c98465abcff3c8712f73046bb28b5888_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c98465abcff3c8712f73046bb28b5888_JaffaCakes118
Size

2.0MB
MD5

c98465abcff3c8712f73046bb28b5888
SHA1

1e1133c4c77c43961f3a75aedec088509ec37f55
SHA256

341f39618fffd171a4981d5b71db8d8550b69046804b88deca0b26ebadcc83ca
SHA512

1ea8cf2232cd8404c799c55c2e4d00a7167e07bab3a24402a991a303236b996cbed102050f0b67f1227bc65f34098874b462c78ca3b6fa71d381a9ba9c282d64
SSDEEP

24576:pVD5SeAQyfT8NfNOKKOLbHpwtTAFQqFmzSSICmLa7zm33GXgCs4m2VL0GsDkS1YD:HMYL9O5wHGXxs4m2Z0DBYwIFB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c98465abcff3c8712f73046bb28b5888_JaffaCakes118

Files

c98465abcff3c8712f73046bb28b5888_JaffaCakes118
.dll windows:4 windows x86 arch:x86

75e8eeaa81ee3374fe7c3044af9cd051

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeBeginPeriod
timeGetDevCaps
timeEndPeriod

dsound

ord1

kernel32

GlobalGetAtomNameA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
CreateFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
GetCPInfo
GetOEMCP
RtlUnwind
VirtualProtect
GlobalFindAtomA
GetSystemInfo
VirtualQuery
GetCommandLineA
ExitProcess
TerminateProcess
ExitThread
CreateThread
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
lstrcmpW
GlobalFlags
InterlockedIncrement
WritePrivateProfileStringA
SetErrorMode
lstrcatA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
SetLastError
GlobalFree
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
InterlockedDecrement
SuspendThread
ResumeThread
SetThreadPriority
GlobalAddAtomA
FindResourceA
LoadResource
LockResource
SizeofResource
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalAlloc
GlobalDeleteAtom
GetModuleFileNameA
GetModuleHandleA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
lstrcmpA
RaiseException
GetProcessHeap
HeapAlloc
HeapFree
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
Sleep
QueryPerformanceCounter
QueryPerformanceFrequency
CloseHandle
GetProcAddress
LoadLibraryA
FreeLibrary
SetEvent
ResetEvent
WaitForSingleObject
CreateEventA
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc

user32

GetCapture
WinHelpA
RegisterWindowMessageA
DestroyMenu
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
CopyRect
SetWindowPos
ShowWindow
SetWindowLongA
CreateWindowExA
GetDlgItem
LoadCursorA
GetSystemMetrics
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ClientToScreen
GetWindow
GetDlgCtrlID
PtInRect
GetWindowTextA
SetWindowTextA
GetClassNameA
wsprintfA
GetMenuItemID
GetMenuItemCount
GetSubMenu
UnhookWindowsHookEx
SetMenuItemBitmaps
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
GetClassLongA
GetClassInfoExA
SetPropA
GetCursorPos
ValidateRect
GetPropA
RemovePropA
GetForegroundWindow
MessageBoxA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
SendMessageA
SetCursor
PostMessageA
PostQuitMessage
UnregisterClassA
PeekMessageA
GetDesktopWindow
CharUpperA
GetWindowRect

gdi32

SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
SelectObject
OffsetViewportOrgEx
TextOutA
RectVisible
PtVisible
Escape
SetViewportOrgEx
SetBkColor
RestoreDC
SaveDC
DeleteObject
GetDeviceCaps
CreateBitmap
GetClipBox
SetMapMode
SetTextColor
ExtTextOutA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA

comctl32

ord17

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA

oleaut32

VariantInit
VariantChangeType
VariantClear

Exports

Exports

GetMidiMsg
MaSound_Close
MaSound_Control
MaSound_Create
MaSound_Delete
MaSound_DeviceControl
MaSound_DeviceControlEx
MaSound_EmuInitialize
MaSound_EmuTerminate
MaSound_Generate
MaSound_GetEmuInfo
MaSound_Initialize
MaSound_Load
MaSound_Open
MaSound_Pause
MaSound_Restart
MaSound_Seek
MaSound_SetEmuPath
MaSound_Standby
MaSound_Start
MaSound_Stop
MaSound_Terminate
MaSound_Unload
Phrase_CheckData
Phrase_GetInfo
Phrase_GetLength
Phrase_GetLink
Phrase_GetPanpot
Phrase_GetPosition
Phrase_GetStatus
Phrase_GetVolume
Phrase_Initialize
Phrase_Kill
Phrase_Pause
Phrase_Play
Phrase_RemoveData
Phrase_Restart
Phrase_Seek
Phrase_SetData
Phrase_SetEvHandler
Phrase_SetLink
Phrase_SetPanpot
Phrase_SetVolume
Phrase_Stop
Phrase_Terminate
SetMidiMsg
malib_Decode_7bitData
malib_GetContentsData
malib_MakeCRC
malib_hvscript_checker
malib_smafaudio_checker
malib_smafphrase_checker

Sections

.text
Size: 1000KB - Virtual size: 998KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768KB - Virtual size: 766KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

75e8eeaa81ee3374fe7c3044af9cd051

Headers

File Characteristics

Imports

winmm

dsound

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oleaut32

Exports

Exports

Sections

.text Size: 1000KB - Virtual size: 998KB

.rdata Size: 768KB - Virtual size: 766KB

.data Size: 76KB - Virtual size: 1.9MB

.rsrc Size: 16KB - Virtual size: 12KB

.reloc Size: 88KB - Virtual size: 87KB

.text Size: 116KB - Virtual size: 116KB

.text
Size: 1000KB - Virtual size: 998KB

.rdata
Size: 768KB - Virtual size: 766KB

.data
Size: 76KB - Virtual size: 1.9MB

.rsrc
Size: 16KB - Virtual size: 12KB

.reloc
Size: 88KB - Virtual size: 87KB

.text
Size: 116KB - Virtual size: 116KB