a7af53598de47325faf0c61db7be4f3e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a7af53598de47325faf0c61db7be4f3e_JaffaCakes118
Size

1.7MB
MD5

a7af53598de47325faf0c61db7be4f3e
SHA1

75801549b7c590fc085933e2325203fc96ae03b2
SHA256

09ac96dc6def33e9ff97468e91f92a6f365eb1a2b7268e36e7107b11717b96ff
SHA512

87da0afb6f5964fc139c7624b42cb930130393533a2a310d1adcb9abc6a387f8539c05d3fb64e2e53ae792237ac8c052a1cad4080e8c2f82db9c3d65b1d378a6
SSDEEP

24576:CUKkisOBQS2AIgGehm7OJulk1A89xAIww:rRd7OJulk1A89xAIw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7af53598de47325faf0c61db7be4f3e_JaffaCakes118

Files

a7af53598de47325faf0c61db7be4f3e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

785ac6f99c04e50122d8275301515b5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiOutPrepareHeader
midiStreamStop
midiOutReset
sndPlaySoundA
midiStreamOut
midiStreamClose
midiStreamRestart
PlaySoundA
midiStreamProperty
midiStreamOpen
midiOutUnprepareHeader

rasapi32

RasEnumConnectionsA
RasGetConnectStatusA
RasHangUpA

netapi32

Netbios

wsock32

closesocket
WSAGetLastError
socket
connect
send
select
recv
sendto
recvfrom
getpeername
accept
listen
getsockname
htons
gethostbyname
gethostbyaddr
gethostname
htonl
WSACleanup
WSAStartup
ntohs
ioctlsocket
inet_ntoa
getservbyport
shutdown
inet_addr
WSASetLastError
bind
WSAAsyncSelect

kernel32

LocalFileTimeToFileTime
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetCPInfo
GetProcessVersion
TlsAlloc
SetErrorMode
LocalAlloc
GetThreadLocale
GetShortPathNameA
RaiseException
HeapAlloc
HeapFree
GetOEMCP
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetACP
SetStdHandle
GetFileType
GetVolumeInformationA
GetStringTypeExA
FileTimeToLocalFileTime
RtlUnwind
VirtualFree
UnlockFile
MoveFileA
lstrcpyA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalUnlock
GlobalFree
GetVersionExA
Sleep
GetCurrentDirectoryA
HeapSize
SetUnhandledExceptionFilter
GetProfileStringA
InterlockedExchange
GetWindowsDirectoryA
HeapDestroy
SetEndOfFile
DeleteFileA
GetSystemDirectoryA
GetTempPathA
SetCurrentDirectoryA
FindFirstFileA
FindNextFileA
RemoveDirectoryA
CreateMutexA
GetCurrentProcess
LockFile
FlushFileBuffers
SetFileTime
DuplicateHandle
GetDiskFreeSpaceA
FormatMessageA
GetFullPathNameA
lstrcpynA
SetThreadPriority
LocalFree
SuspendThread
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
lstrcatA
InterlockedIncrement
GetCurrentThread
lstrcmpiA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
DeleteCriticalSection
ResetEvent
ResumeThread
EnterCriticalSection
InitializeCriticalSection
GetTempFileNameA
GetVersion
LeaveCriticalSection
ExitThread
WritePrivateProfileStringA
WaitForMultipleObjects
GetPrivateProfileStringA
WinExec
GetPrivateProfileIntA
SetEvent
SetFilePointer
WaitForSingleObject
CreateEventA
FindClose
WriteFile
GetLocalTime
GetFileSize
CreateFileA
GetFileTime
GetTimeFormatA
ReadFile
GetDateFormatA
VirtualAlloc
IsBadWritePtr
SystemTimeToFileTime
GetLastError
ReleaseMutex
CompareFileTime
FileTimeToSystemTime
CloseHandle
SizeofResource
GetSystemTime
lstrlenA
MulDiv
lstrcmpA
UnhandledExceptionFilter
SetLastError
GetFileAttributesA
GetModuleHandleA
CreateThread
TerminateThread
GetLogicalDriveStringsA
GlobalAlloc
GetTickCount
FreeLibrary
LoadLibraryA
GetProcAddress
FindResourceA
LoadResource
LockResource
GetModuleFileNameA
GlobalLock
SetHandleCount
GetStdHandle
GetTimeZoneInformation
HeapReAlloc
HeapCreate

user32

EndDialog
wvsprintfA
GetWindowDC
GetActiveWindow
BeginPaint
EndPaint
ShowOwnedPopups
ValidateRect
GetMessageA
SetWindowContextHelpId
MapDialogRect
WaitMessage
CharUpperA
LoadStringA
LoadAcceleratorsA
TranslateAcceleratorA
DestroyMenu
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
SetParent
AppendMenuA
DeleteMenu
GetSystemMenu
SetCursorPos
DestroyCursor
DrawMenuBar
DefMDIChildProcA
GetDCEx
LockWindowUpdate
GetMenuStringA
CharNextA
CopyAcceleratorTableA
RegisterClipboardFormatA
PostThreadMessageA
GetMenuCheckMarkDimensions
CreateDialogIndirectParamA
GetScrollPos
SetScrollPos
GetTopWindow
WinHelpA
RegisterClassA
GetMenu
GetMenuItemCount
GetWindowTextLengthA
GetWindowTextA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetWindowPos
RegisterWindowMessageA
GetWindowPlacement
DeferWindowPos
GetDlgCtrlID
IsChild
IsZoomed
EnumChildWindows
GetAsyncKeyState
SetMenuDefaultItem
TrackPopupMenu
GetMenuItemID
IsRectEmpty
TranslateMessage
DispatchMessageA
GetSysColorBrush
SetScrollRange
GetKeyState
ChildWindowFromPoint
SetScrollInfo
GetSubMenu
DestroyIcon
ExitWindowsEx
IsWindowVisible
UnregisterHotKey
GetScrollRange
SetMenuItemBitmaps
GetNextDlgGroupItem
FrameRect
EmptyClipboard
SetClipboardData
GetClipboardData
CloseClipboard
GetDesktopWindow
LoadBitmapA
GetClassNameA
GetWindow
IntersectRect
WindowFromPoint
CallNextHookEx
LoadIconA
CharToOemA
GetDlgItem
GrayStringA
DrawTextA
TabbedTextOutA
GetWindowLongA
GetClipCursor
GetCursorPos
ScreenToClient
ClientToScreen
InvertRect
SetRectEmpty
FillRect
EqualRect
GetClassInfoA
DefWindowProcA
ShowScrollBar
PostMessageA
MessageBeep
PeekMessageA
DrawStateA
SetWindowRgn
GetDC
ReleaseDC
GetCapture
KillTimer
SetTimer
GetMessagePos
PtInRect
SetCapture
SetRect
IsWindow
RedrawWindow
CopyRect
DrawFrameControl
DrawEdge
InflateRect
DrawFocusRect
UnhookWindowsHookEx
ReleaseCapture
SetForegroundWindow
SetWindowsHookExA
SystemParametersInfoA
FindWindowA
MoveWindow
SetWindowTextA
ShowWindow
GetWindowRect
ClipCursor
LoadCursorA
SetCursor
OffsetRect
InvalidateRect
wsprintfA
SetDlgItemTextA
SendDlgItemMessageA
MessageBoxA
PostQuitMessage
MapWindowPoints
SetActiveWindow
SetFocus
AdjustWindowRectEx
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
UpdateWindow
GetFocus
GetSysColor
IsIconic
GetSystemMetrics
GetMenuState
ModifyMenuA
GetNextDlgTabItem
CheckMenuItem
EnableMenuItem
LoadImageA
IsWindowEnabled
RegisterHotKey
SetWindowLongA
LoadMenuA
GetClientRect
DrawIcon
EnableWindow
GetParent
SendMessageA
DrawIconEx
IsClipboardFormatAvailable
OpenClipboard
IsDialogMessageA
SetMenuItemInfoA
GetKeyNameTextA
MapVirtualKeyA
CreateMenu
IsWindowUnicode
CopyIcon
TrackPopupMenuEx
GetMenuItemInfoA
ExcludeUpdateRgn
DefDlgProcA
UnregisterClassA
HideCaret
ShowCaret

gdi32

CreateEllipticRgnIndirect
SetPixelV
CreateBitmap
GetPixel
Arc
CreateCompatibleDC
SelectPalette
SetStretchBltMode
SetDIBitsToDevice
StretchDIBits
GetDeviceCaps
RealizePalette
CreatePen
GetTextExtentPoint32A
GetStockObject
CreatePalette
Rectangle
GetObjectA
CreateFontIndirectA
CreateRectRgn
CreateEllipticRgn
CreateSolidBrush
CreatePolygonRgn
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
DeleteObject
SetViewportOrgEx
GetViewportOrgEx
RoundRect
SetPixel
CreatePatternBrush
CreateDIBitmap
GetTextMetricsA
PatBlt
CreateDCA
UnrealizeObject
SetTextColor
SetBkColor
GetClipBox
SaveDC
DeleteDC
SetMapMode
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SelectClipRgn
ExcludeClipRect
ScaleWindowExtEx
MoveToEx
IntersectClipRect
SetTextAlign
LineTo
GetViewportExtEx
GetWindowExtEx
CreateHatchBrush
DPtoLP
SetRectRgn
CreateRectRgnIndirect
GetMapMode
GetCharWidthA
GetTextColor
LPtoDP
GetBkColor
Ellipse
GetTextExtentPointA
RestoreDC
SetBkMode
CreateCompatibleBitmap
BitBlt
CreateFontA
GetCurrentObject
CombineRgn

comdlg32

GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
PrintDlgA
GetFileTitleA
CommDlgExtendedError

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegSetValueExA
RegEnumKeyA
RegCloseKey
RegOpenKeyExA
RegSetValueA
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegQueryInfoKeyA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueExA
RegDeleteValueA
RegCreateKeyExA
LogonUserA
ImpersonateLoggedOnUser
RevertToSelf

shell32

Shell_NotifyIconA
DragFinish
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetFileInfoA
ExtractIconA
ShellExecuteA
DragQueryFileA

comctl32

ImageList_GetIcon
InitCommonControlsEx
ImageList_GetImageCount
ImageList_Draw
ImageList_GetImageInfo
ImageList_Remove
ImageList_SetBkColor
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_Create
ImageList_LoadImageA
ImageList_DrawIndirect
ord17
ImageList_Destroy

oledlg

ord8

ole32

CoRegisterMessageFilter
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID

olepro32

ord253

oleaut32

VariantCopy
VariantChangeType
VariantTimeToSystemTime
SysAllocString
SysAllocStringByteLen
SysStringLen
VariantClear
SysAllocStringLen
SysFreeString

wininet

InternetConnectA
InternetQueryDataAvailable
InternetOpenA
InternetGetLastResponseInfoA
GopherOpenFileA
GopherCreateLocatorA
InternetSetFilePointer
InternetReadFile
InternetWriteFile
InternetSetStatusCallback
InternetCloseHandle

Sections

.text
Size: 640KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 800KB - Virtual size: 800KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

785ac6f99c04e50122d8275301515b5c

Headers

File Characteristics

Imports

winmm

rasapi32

netapi32

wsock32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

Sections

.text Size: 640KB - Virtual size: 640KB

.rdata Size: 132KB - Virtual size: 132KB

.data Size: 182KB - Virtual size: 182KB

.rsrc Size: 800KB - Virtual size: 800KB

.text
Size: 640KB - Virtual size: 640KB

.rdata
Size: 132KB - Virtual size: 132KB

.data
Size: 182KB - Virtual size: 182KB

.rsrc
Size: 800KB - Virtual size: 800KB