03935a3099a467f2233f1927db42128c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

03935a3099a467f2233f1927db42128c_JaffaCakes118
Size

900KB
MD5

03935a3099a467f2233f1927db42128c
SHA1

eee0db033de1fe6f7d2ea9fef2f321b7bdc9843a
SHA256

b5f9afd90eba652f8b45c86ab1df31d9b6c1c9a51106a6faa47ef7c12d91c76b
SHA512

5bd7cce734ca66e75b76dc5e62c85e13bdf20dc718f68ebc0dabc9c4565506c0b0586e0dd1b560243ed3741c5d48be2cfb1142825caaf7669f1d1590d73bb8c7
SSDEEP

12288:kVlvt+VcLfoMtZvahtAB6V9RowJeaKyMRw8HFW+HzdIWtw0Q:kVOVe/MtAB0cwJzKtu8HFdKWt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03935a3099a467f2233f1927db42128c_JaffaCakes118

Files

03935a3099a467f2233f1927db42128c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bfcc59c951dd0bf92286b75e3237a654

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wpcap

pcap_next_ex
pcap_close
pcap_sendpacket
pcap_open_live
pcap_setbuff

ws2_32

ntohs
ntohl
gethostbyaddr
inet_addr
inet_ntoa

iphlpapi

SendARP
GetAdaptersInfo

netapi32

NetMessageBufferSend

msimg32

GradientFill

dbdll

?OpenDB@@YAHPAD@Z
?CloseDB@@YAHXZ
?ReadData@@YAHPAUtagFlowStruct@@H@Z
?SaveData@@YAHPAUtagFlowStruct@@H@Z

kernel32

GetTimeZoneInformation
ExitThread
GetACP
HeapSize
CreateThread
GetSystemTime
GetLocalTime
HeapReAlloc
LCMapStringW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
UnhandledExceptionFilter
VirtualAlloc
GetStartupInfoA
RaiseException
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FreeEnvironmentStringsA
CompareStringA
GetCommandLineA
TerminateProcess
HeapAlloc
HeapFree
ExitProcess
RtlUnwind
FreeEnvironmentStringsW
GetEnvironmentStrings
LockResource
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GetModuleHandleA
GetProcAddress
DeviceIoControl
CreateFileA
GetLastError
GetFileAttributesA
GetWindowsDirectoryA
CloseHandle
GetVersion
WritePrivateProfileStringA
GetPrivateProfileStringA
GetModuleFileNameA
WinExec
CopyFileA
WaitForSingleObject
TerminateThread
MultiByteToWideChar
GetTickCount
GlobalAlloc
lstrcpyA
GlobalLock
GlobalUnlock
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GetVersionExA
Sleep
DeleteFileA
lstrlenA
GetProfileStringA
SizeofResource
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageA
LocalFree
GlobalFree
FindFirstFileA
FindClose
lstrcpynA
GetFileTime
GetFileSize
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
lstrcmpA
GetCurrentThread
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
CompareStringW
SetEnvironmentVariableA
LCMapStringA

user32

SetRect
MessageBeep
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
CharUpperA
DestroyMenu
LoadStringA
wvsprintfA
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
GetActiveWindow
ValidateRect
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
SetFocus
AdjustWindowRectEx
IsWindowVisible
GetScrollInfo
SetScrollInfo
SetScrollRange
IsChild
WinHelpA
wsprintfA
RegisterClassA
GetDlgItem
GetWindowTextLengthA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
InflateRect
GetClassLongA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
IntersectRect
GetWindowPlacement
SetActiveWindow
SystemParametersInfoA
GetClassNameA
SetMenuDefaultItem
RegisterWindowMessageA
OffsetRect
UpdateWindow
GetFocus
GetKeyState
GrayStringA
DrawTextA
TabbedTextOutA
WindowFromPoint
GetCapture
GetMessageA
ClientToScreen
GetDlgCtrlID
KillTimer
SetTimer
TrackPopupMenu
PostMessageA
TranslateMessage
DispatchMessageA
LoadMenuA
RedrawWindow
FillRect
GetSysColor
DrawFocusRect
EmptyClipboard
SetClipboardData
OpenClipboard
CloseClipboard
UnregisterHotKey
SetForegroundWindow
SetWindowPos
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
IsIconic
GetSystemMetrics
DrawIcon
GetSystemMenu
GetSysColorBrush
GetDesktopWindow
MessageBoxA
GetTopWindow
CallNextHookEx
AppendMenuA
RegisterHotKey
GetCursorPos
ScreenToClient
PtInRect
IsWindow
GetClassInfoA
DefWindowProcA
GetClientRect
EnableWindow
SendMessageA
SetCursor
InvalidateRect
CopyRect
GetWindowTextA
GetWindowRect
GetParent
DrawIconEx
DrawStateA
LoadCursorA
LoadBitmapA
LoadImageA
LoadIconA
UnhookWindowsHookEx
SetPropA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode

gdi32

GetStockObject
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontA
GetTextExtentPoint32A
GetObjectA
CreateSolidBrush
CreatePen
CreateFontIndirectA
PtVisible
GetClipBox
SelectObject
GetTextExtentPointA
CreateDIBitmap
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
RestoreDC
SaveDC
PatBlt
DPtoLP
GetTextColor
LPtoDP
CreateBitmap
SetBkColor
SetTextColor
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
GetWindowOrgEx
GetViewportOrgEx
GetMapMode
GetBkColor
GetDeviceCaps
SetMapMode
DeleteObject
Escape
DeleteDC
TextOutA
RectVisible
ExtTextOutA
SetBkMode
BitBlt

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegDeleteValueA
CloseServiceHandle
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
ControlService
StartServiceA
DeleteService
OpenSCManagerA
CreateServiceA
OpenServiceA
RegCreateKeyA
RegSetValueExA
RegOpenKeyA

shell32

Shell_NotifyIconA
ShellExecuteA

comctl32

ImageList_Destroy
_TrackMouseEvent
ImageList_Create
ImageList_AddMasked
ord17
ImageList_GetImageInfo
ImageList_Draw

oledlg

ord8

ole32

CLSIDFromString
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoFreeUnusedLibraries
OleUninitialize
OleInitialize

olepro32

ord253

oleaut32

SysAllocStringByteLen
VariantChangeType
VariantClear
VariantCopy
SysAllocStringLen
SysFreeString
SysAllocString
VariantTimeToSystemTime
SysStringLen

Sections

.text
Size: 308KB - Virtual size: 305KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 416KB - Virtual size: 413KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bfcc59c951dd0bf92286b75e3237a654

Headers

File Characteristics

Imports

wpcap

ws2_32

iphlpapi

netapi32

msimg32

dbdll

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 308KB - Virtual size: 305KB

.rdata Size: 76KB - Virtual size: 72KB

.data Size: 96KB - Virtual size: 1.6MB

.rsrc Size: 416KB - Virtual size: 413KB

.text
Size: 308KB - Virtual size: 305KB

.rdata
Size: 76KB - Virtual size: 72KB

.data
Size: 96KB - Virtual size: 1.6MB

.rsrc
Size: 416KB - Virtual size: 413KB