fcdf6246ce5c6394d828402bcf8ae588_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fcdf6246ce5c6394d828402bcf8ae588_JaffaCakes118
Size

1.2MB
MD5

fcdf6246ce5c6394d828402bcf8ae588
SHA1

3914c9f320cae499eabd8819e4033e6d63dda1f4
SHA256

04ddfe80fc4215c0f52acaf8900bb5abeec48e15d9f2bcdfb343e1a8c3de6d51
SHA512

fd7b229a797b5c25c4e18d5c728b919a36c197fd400dee19b3a8d8f4e47e81d83fb0202f3fe6784d8eee0c5f97bc325658f750376ec6b70736b97f75aca5a82c
SSDEEP

24576:4TrRhTcp/C1I7wLW7SAZxhJ2rngbE7gJ6M3jjTtCSOD:4LBzI72rEE8Jj3jjTw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcdf6246ce5c6394d828402bcf8ae588_JaffaCakes118

Files

fcdf6246ce5c6394d828402bcf8ae588_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5dd84210d3cae9e1c7990053871b1152

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\sandbox\96704\framework\Win32\Release\iFrmewrk.pdb

Imports

winmm

PlaySoundA

psregapi

?CloseKey@CRegApi@@QAEJXZ
??1CRegApi@@UAE@XZ
?OpenKey@CRegApi@@QAEJPAUHKEY__@@PBDK@Z
??0CRegApi@@QAE@XZ
?SetValue@CRegApi@@QAEJPBDJ@Z
?SetValue@CRegApi@@QAEJPBDPBEK@Z
?SetValue@CRegApi@@QAEJPBDK0@Z
?CreateKey@CRegApi@@QAEJPAUHKEY__@@PBDKKAAK@Z
??BCRegApi@@QBEPAUHKEY__@@XZ
?QueryValue@CRegApi@@QAEJPBDAAJ@Z
?DeleteKey@CRegApi@@QAEJPBD@Z
?DeleteValue@CRegApi@@QAEJPBD@Z
?QueryValue@CRegApi@@QAEJPBDPAEAAK@Z
?QueryValue@CRegApi@@QAEJPBDPADAAK@Z

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

libeay32

ord477
ord269
ord268
ord333
ord464
ord469
ord2206
ord3171
ord3024
ord3106
ord479
ord274
ord276
ord275
ord2927
ord962
ord3315
ord264
ord266
ord265
ord267

secur32

LsaEnumerateLogonSessions
LsaGetLogonSessionData
LsaFreeReturnBuffer

kernel32

GlobalGetAtomNameA
FreeResource
GetModuleFileNameA
GetCurrentProcessId
GetModuleFileNameW
InterlockedDecrement
SetThreadPriority
ResumeThread
SuspendThread
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
VirtualProtect
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
GlobalFlags
GetCPInfo
GetOEMCP
GetAtomNameA
GetThreadLocale
FileTimeToSystemTime
GlobalAddAtomA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetCurrentDirectoryA
MoveFileA
DeleteFileA
ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetFullPathNameA
GetShortPathNameA
FindResourceExA
SetErrorMode
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileTime
GetTickCount
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
HeapReAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitProcess
ExitThread
CreateThread
GetDriveTypeA
GetCommandLineA
GetProcessHeap
GetStartupInfoA
HeapSize
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStdHandle
GetFileType
FatalAppExitA
VirtualFree
HeapDestroy
HeapCreate
LCMapStringA
LCMapStringW
SetConsoleCtrlHandler
SetCurrentDirectoryA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetStdHandle
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GlobalFree
CopyFileA
FormatMessageA
MulDiv
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThreadId
RaiseException
LocalAlloc
LocalFree
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CreateFileA
WriteFile
lstrcmpA
GetVersionExA
GetSystemTime
SystemTimeToFileTime
CompareFileTime
GetVolumeInformationA
lstrcpynA
OpenEventA
WaitForMultipleObjects
GetUserDefaultUILanguage
GetSystemDefaultLangID
ReleaseMutex
lstrcatA
WinExec
lstrcpyA
FreeLibrary
CreateEventA
ResetEvent
WaitForSingleObject
SetEvent
OpenMutexA
CreateMutexA
CloseHandle
OutputDebugStringA
GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
GetEnvironmentVariableA
lstrlenA
lstrcmpiW
lstrcmpiA
CompareStringW
CompareStringA
lstrlenW
GetVersion
MultiByteToWideChar
InterlockedExchange
Sleep
GetLastError
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
TerminateThread
GetFileAttributesA
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetSystemDirectoryA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetPrivateProfileIntA

user32

GetNextDlgTabItem
CreateDialogIndirectParamA
GetActiveWindow
ValidateRect
TranslateMessage
GetMessageA
PostQuitMessage
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
WindowFromPoint
TranslateAcceleratorA
BringWindowToTop
InsertMenuItemA
LoadAcceleratorsA
DestroyMenu
ReuseDDElParam
UnpackDDElParam
GetMenuItemInfoA
IsZoomed
GetAsyncKeyState
GetDialogBaseUnits
UnregisterClassA
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
GetSystemMenu
UnionRect
RegisterClipboardFormatA
GetDCEx
LockWindowUpdate
PostThreadMessageA
GetMessageTime
PeekMessageA
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
SetWindowPos
IntersectRect
GetWindowPlacement
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
TabbedTextOutA
FillRect
MapVirtualKeyA
GetKeyNameTextA
GetMenuState
AppendMenuA
CallNextHookEx
UnhookWindowsHookEx
GetProcessDefaultLayout
MessageBoxA
SetWindowsHookExA
TrackMouseEvent
DrawTextA
CopyIcon
DestroyIcon
DestroyCursor
SetLayeredWindowAttributes
GetDesktopWindow
GetDoubleClickTime
FlashWindowEx
GetWindowLongA
CallWindowProcA
SetMenuDefaultItem
AdjustWindowRectEx
EndDialog
SetForegroundWindow
SetParent
IsChild
GetLastActivePopup
ShowScrollBar
IsIconic
DrawMenuBar
SetMenu
GetMenu
CheckMenuRadioItem
LoadMenuA
RemoveMenu
ModifyMenuA
GetSubMenu
GetMenuStringA
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
EnableMenuItem
CheckMenuItem
DeleteMenu
CreatePopupMenu
EnumChildWindows
SetProcessDefaultLayout
RegisterWindowMessageA
SetWindowLongA
MessageBeep
SetCursor
GetMessagePos
IsWindow
ScreenToClient
GetCursorPos
MapWindowPoints
SendNotifyMessageA
InvalidateRect
DrawFocusRect
DrawStateA
EnumWindows
GetWindowTextA
UpdateWindow
CharUpperW
CharUpperA
CharLowerW
CharLowerA
GetFocus
GetParent
LoadImageA
FindWindowExA
GetIconInfo
GetDC
ReleaseDC
DrawIconEx
GetSysColor
SystemParametersInfoA
FindWindowA
GetClassNameA
GetWindow
InflateRect
GetSystemMetrics
ReleaseCapture
LoadCursorA
GetSysColorBrush
RegisterClassExA
MonitorFromPoint
GetMonitorInfoA
SetCapture
GetCapture
KillTimer
SetTimer
RedrawWindow
IsWindowVisible
GetClientRect
SetWindowRgn
PostMessageA
GetWindowThreadProcessId
ScrollWindowEx
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
DrawFrameControl
EqualRect
CopyRect
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
OffsetRect
SetRectEmpty
SetRect
PtInRect
IsRectEmpty
ClientToScreen
SendMessageA
EnableWindow
GetWindowRect
GetMenuCheckMarkDimensions
LoadBitmapA
WinHelpA
SendDlgItemMessageA
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetForegroundWindow
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
LoadIconA
DestroyWindow
InsertMenuA

gdi32

CreateDIBitmap
DeleteDC
CreateDIBSection
GetDIBits
RealizePalette
SetDIBitsToDevice
SetStretchBltMode
ExtSelectClipRgn
CreateRectRgnIndirect
GetClipBox
SetBkColor
CreateBitmap
RectVisible
StretchDIBits
CopyMetaFileA
CreateDCA
PatBlt
SaveDC
RestoreDC
SetPolyFillMode
SetROP2
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
PtVisible
TextOutA
GetWindowExtEx
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
GetDeviceCaps
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
CreateDIBPatternBrushPt
CreatePatternBrush
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
CreateHatchBrush
GetDCOrgEx
SetRectRgn
GetMapMode
DPtoLP
GetTextMetricsA
GetCharWidthA
CreateFontA
GetTextColor
GetRgnBox
EnumFontFamiliesExA
GetViewportExtEx
SelectClipPath
GetClipRgn
SelectClipRgn
SetColorAdjustment
SetArcDirection
SetBkMode
SetTextColor
SelectObject
GetPixel
GetTextExtentPoint32A
BitBlt
GetBkColor
DeleteObject
StretchBlt
FrameRgn
CreateCompatibleDC
EqualRgn
CombineRgn
CreateRoundRectRgn
CreatePolygonRgn
CreateRectRgn
CreateCompatibleBitmap
GetObjectA
CreateFontIndirectA
GetStockObject
SetWindowOrgEx
CreateSolidBrush
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
StartDocA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

ConvertSidToStringSidA
CheckTokenMembership
RegCreateKeyA
RegDeleteValueA
RegCreateKeyExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegSetValueA
FreeSid
GetCurrentHwProfileA
GetUserNameA
RegSetValueExA
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
AllocateAndInitializeSid

shell32

Shell_NotifyIconA
SHAppBarMessage
SHGetSpecialFolderPathA
DragFinish
DragQueryFileA
ExtractIconA
SHGetFileInfoA
ShellExecuteA

comctl32

ImageList_GetIconSize
_TrackMouseEvent

shlwapi

PathFindExtensionA
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
StringFromGUID2
CoCreateInstance
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CreateStreamOnHGlobal
OleRun
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoRegisterMessageFilter
OleFlushClipboard
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRegisterClassObject
ReleaseStgMedium
OleIsCurrentClipboard
OleSetClipboard
CoTaskMemAlloc
CoRevokeClassObject

oleaut32

SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
VariantClear
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysReAllocStringLen
VarDateFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VariantCopy
VarCyFromStr
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
LoadTypeLi

Sections

.text
Size: 892KB - Virtual size: 888KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5dd84210d3cae9e1c7990053871b1152

Headers

File Characteristics

PDB Paths

Imports

winmm

psregapi

version

libeay32

secur32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 892KB - Virtual size: 888KB

.rdata Size: 204KB - Virtual size: 202KB

.data Size: 20KB - Virtual size: 31KB

.rsrc Size: 56KB - Virtual size: 55KB

.text
Size: 892KB - Virtual size: 888KB

.rdata
Size: 204KB - Virtual size: 202KB

.data
Size: 20KB - Virtual size: 31KB

.rsrc
Size: 56KB - Virtual size: 55KB