f689356b038161b6f7b80373b6a3dca7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f689356b038161b6f7b80373b6a3dca7_JaffaCakes118
Size

2.3MB
MD5

f689356b038161b6f7b80373b6a3dca7
SHA1

10e8f4efea7f2c5c903ce2e1370cddf00fd8748a
SHA256

5a43d625f2d5a01f5a4026821d0bb0d0abf160ff58597ebd35ff746652d755db
SHA512

0a38c806f4ae5a40639081dca42b80bcb256edff16108291d40815637565dfab486dfd6406bd2446d020a47944aca238f843c57e983ae5623fd91da9c8055a99
SSDEEP

49152:rYK56/ieEPPz9Wj8VhxF4lDkrmtvqzWvMGTQYKG:l2TAPzoj8VDF4loStvmWvMD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f689356b038161b6f7b80373b6a3dca7_JaffaCakes118

Files

f689356b038161b6f7b80373b6a3dca7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4467296697ebdc03845dc133bc15c8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mixerGetLineInfoA
mciSendCommandA
timeKillEvent
mixerSetControlDetails
timeBeginPeriod
timeSetEvent
sndPlaySoundA
mciGetErrorStringA
mixerOpen
mixerGetNumDevs
mixerClose
timeEndPeriod
timeGetTime
waveOutGetDevCapsA
waveOutGetNumDevs
waveOutOpen
waveOutClose
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
waveOutReset
waveOutGetPosition
waveInAddBuffer
waveInPrepareHeader
waveInUnprepareHeader
waveInGetDevCapsA
waveInGetNumDevs
waveInStart
waveInOpen
waveInClose
waveInReset
mixerGetControlDetailsA
mixerGetLineControlsA

wsock32

send
__WSAFDIsSet
WSACancelAsyncRequest
socket
WSAAsyncGetHostByName
inet_addr
closesocket
recv
inet_ntoa
select
WSAStartup
WSACleanup
WSAGetLastError
htons
ioctlsocket
connect

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

msacm32

acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader
acmStreamClose
acmFormatSuggest
acmStreamOpen
acmStreamSize

kernel32

lstrlenW
Sleep
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
TlsGetValue
DeleteCriticalSection
IsBadWritePtr
IsBadReadPtr
InitializeCriticalSection
TlsAlloc
TlsFree
FreeResource
LockResource
LoadResource
FindResourceA
GlobalSize
GetFileType
FlushFileBuffers
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
GetCurrentThreadId
SetThreadPriority
CreateThread
CreateEventA
QueryPerformanceFrequency
QueryPerformanceCounter
InterlockedDecrement
OpenFile
VirtualLock
VirtualProtect
GlobalHandle
lstrcatA
lstrcmpA
IsDBCSLeadByte
LocalUnlock
LocalLock
LocalAlloc
lstrcmpiA
FileTimeToDosDateTime
IsBadStringPtrA
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetVolumeLabelA
GetLocalTime
MoveFileA
VirtualUnlock
VirtualFree
VirtualAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
SetLastError
DuplicateHandle
LockFile
UnlockFile
GetStringTypeExA
GetThreadLocale
GetFileTime
LocalReAlloc
GlobalFlags
GetCPInfo
GetOEMCP
SizeofResource
RtlUnwind
RaiseException
GetTimeZoneInformation
ExitProcess
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
GetACP
HeapSize
SetStdHandle
GetEnvironmentVariableA
HeapDestroy
HeapCreate
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
IsBadCodePtr
SetEnvironmentVariableA
GetLocaleInfoW
DeviceIoControl
SetErrorMode
GetLogicalDriveStringsA
WriteFile
GetFileSize
SetEndOfFile
FreeLibrary
GetProcAddress
LoadLibraryA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
lstrcpyA
GetFileAttributesA
GetVolumeInformationA
lstrcpynA
GetFullPathNameA
CloseHandle
InterlockedExchange
ReadFile
SetFilePointer
CreateFileA
FindNextFileA
InterlockedIncrement
GetCurrentDirectoryA
SetCurrentDirectoryA
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
SystemTimeToFileTime
GetSystemTime
SetFileTime
DeleteFileA
SetFileAttributesA
WideCharToMultiByte
RemoveDirectoryA
CreateDirectoryA
GetDiskFreeSpaceA
GetModuleHandleA
GetExitCodeProcess
GetLastError
CreateProcessA
lstrlenA
GetTempFileNameA
MulDiv
WritePrivateProfileStringA
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetPrivateProfileSectionA
CopyFileA
GetVersionExA
MoveFileExA
GetShortPathNameA
GetWindowsDirectoryA
MultiByteToWideChar
LocalFree
FormatMessageA
GetTempPathA
GetModuleFileNameA
TerminateProcess
OpenProcess
LoadLibraryExA
GetTickCount
ResetEvent
SetEvent
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetLocaleInfoA
GetCurrentProcessId
FreeEnvironmentStringsA
GetEnvironmentStrings
GetProcessVersion
ExpandEnvironmentStringsA
GetComputerNameA
GetSystemDirectoryA
GetDriveTypeA
GetProfileStringA
GlobalMemoryStatus
GetSystemDefaultLangID

user32

AdjustWindowRectEx
SendDlgItemMessageA
IsDialogMessageA
IsWindowEnabled
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuCheckMarkDimensions
BeginPaint
EndPaint
CreateDialogIndirectParamA
LoadStringA
ValidateRect
GetMessageA
WindowFromPoint
DestroyMenu
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
GetNextDlgGroupItem
SetWindowContextHelpId
MapDialogRect
CopyAcceleratorTableA
RegisterClipboardFormatA
ShowOwnedPopups
GetSysColorBrush
PostThreadMessageA
DrawAnimatedRects
SetParent
FindWindowA
EnumChildWindows
GetClassNameA
TrackPopupMenu
LoadMenuA
SetMenuDefaultItem
ReleaseCapture
MapWindowPoints
ExitWindowsEx
IsWindowVisible
KillTimer
SetTimer
UnionRect
ClientToScreen
RemoveMenu
DrawMenuBar
GetMenu
DefWindowProcA
GetClassInfoA
RegisterClassA
CreateWindowExA
DestroyWindow
GetWindowDC
GetFocus
GetDlgCtrlID
MessageBeep
GetNextDlgTabItem
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
DeferWindowPos
AppendMenuA
CreatePopupMenu
SetMenu
CreateMenu
GetWindowRgn
SetWindowRgn
ShowWindow
GetCursorPos
RedrawWindow
PtInRect
GetClientRect
EqualRect
MoveWindow
LoadCursorA
SetCursor
InvalidateRect
UpdateWindow
DrawTextExA
GetMessagePos
ScreenToClient
LoadImageA
GetSystemMetrics
GetWindowRect
LoadIconA
PostMessageA
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
GetWindowTextA
GetWindowThreadProcessId
EnumWindows
CopyRect
MessageBoxA
GetDesktopWindow
GetDC
ReleaseDC
SystemParametersInfoA
MsgWaitForMultipleObjects
wsprintfA
TranslateMessage
DispatchMessageA
GetSysColor
LoadBitmapA
DrawIconEx
DestroyIcon
SetRect
SetWindowLongA
GetParent
CallWindowProcA
PeekMessageA
PostQuitMessage
IsWindow
CharUpperA
GrayStringA
DrawTextA
TabbedTextOutA
IntersectRect
OffsetRect
IsRectEmpty
InflateRect
EnableWindow
GetKeyState
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
RegisterWindowMessageA
IsIconic
GetWindowPlacement
CharToOemA
OemToCharBuffA
WinHelpA
GetDlgItem
GetSubMenu
GetWindowTextLengthA
CharLowerA
WaitForInputIdle
SetActiveWindow
SetWindowTextA
EndDialog
DialogBoxParamA
GetActiveWindow
OemToCharA
CharNextA
CharPrevA
CharUpperBuffA
CharLowerBuffA
UnregisterClassA
FillRect
IsChild
InvalidateRgn
SetCapture
GetCapture
SetFocus
GetSystemMenu
DeleteMenu
DrawStateA
GetAsyncKeyState
DrawFocusRect
SendMessageA
SetDlgItemTextA
IsWindowUnicode
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
HideCaret
SetWindowPos

gdi32

ExtSelectClipRgn
GetTextColor
LineTo
MoveToEx
SelectClipRgn
ScaleWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
OffsetViewportOrgEx
RestoreDC
SaveDC
GetClipBox
SetTextColor
SetBkMode
GetEnhMetaFileA
GetMetaFileA
GetMetaFileBitsEx
DeleteMetaFile
SetWinMetaFileBits
GetEnhMetaFileHeader
PlayEnhMetaFile
DeleteEnhMetaFile
CreateDIBitmap
GetDIBits
GetSystemPaletteEntries
SetMapMode
SetBkColor
StretchDIBits
CreateRoundRectRgn
CreateRectRgnIndirect
IntersectClipRect
GetWindowOrgEx
SelectPalette
RealizePalette
CreateHalftonePalette
SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
CreateCompatibleBitmap
CreateFontIndirectA
GetTextMetricsA
PtInRegion
CreateBitmap
CreatePatternBrush
PatBlt
CreateRectRgn
CreatePalette
EnumFontFamiliesExA
CreateScalableFontResourceA
GetTextExtentPoint32A
RemoveFontResourceA
AddFontResourceA
CreateFontA
CreateSolidBrush
CreatePen
Rectangle
GetStockObject
GetObjectA
ExtCreateRegion
CombineRgn
DeleteDC
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GdiFlush
GetDeviceCaps
GetPaletteEntries
BitBlt
DeleteObject
CreateCompatibleDC
GetMapMode
GetWindowExtEx
LPtoDP
CreateDIBSection
SelectObject
DPtoLP
GetViewportExtEx
GetBkColor
GetTextExtentPointA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegEnumKeyA
LookupAccountSidA
GetUserNameA
RegConnectRegistryA
RegEnumValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
AdjustTokenPrivileges
LookupPrivilegeValueA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegSetValueA
RegCreateKeyA

shell32

SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
DragQueryFileA
DragFinish
SHBrowseForFolderA
ExtractIconA
SHAppBarMessage
Shell_NotifyIconA
ShellExecuteA
SHGetMalloc

comctl32

ImageList_GetIcon
ImageList_GetImageCount
ImageList_GetIconSize
ord17
ImageList_Destroy
ImageList_Create
ImageList_AddMasked

oledlg

ord8

ole32

StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoUninitialize
CoCreateInstance
CoRevokeClassObject
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleFlushClipboard
OleIsCurrentClipboard
CoGetClassObject

olepro32

ord253

oleaut32

VariantTimeToSystemTime
SysAllocStringLen
VariantChangeType
SysAllocStringByteLen
VariantCopy
VariantClear
SysFreeString
LoadTypeLi
RegisterTypeLi
VariantInit
SysAllocString
SysStringLen

urlmon

URLDownloadToFileA

netapi32

Netbios

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 300KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 184KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4467296697ebdc03845dc133bc15c8c

Headers

File Characteristics

Imports

winmm

wsock32

version

msacm32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

urlmon

netapi32

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 300KB - Virtual size: 298KB

.data Size: 184KB - Virtual size: 496KB

.rsrc Size: 68KB - Virtual size: 67KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 300KB - Virtual size: 298KB

.data
Size: 184KB - Virtual size: 496KB

.rsrc
Size: 68KB - Virtual size: 67KB