fd1539219376b6529f87378ad0870825_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fd1539219376b6529f87378ad0870825_JaffaCakes118
Size

328KB
MD5

fd1539219376b6529f87378ad0870825
SHA1

1a0703d317ae3e20dacd1a5f4b22f1049257a164
SHA256

1f6ccd100c0cbf877306f3b31cacf7e15c13b647fdbace568e8db11794198564
SHA512

0b17d44ce78180b95eb2ea0f666b9c62388c186fe5c2e5382ee4803096ac9faeae28d75ee08f03cb1318f03aef30d2e7be73a99fafe9dcb3298b1182811723ed
SSDEEP

6144:bPArKc/J205NaXsOJczGz1cOoXPprt50WuQ9VMTGM2s3z/T8/D:2Kc/fXuulprt59NMRz/Tg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd1539219376b6529f87378ad0870825_JaffaCakes118

Files

fd1539219376b6529f87378ad0870825_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c16e0d36c85473509cadae77f786aa87

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutGetNumDevs
waveInGetNumDevs
PlaySoundW

comctl32

ord8
CreateToolbarEx
ImageList_Add
ImageList_AddMasked
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_Draw
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetIcon
ImageList_Remove
ord17
PropertySheetW
CreateStatusWindowW

oleaut32

CreateStdDispatch
VariantInit
VariantCopy
VariantClear
VariantChangeType
VarCmp
SysStringLen
LoadRegTypeLi
LoadTypeLi
OleCreateFontIndirect
OleCreatePropertyFrame
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetElement
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
SysAllocString
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
SysStringByteLen

shlwapi

SHGetInverseCMAP
StrCatBuffA
StrCatBuffW
StrChrA
StrChrW
StrCmpIW
StrCmpNA
StrCmpNIW
StrCmpNW
StrCpyNW
StrPBrkW
StrRChrA
StrRChrW
StrStrA
StrStrIA
StrStrIW
StrStrW
StrToIntExW
StrTrimA
StrTrimW
wnsprintfA
wnsprintfW
SHGetValueW

ole32

WriteClassStm
StringFromGUID2
StringFromCLSID
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleSaveToStream
OleRun
OleRegGetUserType
OleRegGetMiscStatus
OleRegEnumVerbs
OleLockRunning
OleLoadFromStream
OleInitialize
OleFlushClipboard
OleCreateStaticFromData
IIDFromString
GetHGlobalFromILockBytes
DoDragDrop
CreateStreamOnHGlobal
CreateOleAdviseHolder
CreateILockBytesOnHGlobal
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
CoGetClassObject
CoCreateInstance
CoCreateGuid
CLSIDFromString
CLSIDFromProgID

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconA
SHGetMalloc
SHGetFolderPathW
DragAcceptFiles
DragFinish
DragQueryFileW
SHAppBarMessage
Shell_NotifyIconW

kernel32

CloseHandle
CompareFileTime
CompareStringA
CompareStringW
CopyFileA
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateMutexA
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileA
DeleteFileW
DuplicateHandle
EnterCriticalSection
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindFirstFileW
FindResourceA
FindResourceExW
FindResourceW
FlushInstructionCache
FormatMessageA
FormatMessageW
FreeLibrary
GetACP
GetCommandLineW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetSystemDefaultLCID
GetSystemDefaultUILanguage
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempFileNameW
GetTempPathA
GetTempPathW
GetThreadLocale
GetTickCount
GetTimeFormatW
GetUserDefaultLCID
GetVersion
GetVersionExA
GetVersionExW
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalUnlock
HeapAlloc
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadStringPtrA
IsBadStringPtrW
IsBadWritePtr
IsDBCSLeadByteEx
IsValidLocale
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LockResource
MapViewOfFile
MoveFileExW
MoveFileW
MulDiv
MultiByteToWideChar
OpenEventW
OpenFileMappingW
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
ResetEvent
ResumeThread
SearchPathA
SetCurrentDirectoryW
SetErrorMode
SetEvent
SetFilePointer
SetLastError
SetThreadLocale
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
TerminateProcess
TerminateThread
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrcpyW
lstrcpynA
lstrcpynW
lstrlenA
lstrlenW

version

VerQueryValueW
VerQueryValueA
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoA

user32

GetDlgItem
GetDlgItemInt
GetDlgItemTextW
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetKeyState
GetLastActivePopup
GetLastInputInfo
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
GetMenuState
GetMessageTime
GetMessageW
GetNextDlgTabItem
GetParent
GetPropA
GetScrollInfo
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMetrics
GetUpdateRect
GetUserObjectInformationW
GetWindow
GetWindowDC
GetWindowLongA
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
InflateRect
InsertMenuItemW
IntersectRect
InvalidateRect
InvalidateRgn
IsChild
IsClipboardFormatAvailable
IsDialogMessageW
IsDlgButtonChecked
IsIconic
IsMenu
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapA
LoadBitmapW
LoadCursorA
LoadCursorW
LoadIconA
LoadIconW
LoadImageA
DrawAnimatedRects
LoadMenuA
LoadMenuW
LoadStringA
LoadStringW
MapWindowPoints
GetDlgCtrlID
MessageBoxIndirectW
MessageBoxW
ModifyMenuW
MoveWindow
MsgWaitForMultipleObjects
OffsetRect
OpenInputDesktop
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PtInRect
RedrawWindow
RegisterClassExA
RegisterClassExW
RegisterClassW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ScreenToClient
SendDlgItemMessageW
SendMessageW
SetCapture
SetCursor
SetCursorPos
SetDlgItemInt
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenu
SetMenuDefaultItem
SetMenuItemInfoW
SetParent
SetPropA
SetRect
SetRectEmpty
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TrackPopupMenuEx
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassW
UpdateWindow
ValidateRect
WindowFromDC
wsprintfW
DispatchMessageW
DialogBoxParamW
DestroyWindow
DestroyMenu
GetDialogBaseUnits
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassInfoExW
GetClassInfoExA
GetAsyncKeyState
FlashWindow
FindWindowW
FindWindowExW
DrawEdge
EqualRect
EnumChildWindows
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableMenuItem
DrawTextW
DrawMenuBar
MessageBeep
DrawFocusRect
DestroyIcon
DestroyAcceleratorTable
DeleteMenu
DeferWindowPos
CreateWindowExW
CreateWindowExA
CreatePopupMenu
CreateDialogParamW
CreateAcceleratorTableW
CloseWindow
CloseDesktop
ClientToScreen
CheckRadioButton
CheckMenuRadioItem
CheckMenuItem
CheckDlgButton
CharUpperA
CharPrevW
CharNextW
CallWindowProcW
CallNextHookEx
BeginPaint
BeginDeferWindowPos
AdjustWindowRectEx
AdjustWindowRect
LoadImageW
FillRect
DefWindowProcW

gdi32

DeleteDC
DPtoLP
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePolygonRgn
CreatePen
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateDIBSection
CreateDCW
GetWindowExtEx
IntersectClipRect
GetViewportExtEx
LineTo
MoveToEx
Polygon
RealizePalette
Rectangle
RestoreDC
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetDIBColorTable
SetDIBits
SetLayout
Ellipse
EnumFontFamiliesExW
ExcludeClipRect
FillRgn
GetClipBox
GetClipRgn
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetLayout
GetMapMode
GetObjectW
GetPaletteEntries
GetStockObject
GetSystemPaletteEntries
GetTextAlign
GetTextExtentPoint32W
LPtoDP
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
BitBlt
SetTextAlign
SetTextColor
SetViewportOrgEx
SetWindowOrgEx
StretchBlt
GetTextMetricsW
DeleteObject
SetMapMode

advapi32

RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyW
AccessCheck
RegSetValueExW
RegisterEventSourceW
ReportEventW
RevertToSelf
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
AllocateAndInitializeSid
CryptAcquireContextW
CryptCreateHash
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptReleaseContext
DeregisterEventSource
FreeSid
GetLengthSid
ImpersonateSelf
InitializeAcl
InitializeSecurityDescriptor
IsValidSecurityDescriptor
OpenProcessToken
OpenThreadToken
RegCloseKey
RegCreateKeyExA
RegCreateKeyExW
RegDeleteKeyA
RegDeleteKeyW
RegDeleteValueA
RegDeleteValueW
RegEnumKeyA
RegEnumKeyW
RegFlushKey
RegOpenKeyExA
RegOpenKeyExW
AddAccessAllowedAce

wsock32

WSAAsyncGetHostByName
WSAAsyncSelect
WSACancelAsyncRequest
WSACleanup
WSAGetLastError
WSAStartup
accept
bind
closesocket
connect
gethostbyname
gethostname
getsockname
htonl
htons
ioctlsocket
inet_addr
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
socket

comdlg32

GetOpenFileNameW
GetSaveFileNameW
ChooseFontW

Exports

Exports

PL_Base64Decode
PL_Base64Encode
PL_CreateLongOptState
PL_CreateOptState
PL_DestroyOptState
PL_FPrintError
PL_GetNextOpt
PL_PrintError
PL_strcasecmp
PL_strcaserstr
PL_strcasestr
PL_strcat
PL_strcatn
PL_strchr
PL_strcmp
PL_strcpy
PL_strdup
PL_strfree
PL_strlen
PL_strncasecmp
PL_strncaserstr
PL_strncasestr
PL_strncat
PL_strnchr
PL_strncmp
PL_strncpy
PL_strncpyz
PL_strndup
PL_strnlen
PL_strnpbrk
PL_strnprbrk
PL_strnrchr
PL_strnrstr
PL_strnstr
PL_strpbrk
PL_strprbrk
PL_strrchr
PL_strrstr
PL_strstr
PL_strtok_r
libVersionPoint

Sections

.text
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c16e0d36c85473509cadae77f786aa87

Headers

File Characteristics

Imports

winmm

comctl32

oleaut32

shlwapi

ole32

shell32

kernel32

version

user32

gdi32

advapi32

wsock32

comdlg32

Exports

Exports

Sections

.text Size: 228KB - Virtual size: 228KB

.rdata Size: 48KB - Virtual size: 48KB

.data Size: 24KB - Virtual size: 1.7MB

.idata Size: 16KB - Virtual size: 16KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 228KB - Virtual size: 228KB

.rdata
Size: 48KB - Virtual size: 48KB

.data
Size: 24KB - Virtual size: 1.7MB

.idata
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 8KB - Virtual size: 8KB