInfoExA
GetAsyncKeyState
FlashWindow
MoveWindow
FillRect
EqualRect
EnumChildWindows
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableMenuItem
DrawTextW
DrawMenuBar
DrawFocusRect
DrawEdge
DrawAnimatedRects
DispatchMessageW
DialogBoxParamW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyAcceleratorTable
DeleteMenu
DeferWindowPos
DefWindowProcW
CreateWindowExW
CreateWindowExA
CreatePopupMenu
CreateDialogParamW
CreateAcceleratorTableW
CloseWindow
CloseDesktop
ClientToScreen
CheckRadioButton
CheckMenuRadioItem
CheckMenuItem
CheckDlgButton
CharUpperA
CharPrevW
CharNextW
CallWindowProcW
CallNextHookEx
BeginPaint
BeginDeferWindowPos
AdjustWindowRectEx
AdjustWindowRect
FindWindowExW

shlwapi

StrStrIW
wnsprintfW
wnsprintfA
StrTrimW
StrTrimA
StrToIntExW
StrStrW
StrStrIA
StrStrA
StrRChrW
StrRChrA
StrPBrkW
StrCpyNW
StrCmpNW
StrCmpNIW
StrCmpNA
StrCmpIW
StrChrW
StrChrA
StrCatBuffW
StrCatBuffA
SHGetValueW
SHGetInverseCMAP

kernel32

ReleaseMutex
ResetEvent
ResumeThread
SearchPathA
SetCurrentDirectoryW
SetErrorMode
SetEvent
SetFilePointer
SetLastError
SetThreadLocale
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
TerminateProcess
TerminateThread
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpA
lstrcmpW
lstrcmpiA
ReadFile
RaiseException
QueryPerformanceCounter
OpenFileMappingW
OpenEventW
MultiByteToWideChar
MulDiv
MoveFileW
MoveFileExW
MapViewOfFile
LockResource
LocalFree
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
IsValidLocale
IsDBCSLeadByteEx
IsBadWritePtr
IsBadStringPtrW
IsBadStringPtrA
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapAlloc
GlobalUnlock
GlobalMemoryStatus
GlobalLock
GlobalFree
GlobalAlloc
GetWindowsDirectoryW
GetWindowsDirectoryA
GetVersionExW
GetVersionExA
GetVersion
GetUserDefaultLCID
GetTimeFormatW
GetTickCount
GetThreadLocale
GetTempPathW
GetTempPathA
GetTempFileNameW
GetTempFileNameA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDefaultUILanguage
GetSystemDefaultLCID
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLocaleInfoW
GetLocaleInfoA
GetLocalTime
GetLastError
lstrcmpiW
lstrcpyW
lstrcpynA
lstrcpynW
lstrlenA
lstrlenW
CreateMutexA
CreateFileW
CreateFileMappingW
CreateFileMappingA
CreateFileA
CreateEventW
CreateEventA
CreateDirectoryW
CopyFileA
CompareStringW
CompareStringA
CompareFileTime
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileA
DeleteFileW
DuplicateHandle
EnterCriticalSection
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindFirstFileW
FindResourceA
FindResourceExW
FindResourceW
FlushInstructionCache
FormatMessageA
FormatMessageW
FreeLibrary
GetACP
GetCommandLineW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFileSize
GetFileAttributesW
GetFileAttributesA
GetDateFormatW
CloseHandle

Exports

Exports

DllGetVersion
pcre_callout
pcre_compile
pcre_compile2
pcre_config
pcre_copy_named_substring
pcre_copy_substring
pcre_dfa_exec
pcre_exec
pcre_free
pcre_free_substring
pcre_free_substring_list
pcre_fullinfo
pcre_get_named_substring
pcre_get_stringnumber
pcre_get_stringtable_entries
pcre_get_substring
pcre_get_substring_list
pcre_info
pcre_maketables
pcre_malloc
pcre_refcount
pcre_stack_free
pcre_stack_malloc
pcre_study
pcre_version
regcomp
regerror
regexec
regfree

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d70fc7d7b1ceb28e3317780317e30674

Headers

File Characteristics

Imports

shell32

comdlg32

netapi32

winmm

wininet

advapi32

version

gdi32

ole32

wsock32

comctl32

oleaut32

user32

shlwapi

kernel32

Exports

Exports

Sections

.text Size: 104KB - Virtual size: 104KB

.rdata Size: 112KB - Virtual size: 112KB

.data Size: 76KB - Virtual size: 1.7MB

.idata Size: 16KB - Virtual size: 16KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 104KB - Virtual size: 104KB

.rdata
Size: 112KB - Virtual size: 112KB

.data
Size: 76KB - Virtual size: 1.7MB

.idata
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 20KB - Virtual size: 20KB