fd8516a8cf25abbe9e1227dd57d968be_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fd8516a8cf25abbe9e1227dd57d968be_JaffaCakes118
Size

388KB
MD5

fd8516a8cf25abbe9e1227dd57d968be
SHA1

2a298cf39a5ea59a656508be663389a55ffd162c
SHA256

5b51a7a7bf37dd5b730c907c1a3f8418c352a71bd6cbc47c632207c8f943a17d
SHA512

820fd2c0f91b0c8edaab5b06821b6de5467f33e2422958aa6abc623b8000b22219c97db56f7b59d601d9e7e645c6683dc2cf0dd112c2576e44f923296be5cde6
SSDEEP

6144:+NDBvtIVaidRX1tweEWxatPSBY470W6nSOabgeaXTU+uOOO+EGmG:+p1toaiT1tweElPCOice8j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd8516a8cf25abbe9e1227dd57d968be_JaffaCakes118

Files

fd8516a8cf25abbe9e1227dd57d968be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

898fd9ed1c6eb159e032e5a199cbbae1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Working nurisoft\Brett Fogle\RSS Reader\OUFXTBlogReader sources\Release\ShogunOptionsRSS.pdb

Imports

kernel32

GetStartupInfoA
GetCommandLineA
HeapReAlloc
ExitThread
CreateThread
TerminateProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
GetCurrentProcessId
GetTimeZoneInformation
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
VirtualQuery
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
GetSystemInfo
VirtualAlloc
InterlockedExchange
VirtualProtect
GetSystemTimeAsFileTime
RtlUnwind
ExitProcess
HeapFree
HeapAlloc
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
SetErrorMode
FileTimeToSystemTime
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetTickCount
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
SuspendThread
SetEvent
SetThreadPriority
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
GetCurrentProcess
DuplicateHandle
CloseHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
WritePrivateProfileStringA
GetPrivateProfileIntA
SetLastError
MulDiv
GlobalAlloc
FormatMessageA
LocalFree
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
GetModuleHandleA
GetProcAddress
lstrcpynA
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
CompareStringW
CompareStringA
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
MultiByteToWideChar
CreateMutexA
GetLastError
ReleaseMutex
GetModuleFileNameA
InterlockedDecrement
WaitForSingleObject
WideCharToMultiByte
ResumeThread
FindResourceA
LoadResource
LockResource
SizeofResource
CreateEventA
PulseEvent
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetEnvironmentStringsW

user32

SetParent
DrawIcon
FindWindowA
IsRectEmpty
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
GetMessageA
TranslateMessage
ValidateRect
IsZoomed
GetMenuItemInfoA
LoadCursorA
DestroyCursor
SetCursorPos
SetCapture
RedrawWindow
ReleaseDC
GetDC
ClientToScreen
InflateRect
wsprintfA
LoadMenuA
DestroyMenu
UnpackDDElParam
ReuseDDElParam
SetCursor
LoadAcceleratorsA
InvalidateRect
InsertMenuItemA
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorA
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
GetMenuCheckMarkDimensions
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
LockWindowUpdate
IsChild
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
MessageBoxA
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetSysColor
AdjustWindowRectEx
ScreenToClient
EnableWindow
CreatePopupMenu
AppendMenuA
CheckMenuItem
GetMenuState
GetMenu
GetClientRect
IsWindowVisible
SetTimer
KillTimer
SendMessageA
LoadIconA
GetCursorPos
ReleaseCapture
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
UnregisterClassA
DefWindowProcA
CallWindowProcA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetDCEx
PostThreadMessageA
GetNextDlgGroupItem
CharNextA
CopyRect
PtInRect
GetWindow
GetWindowTextLengthA
GetWindowTextA
GetFocus
SetWindowPos
SetFocus
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextA
InvalidateRgn
CopyAcceleratorTableA
WindowFromPoint
SetRect
RemovePropA
SetWindowRgn
MessageBeep
GetActiveWindow
UpdateWindow
CharUpperA
LoadBitmapA
PostMessageA
SetWindowLongA
GetWindowLongA
EndDialog
GetNextDlgTabItem
GetParent
IsWindowEnabled
GetDlgItem
IsWindow
DestroyWindow
CreateDialogIndirectParamA
GetSystemMetrics
SetActiveWindow
GetDesktopWindow
SendDlgItemMessageA
IsDialogMessageA

gdi32

CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
LPtoDP
Ellipse
GetBkColor
GetRgnBox
GetTextColor
GetStockObject
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
PtVisible
CreateEllipticRgn
CreateSolidBrush
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetTextMetricsA
GetTextExtentPoint32A
ExtTextOutA
BitBlt
CreateFontIndirectA
SelectObject
PatBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
GetDeviceCaps
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetPixel

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegSetValueExA

shell32

DragFinish
DragQueryFileA
Shell_NotifyIconA

comctl32

ord17
ImageList_AddMasked
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy
ImageList_Create

shlwapi

PathIsUNCA
PathFindExtensionA
PathStripToRootA
PathFindFileNameA

oledlg

ord8

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard

oleaut32

SysFreeString
VariantClear
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
SysAllocString
OleCreateFontIndirect
GetErrorInfo

urlmon

URLDownloadToFileA

Sections

.text
Size: 228KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

898fd9ed1c6eb159e032e5a199cbbae1

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

Sections

.text Size: 228KB - Virtual size: 225KB

.rdata Size: 60KB - Virtual size: 59KB

.data Size: 12KB - Virtual size: 22KB

.rsrc Size: 84KB - Virtual size: 81KB

.text
Size: 228KB - Virtual size: 225KB

.rdata
Size: 60KB - Virtual size: 59KB

.data
Size: 12KB - Virtual size: 22KB

.rsrc
Size: 84KB - Virtual size: 81KB