db8979f3326eb1ac3bc1021ccc53bb63_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

db8979f3326eb1ac3bc1021ccc53bb63_JaffaCakes118
Size

530KB
MD5

db8979f3326eb1ac3bc1021ccc53bb63
SHA1

389ba1d632ee9b5f7ddbd09a14c17cca17da7ab0
SHA256

2d1370814d1e4e998a9bfc06cb161604a380f7397730dcd2b458d54d004c7a33
SHA512

bb5f0e579630367240c52f24fc07962f9be389e2d5a3ae8c68b85ab156a79412967e73c2658f24d6d6d1687cad93618ec4ee2d75494208ba8c4004efa76f8455
SSDEEP

12288:wJ4AuDQj1VGQaJXyB8igSD1PUFhfzrEVOQB:U9V1QE8igSBUFhfzAVX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db8979f3326eb1ac3bc1021ccc53bb63_JaffaCakes118

Files

db8979f3326eb1ac3bc1021ccc53bb63_JaffaCakes118
.exe windows:4 windows x86 arch:x86

16b5893acc0882582571214f8c868cbc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCommTimeouts
SetupComm
lstrcpyA
SetCommState
GetOverlappedResult
GetExitCodeThread
BuildCommDCBA
GetCommState
DeleteCriticalSection
SetCommMask
TerminateThread
QueryPerformanceFrequency
SetCurrentDirectoryA
InitializeCriticalSection
GetDriveTypeA
GetFullPathNameA
SetEvent
GetLocaleInfoA
LoadLibraryA
CreateEventA
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
CreateProcessA
LocalSize
LocalAlloc
GetLastError
GetTickCount
LocalFree
EnterCriticalSection
LeaveCriticalSection
Sleep
ReleaseSemaphore
CloseHandle
CreateThread
GetThreadLocale
ReadFile
GetCurrentThreadId
OutputDebugStringA
WriteFile
QueryPerformanceCounter
CreateSemaphoreA
UnmapViewOfFile
GetFileSize
CreateFileMappingA
MapViewOfFile
DeviceIoControl
CreateFileA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetModuleHandleA
GetStdHandle
GetFileAttributesA
HeapSize
SetEndOfFile
GetTimeZoneInformation
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
SetEnvironmentVariableA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
FlushFileBuffers
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetProcAddress
HeapCreate
GetFileType
SetHandleCount
SetFilePointer
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
GetStringTypeA
TlsGetValue
SetLastError
TlsAlloc
RtlUnwind
GetVersion
GetCommandLineA
GetStartupInfoA
ExitThread
TlsSetValue
GetLocalTime
HeapReAlloc
WaitForSingleObject
ExitProcess
HeapAlloc
HeapFree

user32

CheckDlgButton
ShowWindow
PostThreadMessageA
MoveWindow
SetWindowTextA
LoadCursorA
BeginPaint
GetUpdateRgn
SystemParametersInfoA
LoadIconA
IsDlgButtonChecked
GetDlgItemInt
GetCursorPos
MessageBeep
SetDlgItemTextA
IsWindowEnabled
SetFocus
GetDlgItemTextA
GetWindowWord
PeekMessageA
GetKeyboardState
EnableWindow
MessageBoxA
PostMessageA
GetKeyboardLayoutNameA
DefWindowProcA
RegisterClassA
RegisterWindowMessageA
UpdateWindow
GetMessageA
CreateWindowExA
CheckRadioButton
SetTimer
KillTimer
DispatchMessageA
PostQuitMessage
SendMessageA
SetDlgItemInt
OffsetRect
GetWindowRect
DrawTextA
InvalidateRect
SetCursor
GetFocus
EndDialog
EndPaint
wsprintfA
SendDlgItemMessageA
DrawTextExA
TranslateMessage
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
SetWindowWord
LoadStringA
GetParent
FillRect
GetDlgItem
DialogBoxParamA
ShowCursor
DestroyWindow

gdi32

SetTextColor
GetTextExtentPoint32A
TextOutA
GetRegionData
DeleteObject
CreateFontA
CreateRectRgn
CreateRectRgnIndirect
RemoveFontResourceA
AddFontResourceA
GetStockObject
SetBkColor
LineTo
MoveToEx
CreatePen
SelectObject
SetBkMode

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegOpenKeyExA
RegEnumValueA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegFlushKey

ddraw

DirectDrawCreate

dsound

DirectSoundCreate

winmm

mciSendCommandA
timeSetEvent
mciGetDeviceIDA
joyGetPosEx
mmioClose
timeKillEvent
joyGetDevCapsA
mmioDescend
mmioAscend
mmioRead
mmioSetInfo
mmioOpenA
mmioSeek
joySetCapture
mmioAdvance
mmioGetInfo
midiStreamRestart
joyReleaseCapture
midiOutSetVolume
midiStreamOut
midiOutPrepareHeader
midiStreamProperty
midiStreamOpen
midiStreamPause
midiOutReset
midiOutUnprepareHeader
midiStreamClose

msacm32

acmMetrics

tapi32

lineSetDevConfig
lineGetCallStatus
lineShutdown
lineGetAddressStatus
lineDeallocateCall
lineDrop
lineClose
lineGetCountry
lineTranslateAddress
lineGetTranslateCaps
lineSetCurrentLocation
lineGetIcon
lineTranslateDialog
lineGetAddressCaps
lineAnswer
lineMakeCall
lineGetDevCaps
lineNegotiateAPIVersion
lineGetID
lineOpen
lineDial
lineInitialize
lineSetStatusMessages

comctl32

ord17

wsock32

gethostbyname
ntohs
WSAGetLastError
recv
WSACleanup
WSAStartup
gethostname
setsockopt
getsockname
connect
inet_ntoa
htonl
bind
sendto
closesocket
send
socket
htons
recvfrom

aweman32

ord2

Sections

.text
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

16b5893acc0882582571214f8c868cbc

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ddraw

dsound

winmm

msacm32

tapi32

comctl32

wsock32

aweman32

Sections

.text Size: 386KB - Virtual size: 385KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 89KB - Virtual size: 408KB

.idata Size: 7KB - Virtual size: 6KB

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 28KB - Virtual size: 44KB

.text
Size: 386KB - Virtual size: 385KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 89KB - Virtual size: 408KB

.idata
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 28KB - Virtual size: 44KB