a14f3626a0045842a0afef3d4944d8fc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a14f3626a0045842a0afef3d4944d8fc_JaffaCakes118
Size

324KB
MD5

a14f3626a0045842a0afef3d4944d8fc
SHA1

6dabc059a22e8cc53e8c7773dfad3b8d59dee2fe
SHA256

07baa25959aadac751e14c0913224d811ad1402e2beb3279d5ae084b2627cdbb
SHA512

3d828c32d3ecb888f0d41b4fe2bfe85aed9a8fe67aeda3be7fdf276f6603017258d1e7805d4782e354cc4e0d685a5d5149085572a2ab82f277269814ab8de148
SSDEEP

6144:34+isIJxJXgHFzt4dqKMfme5O3IQ06bF/9ufrYl1Y9z:6sI3FSt4DM+e5O3IQFB/YWS9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a14f3626a0045842a0afef3d4944d8fc_JaffaCakes118

Files

a14f3626a0045842a0afef3d4944d8fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d96b5766cd7a3bce12f283c5168e5c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumValueW
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExA
RegCloseKey

user32

CreateIconIndirect
DrawIconEx
EmptyClipboard
EndPaint
EnumChildWindows
EnumDisplayMonitors
FillRect
FindWindowA
FlashWindow
GetAsyncKeyState
GetClassNameA
GetClientRect
GetClipboardData
GetCursorPos
GetDC
GetDesktopWindow
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyboardLayout
GetKeyboardLayoutList
GetMessageA
GetMonitorInfoA
GetSysColor
GetSystemMetrics
GetWindow
GetWindowLongA
GetWindowRect
GetWindowThreadProcessId
IntersectRect
InvalidateRect
DefWindowProcA
IsIconic
IsWindow
LoadCursorA
LoadIconA
LoadImageA
CreateWindowExA
MonitorFromWindow
OpenClipboard
PeekMessageA
PostMessageA
PtInRect
RegisterClassA
CopyIcon
CloseClipboard
ClientToScreen
CallWindowProcA
BeginPaint
ActivateKeyboardLayout
WindowFromPoint
ValidateRect
UnregisterDeviceNotification
UnregisterClassA
TranslateMessage
SystemParametersInfoA
ShowWindow
SetWindowTextW
SetWindowRgn
SetWindowPos
SetWindowLongA
SetTimer
SetLayeredWindowAttributes
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetCapture
SetActiveWindow
SendMessageW
ScreenToClient
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterDeviceNotificationA
MonitorFromPoint
DispatchMessageA
DefWindowProcW
DestroyIcon
DestroyWindow
RegisterClassW
IsChild

comdlg32

CommDlgExtendedError
GetOpenFileNameA

winmm

timeGetTime
PlaySoundA

gdi32

BitBlt
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateFontA
CreatePen
CreateRectRgn
CreateRoundRectRgn
CreateSolidBrush
DPtoLP
DeleteDC
DeleteObject
StretchBlt
SetViewportOrgEx
SetTextColor
SetTextAlign
SetStretchBltMode
SetRectRgn
SetMapMode
SetBrushOrgEx
SetBkMode
SetBkColor
SelectObject
RemoveFontResourceA
Polyline
Polygon
MoveToEx
LPtoDP
GetTextMetricsA
GetTextExtentPoint32A
GetTextColor
GetObjectW
GetObjectA
GetDeviceCaps
GetCharABCWidthsW
GetCharABCWidthsA
GetBkColor
GdiFlush
ExtTextOutW
ExtTextOutA
EnumFontFamiliesExA
AddFontResourceA

ole32

OleUninitialize
ReleaseStgMedium
CoCreateInstance
OleInitialize
RevokeDragDrop
CoTaskMemAlloc
RegisterDragDrop

oleaut32

VariantInit
VariantClear
VariantChangeType
SysFreeString
SysAllocString
SafeArrayUnaccessData
SafeArrayCreateVector
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayDestroy
SafeArrayAccessData

kernel32

FileTimeToSystemTime
lstrlenA
WriteFile
WriteConsoleW
WriteConsoleA
WideCharToMultiByte
VirtualQuery
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateProcess
SleepEx
SetUnhandledExceptionFilter
SetStdHandle
SetLastError
SetHandleCount
SetFilePointer
SetEnvironmentVariableW
SetEnvironmentVariableA
RtlUnwind
ReadFile
ReadDirectoryChangesW
RaiseException
QueryPerformanceCounter
OutputDebugStringW
MultiByteToWideChar
MulDiv
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsValidCodePage
IsDebuggerPresent
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalUnlock
GlobalSize
GlobalLock
GlobalFree
GlobalAlloc
GetVersionExA
GetUserDefaultLCID
GetTimeZoneInformation
GetTimeFormatA
GetTickCount
GetSystemTimeAsFileTime
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetOEMCP
GetModuleHandleA
GetModuleFileNameA
GetLogicalDriveStringsA
GetLocaleInfoW
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameA
GetFileType
GetEnvironmentStringsW
GetEnvironmentStringsA
GetDriveTypeA
GetDiskFreeSpaceExA
GetDateFormatW
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryA
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetCommandLineA
GetCPInfo
GetACP
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FlushFileBuffers
FindFirstFileA
FindClose
FileTimeToLocalFileTime
ExpandEnvironmentStringsW
ExitProcess
EnumSystemLocalesA
EnterCriticalSection
DeleteCriticalSection
CreateProcessA
CancelIo
CloseHandle
CompareStringA
CompareStringW
CreateFileA
CreateFileW

shlwapi

SHDeleteKeyA

shell32

ShellExecuteA
SHGetFolderPathA
SHGetFileInfoW
DragQueryFileA
Shell_NotifyIconW

imm32

ImmGetCandidateListCountW
ImmGetCandidateListW
ImmGetCompositionStringW
ImmGetContext
ImmGetConversionStatus
ImmGetProperty
ImmIsUIMessageA
ImmNotifyIME
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionStringW
ImmSetConversionStatus

Exports

Exports

Breakpad_SteamMiniDumpInit
Breakpad_SteamSetAppID
Breakpad_SteamSetSteamID
Breakpad_SteamWriteMiniDumpSetComment
Breakpad_SteamWriteMiniDumpUsingExceptionInfoWithBuildId
CreateInterface
Steam_BConnected
Steam_BGetCallback
Steam_BLoggedOn
Steam_BReleaseSteamPipe
Steam_ConnectToGlobalUser
Steam_CreateGlobalUser
Steam_CreateLocalUser
Steam_CreateSteamPipe
Steam_FreeLastCallback
Steam_GSBLoggedOn
Steam_GSBSecure
Steam_GSGetSteam2GetEncryptionKeyToSendToNewClient
Steam_GSGetSteamID
Steam_GSLogOff
Steam_GSLogOn
Steam_GSRemoveUserConnect
Steam_GSSendSteam2UserConnect
Steam_GSSendSteam3UserConnect
Steam_GSSendUserDisconnect
Steam_GSSendUserStatusResponse
Steam_GSSetServerType
Steam_GSSetSpawnCount
Steam_GSUpdateStatus
Steam_GetAPICallResult
Steam_GetGSHandle
Steam_InitiateGameConnection
Steam_LogOff
Steam_LogOn
Steam_ReleaseUser
Steam_SetLocalIPBinding
Steam_TerminateGameConnection

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3d96b5766cd7a3bce12f283c5168e5c3

Headers

File Characteristics

Imports

advapi32

user32

comdlg32

winmm

gdi32

ole32

oleaut32

kernel32

shlwapi

shell32

imm32

Exports

Exports

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 112KB - Virtual size: 112KB

.data Size: 76KB - Virtual size: 1.7MB

.idata Size: 12KB - Virtual size: 12KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 112KB - Virtual size: 112KB

.data
Size: 76KB - Virtual size: 1.7MB

.idata
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 20KB - Virtual size: 20KB