fd5a44ed65dc089cf0553da0720c96d4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fd5a44ed65dc089cf0553da0720c96d4_JaffaCakes118
Size

732KB
MD5

fd5a44ed65dc089cf0553da0720c96d4
SHA1

9579ab595439a25bf1cf672ebe2f06d767ae09f7
SHA256

f580948055ec79d4ae8ea40ffc3ac1bad41be2b5b83f336365505757634c6518
SHA512

4df1049bdb75a66a2dbc3cf144cc54627cb29bfa2a897cdeb40ed1aa460c0eae52e18353035bf4b2d42315ff6a270aa4cfb1392b699cf60a888e7563fdb08618
SSDEEP

12288:W0K/v0/X5661qtmhBIcxn6ut159UkHtCxbgCxnJkjr:W7/v0/oUqkfxn60skHtCRgCZor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd5a44ed65dc089cf0553da0720c96d4_JaffaCakes118

Files

fd5a44ed65dc089cf0553da0720c96d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

90898eee48b045449d457649c5a6fafa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Projects\Spyware Remover\sources\Ui\Release\UI.pdb

Imports

shell32

SHFileOperationA
ExtractIconA
DragQueryFileA
DragFinish
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetFileInfoA

ws2_32

WSCEnumProtocols
WSAStartup
WSAGetLastError
WSAEnumNameSpaceProvidersA
WSCUnInstallNameSpace
WSCDeinstallProvider
WSACleanup

wininet

InternetOpenA
InternetCloseHandle
InternetQueryDataAvailable
InternetReadFile
InternetOpenUrlA

kernel32

GetFileTime
GetDiskFreeSpaceA
LocalAlloc
GlobalReAlloc
GlobalHandle
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
InterlockedIncrement
GetCPInfo
GetOEMCP
FileTimeToSystemTime
SystemTimeToFileTime
SetErrorMode
FileTimeToLocalFileTime
LocalFileTimeToFileTime
RtlUnwind
ExitProcess
HeapAlloc
SetFileTime
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetCurrentProcessId
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
ConvertDefaultLocale
EnumResourceLanguagesA
GetFullPathNameA
lstrcpyA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GlobalFree
FormatMessageA
LocalFree
GlobalLock
GlobalUnlock
MulDiv
InterlockedDecrement
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
lstrcpynA
DeleteFileA
MoveFileA
SetFileAttributesA
GetShortPathNameA
WriteFile
GetLocalTime
Module32First
Module32Next
GetFileSize
GetCurrentDirectoryA
SetCurrentDirectoryA
CreateProcessA
Sleep
FindFirstFileA
FindNextFileA
FindClose
CreateToolhelp32Snapshot
Process32First
Process32Next
LeaveCriticalSection
EnterCriticalSection
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA
FreeLibrary
TerminateThread
CreateThread
OpenProcess
GetCurrentThread
GetCurrentProcess
CloseHandle
SetLastError
TerminateProcess
WaitForSingleObject
GetTickCount
lstrcmpA
FindResourceExA
GetCurrentThreadId
GlobalAlloc
FreeResource
GetModuleHandleA
GetProcAddress
GetStringTypeExA
GetEnvironmentVariableA
CompareStringW
CompareStringA
lstrlenW
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
MultiByteToWideChar
GetTempPathA
GetTempFileNameA
GetFileAttributesA
GetModuleFileNameA
lstrlenA
GetLogicalDrives
GetDriveTypeA
GetVolumeInformationA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapFree
GetProcessHeap

user32

ValidateRect
TranslateMessage
GetMessageA
ShowOwnedPopups
SetWindowContextHelpId
RegisterClipboardFormatA
GetSysColorBrush
CopyAcceleratorTableA
InvalidateRgn
GetDCEx
LockWindowUpdate
DestroyIcon
GetNextDlgGroupItem
PostThreadMessageA
DestroyCursor
SetCursorPos
UnionRect
GetMenuItemInfoA
InflateRect
IsZoomed
SetRect
wsprintfA
DestroyMenu
GetActiveWindow
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
BringWindowToTop
SetMenu
GetDesktopWindow
TranslateAcceleratorA
ReleaseCapture
SetCapture
SetWindowRgn
DrawIcon
FindWindowA
GetMenuStringA
InsertMenuA
SetMenuItemBitmaps
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetParent
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
MessageBoxA
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
PostMessageA
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
DeferWindowPos
LoadBitmapA
InvalidateRect
SetTimer
KillTimer
DefWindowProcA
EnableWindow
SendMessageA
GetWindowRect
GetClientRect
DrawTextExA
IsWindow
MapDialogRect
ScreenToClient
GetCursorPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
GetDlgCtrlID
CallWindowProcA
GetWindowLongA
SetWindowLongA
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
PtInRect
wvsprintfA
CharNextA
ExitWindowsEx
IsWindowVisible
ModifyMenuA
LoadCursorA
SetCursor
SetWindowsHookExA
BeginDeferWindowPos
EndDeferWindowPos
WindowFromPoint
ClientToScreen
LoadMenuA
EqualRect
OffsetRect
SetRectEmpty
IsRectEmpty
CopyRect
GetDC
ReleaseDC
CallNextHookEx
UnhookWindowsHookEx
GetWindow
DeleteMenu
CreateDialogIndirectParamA
GetNextDlgTabItem
GetFocus
EndDialog
FillRect
GetSysColor
GetSubMenu
GetMenu
PostQuitMessage
MessageBeep
UpdateWindow
RedrawWindow
GetParent
LoadIconA
CharLowerA
CharUpperA
UnregisterClassA

gdi32

GetDeviceCaps
CreateSolidBrush
CreateRectRgnIndirect
PatBlt
CreateEllipticRgn
LPtoDP
Ellipse
GetTextMetricsA
GetCharWidthA
CreateFontA
SetRectRgn
CombineRgn
GetMapMode
GetRgnBox
GetTextColor
GetStockObject
CreateBitmap
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
ScaleViewportExtEx
DeleteObject
BitBlt
GetBkColor
CreateCompatibleBitmap
StretchDIBits
DeleteDC
GetPixel
SetPixel
GetObjectA
CreateFontIndirectA
SelectObject
GetTextExtentPoint32A
CreateCompatibleDC
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
SetWindowExtEx

comdlg32

GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueA
RegOpenKeyExA
RegSetValueExA
RegDeleteValueA
RegEnumValueA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
OpenThreadToken
RegCreateKeyExA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegSetValueA

comctl32

ImageList_AddMasked
ImageList_Draw
ImageList_ReplaceIcon
ord17
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_GetImageInfo

shlwapi

PathFindExtensionA
PathIsUNCA
PathStripToRootA
PathFindFileNameA

ole32

CoRegisterMessageFilter
CoTaskMemFree
CoUninitialize
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoTaskMemAlloc
CoInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID

oleaut32

OleCreateFontIndirect
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
SysAllocString

oledlg

ord8

Sections

.text
Size: 376KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90898eee48b045449d457649c5a6fafa

Headers

File Characteristics

PDB Paths

Imports

shell32

ws2_32

wininet

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

ole32

oleaut32

oledlg

Sections

.text Size: 376KB - Virtual size: 372KB

.rdata Size: 96KB - Virtual size: 92KB

.data Size: 12KB - Virtual size: 23KB

.rsrc Size: 244KB - Virtual size: 242KB

.text
Size: 376KB - Virtual size: 372KB

.rdata
Size: 96KB - Virtual size: 92KB

.data
Size: 12KB - Virtual size: 23KB

.rsrc
Size: 244KB - Virtual size: 242KB